Tighter permissions on /var/log/confluent

confluent_osdeploy/el7/profiles/default/scripts/post.sh

@@ -1,5 +1,6 @@
 #!/bin/sh
 mkdir -p /var/log/confluent
+chmod 700 /var/log/confluent
 exec >> /var/log/confluent/confluent-post.log
 exec 2>> /var/log/confluent/confluent-post.log
 chmod 600 /var/log/confluent/confluent-post.log

confluent_osdeploy/el8-diskless/profiles/default/scripts/onboot.sh

@@ -12,6 +12,7 @@ confluent_profile=$(grep ^profile: /etc/confluent/confluent.deploycfg|awk '{prin
 export nodename confluent_mgr confluent_profile
 . /etc/confluent/functions
 mkdir -p /var/log/confluent
+chmod 700 /var/log/confluent
 exec >> /var/log/confluent/confluent-onboot.log
 exec 2>> /var/log/confluent/confluent-onboot.log
 chmod 600 /var/log/confluent/confluent-onboot.log

confluent_osdeploy/el8-diskless/profiles/default/scripts/post.sh

@@ -10,6 +10,7 @@ confluent_profile=$(grep ^profile: /etc/confluent/confluent.deploycfg|awk '{prin
 export nodename confluent_mgr confluent_profile
 . /etc/confluent/functions
 mkdir -p /var/log/confluent
+chmod 700 /var/log/confluent
 exec >> /var/log/confluent/confluent-post.log
 exec 2>> /var/log/confluent/confluent-post.log
 chmod 600 /var/log/confluent/confluent-post.log

confluent_osdeploy/el8/profiles/default/scripts/post.sh

@@ -1,5 +1,6 @@
 #!/bin/sh
 mkdir -p /var/log/confluent
+chmod 700 /var/log/confluent
 exec >> /var/log/confluent/confluent-post.log
 exec 2>> /var/log/confluent/confluent-post.log
 chmod 600 /var/log/confluent/confluent-post.log

confluent_osdeploy/suse15-diskless/profiles/default/scripts/onboot.sh

@@ -12,6 +12,7 @@ confluent_profile=$(grep ^profile: /etc/confluent/confluent.deploycfg|awk '{prin
 export nodename confluent_mgr confluent_profile
 . /etc/confluent/functions
 mkdir -p /var/log/confluent
+chmod 700 /var/log/confluent
 exec >> /var/log/confluent/confluent-onboot.log
 exec 2>> /var/log/confluent/confluent-onboot.log
 chmod 600 /var/log/confluent/confluent-onboot.log

confluent_osdeploy/suse15/profiles/hpc/scripts/post.sh

@@ -9,6 +9,7 @@
 # If there are dependencies on the kernel (drivers or special filesystems)
 # then firstboot.sh would be the script to customize.
 
+chmod 700 /var/log/confluent
 exec >> /var/log/confluent/confluent-post.log
 exec 2>> /var/log/confluent/confluent-post.log
 chmod 600 /var/log/confluent/confluent-post.log