diff --git a/check_process b/check_process index fdec3e2..810dc81 100644 --- a/check_process +++ b/check_process @@ -9,7 +9,7 @@ setup_sub_dir=1 setup_root=1 setup_nourl=0 - setup_private=1 + setup_private=0 setup_public=1 upgrade=1 backup_restore=1 diff --git a/scripts/install b/scripts/install index 7704be8..a6e5f51 100644 --- a/scripts/install +++ b/scripts/install @@ -159,7 +159,9 @@ fi ynh_script_progression --message="Securing files and directories..." # Set permissions to app files -chown -R $app:$app $final_path +chmod 750 "$final_path" +chmod -R o-rwx "$final_path" +chown -R $app:$app "$final_path" usermod -a -G cdrom,audio,video,plugdev,users,dialout,dip,input,netdev "$app" #================================================= @@ -187,9 +189,6 @@ ynh_app_setting_set "$app" protected_uris "/" domainregex=$(echo "$domain" | sed 's/-/\%&/g') ynh_app_setting_set "$app" skipped_regex "$domainregex/jsonrpc.*$,$domainregex/image.*$" -# Reload SSOwat config -yunohost app ssowatconf - # Make app public if necessary if [ $is_public -eq 1 ] then diff --git a/scripts/restore b/scripts/restore index aefd3e0..5193272 100644 --- a/scripts/restore +++ b/scripts/restore @@ -138,7 +138,9 @@ ynh_replace_string "allowed_users=console" "allowed_users=anybody" /etc/X11/Xwra ynh_script_progression --message="Restoring user rights..." # Restore permissions on app files -chown -R $app:$app $final_path +chmod 750 "$final_path" +chmod -R o-rwx "$final_path" +chown -R $app:$app "$final_path" usermod -a -G cdrom,audio,video,plugdev,users,dialout,dip,input,netdev "$app" #================================================= diff --git a/scripts/upgrade b/scripts/upgrade index beadc30..a168fb4 100644 --- a/scripts/upgrade +++ b/scripts/upgrade @@ -142,7 +142,7 @@ ynh_script_progression --message="Securing files and directories..." # Set permissions on app files chmod 750 "$final_path" chmod -R o-rwx "$final_path" -chown -R $app:www-data "$final_path" +chown -R $app:$app "$final_path" usermod -a -G cdrom,audio,video,plugdev,users,dialout,dip,input,netdev "$app" #=================================================