Skip to content

Instantly share code, notes, and snippets.

@cipherboy
Created July 29, 2021 18:10
Show Gist options
  • Save cipherboy/7ad873ad3fe888f9509e713ab2ebc53f to your computer and use it in GitHub Desktop.
Save cipherboy/7ad873ad3fe888f9509e713ab2ebc53f to your computer and use it in GitHub Desktop.
tmpfiles.d and CIS
root@ubuntu-2004-base:~# cat /usr/lib/tmpfiles.d/00rsyslog.conf
# Override systemd's default tmpfiles.d/var.conf to make /var/log writable by
# the syslog group, so that rsyslog can run as user.
# See tmpfiles.d(5) for details.
# Type Path Mode UID GID Age Argument
z /var/log 0775 root syslog -
z /var/log/auth.log 0640 syslog adm -
z /var/log/mail.err 0640 syslog adm -
z /var/log/mail.log 0640 syslog adm -
z /var/log/kern.log 0640 syslog adm -
z /var/log/syslog 0640 syslog adm -
d /var/spool/rsyslog 0700 syslog adm -
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment