Ensure that environment variables are only accessible to be read root

Part of elastic#8735 Fixes elastic#9006
nugend · Jan 24, 2018 · 9841f7b · 9841f7b
1 parent 51322e8
commit 9841f7b
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 0 deletions.
diff --git a/pkg/centos/after-install.sh b/pkg/centos/after-install.sh
@@ -6,3 +6,6 @@ sed -i \
   -e 's|# path.data:|path.data: /var/lib/logstash|' \
   /etc/logstash/logstash.yml
 /usr/share/logstash/bin/system-install /etc/logstash/startup.options
+chmod 600 /etc/logstash/startup.options
+chmod 600 /etc/default/logstash
+
diff --git a/pkg/debian/after-install.sh b/pkg/debian/after-install.sh
@@ -9,3 +9,6 @@ sed -i \
   -e 's|# path.data:|path.data: /var/lib/logstash|' \
   /etc/logstash/logstash.yml
 /usr/share/logstash/bin/system-install /etc/logstash/startup.options
+chmod 600 /etc/logstash/startup.options
+chmod 600 /etc/default/logstash
+
diff --git a/pkg/ubuntu/after-install.sh b/pkg/ubuntu/after-install.sh
@@ -8,3 +8,5 @@ sed -i \
   -e 's|# path.data:|path.data: /var/lib/logstash|' \
   /etc/logstash/logstash.yml
 /usr/share/logstash/bin/system-install /etc/logstash/startup.options
+chmod 600 /etc/logstash/startup.options
+chmod 600 /etc/default/logstash