From e015e3310e889750b2397a177dbd1f4fe2d92405 Mon Sep 17 00:00:00 2001 From: tituspijean Date: Thu, 3 Feb 2022 22:14:15 +0100 Subject: [PATCH 1/2] Force chmod 750 to ensure SFTP chroot --- scripts/install | 2 +- scripts/restore | 2 +- scripts/upgrade | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/scripts/install b/scripts/install index 1cddee6..b42ee16 100644 --- a/scripts/install +++ b/scripts/install @@ -153,7 +153,7 @@ chown -R $app:www-data "$final_path" chown root:root "$final_path" setfacl -m g:$app:r-x "$final_path" setfacl -m g:www-data:r-x "$final_path" -chmod o-rwx "$final_path" +chmod 750 "$final_path" #================================================= # PHP-FPM CONFIGURATION diff --git a/scripts/restore b/scripts/restore index b0629dd..e554ba8 100644 --- a/scripts/restore +++ b/scripts/restore @@ -105,7 +105,7 @@ chown -R $app:www-data "$final_path" chown root:root "$final_path" setfacl -m g:$app:r-x "$final_path" setfacl -m g:www-data:r-x "$final_path" -chmod o-rwx "$final_path" +chmod 750 "$final_path" #================================================= # RESTORE THE PHP-FPM CONFIGURATION diff --git a/scripts/upgrade b/scripts/upgrade index 5f98d6d..7793eca 100644 --- a/scripts/upgrade +++ b/scripts/upgrade @@ -201,7 +201,7 @@ chown -R $app:www-data "$final_path" chown root:root "$final_path" setfacl -m g:$app:r-x "$final_path" setfacl -m g:www-data:r-x "$final_path" -chmod o-rwx "$final_path" +chmod 750 "$final_path" #================================================= # RELOAD NGINX From f21d155bb4460c48ba732d1e314bb5dfea3742aa Mon Sep 17 00:00:00 2001 From: tituspijean Date: Thu, 3 Feb 2022 22:23:08 +0100 Subject: [PATCH 2/2] Bump package version --- manifest.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/manifest.json b/manifest.json index 76d2065..4df6e59 100644 --- a/manifest.json +++ b/manifest.json @@ -6,7 +6,7 @@ "en": "Custom Web app with SFTP access to serve static (HTML, CSS, JS) and PHP files", "fr": "Application Web personnalisée avec accès SFTP pour servir des fichiers statiques (HTML, CSS, JS) et PHP" }, - "version": "1.0~ynh7", + "version": "1.0~ynh8", "url": "https://github.com/YunoHost-Apps/my_webapp_ynh", "license": "GPL-3.0-only", "maintainer": {