mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-15 13:32:59 +02:00
squidclamav: Fix permissions of /etc/squidclamav.conf.
The file must not be executable, but writeable by anybody in the group nobody.
This commit is contained in:
@@ -80,7 +80,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
|
||||
cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/squidclamav-5.11-dont_use_ipv6.patch
|
||||
cd $(DIR_APP) && ./configure --prefix=/usr
|
||||
cd $(DIR_APP) && make install
|
||||
install -v -m 755 $(DIR_CONF)/squidclamav/squidclamav.conf /etc/squidclamav.conf
|
||||
install -v -m 664 $(DIR_CONF)/squidclamav/squidclamav.conf /etc/squidclamav.conf
|
||||
chown -v root:nobody /etc/squidclamav.conf
|
||||
install -v -m 644 $(DIR_SRC)/config/backup/includes/squidclamav /var/ipfire/backup/addons/includes/squidclamav
|
||||
chmod 755 /srv/web/ipfire/html/clwarn.cgi
|
||||
@rm -rf $(DIR_APP)
|
||||
|
||||
@@ -41,6 +41,10 @@ if [ "$VERSION" -lt "16" ]; then
|
||||
-e "s/^#squid_port 3128/squid_port 800/g" \
|
||||
-e "s/^#trust_cache 1/trust_cache 1/g" -i /etc/squidclamav.conf
|
||||
|
||||
# Fix permissions.
|
||||
chmod 664 /etc/squidclamav.conf
|
||||
chown root.nobody /etc/squidclamav.conf
|
||||
|
||||
# Regenerate configuration files.
|
||||
perl /srv/web/ipfire/cgi-bin/proxy.cgi
|
||||
fi
|
||||
|
||||
Reference in New Issue
Block a user