r579 - /branches/experimental/boinc/debian/boinc-client.postinst

[fst-guest at users.alioth.debian.org]

Author: fst-guest
Date: Mon Feb 12 17:47:03 2007
New Revision: 579

URL: http://svn.debian.org/wsvn/pkg-boinc/?sc=1&rev=579
Log:
Set the permission of boinc-client's conffiles in it's postinst explicitly for
every file. I decided to make all files except gui_rpc.auth.cfg world readable,
because I think 0640 for those files is just too paranoid.

Modified:
    branches/experimental/boinc/debian/boinc-client.postinst

Modified: branches/experimental/boinc/debian/boinc-client.postinst
URL: http://svn.debian.org/wsvn/pkg-boinc/branches/experimental/boinc/debian/boinc-client.postinst?rev=579&op=diff
==============================================================================
--- branches/experimental/boinc/debian/boinc-client.postinst (original)
+++ branches/experimental/boinc/debian/boinc-client.postinst Mon Feb 12 17:47:03 2007
@@ -15,9 +15,6 @@
         mv -f "$BOINC_DIR/$1" "$CONF_DIR/$1"
     fi
     ln -sf "$CONF_DIR/$1" "$BOINC_DIR/$1"
-
-    chmod 0640 "$CONF_DIR/$1"
-    chown root:boinc "$CONF_DIR/$1"
 }
 
 case "$1" in
@@ -45,6 +42,18 @@
         mv_conffile gui_rpc_auth.cfg
         mv_conffile remote_hosts.cfg
 
+        # Set reasonable permissions for boinc-client's conffiles, see #407678.
+        chmod 0644 "$CONF_DIR/cc_config.xml"
+        chmod 0644 "$CONF_DIR/clobal_prefs_override.xml"
+        chmod 0640 "$CONF_DIR/gui_rpc_auth.cfg"
+        chmod 0644 "$CONF_DIR/remote_hosts.cfg"
+
+        chown root:boinc \
+            "$CONF_DIR/cc_config.xml" \
+            "$CONF_DIR/clobal_prefs_override.xml" \
+            "$CONF_DIR/gui_rpc_auth.cfg" \
+            "$CONF_DIR/remote_hosts.cfg"
+
         # Make a symlink to ca-certificates certs file. BOINC's original file
         # is in curl/ca-bundle.crt (which is not in our tarball, because the
         # export-boinc script removes the curl dir).