From 7242832f59d317bb4a6d77b7911af3066afcf57d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?F=C3=A9lix=20Pi=C3=A9dallu?= Date: Fri, 15 Apr 2022 11:34:18 +0200 Subject: [PATCH] Enforce chmod 644(-rw-r--r--) on logrotate configuration files --- helpers/logrotate | 1 + 1 file changed, 1 insertion(+) diff --git a/helpers/logrotate b/helpers/logrotate index 6f9726beb..29eb18698 100644 --- a/helpers/logrotate +++ b/helpers/logrotate @@ -90,6 +90,7 @@ $logfile { EOF mkdir --parents $(dirname "$logfile") # Create the log directory, if not exist cat ${app}-logrotate | $customtee /etc/logrotate.d/$app >/dev/null # Append this config to the existing config file, or replace the whole config file (depending on $customtee) + chmod 644 /etc/logrotate.d/$app } # Remove the app's logrotate config.