This is an automated email from the ASF dual-hosted git repository.

rnewson pushed a commit to branch nouveau-perms
in repository https://gitbox.apache.org/repos/asf/couchdb-pkg.git

commit a67b6caf6bd835f6249adab529afd3f294457e13
Author: Robert Newson <[email protected]>
AuthorDate: Mon Feb 10 14:24:26 2025 +0000

    fix file/dir permissions for nouveau
    
    Fixes apache/couchdb#5427
---
 debian/couchdb-nouveau.postinst | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/debian/couchdb-nouveau.postinst b/debian/couchdb-nouveau.postinst
index 4c49872..ddd31bb 100644
--- a/debian/couchdb-nouveau.postinst
+++ b/debian/couchdb-nouveau.postinst
@@ -42,6 +42,10 @@ case $1 in
             chown nouveau:nouveau $i >/dev/null 2>&1 || true
         done
 
+        # These should also not be world readable or writable:
+        chmod 0640  /opt/nouveau/etc/nouveau.yaml
+        chmod 0750 /var/lib/nouveau
+
         db_input high couchdb-nouveau/enable || true
         db_go || true
         db_get couchdb-nouveau/enable || true

Reply via email to