Changeset 3369 for lliurex-analytics-server/trunk/fuentes/debian/postinst

Timestamp:

Jan 19, 2017, 1:41:02 PM (4 years ago)

Author:

mabarracus

Message:

Fix config files permission

File:

• lliurex-analytics-server/trunk/fuentes/debian/postinst (modified) (3 diffs)

lliurex-analytics-server/trunk/fuentes/debian/postinst

@@ -121 +121 @@
             echo "user=$user" >> /etc/lliurex-analytics-server/config_db
             echo "pass=$pass" >> /etc/lliurex-analytics-server/config_db
+            chmod 750 /etc/lliurex-analytics-server/config_db
         fi
         $mysqluser < /usr/lib/analytics-server/analytics.sql
@@ -131 +132 @@
             echo "user=$user" >> /etc/lliurex-analytics-server/config_db
             echo "pass=$pass" >> /etc/lliurex-analytics-server/config_db
-
+            chmod 640 /etc/lliurex-analytics-server/config_db
         fi
     fi
@@ -137 +138 @@
     RES1=$(grep -o '@phpuser@' /usr/lib/analytics-server/analytics/config.php)
     RES2=$(grep -o '@phppass@' /usr/lib/analytics-server/analytics/config.php)
-    
-    if [ -n "${RES1}" -a -n "${RES2}" ]; then
+
+    if [ -f "/usr/lib/analytics-server/analytics/config.php" -a -n "${RES1}" -a -n "${RES2}" ]; then
         sed -i.old -e "s/@phpuser@/$user/g" -e  "s/@phppass@/$pass/g" /usr/lib/analytics-server/analytics/config.php
         rm /usr/lib/analytics-server/analytics/config.php.old
+        chmod 640 /usr/lib/analytics-server/analytics/config.php
+        apachectl_cmd=$(which apachectl)
+        apache_group=$(${apachectl_cmd} -t -D DUMP_RUN_CFG 2>/dev/null|perl -ne '/group:[ ]+name=\"(.*)\"/i && print $1')
+        if [ -z "${apache_group}" ]; then
+            echo "Warning: apache group not detected, falling back to www-data"
+            apache_group="www-data"
+        fi
+        chgrp ${apache_group} /usr/lib/analytics-server/analytics/config.php
     else
         echo "BUG !! WARNING: replace tags @phpuser@ & @phppass@ not found in /usr/lib/analytics-server/analytics/config.php"