Hi,

In the security guidelines for openstack, following command is mentioned. It is mentioned that user and group ownership of the config file is set to root and horizon respectively.

stat -L -c "%U %G" /etc/openstack-dashboard/local_settings.py | egrep "root horizon"

However on my Openstack queens setup, I have observed that there is a following file /etc/openstack-dashboard/local_settings which is linked from the file /usr/share/openstack-dashboard/openstack_dashboard/local/local_settings.py

The ownership of this file is : -rw-r----- 1 apache apache 30761 Jul 25 10:57 local_settings

My question is if the ownership of this file should be root:horizon Or apache:apache ?