diff options
| author | Bruno Cesar Ribas <brunoribas@gmail.com> | 2018-08-29 13:26:57 +0000 |
|---|---|---|
| committer | Bruno Cesar Ribas <brunoribas@gmail.com> | 2018-08-29 13:26:57 +0000 |
| commit | 535ecefb9189949e62d71062a1b668fe885f0fe0 (patch) | |
| tree | 0bc619da53014d2ed1137cde413f9b7e60389efa /debian | |
| parent | 1b06668b95d393ba366b3568e555258a4706c90d (diff) | |
| parent | b117763dfafeec631c47a8fca6880400c5c6d854 (diff) | |
| download | boca-535ecefb9189949e62d71062a1b668fe885f0fe0.tar.gz boca-535ecefb9189949e62d71062a1b668fe885f0fe0.zip | |
Merge remote-tracking branch 'origin/develc' into devel
Diffstat (limited to 'debian')
| -rw-r--r-- | debian/boca-autojudge.postinst | 4 | ||||
| -rw-r--r-- | debian/boca-common.postinst | 3 | ||||
| -rw-r--r-- | debian/boca-db.postinst | 3 | ||||
| -rw-r--r-- | debian/boca-submission-tools.postinst | 9 |
4 files changed, 16 insertions, 3 deletions
diff --git a/debian/boca-autojudge.postinst b/debian/boca-autojudge.postinst index 37b144c..06fa222 100644 --- a/debian/boca-autojudge.postinst +++ b/debian/boca-autojudge.postinst @@ -1,5 +1,7 @@ #!/bin/bash -chmod 4555 /usr/bin/safeexec +chmod 4555 /usr/bin/safeexec +chmod 700 /usr/sbin/boca-createjail +chmod 700 /usr/sbin/boca-autojudge exit 0 diff --git a/debian/boca-common.postinst b/debian/boca-common.postinst index d28de8a..0a35a35 100644 --- a/debian/boca-common.postinst +++ b/debian/boca-common.postinst @@ -1,5 +1,8 @@ #!/bin/bash +chmod 700 /usr/sbin/boca-config-dbhost +chmod 700 /usr/sbin/boca-fixssh + set -e . /usr/share/debconf/confmodule diff --git a/debian/boca-db.postinst b/debian/boca-db.postinst index c4215df..de205c0 100644 --- a/debian/boca-db.postinst +++ b/debian/boca-db.postinst @@ -1,5 +1,8 @@ #!/bin/bash +chmod 700 /usr/sbin/boca-createdb +chmod 700 /usr/sbin/boca-dump + set -e . /usr/share/debconf/confmodule diff --git a/debian/boca-submission-tools.postinst b/debian/boca-submission-tools.postinst index 17945a4..b8a5dcf 100644 --- a/debian/boca-submission-tools.postinst +++ b/debian/boca-submission-tools.postinst @@ -1,7 +1,12 @@ #!/bin/bash -#Make sure wrapper is suid -chmod 4555 /usr/bin/boca-submit-run-root-wrapper +#Make sure wrapper is suid and others are not readable +chmod 4555 /usr/bin/boca-submit-run-root-wrapper +chmod 700 /usr/sbin/boca-fixes +chmod 700 /usr/sbin/boca-auth-runs +chmod 700 /usr/sbin/boca-outmanage +chmod 700 /usr/sbin/boca-submit-log +chmod 700 /usr/bin/boca-submit-run-* for i in boca-submit-list boca-submit-oldlist; do rm -f /usr/bin/$i || true |