apache: Ensure that not everyone can read the keys

[ipfire-2.x.git] / config / rootfiles / core / 117 / update.sh

diff --git a/config/rootfiles/core/117/update.sh b/config/rootfiles/core/117/update.sh
index 816f7f110f55925197db93c773d6e4446b2e526f..51f40d99ab0da22d0a33d62e2f1c43bcdc8b2165 100644 (file)
--- a/config/rootfiles/core/117/update.sh
+++ b/config/rootfiles/core/117/update.sh
@@ -39,6 +39,11 @@ extract_files
 # update linker config
 ldconfig
 
+# Make apache keys not readable for everyone
+chmod 600 \
+       /etc/httpd/server.key \
+       /etc/httpd/server-ecdsa.key
+
 # Update Language cache
 #/usr/local/bin/update-lang-cache