1 |
diff -Nur e-smith-base-5.8.0.old/root/etc/e-smith/events/actions/init-accounts e-smith-base-5.8.0/root/etc/e-smith/events/actions/init-accounts |
2 |
--- e-smith-base-5.8.0.old/root/etc/e-smith/events/actions/init-accounts 2021-01-06 14:12:53.847000000 -0500 |
3 |
+++ e-smith-base-5.8.0/root/etc/e-smith/events/actions/init-accounts 2021-01-06 14:15:58.530000000 -0500 |
4 |
@@ -61,16 +61,18 @@ |
5 |
# fix permissions for www and apache |
6 |
# horde does not use www / apache anymore |
7 |
#warn "failed to fix permissions for www" unless ( |
8 |
-# system("/bin/rpm --setugids --setperms horde 2> /dev/null") == 0 |
9 |
+# system("/bin/rpm --setugids horde 2> /dev/null") == 0 |
10 |
+# ); |
11 |
+# system("/bin/rpm --setperms horde 2> /dev/null") == 0 |
12 |
# ); |
13 |
|
14 |
-warn "failed to fix permissions for apache" unless ( |
15 |
- system("/bin/rpm --setperms httpd mod_auth_tkt mod_ssl php pwauth 2> /dev/null") == 0 |
16 |
- ); |
17 |
+#order is essential there: --setugids then --setperms, or suid guid perms will be lost |
18 |
warn "failed to fix user group ids for apache" unless ( |
19 |
system("/bin/rpm --setugids httpd mod_auth_tkt mod_ssl php pwauth 2> /dev/null") == 0 |
20 |
); |
21 |
- |
22 |
+warn "failed to fix permissions for apache" unless ( |
23 |
+ system("/bin/rpm --setperms httpd mod_auth_tkt mod_ssl php pwauth 2> /dev/null") == 0 |
24 |
+ ); |
25 |
|
26 |
# delete unwanted user accounts |
27 |
foreach my $user (qw(halt shutdown sync)) |