diff options
| author | Michał Łyszczek <michal.lyszczek@bofc.pl> | 2019-08-19 12:05:23 +0200 |
|---|---|---|
| committer | Michał Łyszczek <michal.lyszczek@bofc.pl> | 2019-08-19 18:40:04 +0200 |
| commit | 93e012f723227c3a596097fd99040cc15bc7672d (patch) | |
| tree | a02b164855bf51dcc2dc3dd5b16e0d5e49b0dc80 | |
| parent | cb372bf12b1aef63dbff71b63166838125947619 (diff) | |
| download | termsend-93e012f723227c3a596097fd99040cc15bc7672d.tar.gz termsend-93e012f723227c3a596097fd99040cc15bc7672d.tar.bz2 termsend-93e012f723227c3a596097fd99040cc15bc7672d.zip | |
init.d: add umask option to control uploaded files perms
Signed-off-by: Michał Łyszczek <michal.lyszczek@bofc.pl>
| -rw-r--r-- | init.d/kurload | 2 | ||||
| -rw-r--r-- | init.d/kurload.conf | 7 | ||||
| -rwxr-xr-x | init.d/kurload.openrc | 2 |
3 files changed, 11 insertions, 0 deletions
diff --git a/init.d/kurload b/init.d/kurload index 9bccb61..8c686f3 100644 --- a/init.d/kurload +++ b/init.d/kurload @@ -69,12 +69,14 @@ LIST_FILE=${LIST_FILE:="/etc/kurload-iplist"} LIST_TYPE=${LIST_TYPE:="0"} OUTPUT_DIR=${OUTPUT_DIR:="/var/lib/kurload"} BIND_IP=${BIND_IP:="0.0.0.0"} +UMASK=${UMASK:="022"} command=/usr/local/bin/kurload colors= ssl_listen_port= timed_ssl_listen_port= ssl_opts= +umask ${UMASK} ## ========================================================================== diff --git a/init.d/kurload.conf b/init.d/kurload.conf index 62b974b..219d97c 100644 --- a/init.d/kurload.conf +++ b/init.d/kurload.conf @@ -183,6 +183,13 @@ LIST_TYPE="0" OUTPUT_DIR="/var/lib/kurload" ### +# kurload by default creates files with 644 mode, which may be to free for +# some usecases. You can set umask to limit visibility of uploaded files. +# + +UMASK="022" + +### # list of ip addresses program will bind to, good if you want to # allow uploading only from localhost or vpn, or for any other good reason. # If set to 0.0.0.0, program will listen on every interface found in diff --git a/init.d/kurload.openrc b/init.d/kurload.openrc index b7aea32..98e23eb 100755 --- a/init.d/kurload.openrc +++ b/init.d/kurload.openrc @@ -23,12 +23,14 @@ LIST_FILE=${LIST_FILE:="/etc/kurload-iplist"} LIST_TYPE=${LIST_TYPE:="0"} OUTPUT_DIR=${OUTPUT_DIR:="/var/lib/kurload"} BIND_IP=${BIND_IP:="0.0.0.0"} +UMASK=${UMASK:="022"} command=/usr/bin/kurload colors= ssl_listen_port= timed_ssl_listen_port= ssl_opts= +umask ${UMASK} depend() { need net localmount |