Update glance config files permissions
The /etc/glance/*.conf|*.ini files and directories are world readable:
-rw-r--r-- 1 root glance glance-api.conf
-rw-r--r-- 1 root glance glance-api-paste.ini
drwxr-xr-x 2 root glance metadefs/
etc.
This may lead to sensitive information leakage and cloud compromise.
Set glance config files and directories permissions to 0640 and 0750 accordingly.
Set glance config files and directories owner and group to root:glance.
Add the correct_permissions_files and correct_permissions_dirs states.
Change-Id: Iad4b6433d55051cfb4f44ead1efaafc48dc4f5b9
Related-Prod: https://mirantis.jira.com/browse/PROD-22092
1 file changed