Skip to content
This repository was archived by the owner on Jan 6, 2021. It is now read-only.

Commit 3b27e1d

Browse files
authored
Update 50-config
permissions for the ini files which could contain api keys and/or passwords are currently world and group readable. While it may be necessary to give group read permissions, world should definitely not be there on these files.
1 parent c25bf68 commit 3b27e1d

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

root/etc/cont-init.d/50-config

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -283,3 +283,5 @@ chown -R abc:abc \
283283
chmod -R 0644 /etc/logrotate.d
284284
chmod -R +r /config/log
285285
chmod +x /app/le-renew.sh
286+
chmod 700 /defaults/dns-conf
287+
chmod 600 /defaults/dns-conf/*

0 commit comments

Comments
 (0)