From: Peter Müller <peter.mueller@ipfire.org>
Date: Fri, 18 Nov 2022 13:29:10 +0000 (+0000)
Subject: configroot: Ensure connscheduler/lib.pl is not writable by "nobody"
X-Git-Tag: v2.27-core172~138
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=3135e76ea193eb75c4b9b4315634ec418a23238f;p=ipfire-2.x.git

configroot: Ensure connscheduler/lib.pl is not writable by "nobody"

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
---

diff --git a/config/cfgroot/connscheduler-lib.pl b/config/cfgroot/connscheduler-lib.pl
index f9e4e54664..0ff8e8b841 100644
--- a/config/cfgroot/connscheduler-lib.pl
+++ b/config/cfgroot/connscheduler-lib.pl
@@ -1,9 +1,23 @@
 #!/usr/bin/perl
-#
-# Library file for Connection Scheduler AddOn
-#
-# This code is distributed under the terms of the GPL
-#
+###############################################################################
+#                                                                             #
+# IPFire.org - A linux based firewall                                         #
+# Copyright (C) 2007-2022  IPFire Team  <info@ipfire.org>                     #
+#                                                                             #
+# This program is free software: you can redistribute it and/or modify        #
+# it under the terms of the GNU General Public License as published by        #
+# the Free Software Foundation, either version 3 of the License, or           #
+# (at your option) any later version.                                         #
+#                                                                             #
+# This program is distributed in the hope that it will be useful,             #
+# but WITHOUT ANY WARRANTY; without even the implied warranty of              #
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
+# GNU General Public License for more details.                                #
+#                                                                             #
+# You should have received a copy of the GNU General Public License           #
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
+#                                                                             #
+###############################################################################
 
 package CONNSCHED;
 
diff --git a/lfs/configroot b/lfs/configroot
index f278ccf77c..c0db17fd99 100644
--- a/lfs/configroot
+++ b/lfs/configroot
@@ -169,7 +169,7 @@ $(TARGET) :
 	# Configroot permissions
 	chown -Rv	nobody:nobody	$(CONFIG_ROOT)
 	chown		root:root	$(CONFIG_ROOT)
-	for i in backup/exclude.user backup/include.user *.pl addon-lang/ langs/ ; do \
+	for i in backup/exclude.user backup/include.user connscheduler/lib.pl *.pl addon-lang/ langs/ ; do \
             chown -Rv root:root $(CONFIG_ROOT)/$$i; \
 	done
 	chown -Rv root:root $(CONFIG_ROOT)/*/bin