From 3204fb47eda9dbae2217f563cfe5a1c03538211b Mon Sep 17 00:00:00 2001
From: Nick Anderson <nick@cmdln.org>
Date: Tue, 26 Mar 2019 08:22:53 -0500
Subject: [PATCH] ENT-4506 Set explicit permissions on the install log file

---
 packaging/common/script-templates/script-common-header-last.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/packaging/common/script-templates/script-common-header-last.sh b/packaging/common/script-templates/script-common-header-last.sh
index b09e9a355..e604e5f2a 100644
--- a/packaging/common/script-templates/script-common-header-last.sh
+++ b/packaging/common/script-templates/script-common-header-last.sh
@@ -23,6 +23,9 @@ is_nova()
 
 INSTLOG=/var/log/CFEngineHub-Install.log
 mkdir -p "$(dirname "$INSTLOG")"
+touch "$INSTLOG"
+chown root:root "$INSTLOG"
+chmod 600 "$INSTLOG"
 CONSOLE=7
 # Redirect most output to log file, but keep console around for custom output.
 case "$SCRIPT_TYPE" in