From: Michael Tremer <michael.tremer@ipfire.org>
Date: Tue, 16 Jul 2013 17:42:53 +0000 (+0200)
Subject: squidclamav: Fix permissions of /etc/squidclamav.conf.
X-Git-Url: http://git.ipfire.org/?p=people%2Fteissler%2Fipfire-2.x.git;a=commitdiff_plain;h=25848b36da1363f46ad85570501e6aff7a3eec1e

squidclamav: Fix permissions of /etc/squidclamav.conf.

The file must not be executable, but writeable by anybody
in the group nobody.
---

diff --git a/lfs/squidclamav b/lfs/squidclamav
index 79bf5d010..7d9e6afec 100644
--- a/lfs/squidclamav
+++ b/lfs/squidclamav
@@ -80,7 +80,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 	cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/squidclamav-5.11-dont_use_ipv6.patch
 	cd $(DIR_APP) && ./configure --prefix=/usr
 	cd $(DIR_APP) && make install
-	install -v -m 755  $(DIR_CONF)/squidclamav/squidclamav.conf /etc/squidclamav.conf
+	install -v -m 664 $(DIR_CONF)/squidclamav/squidclamav.conf /etc/squidclamav.conf
+	chown -v root:nobody /etc/squidclamav.conf
 	install -v -m 644 $(DIR_SRC)/config/backup/includes/squidclamav /var/ipfire/backup/addons/includes/squidclamav
 	chmod 755 /srv/web/ipfire/html/clwarn.cgi
 	@rm -rf $(DIR_APP)
diff --git a/src/paks/squidclamav/update.sh b/src/paks/squidclamav/update.sh
index 4b542164e..c7380d9c7 100644
--- a/src/paks/squidclamav/update.sh
+++ b/src/paks/squidclamav/update.sh
@@ -41,6 +41,10 @@ if [ "$VERSION" -lt "16" ]; then
      -e "s/^#squid_port 3128/squid_port 800/g" \
      -e "s/^#trust_cache 1/trust_cache 1/g" -i /etc/squidclamav.conf
 
+ # Fix permissions.
+ chmod 664 /etc/squidclamav.conf
+ chown root.nobody /etc/squidclamav.conf
+
  # Regenerate configuration files.
  perl /srv/web/ipfire/cgi-bin/proxy.cgi
 fi