From 670c33d20b792b04094eba55ffd824935b3ed288 Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Thu, 1 May 2014 11:43:00 -0700 Subject: [PATCH] Update install files to secure the .service files as 644 rather than 600. Signed-off-by: Tom Eastep --- Shorewall-init/install.sh | 2 +- Shorewall-lite/install.sh | 2 +- Shorewall/install.sh | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/Shorewall-init/install.sh b/Shorewall-init/install.sh index a39a3e7f5..bf914673b 100755 --- a/Shorewall-init/install.sh +++ b/Shorewall-init/install.sh @@ -318,7 +318,7 @@ fi if [ -n "$SYSTEMD" ]; then mkdir -p ${DESTDIR}${SYSTEMD} [ -z "$SERVICEFILE" ] && SERVICEFILE=$PRODUCT.service - run_install $OWNERSHIP -m 600 $SERVICEFILE ${DESTDIR}${SYSTEMD}/$PRODUCT.service + run_install $OWNERSHIP -m 644 $SERVICEFILE ${DESTDIR}${SYSTEMD}/$PRODUCT.service [ ${SBINDIR} != /sbin ] && eval sed -i \'s\|/sbin/\|${SBINDIR}/\|\' ${DESTDIR}${SYSTEMD}/$PRODUCT.service echo "Service file $SERVICEFILE installed as ${DESTDIR}${SYSTEMD}/$PRODUCT.service" if [ -n "$DESTDIR" ]; then diff --git a/Shorewall-lite/install.sh b/Shorewall-lite/install.sh index 128a25f01..798ff20d9 100755 --- a/Shorewall-lite/install.sh +++ b/Shorewall-lite/install.sh @@ -383,7 +383,7 @@ fi if [ -n "$SYSTEMD" ]; then mkdir -p ${DESTDIR}${SYSTEMD} [ -z "$SERVICEFILE" ] && SERVICEFILE=$PRODUCT.service - run_install $OWNERSHIP -m 600 $SERVICEFILE ${DESTDIR}${SYSTEMD}/$PRODUCT.service + run_install $OWNERSHIP -m 644 $SERVICEFILE ${DESTDIR}${SYSTEMD}/$PRODUCT.service [ ${SBINDIR} != /sbin ] && eval sed -i \'s\|/sbin/\|${SBINDIR}/\|\' ${DESTDIR}${SYSTEMD}/$PRODUCT.service echo "Service file $SERVICEFILE installed as ${DESTDIR}${SYSTEMD}/$PRODUCT.service" fi diff --git a/Shorewall/install.sh b/Shorewall/install.sh index bf12507c8..1021a8c59 100755 --- a/Shorewall/install.sh +++ b/Shorewall/install.sh @@ -420,7 +420,7 @@ fi if [ -n "$SYSTEMD" ]; then mkdir -p ${DESTDIR}${SYSTEMD} [ -z "$SERVICEFILE" ] && SERVICEFILE=$PRODUCT.service - run_install $OWNERSHIP -m 600 $SERVICEFILE ${DESTDIR}${SYSTEMD}/$PRODUCT.service + run_install $OWNERSHIP -m 644 $SERVICEFILE ${DESTDIR}${SYSTEMD}/$PRODUCT.service [ ${SBINDIR} != /sbin ] && eval sed -i \'s\|/sbin/\|${SBINDIR}/\|\' ${DESTDIR}${SYSTEMD}/$PRODUCT.service echo "Service file $SERVICEFILE installed as ${DESTDIR}${SYSTEMD}/$PRODUCT.service" fi