[debian-edu-commits] [Git][debian-edu/debian-edu-config][personal/gber/icingaweb-fix] Fix permissions issue preventing icingaweb2 from reading the backend config

[Guido Berhörster (@gber)]

Guido Berhörster pushed to branch personal/gber/icingaweb-fix at Debian Edu / debian-edu-config


Commits:
4657dfca by Guido Berhoerster at 2023-06-29T09:31:27+02:00
Fix permissions issue preventing icingaweb2 from reading the backend config

The /etc/icingaweb2/modules directory ends up with "drwxrwSrwx" permissions,
missing the "x" bit preventing icingaweb2 from reading the monitoring backend
configuration in /etc/icingaweb2/modules/monitoring/. Instead of adjusting
single files and directories, enforce sensible permissions on all directories
and configuration files. Closes: #1039475.

- - - - -


1 changed file:

- share/debian-edu-config/tools/edu-icinga-setup


Changes:

=====================================
share/debian-edu-config/tools/edu-icinga-setup
=====================================
@@ -94,6 +94,7 @@ setup_icinga() {
 	domain = ""
 	resource = "icingaweb_ldap"
 	EOF
+
 	# config.ini
 	cat <<- EOF > /etc/icingaweb2/config.ini
 	[global]
@@ -188,11 +189,8 @@ setup_icinga() {
 	EOF
 
 	# Adjusts rights to get the web interface working
-	chmod 660 /etc/icingaweb2/*.ini
-	chmod g+rwx /etc/icingaweb2/enabledModules/
-	chmod g+rwx /etc/icingaweb2/modules/monitoring/
-	chmod o+x /etc/icingaweb2/modules/monitoring/
-	chmod 660 /etc/icingaweb2/modules/monitoring/*.ini
+	find /etc/icingaweb2/ -type f -name '*.ini' -exec chmod 660 {} +
+	find /etc/icingaweb2/ -type d -exec chmod 775 {} +
 
 	# Create icingaweb2 log directory
 	mkdir -p /var/log/icingaweb2/



View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/-/commit/4657dfca7d2c966bf07040ac8b9b30060b5b057a

-- 
View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/-/commit/4657dfca7d2c966bf07040ac8b9b30060b5b057a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-edu-commits/attachments/20230629/40367b81/attachment-0001.htm>