netbird/plugins
0
0
Fork 0
mirror of https://github.com/netbirdio/plugins.git synced 2026-05-22 18:44:07 -07:00
Code Issues Packages Projects Releases Wiki Activity

AcmeClient: Prevent mode 0750 on everything inside /var/etc/acme-client

Browse Source 
This change avoids that all contents in any subfolder is set to mode 0750 as this is illegal e.g. for private keys for SSH.
This commit is contained in:
Jürgen Kellerer
2019-08-14 11:33:11 +02:00
parent e6ac666d80
commit 3c5ae7dc9f
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
security/acme-client/src/opnsense/scripts/OPNsense/AcmeClient/setup.sh
+7 -1
View File
@@ -1,11 +1,17 @@
#!/bin/sh
ACME_DIRS="/var/etc/acme-client /var/etc/acme-client/certs /var/etc/acme-client/keys /var/etc/acme-client/configs /var/etc/acme-client/challenges /var/etc/acme-client/home"
ACME_BASE="/var/etc/acme-client"
ACME_DIRS="/var/etc/acme-client/certs /var/etc/acme-client/keys /var/etc/acme-client/configs /var/etc/acme-client/challenges /var/etc/acme-client/home"
# Generating dirs if missing and setting owner and mode (recursively)
for directory in ${ACME_DIRS}; do
mkdir -p ${directory}
chown -R root:wheel ${directory}
chmod -R 750 ${directory}
done
# Setting owner and mode for base and immediate children (non recursive)
chown root:wheel ${ACME_BASE} ${ACME_BASE}/*
chmod 750 ${ACME_BASE} ${ACME_BASE}/*
exit 0