Lynis (rightly) complains about this directory and its contents being
world-readable on current IPFire installations. Since there is no
necessity for this, we might as well chmod them to 750 / 640.
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
ln -vsf /usr/share/logwatch/default.conf /etc/logwatch/conf
-mkdir -p /etc/sudoers.d
- chmod -v 755 /etc/sudoers.d
- install -v -m 644 $(DIR_SRC)/config/logwatch/sudoers/logwatch-mdadm \
+ chmod -v 750 /etc/sudoers.d
+ install -v -m 640 $(DIR_SRC)/config/logwatch/sudoers/logwatch-mdadm \
/etc/sudoers.d/logwatch-mdadm
@rm -rf $(DIR_APP)
--with-config-root="$(CONFIG_ROOT)"
cd $(DIR_APP) && make $(MAKETUNING)
cd $(DIR_APP) && make install
+
+ # Fix file permissions of /etc/sudoers.d/setup
+ chmod 640 /etc/sudoers.d/setup
+
@rm -rf $(DIR_APP)
@$(POSTBUILD)
@$(call INSTALL_INITSCRIPTS,$(SERVICES))
# Install sudoers include file
- install -v -m 644 $(DIR_SRC)/config/zabbix_agentd/sudoers \
+ install -v -m 640 $(DIR_SRC)/config/zabbix_agentd/sudoers \
/etc/sudoers.d/zabbix
# Install include file for backup