Influxdata
/
influxdb
mirror of https://github.com/influxdata/influxdb.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

fix: set limited permissions on package installs (#23683) 

* fix: set limited permissions on package installs

* fix: set umask in systemd service to create files as 0750
pull/23723/head
Jeffrey Smith II 2022-09-02 14:08:30 -04:00 committed by Jonathan A. Sternberg
parent 485968cce4
commit b51fefdf6d
No known key found for this signature in database
GPG Key ID: 4A0C1200CB8B9D2E
4 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
.circleci/package/control/postinst
View File

@ -111,8 +111,8 @@ elif [[ -f /etc/debian_version ]]; then
# Moving these lines out of this if statement would make `rmp -V` fail after installation. # Moving these lines out of this if statement would make `rmp -V` fail after installation.
chown -R -L influxdb:influxdb $LOG_DIR chown -R -L influxdb:influxdb $LOG_DIR
chown -R -L influxdb:influxdb $DATA_DIR chown -R -L influxdb:influxdb $DATA_DIR
chmod 755 $LOG_DIR chmod 750 $LOG_DIR
chmod 755 $DATA_DIR chmod 750 $DATA_DIR
# Debian/Ubuntu logic # Debian/Ubuntu logic
if command -v systemctl &>/dev/null; then if command -v systemctl &>/dev/null; then

1
.circleci/package/fs/usr/lib/influxdb/scripts/influxdb.service
View File

@ -15,6 +15,7 @@ KillMode=control-group
Restart=on-failure Restart=on-failure
Type=forking Type=forking
PIDFile=/var/lib/influxdb/influxd.pid PIDFile=/var/lib/influxdb/influxd.pid
UMask=0027
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

0
.circleci/package/fs/var/lib/influxdb/.keep Normal file
View File

5
.circleci/scripts/build-package
View File

@ -58,7 +58,10 @@ function run_fpm()
--after-remove control/postrm \ --after-remove control/postrm \
`# package files` \ `# package files` \
--chdir fs/ \ --chdir fs/ \
--package /artifacts --package /artifacts \
--directories /var/lib/influxdb \
--rpm-defattrdir 750 \
--rpm-defattrfile 750
popd popd