squidclamav: Fix permissions of /etc/squidclamav.conf.

The file must not be executable, but writeable by anybody
in the group nobody.
This commit is contained in:
Michael Tremer
2013-07-16 19:42:53 +02:00
parent 8b417dd143
commit 25848b36da
2 changed files with 6 additions and 1 deletions

View File

@@ -80,7 +80,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/squidclamav-5.11-dont_use_ipv6.patch
cd $(DIR_APP) && ./configure --prefix=/usr
cd $(DIR_APP) && make install
install -v -m 755 $(DIR_CONF)/squidclamav/squidclamav.conf /etc/squidclamav.conf
install -v -m 664 $(DIR_CONF)/squidclamav/squidclamav.conf /etc/squidclamav.conf
chown -v root:nobody /etc/squidclamav.conf
install -v -m 644 $(DIR_SRC)/config/backup/includes/squidclamav /var/ipfire/backup/addons/includes/squidclamav
chmod 755 /srv/web/ipfire/html/clwarn.cgi
@rm -rf $(DIR_APP)

View File

@@ -41,6 +41,10 @@ if [ "$VERSION" -lt "16" ]; then
-e "s/^#squid_port 3128/squid_port 800/g" \
-e "s/^#trust_cache 1/trust_cache 1/g" -i /etc/squidclamav.conf
# Fix permissions.
chmod 664 /etc/squidclamav.conf
chown root.nobody /etc/squidclamav.conf
# Regenerate configuration files.
perl /srv/web/ipfire/cgi-bin/proxy.cgi
fi