1
0
Fork 0
mirror of https://github.com/YunoHost-Apps/kresus_ynh.git synced 2024-09-03 19:36:10 +02:00

Improve file permissions

This commit is contained in:
Jean-Baptiste Holcroft 2018-08-08 23:28:10 +02:00
parent a4b3d0010d
commit 6d2d0204e0
4 changed files with 16 additions and 6 deletions

View file

@ -15,7 +15,6 @@ Kresus is an open-source libre self-hosted personal finance manager. It allows y
* to be added: * to be added:
* [ ] Email support * [ ] Email support
* [ ] Restrict more file access ($app is owner of everything, we should limit it more)
* [ ] Add user who will access the app (by default every one has access to the installed app) * [ ] Add user who will access the app (by default every one has access to the installed app)
* [ ] Email admin about installation with ynh_send_readme_to_admin helper * [ ] Email admin about installation with ynh_send_readme_to_admin helper
@ -24,4 +23,4 @@ Kresus is an open-source libre self-hosted personal finance manager. It allows y
* Report a bug about this package: https://github.com/YunoHost-Apps/kresus_ynh * Report a bug about this package: https://github.com/YunoHost-Apps/kresus_ynh
* Report a bug about Kresus itself: https://framagit.org/kresusapp/kresus * Report a bug about Kresus itself: https://framagit.org/kresusapp/kresus
* Kresus website: https://kresus.org * Kresus website: https://kresus.org
* YunoHost website: https://yunohost.org/ * YunoHost website: https://yunohost.org

View file

@ -15,7 +15,7 @@
"requirements": { "requirements": {
"yunohost": ">= 2.7.14" "yunohost": ">= 2.7.14"
}, },
"version": "0.13.2~ynh2", "version": "0.13.2~ynh3",
"multi_instance": true, "multi_instance": true,
"services": [ "services": [
"nginx" "nginx"

View file

@ -152,7 +152,11 @@ ynh_add_systemd_config
#================================================= #=================================================
# Set permissions to app files # Set permissions to app files
chown -R $app: $final_path chown -R "$app":"$app" "$final_path/data/"
chmod -R 750 "$final_path/data/"
# Set permissions to config file
chown "$app" "$final_path/config.ini"
chmod 600 "$final_path/config.ini" chmod 600 "$final_path/config.ini"
#================================================= #=================================================

View file

@ -162,8 +162,15 @@ ynh_add_systemd_config
# SECURE FILES AND DIRECTORIES # SECURE FILES AND DIRECTORIES
#================================================= #=================================================
# Set right permissions for curl installation # Reset permissions
chown -R $app: $final_path chown -R root:root "$final_path"
# Set permissions to app files
chown -R "$app":"$app" "$final_path/data/"
chmod -R 750 "$final_path/data/"
# Set permissions to config file
chown "$app" "$final_path/config.ini"
chmod 600 "$final_path/config.ini" chmod 600 "$final_path/config.ini"
#================================================= #=================================================