Ensure /var/ipfire/updatexlrator/updxlrator-lib.pl is not writable by "nobody"

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>

diff --git a/config/updxlrator/updxlrator-lib.pl b/config/updxlrator/updxlrator-lib.pl
index f66d998d6fb6f63dc1581e91e33ce27fb441dcbe..9fbf462ccd52a0e31e17733d68f934363dbe6d09 100644 (file)
--- a/config/updxlrator/updxlrator-lib.pl
+++ b/config/updxlrator/updxlrator-lib.pl
@@ -1,16 +1,23 @@
 #!/usr/bin/perl
-#
-# This code is distributed under the terms of the GPL
-#
-# (c) 2006-2008 marco.s - http://update-accelerator.advproxy.net
-#
-# Portions (c) 2008 by dotzball - http://www.blockouttraffic.de
-#
-# dotzball 2008-05-27:
-#              move functions from all local files to one library file
-#
-# $Id: updxlrator-lib.pl,v 1.1 2008/11/29 00:00:00 marco.s Exp $
-#
+###############################################################################
+#                                                                             #
+# IPFire.org - A linux based firewall                                         #
+# Copyright (C) 2007-2022  IPFire Team  <info@ipfire.org>                     #
+#                                                                             #
+# This program is free software: you can redistribute it and/or modify        #
+# it under the terms of the GNU General Public License as published by        #
+# the Free Software Foundation, either version 3 of the License, or           #
+# (at your option) any later version.                                         #
+#                                                                             #
+# This program is distributed in the hope that it will be useful,             #
+# but WITHOUT ANY WARRANTY; without even the implied warranty of              #
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
+# GNU General Public License for more details.                                #
+#                                                                             #
+# You should have received a copy of the GNU General Public License           #
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
+#                                                                             #
+###############################################################################
 
 package UPDXLT;
 

diff --git a/lfs/squid b/lfs/squid
index 08eb9965d5666f2709907375ee6fd0cf2d54abe9..7a7b775fffd118491cb232feb5ed9fc9de480770 100644 (file)
--- a/lfs/squid
+++ b/lfs/squid
@@ -170,6 +170,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 
        chown -R nobody:nobody /var/ipfire/updatexlrator
        chown -R root:root /var/ipfire/updatexlrator/bin
+       chown root:root /var/ipfire/updatexlrator/updxlrator-lib.pl
        chown nobody.squid /var/updatecache
        chown nobody.squid /var/updatecache/download
        chown nobody.squid /var/updatecache/metadata