github/plexupdate
1
0
Fork 0
mirror of https://github.com/mrworf/plexupdate.git synced 2025-08-19 04:49:34 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

Improve security of config files (#153)

Browse source
This commit is contained in:
Alex Malinovich 2016-12-19 21:41:38 -08:00 • committed by Henric Andersson
commit fdc24ff187
1 changed files with 4 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
extras/installer.sh
View file

@ -287,8 +287,11 @@ save_config() {
echo echo
echo -n "Writing configuration file '$2'... " echo -n "Writing configuration file '$2'... "
# make sure that new file is owned by root instead of owner of CONFIGTEMP # most likely writing to /etc, so we need sudo
sudo tee "$2" > /dev/null < "$CONFIGTEMP" sudo tee "$2" > /dev/null < "$CONFIGTEMP"
sudo chmod 640 "$2"
# only root can modify the config, but the user can still read it
sudo chown 0:$(id -gn) "$2"
rm "$CONFIGTEMP" rm "$CONFIGTEMP"
echo "done" echo "done"