From bcbb48d16e7a6d84261d774a10af12362ff340f8 Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Thu, 1 May 2014 11:43:00 -0700 Subject: [PATCH] Update install files to secure the .service files as 644 rather than 600. Signed-off-by: Tom Eastep --- Shorewall-init/install.sh | 2 +- Shorewall-lite/install.sh | 2 +- Shorewall/install.sh | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/Shorewall-init/install.sh b/Shorewall-init/install.sh index d110727f5..dea3700e6 100755 --- a/Shorewall-init/install.sh +++ b/Shorewall-init/install.sh @@ -322,7 +322,7 @@ fi if [ -n "$SYSTEMD" ]; then mkdir -p ${DESTDIR}${SYSTEMD} [ -z "$SERVICEFILE" ] && SERVICEFILE=$PRODUCT.service - run_install $OWNERSHIP -m 600 $SERVICEFILE ${DESTDIR}${SYSTEMD}/$PRODUCT.service + run_install $OWNERSHIP -m 644 $SERVICEFILE ${DESTDIR}${SYSTEMD}/$PRODUCT.service [ ${SBINDIR} != /sbin ] && eval sed -i \'s\|/sbin/\|${SBINDIR}/\|\' ${DESTDIR}${SYSTEMD}/$PRODUCT.service echo "Service file $SERVICEFILE installed as ${DESTDIR}${SYSTEMD}/$PRODUCT.service" if [ -n "$DESTDIR" ]; then diff --git a/Shorewall-lite/install.sh b/Shorewall-lite/install.sh index b6fdde2c3..6ef230831 100755 --- a/Shorewall-lite/install.sh +++ b/Shorewall-lite/install.sh @@ -383,7 +383,7 @@ fi if [ -n "$SYSTEMD" ]; then mkdir -p ${DESTDIR}${SYSTEMD} [ -z "$SERVICEFILE" ] && SERVICEFILE=$PRODUCT.service - run_install $OWNERSHIP -m 600 $SERVICEFILE ${DESTDIR}${SYSTEMD}/$PRODUCT.service + run_install $OWNERSHIP -m 644 $SERVICEFILE ${DESTDIR}${SYSTEMD}/$PRODUCT.service [ ${SBINDIR} != /sbin ] && eval sed -i \'s\|/sbin/\|${SBINDIR}/\|\' ${DESTDIR}${SYSTEMD}/$PRODUCT.service echo "Service file $SERVICEFILE installed as ${DESTDIR}${SYSTEMD}/$PRODUCT.service" fi diff --git a/Shorewall/install.sh b/Shorewall/install.sh index 3172043e8..dca46673e 100755 --- a/Shorewall/install.sh +++ b/Shorewall/install.sh @@ -420,7 +420,7 @@ fi if [ -n "$SYSTEMD" ]; then mkdir -p ${DESTDIR}${SYSTEMD} [ -z "$SERVICEFILE" ] && SERVICEFILE=$PRODUCT.service - run_install $OWNERSHIP -m 600 $SERVICEFILE ${DESTDIR}${SYSTEMD}/$PRODUCT.service + run_install $OWNERSHIP -m 644 $SERVICEFILE ${DESTDIR}${SYSTEMD}/$PRODUCT.service [ ${SBINDIR} != /sbin ] && eval sed -i \'s\|/sbin/\|${SBINDIR}/\|\' ${DESTDIR}${SYSTEMD}/$PRODUCT.service echo "Service file $SERVICEFILE installed as ${DESTDIR}${SYSTEMD}/$PRODUCT.service" fi