kelvin/warewulf
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Merge pull request #742 from anderbubble/728-secure-wwinit-warewulf-config

Browse Source 
Restrict access to /warewulf/config from overlays
This commit is contained in:
Christian Goll
2023-03-21 08:30:28 +01:00
committed by GitHub
parent 2cf8601738 4c21a72572
commit 0bdfcb1c00
2 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
CHANGELOG.md
View File

@@ -11,6 +11,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
- The correct header is now displayed when `-al` flags are specified to overlay
list.
- Restrict access to `/warewulf/config` to root only. (#728, #742)
### Changed

2
Makefile
View File

@@ -188,7 +188,7 @@ files: all
chmod 600 $(DESTDIR)$(WWOVERLAYDIR)/wwinit/etc/ssh/ssh*
chmod 600 $(DESTDIR)$(WWOVERLAYDIR)/wwinit/etc/NetworkManager/system-connections/ww4-managed.ww
chmod 644 $(DESTDIR)$(WWOVERLAYDIR)/wwinit/etc/ssh/ssh*.pub.ww
chmod 644 $(DESTDIR)$(WWOVERLAYDIR)/wwinit/warewulf/config.ww
chmod 600 $(DESTDIR)$(WWOVERLAYDIR)/wwinit/warewulf/config.ww
chmod 750 $(DESTDIR)$(WWOVERLAYDIR)/host
install -m 0755 wwctl $(DESTDIR)$(BINDIR)
install -m 0755 wwapic $(DESTDIR)$(BINDIR)