From: Stefan Schantl <stefan.schantl@ipfire.org>
Date: Tue, 15 Mar 2022 18:24:02 +0000 (+0100)
Subject: C165: Fix ownership of suricata classification.config file.
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=5f3dc2ca06d31bc73006d93abc969b42876fb0e0;p=people%2Fms%2Fipfire-2.x.git

C165: Fix ownership of suricata classification.config file.

The file has to be write-able for the WUI and update script, which both
are executed as nobody.

Fixes #12803.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/config/rootfiles/core/165/update.sh b/config/rootfiles/core/165/update.sh
index 00974de738..ffb552c802 100644
--- a/config/rootfiles/core/165/update.sh
+++ b/config/rootfiles/core/165/update.sh
@@ -129,6 +129,9 @@ ldconfig
 telinit u
 /etc/rc.d/init.d/firewall restart
 
+# Fix ownership of classification file.
+chown nobody:nobody /usr/share/suricata/classification.config
+
 # Rebuild IPS rules
 rm -vf /tmp/ids_page_locked
 perl -e "require '/var/ipfire/ids-functions.pl'; &IDS::oinkmaster();"