Try chmodding the Lynis log to avoid EACCESS in upload-artifact

pyllyukko · Dec 17, 2024 · 4f33f2e · 4f33f2e
1 parent 8edb1e2
commit 4f33f2e
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/banners.yml b/.github/workflows/banners.yml
@@ -11,6 +11,8 @@ jobs:
         run: ansible-playbook -v harden.yml --tags lynis --skip-tags slackware,centos
       - name: Run Ansible playbook for banners
         run: ansible-playbook -v harden.yml --tags banners --extra-vars run_lynis_after_hardening=true
+      - name: chmod Lynis log
+        run: chmod -c 644 /var/log/lynis.log
       - name: Archive Lynis log
         uses: actions/upload-artifact@v4
         with: