From 49b7e82c34e8e47692b70467871d2191556d0efe Mon Sep 17 00:00:00 2001
From: cassio <cassiopc@gmail.com>
Date: Wed, 29 Aug 2018 11:31:50 +0200
Subject: fixing file permissions

---
 Makefile              | 9 ++++++++-
 tools/boca-fixssh     | 3 +++
 tools/boca-submit-log | 9 ++++++++-
 3 files changed, 19 insertions(+), 2 deletions(-)

diff --git a/Makefile b/Makefile
index 7a84de9..9e84bb1 100644
--- a/Makefile
+++ b/Makefile
@@ -41,6 +41,8 @@ install-bocaautojudge: tools/safeexec
 	chmod 4555 $(DESTDIR)/usr/bin/safeexec
 	install tools/boca-createjail $(DESTDIR)/usr/sbin/boca-createjail
 	install tools/boca-autojudge.sh $(DESTDIR)/usr/sbin/boca-autojudge
+	chmod 700 $(DESTDIR)/usr/sbin/boca-createjail
+	chmod 700 $(DESTDIR)/usr/sbin/boca-autojudge
 
 install: install-bocawww install-bocaapache install-bocadb install-bocacommon install-bocaautojudge install-scripts
 
@@ -52,11 +54,16 @@ install-submission-tools: tools/boca-submit-run-root-wrapper
 	install tools/boca-submit-run-cron $(DESTDIR)/usr/bin/
 	install tools/boca-submit-run-aux $(DESTDIR)/usr/bin/
 	install tools/boca-submit-run-root $(DESTDIR)/usr/bin/
-	install tools/boca-submit-log $(DESTDIR)/usr/sbin/boca-submit-log
+	install tools/boca-submit-log $(DESTDIR)/usr/sbin/
 	install tools/cron-boca-submit $(DESTDIR)/etc/cron.d/
 	install tools/cron-boca-fixssh $(DESTDIR)/etc/cron.d/
 	install tools/cron-boca-log $(DESTDIR)/etc/cron.d/
 	install tools/boca-submit-run-root-wrapper $(DESTDIR)/usr/bin/
 	install tools/boca-outmanage $(DESTDIR)/usr/sbin/
 	install tools/boca-checkinternet $(DESTDIR)/usr/sbin/
+	chmod 700 $(DESTDIR)/usr/sbin/boca-auth-runs
+	chmod 700 $(DESTDIR)/usr/sbin/boca-fixssh
+	chmod 700 $(DESTDIR)/usr/sbin/boca-outmanage
+	chmod 700 $(DESTDIR)/usr/sbin/boca-submit-log
+	chmod 700 $(DESTDIR)/usr/bin/boca-submit-run-*
 	chmod 4555 $(DESTDIR)/usr/bin/boca-submit-run-root-wrapper
diff --git a/tools/boca-fixssh b/tools/boca-fixssh
index 2082022..6206a01 100644
--- a/tools/boca-fixssh
+++ b/tools/boca-fixssh
@@ -1,4 +1,7 @@
 #!/bin/bash
+chown root.root /var/log/boca-fixssh.* 2>/dev/null
+chmod 600 /var/log/boca-fixssh.* 2>/dev/null
+
 if [ "`id bocassh 2>/dev/null`" != "" ]; then
     if [ ! -d /var/www/boca/home/.ssh ]; then
 	mkdir -p /var/www/boca/home/.ssh
diff --git a/tools/boca-submit-log b/tools/boca-submit-log
index d9cffa8..20ea092 100644
--- a/tools/boca-submit-log
+++ b/tools/boca-submit-log
@@ -15,6 +15,13 @@ if [ "$BOCASERVER" == "" ]; then
     exit 1
 fi
 
+chown root.root /var/log/boca-submit-log.* 2>/dev/null
+chmod 600 /var/log/boca-submit-log.* 2>/dev/null
+chown root.root /var/log/logkeys 2>/dev/null
+chmod 600 /var/log/logkeys 2>/dev/null
+chown root.root /var/log/bocacron.* 2>/dev/null
+chmod 600 /var/log/bocacron.* 2>/dev/null
+
 for zcount in 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15; do
 
     grep -e sudo -e "password:session" /var/log/auth.log | tail -n 500 > /root/.logsession.tmp
@@ -32,7 +39,7 @@ for zcount in 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15; do
     reskfs=$?
 
     if [ "$zcount" == "1" ]; then
-	tail -n 10000 /var/log/logkeys.log > /root/.logkeys.tmp
+	tail -n 10000 /var/log/logkeys > /root/.logkeys.tmp
 	[ -f /root/.logkeys ] || touch /root/.logkeys
 	diff /root/.logkeys /root/.logkeys.tmp > /root/.logkeys.diff 2>/dev/null
 	reskeys=$?
-- 
cgit v1.2.3