From bb2b6291b504fe65ae64fce40a23b9cfc0346202 Mon Sep 17 00:00:00 2001 From: Tobias Ribizel Date: Sun, 13 Oct 2024 10:48:56 +0200 Subject: [PATCH] Set restrictive permissions on /root/.ssh in generic overlay The permissions get used to overwrite the ones in the node filesystem. Signed-off-by: Tobias Ribizel --- warewulf.spec.in | 2 ++ 1 file changed, 2 insertions(+) diff --git a/warewulf.spec.in b/warewulf.spec.in index aa1e3bb3..d553f839 100644 --- a/warewulf.spec.in +++ b/warewulf.spec.in @@ -212,6 +212,8 @@ getent group %{wwgroup} >/dev/null || groupadd -r %{wwgroup} %dir %{_sharedstatedir}/warewulf/overlays/wwinit %dir %{_sharedstatedir}/warewulf/overlays/wwclient %attr(-, root, root) %{_sharedstatedir}/warewulf/overlays/*/rootfs +%attr(700, root, root) %{_sharedstatedir}/warewulf/overlays/generic/rootfs/root +%attr(700, root, root) %{_sharedstatedir}/warewulf/overlays/generic/rootfs/root/.ssh %attr(-, root, root) %{_bindir}/wwctl %attr(-, root, root) %{_prefix}/lib/firewalld/services/warewulf.xml