From b117763dfafeec631c47a8fca6880400c5c6d854 Mon Sep 17 00:00:00 2001 From: cassio Date: Wed, 29 Aug 2018 15:17:19 +0200 Subject: chmods in the postinst --- Makefile | 2 +- debian/boca-autojudge.postinst | 4 +++- debian/boca-common.postinst | 3 +++ debian/boca-db.postinst | 3 +++ debian/boca-submission-tools.postinst | 12 ++++++------ 5 files changed, 16 insertions(+), 8 deletions(-) diff --git a/Makefile b/Makefile index af01438..6ec0a69 100644 --- a/Makefile +++ b/Makefile @@ -44,9 +44,9 @@ install-bocaautojudge: tools/safeexec mkdir -p $(DESTDIR)/usr/bin/ mkdir -p $(DESTDIR)/etc/ install tools/safeexec $(DESTDIR)/usr/bin/safeexec - chmod 4555 $(DESTDIR)/usr/bin/safeexec install tools/boca-createjail $(DESTDIR)/usr/sbin/boca-createjail install tools/boca-autojudge.sh $(DESTDIR)/usr/sbin/boca-autojudge + chmod 4555 $(DESTDIR)/usr/bin/safeexec chmod 700 $(DESTDIR)/usr/sbin/boca-createjail chmod 700 $(DESTDIR)/usr/sbin/boca-autojudge diff --git a/debian/boca-autojudge.postinst b/debian/boca-autojudge.postinst index 37b144c..06fa222 100644 --- a/debian/boca-autojudge.postinst +++ b/debian/boca-autojudge.postinst @@ -1,5 +1,7 @@ #!/bin/bash -chmod 4555 /usr/bin/safeexec +chmod 4555 /usr/bin/safeexec +chmod 700 /usr/sbin/boca-createjail +chmod 700 /usr/sbin/boca-autojudge exit 0 diff --git a/debian/boca-common.postinst b/debian/boca-common.postinst index d28de8a..0a35a35 100644 --- a/debian/boca-common.postinst +++ b/debian/boca-common.postinst @@ -1,5 +1,8 @@ #!/bin/bash +chmod 700 /usr/sbin/boca-config-dbhost +chmod 700 /usr/sbin/boca-fixssh + set -e . /usr/share/debconf/confmodule diff --git a/debian/boca-db.postinst b/debian/boca-db.postinst index c4215df..de205c0 100644 --- a/debian/boca-db.postinst +++ b/debian/boca-db.postinst @@ -1,5 +1,8 @@ #!/bin/bash +chmod 700 /usr/sbin/boca-createdb +chmod 700 /usr/sbin/boca-dump + set -e . /usr/share/debconf/confmodule diff --git a/debian/boca-submission-tools.postinst b/debian/boca-submission-tools.postinst index 6cd6b4f..b8a5dcf 100644 --- a/debian/boca-submission-tools.postinst +++ b/debian/boca-submission-tools.postinst @@ -1,12 +1,12 @@ #!/bin/bash #Make sure wrapper is suid and others are not readable -chmod 4555 /usr/bin/boca-submit-run-root-wrapper 2>/dev/null -chmod 700 /usr/sbin/boca-fixes 2>/dev/null -chmod 700 /usr/sbin/boca-auth-runs 2>/dev/null -chmod 700 /usr/sbin/boca-outmanage 2>/dev/null -chmod 700 /usr/sbin/boca-submit-log 2>/dev/null -chmod 700 /usr/bin/boca-submit-run-* 2>/dev/null +chmod 4555 /usr/bin/boca-submit-run-root-wrapper +chmod 700 /usr/sbin/boca-fixes +chmod 700 /usr/sbin/boca-auth-runs +chmod 700 /usr/sbin/boca-outmanage +chmod 700 /usr/sbin/boca-submit-log +chmod 700 /usr/bin/boca-submit-run-* for i in boca-submit-list boca-submit-oldlist; do rm -f /usr/bin/$i || true -- cgit v1.2.3