From e276c689cf11d9caac75415db395a0532c9319d3 Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: Fri, 19 May 2017 19:44:34 +0000
Subject: [PATCH] fix jenkins to actually rotate logs

---
 roles/jenkins/master/tasks/main.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/roles/jenkins/master/tasks/main.yml b/roles/jenkins/master/tasks/main.yml
index 226d321c69..b4a07d7126 100644
--- a/roles/jenkins/master/tasks/main.yml
+++ b/roles/jenkins/master/tasks/main.yml
@@ -65,6 +65,13 @@
   - jenkins/master
   - config
 
+- name: set /var/log/jenkins to not be writable by jenkins group
+  file: path=/var/log/jenkins mode=0700 owner=jenkins
+  tags:
+  - jenkins
+  - jenkins/master
+  - config
+
 - name: install jenkins launcher config file
   copy: >
     src="jenkins.conf"