/[smecontribs]/rpms/smeserver-git/contribs9/smeserver-git-1.1.0-db_permissions.patch
ViewVC logotype

Annotation of /rpms/smeserver-git/contribs9/smeserver-git-1.1.0-db_permissions.patch

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph


Revision 1.1 - (hide annotations) (download)
Wed Jun 22 17:34:22 2016 UTC (8 years, 5 months ago) by unnilennium
Branch: MAIN
CVS Tags: smeserver-git-1_1_0-5_el6_sme
* Wed Jun 22 2016 Jean-Philipe Pialasse <tests@pialasse.com> 1.1.0-5.sme
- fix too permissive permissions on db accounts networks and git [SME: 9615] [SME: 9616]

1 unnilennium 1.1 diff -Nur smeserver-git-1.1.0.old/root/etc/e-smith/db/configuration/migrate/80git smeserver-git-1.1.0/root/etc/e-smith/db/configuration/migrate/80git
2     --- smeserver-git-1.1.0.old/root/etc/e-smith/db/configuration/migrate/80git 1969-12-31 19:00:00.000000000 -0500
3     +++ smeserver-git-1.1.0/root/etc/e-smith/db/configuration/migrate/80git 2016-06-22 13:30:53.245000000 -0400
4     @@ -0,0 +1,7 @@
5     +{
6     +
7     +system("/bin/chmod", "640", "/home/e-smith/db/networks")
8     +system("/bin/chmod", "640", "/home/e-smith/db/accounts")
9     +system("/bin/chmod", "640", "/home/e-smith/db/git")
10     +
11     +}
12     diff -Nur smeserver-git-1.1.0.old/root/etc/e-smith/events/actions/git-repository-create-modify smeserver-git-1.1.0/root/etc/e-smith/events/actions/git-repository-create-modify
13     --- smeserver-git-1.1.0.old/root/etc/e-smith/events/actions/git-repository-create-modify 2014-05-27 01:47:30.000000000 -0400
14     +++ smeserver-git-1.1.0/root/etc/e-smith/events/actions/git-repository-create-modify 2016-06-22 13:27:00.316000000 -0400
15     @@ -162,9 +162,9 @@
16     chmod 02770, ".";
17    
18     # Ensure that the git repository database is readable by the web server.
19     -system("/bin/chmod", "644", "/home/e-smith/db/git") == 0
20     +system("/bin/chmod", "640", "/home/e-smith/db/git") == 0
21     or die "Could not change permissions on /home/e-smith/db/git";
22    
23     -# Ensure that the networks database is readable by the web server.
24     -system("/bin/chmod", "644", "/home/e-smith/db/networks") == 0
25     - or die "Could not change permissions on /home/e-smith/db/networks";
26     +system("/bin/chown", "root:www", "/home/e-smith/db/git") == 0
27     + or die "Could not change ownership on /home/e-smith/db/git";
28     +
29     diff -Nur smeserver-git-1.1.0.old/root/etc/e-smith/events/actions/git-repository-delete smeserver-git-1.1.0/root/etc/e-smith/events/actions/git-repository-delete
30     --- smeserver-git-1.1.0.old/root/etc/e-smith/events/actions/git-repository-delete 2013-04-21 12:28:06.000000000 -0400
31     +++ smeserver-git-1.1.0/root/etc/e-smith/events/actions/git-repository-delete 2016-06-22 13:25:42.667000000 -0400
32     @@ -84,10 +84,9 @@
33     #------------------------------------------------------------
34    
35     # Ensure that the git repository database is readable by the web server.
36     -system("/bin/chmod", "644", "/home/e-smith/db/git") == 0
37     +system("/bin/chmod", "640", "/home/e-smith/db/git") == 0
38     or die "Could not change permissions on /home/e-smith/db/git";
39    
40     -# Ensure that the networks database is readable by the web server.
41     -system("/bin/chmod", "644", "/home/e-smith/db/networks") == 0
42     - or die "Could not change permissions on /home/e-smith/db/networks";
43     +system("/bin/chown", "root:www", "/home/e-smith/db/git") == 0
44     + or die "Could not change ownership on /home/e-smith/db/git";
45    

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed