Skip to content

Ensure dot files permissions are 0740 or less (remove only offending bits)#14609

Merged
Mab879 merged 1 commit intoComplianceAsCode:masterfrom
ggbecker:change-file-permissions-text
Mar 31, 2026
Merged

Ensure dot files permissions are 0740 or less (remove only offending bits)#14609
Mab879 merged 1 commit intoComplianceAsCode:masterfrom
ggbecker:change-file-permissions-text

Conversation

@ggbecker
Copy link
Copy Markdown
Member

Description:

  • Ensure dot files permissions are 0740 or less.
    • Update description of those rules to improve the remediation that only removes the undesired bits of the permissions, otherwise any offending file would be set to 0740, no matter which of the offending bits it had.k
    • This way it preserves the permissions the file previously had and removes the offending bits only.

Rationale:

Additional information

  • Ansible/Bash remediation already behave as expected.

@ggbecker ggbecker added this to the 0.1.81 milestone Mar 30, 2026
@ggbecker ggbecker added the Update Rule Issues or pull requests related to Rules updates. label Mar 30, 2026
@Mab879 Mab879 self-assigned this Mar 30, 2026
Update description of those rules to improve the remediation that only
removes the undesired bits of the permissions, otherwise any offending
file would be set to 0740, no matter which of the offending bits it had.

This way it preserves the permissions the file previously had and
removes the offending bits only.
@ggbecker ggbecker force-pushed the change-file-permissions-text branch from 6175132 to 34effa6 Compare March 31, 2026 10:25
@openshift-ci
Copy link
Copy Markdown

openshift-ci bot commented Mar 31, 2026

@ggbecker: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e-aws-openshift-node-compliance 34effa6 link true /test e2e-aws-openshift-node-compliance

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@Mab879 Mab879 merged commit d17e5b5 into ComplianceAsCode:master Mar 31, 2026
61 of 65 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Update Rule Issues or pull requests related to Rules updates.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants