configroot: Ensure connscheduler/lib.pl is not writable by "nobody"

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
This commit is contained in:
Peter Müller
2022-11-18 13:29:10 +00:00
parent a26967c4b7
commit 3135e76ea1
2 changed files with 20 additions and 6 deletions

View File

@@ -1,9 +1,23 @@
#!/usr/bin/perl #!/usr/bin/perl
# ###############################################################################
# Library file for Connection Scheduler AddOn # #
# # IPFire.org - A linux based firewall #
# This code is distributed under the terms of the GPL # Copyright (C) 2007-2022 IPFire Team <info@ipfire.org> #
# # #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
# the Free Software Foundation, either version 3 of the License, or #
# (at your option) any later version. #
# #
# This program is distributed in the hope that it will be useful, #
# but WITHOUT ANY WARRANTY; without even the implied warranty of #
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
# GNU General Public License for more details. #
# #
# You should have received a copy of the GNU General Public License #
# along with this program. If not, see <http://www.gnu.org/licenses/>. #
# #
###############################################################################
package CONNSCHED; package CONNSCHED;

View File

@@ -169,7 +169,7 @@ $(TARGET) :
# Configroot permissions # Configroot permissions
chown -Rv nobody:nobody $(CONFIG_ROOT) chown -Rv nobody:nobody $(CONFIG_ROOT)
chown root:root $(CONFIG_ROOT) chown root:root $(CONFIG_ROOT)
for i in backup/exclude.user backup/include.user *.pl addon-lang/ langs/ ; do \ for i in backup/exclude.user backup/include.user connscheduler/lib.pl *.pl addon-lang/ langs/ ; do \
chown -Rv root:root $(CONFIG_ROOT)/$$i; \ chown -Rv root:root $(CONFIG_ROOT)/$$i; \
done done
chown -Rv root:root $(CONFIG_ROOT)/*/bin chown -Rv root:root $(CONFIG_ROOT)/*/bin