NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

package/usbguard: enforce the right permissions on the configuration file

Browse Source 
Only 0600 rights are allowed for the rules.conf. This file is read when the
usbguard daemon starts and will prevent it to run otherwise.

As Git only tracks the executable bit, setting the right permissions in the
package makefile is the cleanest solution, in particular when providing this
file from a rootfs overlay.

Signed-off-by: Miquel Raynal <miquel.raynal@bootlin.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
This commit is contained in:
Miquel Raynal 2021-06-18 11:47:10 +02:00 committed by Thomas Petazzoni
parent 929c977afb
commit f0b1b5a795
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
package/usbguard/usbguard.mk
View File

@ -59,4 +59,8 @@ define USBGUARD_INSTALL_INIT_SYSV
$(TARGET_DIR)/etc/init.d/S20usbguard
endef
define USBGUARD_PERMISSIONS
/etc/usbguard/rules.conf f 0600 0 0 - - - - -
endef
$(eval $(autotools-package))