From 893c493314e12631d90c724ce2c985174cc24f17 Mon Sep 17 00:00:00 2001 From: cassio Date: Wed, 29 Aug 2018 15:03:37 +0200 Subject: forcing chmod no postinstall --- debian/boca-submission-tools.postinst | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) (limited to 'debian') diff --git a/debian/boca-submission-tools.postinst b/debian/boca-submission-tools.postinst index 17945a4..dd3f8e4 100644 --- a/debian/boca-submission-tools.postinst +++ b/debian/boca-submission-tools.postinst @@ -1,7 +1,12 @@ #!/bin/bash -#Make sure wrapper is suid +#Make sure wrapper is suid and others are not readable chmod 4555 /usr/bin/boca-submit-run-root-wrapper +chmod 700 /usr/sbin/boca-fixes +chmod 700 /usr/sbin/boca-auth-runs +chmod 700 /usr/sbin/boca-outmanage +chmod 700 /usr/sbin/boca-submit-log +chmod 700 /usr/bin/boca-submit-run-* for i in boca-submit-list boca-submit-oldlist; do rm -f /usr/bin/$i || true -- cgit v1.2.3 From 27cf41d1424d045e7c54c2fa12f87bedb663b781 Mon Sep 17 00:00:00 2001 From: cassio Date: Wed, 29 Aug 2018 15:04:33 +0200 Subject: trashing output --- debian/boca-submission-tools.postinst | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) (limited to 'debian') diff --git a/debian/boca-submission-tools.postinst b/debian/boca-submission-tools.postinst index dd3f8e4..6cd6b4f 100644 --- a/debian/boca-submission-tools.postinst +++ b/debian/boca-submission-tools.postinst @@ -1,12 +1,12 @@ #!/bin/bash #Make sure wrapper is suid and others are not readable -chmod 4555 /usr/bin/boca-submit-run-root-wrapper -chmod 700 /usr/sbin/boca-fixes -chmod 700 /usr/sbin/boca-auth-runs -chmod 700 /usr/sbin/boca-outmanage -chmod 700 /usr/sbin/boca-submit-log -chmod 700 /usr/bin/boca-submit-run-* +chmod 4555 /usr/bin/boca-submit-run-root-wrapper 2>/dev/null +chmod 700 /usr/sbin/boca-fixes 2>/dev/null +chmod 700 /usr/sbin/boca-auth-runs 2>/dev/null +chmod 700 /usr/sbin/boca-outmanage 2>/dev/null +chmod 700 /usr/sbin/boca-submit-log 2>/dev/null +chmod 700 /usr/bin/boca-submit-run-* 2>/dev/null for i in boca-submit-list boca-submit-oldlist; do rm -f /usr/bin/$i || true -- cgit v1.2.3 From b117763dfafeec631c47a8fca6880400c5c6d854 Mon Sep 17 00:00:00 2001 From: cassio Date: Wed, 29 Aug 2018 15:17:19 +0200 Subject: chmods in the postinst --- debian/boca-autojudge.postinst | 4 +++- debian/boca-common.postinst | 3 +++ debian/boca-db.postinst | 3 +++ debian/boca-submission-tools.postinst | 12 ++++++------ 4 files changed, 15 insertions(+), 7 deletions(-) (limited to 'debian') diff --git a/debian/boca-autojudge.postinst b/debian/boca-autojudge.postinst index 37b144c..06fa222 100644 --- a/debian/boca-autojudge.postinst +++ b/debian/boca-autojudge.postinst @@ -1,5 +1,7 @@ #!/bin/bash -chmod 4555 /usr/bin/safeexec +chmod 4555 /usr/bin/safeexec +chmod 700 /usr/sbin/boca-createjail +chmod 700 /usr/sbin/boca-autojudge exit 0 diff --git a/debian/boca-common.postinst b/debian/boca-common.postinst index d28de8a..0a35a35 100644 --- a/debian/boca-common.postinst +++ b/debian/boca-common.postinst @@ -1,5 +1,8 @@ #!/bin/bash +chmod 700 /usr/sbin/boca-config-dbhost +chmod 700 /usr/sbin/boca-fixssh + set -e . /usr/share/debconf/confmodule diff --git a/debian/boca-db.postinst b/debian/boca-db.postinst index c4215df..de205c0 100644 --- a/debian/boca-db.postinst +++ b/debian/boca-db.postinst @@ -1,5 +1,8 @@ #!/bin/bash +chmod 700 /usr/sbin/boca-createdb +chmod 700 /usr/sbin/boca-dump + set -e . /usr/share/debconf/confmodule diff --git a/debian/boca-submission-tools.postinst b/debian/boca-submission-tools.postinst index 6cd6b4f..b8a5dcf 100644 --- a/debian/boca-submission-tools.postinst +++ b/debian/boca-submission-tools.postinst @@ -1,12 +1,12 @@ #!/bin/bash #Make sure wrapper is suid and others are not readable -chmod 4555 /usr/bin/boca-submit-run-root-wrapper 2>/dev/null -chmod 700 /usr/sbin/boca-fixes 2>/dev/null -chmod 700 /usr/sbin/boca-auth-runs 2>/dev/null -chmod 700 /usr/sbin/boca-outmanage 2>/dev/null -chmod 700 /usr/sbin/boca-submit-log 2>/dev/null -chmod 700 /usr/bin/boca-submit-run-* 2>/dev/null +chmod 4555 /usr/bin/boca-submit-run-root-wrapper +chmod 700 /usr/sbin/boca-fixes +chmod 700 /usr/sbin/boca-auth-runs +chmod 700 /usr/sbin/boca-outmanage +chmod 700 /usr/sbin/boca-submit-log +chmod 700 /usr/bin/boca-submit-run-* for i in boca-submit-list boca-submit-oldlist; do rm -f /usr/bin/$i || true -- cgit v1.2.3