From mboxrd@z Thu Jan  1 00:00:00 1970
From: Adolf Belka <adolf.belka@ipfire.org>
To: development@lists.ipfire.org
Subject:
 Re: [PATCH] C165: Fix ownership of suricata classification.config file.
Date: Sat, 19 Mar 2022 23:00:34 +0100
Message-ID: <1e8ff57a-6401-33d9-c48f-b373875949e7@ipfire.org>
In-Reply-To: <20220315182403.6359-1-stefan.schantl@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============3248883457927207630=="
List-Id: <development.lists.ipfire.org>

--===============3248883457927207630==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Reviewed-by: Adolf Belka <adolf.belka(a)ipfire.org>

On 15/03/2022 19:24, Stefan Schantl wrote:
> The file has to be write-able for the WUI and update script, which both
> are executed as nobody.
>
> Fixes #12803.
>
> Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>
> ---
>   config/rootfiles/core/165/update.sh | 3 +++
>   1 file changed, 3 insertions(+)
>
> diff --git a/config/rootfiles/core/165/update.sh b/config/rootfiles/core/16=
5/update.sh
> index 00974de73..ffb552c80 100644
> --- a/config/rootfiles/core/165/update.sh
> +++ b/config/rootfiles/core/165/update.sh
> @@ -129,6 +129,9 @@ ldconfig
>   telinit u
>   /etc/rc.d/init.d/firewall restart
>  =20
> +# Fix ownership of classification file.
> +chown nobody:nobody /usr/share/suricata/classification.config
> +
>   # Rebuild IPS rules
>   rm -vf /tmp/ids_page_locked
>   perl -e "require '/var/ipfire/ids-functions.pl'; &IDS::oinkmaster();"

--===============3248883457927207630==--