rpm/dehydrated
SHA256
1
0
Fork 0
forked from pool/dehydrated
Code Pull Requests Activity

- actually try to find the real path to bash and don't hardcode

Browse Source 
/usr/bin/bash

OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=18
This commit is contained in:
Marcus Rückert 2017-10-20 10:57:53 +00:00 committed by Git OBS Bridge
parent bae7cb3bbf
commit dd7fda6243
3 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
dehydrated.changes
View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Fri Oct 20 10:55:26 UTC 2017 - mrueckert@suse.de
- actually try to find the real path to bash and don't hardcode
/usr/bin/bash
-------------------------------------------------------------------
Thu Oct 19 08:11:20 UTC 2017 - daniel.molkentin@suse.com

3
dehydrated.service.in
View File

@ -7,7 +7,8 @@ Wants=acmeresponder.socket
[Service]
Type=oneshot
ExecStartPost=-/usr/bin/find -L @POSTRUNHOOKS_DIR@ -maxdepth 1 -executable -type f -exec {} \;
ExecStart=/usr/bin/dehydrated --cron
EnvironmentFile=/etc/dehydrated/config
ExecStart=/usr/bin/su -s /bin/bash -c "/usr/bin/dehydrated --cron" -g $DEHYDRATED_GROUP $DEHYDRATED_USER
# dehydrated --cron will drop permissions and run critical code as dehydrated user.
User=root

2
dehydrated.spec
View File

@ -207,7 +207,7 @@ mkdir -p %{buildroot}%{_postrunhooks}
cat %{SOURCE8} | gzip > %{buildroot}%{_mandir}/man1/dehydrated.1.gz
# Silence E: env-script-interpreter
find \( -name \*.sh -o -name dehydrated \) -exec sed -i 's,#!/usr/bin/env bash,#!/usr/bin/bash,g' {} \;
find \( -name \*.sh -o -name dehydrated \) -exec sed -i "s,#!/usr/bin/env bash,#!$(command -v bash),g" {} \;
sed -i "s,#WELLKNOWN=.*,WELLKNOWN=%{_challengedir},g" docs/examples/config
install -m 0644 docs/examples/* %{buildroot}%{_home}