From e3527f56e2303f357abd7c1fbb4f628163c24412 Mon Sep 17 00:00:00 2001
From: Simon Rettberg
Date: Tue, 25 Aug 2020 17:21:39 +0200
Subject: [dnbd3-proxy-mode] Make cache dir inaccessible to world

---
 .../data/opt/openslx/scripts/systemd-setup_dnbd3_proxy                 | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'core/modules/dnbd3-proxy-mode')

diff --git a/core/modules/dnbd3-proxy-mode/data/opt/openslx/scripts/systemd-setup_dnbd3_proxy b/core/modules/dnbd3-proxy-mode/data/opt/openslx/scripts/systemd-setup_dnbd3_proxy
index e5652758..0f811d1d 100755
--- a/core/modules/dnbd3-proxy-mode/data/opt/openslx/scripts/systemd-setup_dnbd3_proxy
+++ b/core/modules/dnbd3-proxy-mode/data/opt/openslx/scripts/systemd-setup_dnbd3_proxy
@@ -94,7 +94,8 @@ fi
 if ! chown -R dnbd3:dnbd3 "${DNBD3_DATA_DIR}"; then
 	errormsg "Failed to chown '${DNBD3_DATA_DIR}' to dnbd3."
 fi
-if ! chmod -R go-w,u+rwX "${DNBD3_DATA_DIR}"; then
+# user rw, group ro, other nothing
+if ! chmod -R o-rwx,u+rwX,g+rX-w "${DNBD3_DATA_DIR}"; then
 	errormsg "Failed to chmod '${DNBD3_DATA_DIR}' to dnbd3."
 fi
 
-- 
cgit v1.2.3-55-g7522