suricata: Fix ownership and file permissions of files inside /var/lib/suricata.

These files needs to have nobody.nobody as owner but requires read-acces from everyone
to allow the suricata user reading-in this files during startup.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/lfs/suricata b/lfs/suricata
index 0a561ef8ba5c98ce28f5c38ca9df9ec8f39b5c06..d7b5b71d6b001c27979bb4f60780f3da2068600b 100644 (file)
--- a/lfs/suricata
+++ b/lfs/suricata
@@ -101,8 +101,12 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
        # to the rules directory.
        mv /etc/suricata/*.config /var/lib/suricata
 
-       # Set correct ownership for /var/lib/suricata
-       chown nobody:nobody /var/lib/suricata
+       # Set correct permissions for the files.
+       chmod 644 /var/lib/suricata/*.config
+
+       # Set correct ownership for /var/lib/suricata and the
+       # contained files
+       chown -R nobody:nobody /var/lib/suricata
 
        # Create logging directory.
        -mkdir -p /var/log/suricata