documentation_complete: true

prodtype: osp7

title: 'Check-Identity-02: Are strict permissions set for Identity configuration files?'

description: "Similar to the previous check, it is recommended to set strict access permissions for such configuration files.\n<br />\n<br />\nRun the following commands:\n<br />\n<br />\n<tt> \n$ stat -L -c \"%a\" /etc/keystone/keystone.conf<br />\n$ stat -L -c \"%a\" /etc/keystone/keystone-paste.ini<br />\n$ stat -L -c \"%a\" /etc/keystone/policy.json<br />\n$ stat -L -c \"%a\" /etc/keystone/logging.conf<br />\n$ stat -L -c \"%a\" /etc/keystone/ssl/certs/signing_cert.pem<br />\n$ stat -L -c \"%a\" /etc/keystone/ssl/private/signing_key.pem<br />\n$ stat -L -c \"%a\" /etc/keystone/ssl/certs/ca.pem<br />\n</tt>\n<br />\n<br />\nPass: If permissions are set to 640 or stricter.\n<br />\n<br />\nFail: If permissions are not set to at least 640."

rationale: ""

severity: unknown
