From 362c5537afd468e479275dc4ced9363c50d25be2 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Peter=20M=C3=BCller?= Date: Fri, 18 Nov 2022 13:33:45 +0000 Subject: [PATCH] Ensure /var/ipfire/updatexlrator/updxlrator-lib.pl is not writable by "nobody" MIME-Version: 1.0 Content-Type: text/plain; charset=utf8 Content-Transfer-Encoding: 8bit Signed-off-by: Peter Müller --- config/updxlrator/updxlrator-lib.pl | 31 ++++++++++++++++++----------- lfs/squid | 1 + 2 files changed, 20 insertions(+), 12 deletions(-) diff --git a/config/updxlrator/updxlrator-lib.pl b/config/updxlrator/updxlrator-lib.pl index f66d998d6f..9fbf462ccd 100644 --- a/config/updxlrator/updxlrator-lib.pl +++ b/config/updxlrator/updxlrator-lib.pl @@ -1,16 +1,23 @@ #!/usr/bin/perl -# -# This code is distributed under the terms of the GPL -# -# (c) 2006-2008 marco.s - http://update-accelerator.advproxy.net -# -# Portions (c) 2008 by dotzball - http://www.blockouttraffic.de -# -# dotzball 2008-05-27: -# move functions from all local files to one library file -# -# $Id: updxlrator-lib.pl,v 1.1 2008/11/29 00:00:00 marco.s Exp $ -# +############################################################################### +# # +# IPFire.org - A linux based firewall # +# Copyright (C) 2007-2022 IPFire Team # +# # +# This program is free software: you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation, either version 3 of the License, or # +# (at your option) any later version. # +# # +# This program is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with this program. If not, see . # +# # +############################################################################### package UPDXLT; diff --git a/lfs/squid b/lfs/squid index 08eb9965d5..7a7b775fff 100644 --- a/lfs/squid +++ b/lfs/squid @@ -170,6 +170,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) chown -R nobody:nobody /var/ipfire/updatexlrator chown -R root:root /var/ipfire/updatexlrator/bin + chown root:root /var/ipfire/updatexlrator/updxlrator-lib.pl chown nobody.squid /var/updatecache chown nobody.squid /var/updatecache/download chown nobody.squid /var/updatecache/metadata -- 2.39.2