Commit e135d01b authored by Vitaly Lipatov's avatar Vitaly Lipatov

common: keep settings ownership independent of web stack

parent cfe9047b
...@@ -65,12 +65,8 @@ Etersoft ban service. ...@@ -65,12 +65,8 @@ Etersoft ban service.
%post common %post common
if [ -f /etc/%name/settings.ini ]; then if [ -f /etc/%name/settings.ini ]; then
if getent group %webserver_group >/dev/null; then chown root:root /etc/%name/settings.ini
chown root:%webserver_group /etc/%name/settings.ini
chmod 640 /etc/%name/settings.ini
else
chmod 600 /etc/%name/settings.ini chmod 600 /etc/%name/settings.ini
fi
fi fi
%post web %post web
...@@ -131,7 +127,7 @@ cp -a prod-server/usr/share/%name/* %buildroot%_datadir/%name/ ...@@ -131,7 +127,7 @@ cp -a prod-server/usr/share/%name/* %buildroot%_datadir/%name/
%preun_service %name-internal %preun_service %name-internal
%files common %files common
%config(noreplace) %attr(0640,root,%webserver_group) /etc/%name/settings.ini %config(noreplace) %attr(0600,root,root) /etc/%name/settings.ini
%config(noreplace) /etc/%name/whitelist.txt %config(noreplace) /etc/%name/whitelist.txt
%files gateway %files gateway
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment