YunoHost-Apps/wallabag2_ynh
1
0
Fork 0
mirror of https://github.com/YunoHost-Apps/wallabag2_ynh.git synced 2024-10-01 13:35:06 +02:00
Code Issues Activity Actions

Tighten permissions

Browse source
This commit is contained in:
Jules Bertholet 2021-04-07 10:13:40 -04:00
parent 0303873f6e
commit 07f70541b8
3 changed files with 19 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
scripts/install
View file

@ -160,12 +160,13 @@ ynh_add_fail2ban_config --logpath="/var/www/$app/var/logs/prod.log" --failregex=
# SECURE FILES AND DIRECTORIES # SECURE FILES AND DIRECTORIES
#================================================= #=================================================
# Set permissions to app files
chown -R $app:www-data $final_path
chmod -R g=u,g-w,o-rwx $final_path
# Restrict rights to Wallabag user only # Restrict rights to Wallabag user only
chmod 600 $wb_conf chmod 600 $wb_conf
chmod 700 $final_path/var/cache/prod/appProdProjectContainer.php -f
# Set permissions to app files
chown -R $app: $final_path
chmod 755 $final_path
#================================================= #=================================================
# SETUP HOOKS # SETUP HOOKS

11
scripts/restore
View file

@ -66,8 +66,15 @@ ynh_system_user_create --username=$app
# RESTORE USER RIGHTS # RESTORE USER RIGHTS
#================================================= #=================================================
# Restore permissions on app files wb_conf=$final_path/app/config/parameters.yml
chown -R $app: $final_path
# Set permissions to app files
chown -R $app:www-data $final_path
chmod -R g=u,g-w,o-rwx $final_path
# Restrict rights to Wallabag user only
chmod 600 $wb_conf
chmod 700 $final_path/var/cache/prod/appProdProjectContainer.php -f
#================================================= #=================================================
# RESTORE THE PHP-FPM CONFIGURATION # RESTORE THE PHP-FPM CONFIGURATION

9
scripts/upgrade
View file

@ -191,12 +191,13 @@ fi
# SECURE FILES AND DIRECTORIES # SECURE FILES AND DIRECTORIES
#================================================= #=================================================
# Set permissions to app files
chown -R $app:www-data $final_path
chmod -R g=u,g-w,o-rwx $final_path
# Restrict rights to Wallabag user only # Restrict rights to Wallabag user only
chmod 600 $wb_conf chmod 600 $wb_conf
chmod 700 $final_path/var/cache/prod/appProdProjectContainer.php -f
# Set permissions to app files
chown -R $app: $final_path
chmod 755 $final_path
#================================================= #=================================================
# SETUP HOOKS # SETUP HOOKS