commit: 974707d375cc8cb22593224b38c73853e906d157
Author: Michael Orlitzky <mjo <AT> gentoo <DOT> org>
AuthorDate: Sat Nov 4 23:30:20 2017 +0000
Commit: Michael Orlitzky <mjo <AT> gentoo <DOT> org>
CommitDate: Sat Nov 4 23:37:24 2017 +0000
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=974707d3
net-analyzer/pnp4nagios: use group permissions for writable directories.
The past few revisions have made some directories owned by the "nagios
user" so that the nagios/icinga daemon can write stuff there. Instead
of giving ownership of those directories to the nagios user, it's a
little bit more secure to give group-rwx permissions to the "nagios
group." This new revision does that instead.
Package-Manager: Portage-2.3.8, Repoman-2.3.3
.../{pnp4nagios-0.6.26-r8.ebuild => pnp4nagios-0.6.26-r9.ebuild} | 9 ++++++---
1 file changed, 6 insertions(+), 3 deletions(-)
diff --git a/net-analyzer/pnp4nagios/pnp4nagios-0.6.26-r8.ebuild
b/net-analyzer/pnp4nagios/pnp4nagios-0.6.26-r9.ebuild
similarity index 92%
rename from net-analyzer/pnp4nagios/pnp4nagios-0.6.26-r8.ebuild
rename to net-analyzer/pnp4nagios/pnp4nagios-0.6.26-r9.ebuild
index 8d5fdbcf842..ffa296c1348 100644
--- a/net-analyzer/pnp4nagios/pnp4nagios-0.6.26-r8.ebuild
+++ b/net-analyzer/pnp4nagios/pnp4nagios-0.6.26-r9.ebuild
@@ -75,16 +75,19 @@ src_install() {
# perfdata-dir...
local user_group=nagios
use icinga && user_group=icinga
- fowners "${user_group}:${user_group}" /var/lib/pnp/{,perfdata,spool}
+ fowners ":${user_group}" /var/lib/pnp/{,perfdata,spool}
+ fperms g+rwx /var/lib/pnp/{,perfdata,spool}
# and likewise for its logs...
dodir /var/log/pnp
- fowners "${user_group}:${user_group}" /var/log/pnp
+ fowners ":${user_group}" /var/log/pnp
+ fperms g+rwx /var/log/pnp
# and its statistics. This one is arguably the responsibility of the
# build system, since process_perfdata.cfg refers to this location.
dodir /var/lib/pnp/stats
- fowners "${user_group}:${user_group}" /var/lib/pnp/stats
+ fowners ":${user_group}" /var/lib/pnp/stats
+ fperms g+rwx /var/lib/pnp/stats
}
pkg_postinst() {
