Question about template "file_groupowner"

[alanmcanonical]

The file_groupowner bash template doesn't use "-L" option to track symbolic link which leave all the actual file unattended during remediation. I'm not sure about whether this behavior is expected or not.

[Mab879]

This also seems to be an issue with the file_owner template as well.

[alanmcanonical]

Yes

[Mab879]

I'm working on a pull request that make the template follow symlinks. That should be up in the coming days.

[Mab879]

See #12214

[alanmcanonical]

Here is my thought: All the files that symbolic point to can only be one of the two case: (a) files sit inside path or (b) file sit outside path, since we already use find, (a) would already be visited. So my concern is the (b) case which I am not sure whether we should handle according to compliance requirement.