redhat: Set config/logfile mask to be 0640 for RHEL

[ton31337]

Related: #14817

[eqvinox]

This doesn't really fix the problem… it just makes it so it works for anyone who needs 0640 like in #14817 — and what happens to people who are relying on it being 0600 for security reasons?

[donaldsharp]

I thought the problem was that the issue opener wanted 640 but frr was writing 600 because frr was compiled to use 600. If the end operator wants something else I think that it should be on the end operator to recompile with different options

[ton31337]

Yes, but why do we keep different behaviors for Debian/RHEL packages? Debian has 0640, RHEL - 0600.

[donaldsharp]

Have you looked into the git history to see if there is a logical explanation? More than likely there were 2 different people who built the packaging and as such we got slightly different behavior. All in all, if we are going to change something I would prefer that debian go more restrictive. I will demur to @eqvinox 's opinion here though if he doesn't want to change anything

[ton31337]

Have you looked into the git history to see if there is a logical explanation?

Yes, Debian has 0640 from the very beginning (most likely from the Quagga times): 4d91638

RHEL had 0600 from the very beginning too. Nobody touched that.

[ton31337]

We even provide the documentation for source compilation for Debian, *BSD, snapcrafts to use 0640, but RHEL is somehow so special here :)