I've been assigned to lock down all /var/log
files so that they cannot be read except by the root user. I've been stumped by the /var/log/boot.log
file. It seems that after every boot the file no matter what what previous permission state gets set to 644 permissions.
I've gone through the exercise of changing the umask in a number of key /etc/init.d
files and functions to no avail.
Anybody got any idea as to the specific program doing this and maybe how to get the perms on /var/log/boot.log
to be 600?