Pi-hole/pi-hole
Pi-hole/pi-hole
1
0
Fork 0
mirror of https://github.com/pi-hole/pi-hole.git synced 2024-11-26 16:13:17 +00:00
Code Issues Projects Releases Packages Wiki Activity

Logrotate config file needs to be owned by root (#5444)

Browse source
This commit is contained in:
yubiuser 2023-10-18 23:00:47 +02:00 committed by GitHub
commit 33a41391b5
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 6 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
advanced/Templates/pihole-FTL-prestart.sh
View file

@ -16,6 +16,10 @@ chown -R pihole:pihole /etc/pihole /var/log/pihole
chmod -R 0640 /var/log/pihole chmod -R 0640 /var/log/pihole
chmod -R 0660 /etc/pihole chmod -R 0660 /etc/pihole
# Logrotate config file need to be owned by root and must not be writable by group and others
chown root:root /etc/pihole/logrotate
chmod 0644 /etc/pihole/logrotate
# allow all users to enter the directories # allow all users to enter the directories
chmod 0755 /etc/pihole /var/log/pihole chmod 0755 /etc/pihole /var/log/pihole

3
automated install/basic-install.sh
View file

@ -1483,7 +1483,8 @@ installLogrotate() {
return 2 return 2
fi fi
# Copy the file over from the local repo # Copy the file over from the local repo
install -o pihole -g pihole -D -m 644 -T "${PI_HOLE_LOCAL_REPO}"/advanced/Templates/logrotate ${target} # Logrotate config file must be owned by root and not writable by group or other
install -o root -g root -D -m 644 -T "${PI_HOLE_LOCAL_REPO}"/advanced/Templates/logrotate ${target}
# Different operating systems have different user / group # Different operating systems have different user / group
# settings for logrotate that makes it impossible to create # settings for logrotate that makes it impossible to create
# a static logrotate file that will work with e.g. # a static logrotate file that will work with e.g.