Merge pull request #250 from blueJack92/patch-3
Fixing (possible) permission problems of configuration files
This commit is contained in:
@@ -342,7 +342,7 @@ exit "$RETVAL"
|
|||||||
<install><![CDATA[apt-get install bind9]]></install>
|
<install><![CDATA[apt-get install bind9]]></install>
|
||||||
<command><![CDATA[echo "include \"{{settings.system.bindconf_directory}}froxlor_bind.conf\";" >> /etc/bind/named.conf.local]]></command>
|
<command><![CDATA[echo "include \"{{settings.system.bindconf_directory}}froxlor_bind.conf\";" >> /etc/bind/named.conf.local]]></command>
|
||||||
<command><![CDATA[touch {{settings.system.bindconf_directory}}froxlor_bind.conf]]></command>
|
<command><![CDATA[touch {{settings.system.bindconf_directory}}froxlor_bind.conf]]></command>
|
||||||
<command><![CDATA[chown bind:0 {{settings.system.bindconf_directory}}froxlor_bind.conf]]></command>
|
<command><![CDATA[chown 0:bind {{settings.system.bindconf_directory}}froxlor_bind.conf]]></command>
|
||||||
<command><![CDATA[chmod 0644 {{settings.system.bindconf_directory}}froxlor_bind.conf]]></command>
|
<command><![CDATA[chmod 0644 {{settings.system.bindconf_directory}}froxlor_bind.conf]]></command>
|
||||||
<command><![CDATA[/etc/init.d/bind9 restart]]></command>
|
<command><![CDATA[/etc/init.d/bind9 restart]]></command>
|
||||||
</daemon>
|
</daemon>
|
||||||
@@ -914,11 +914,11 @@ bind-check-interval=180
|
|||||||
<command><![CDATA[mkdir -p /var/spool/postfix/var/run/mysqld]]></command>
|
<command><![CDATA[mkdir -p /var/spool/postfix/var/run/mysqld]]></command>
|
||||||
<command><![CDATA[mkdir -p {{settings.system.vmail_homedir}}]]></command>
|
<command><![CDATA[mkdir -p {{settings.system.vmail_homedir}}]]></command>
|
||||||
<command><![CDATA[chown -R {{settings.system.vmail_uid}}:{{settings.system.vmail_gid}} {{settings.system.vmail_homedir}}]]></command>
|
<command><![CDATA[chown -R {{settings.system.vmail_uid}}:{{settings.system.vmail_gid}} {{settings.system.vmail_homedir}}]]></command>
|
||||||
<command><![CDATA[chmod 0750 {{settings.system.vmail_homedir}}]]></command>
|
<command><![CDATA[chmod 0755 {{settings.system.vmail_homedir}}]]></command>
|
||||||
</commands>
|
</commands>
|
||||||
<files index="0">
|
<files index="0">
|
||||||
<file name="/etc/postfix/mysql-virtual_alias_maps.cf" chown="root:postfix"
|
<file name="/etc/postfix/mysql-virtual_alias_maps.cf" chown="root:postfix"
|
||||||
chmod="0640">
|
chmod="0644">
|
||||||
<content><![CDATA[
|
<content><![CDATA[
|
||||||
user = <SQL_UNPRIVILEGED_USER>
|
user = <SQL_UNPRIVILEGED_USER>
|
||||||
password = <SQL_UNPRIVILEGED_PASSWORD>
|
password = <SQL_UNPRIVILEGED_PASSWORD>
|
||||||
@@ -929,7 +929,7 @@ query = SELECT destination FROM mail_virtual WHERE email = '%s' AND trim(destina
|
|||||||
</content>
|
</content>
|
||||||
</file>
|
</file>
|
||||||
<file name="/etc/postfix/mysql-virtual_mailbox_domains.cf"
|
<file name="/etc/postfix/mysql-virtual_mailbox_domains.cf"
|
||||||
chown="root:postfix" chmod="0640">
|
chown="root:postfix" chmod="0644">
|
||||||
<content><![CDATA[
|
<content><![CDATA[
|
||||||
user = <SQL_UNPRIVILEGED_USER>
|
user = <SQL_UNPRIVILEGED_USER>
|
||||||
password = <SQL_UNPRIVILEGED_PASSWORD>
|
password = <SQL_UNPRIVILEGED_PASSWORD>
|
||||||
@@ -940,7 +940,7 @@ query = SELECT domain FROM panel_domains WHERE domain = '%s' AND isemaildomain =
|
|||||||
</content>
|
</content>
|
||||||
</file>
|
</file>
|
||||||
<file name="/etc/postfix/mysql-virtual_mailbox_maps.cf"
|
<file name="/etc/postfix/mysql-virtual_mailbox_maps.cf"
|
||||||
chown="root:postfix" chmod="0640">
|
chown="root:postfix" chmod="0644">
|
||||||
<content><![CDATA[
|
<content><![CDATA[
|
||||||
user = <SQL_UNPRIVILEGED_USER>
|
user = <SQL_UNPRIVILEGED_USER>
|
||||||
password = <SQL_UNPRIVILEGED_PASSWORD>
|
password = <SQL_UNPRIVILEGED_PASSWORD>
|
||||||
@@ -952,7 +952,7 @@ query = SELECT CONCAT(homedir,maildir) FROM mail_users WHERE email = '%s'
|
|||||||
</content>
|
</content>
|
||||||
</file>
|
</file>
|
||||||
<file name="/etc/postfix/mysql-virtual_sender_permissions.cf"
|
<file name="/etc/postfix/mysql-virtual_sender_permissions.cf"
|
||||||
chown="root:postfix" chmod="0640">
|
chown="root:postfix" chmod="0644">
|
||||||
<content><![CDATA[
|
<content><![CDATA[
|
||||||
user = <SQL_UNPRIVILEGED_USER>
|
user = <SQL_UNPRIVILEGED_USER>
|
||||||
password = <SQL_UNPRIVILEGED_PASSWORD>
|
password = <SQL_UNPRIVILEGED_PASSWORD>
|
||||||
@@ -963,7 +963,7 @@ query = SELECT DISTINCT username FROM mail_users WHERE email in ((SELECT mail_vi
|
|||||||
</content>
|
</content>
|
||||||
</file>
|
</file>
|
||||||
<file name="/etc/postfix/mysql-virtual_uid_maps.cf" chown="root:postfix"
|
<file name="/etc/postfix/mysql-virtual_uid_maps.cf" chown="root:postfix"
|
||||||
chmod="0640">
|
chmod="0644">
|
||||||
<content><![CDATA[
|
<content><![CDATA[
|
||||||
user = <SQL_UNPRIVILEGED_USER>
|
user = <SQL_UNPRIVILEGED_USER>
|
||||||
password = <SQL_UNPRIVILEGED_PASSWORD>
|
password = <SQL_UNPRIVILEGED_PASSWORD>
|
||||||
@@ -975,7 +975,7 @@ query = SELECT uid FROM mail_users WHERE email = '%s'
|
|||||||
</content>
|
</content>
|
||||||
</file>
|
</file>
|
||||||
<file name="/etc/postfix/mysql-virtual_gid_maps.cf" chown="root:postfix"
|
<file name="/etc/postfix/mysql-virtual_gid_maps.cf" chown="root:postfix"
|
||||||
chmod="0640">
|
chmod="0644">
|
||||||
<content><![CDATA[
|
<content><![CDATA[
|
||||||
user = <SQL_UNPRIVILEGED_USER>
|
user = <SQL_UNPRIVILEGED_USER>
|
||||||
password = <SQL_UNPRIVILEGED_PASSWORD>
|
password = <SQL_UNPRIVILEGED_PASSWORD>
|
||||||
@@ -1655,40 +1655,40 @@ debugger_command =
|
|||||||
# sendmail_path: The full pathname of the Postfix sendmail command.
|
# sendmail_path: The full pathname of the Postfix sendmail command.
|
||||||
# This is the Sendmail-compatible mail posting interface.
|
# This is the Sendmail-compatible mail posting interface.
|
||||||
#
|
#
|
||||||
sendmail_path =
|
sendmail_path = /usr/sbin/sendmail
|
||||||
|
|
||||||
# newaliases_path: The full pathname of the Postfix newaliases command.
|
# newaliases_path: The full pathname of the Postfix newaliases command.
|
||||||
# This is the Sendmail-compatible command to build alias databases.
|
# This is the Sendmail-compatible command to build alias databases.
|
||||||
#
|
#
|
||||||
newaliases_path =
|
newaliases_path = /usr/bin/newaliases
|
||||||
|
|
||||||
# mailq_path: The full pathname of the Postfix mailq command. This
|
# mailq_path: The full pathname of the Postfix mailq command. This
|
||||||
# is the Sendmail-compatible mail queue listing command.
|
# is the Sendmail-compatible mail queue listing command.
|
||||||
#
|
#
|
||||||
mailq_path =
|
mailq_path = /usr/bin/mailq
|
||||||
|
|
||||||
# setgid_group: The group for mail submission and queue management
|
# setgid_group: The group for mail submission and queue management
|
||||||
# commands. This must be a group name with a numerical group ID that
|
# commands. This must be a group name with a numerical group ID that
|
||||||
# is not shared with other accounts, not even with the Postfix account.
|
# is not shared with other accounts, not even with the Postfix account.
|
||||||
#
|
#
|
||||||
setgid_group =
|
setgid_group = postdrop
|
||||||
|
|
||||||
# html_directory: The location of the Postfix HTML documentation.
|
# html_directory: The location of the Postfix HTML documentation.
|
||||||
#
|
#
|
||||||
html_directory =
|
html_directory = no
|
||||||
|
|
||||||
# manpage_directory: The location of the Postfix on-line manual pages.
|
# manpage_directory: The location of the Postfix on-line manual pages.
|
||||||
#
|
#
|
||||||
manpage_directory =
|
manpage_directory = /usr/share/man
|
||||||
|
|
||||||
# sample_directory: The location of the Postfix sample configuration files.
|
# sample_directory: The location of the Postfix sample configuration files.
|
||||||
# This parameter is obsolete as of Postfix 2.1.
|
# This parameter is obsolete as of Postfix 2.1.
|
||||||
#
|
#
|
||||||
sample_directory =
|
sample_directory = /usr/share/doc/postfix
|
||||||
|
|
||||||
# readme_directory: The location of the Postfix README files.
|
# readme_directory: The location of the Postfix README files.
|
||||||
#
|
#
|
||||||
readme_directory =
|
readme_directory = /usr/share/doc/postfix
|
||||||
inet_protocols = ipv4
|
inet_protocols = ipv4
|
||||||
|
|
||||||
append_dot_mydomain = no
|
append_dot_mydomain = no
|
||||||
@@ -1904,7 +1904,7 @@ dovecot unix - n n - - pipe
|
|||||||
</installs>
|
</installs>
|
||||||
<files index="1">
|
<files index="1">
|
||||||
<file name="/etc/dovecot/dovecot.conf" chown="root:root"
|
<file name="/etc/dovecot/dovecot.conf" chown="root:root"
|
||||||
chmod="0640" backup="true">
|
chmod="0644" backup="true">
|
||||||
<content><![CDATA[
|
<content><![CDATA[
|
||||||
## Dovecot configuration file
|
## Dovecot configuration file
|
||||||
|
|
||||||
@@ -2161,7 +2161,7 @@ password_query = SELECT username AS user, password_enc AS password, CONCAT(homed
|
|||||||
</content>
|
</content>
|
||||||
</file>
|
</file>
|
||||||
<file name="/etc/dovecot/conf.d/10-auth.conf" chown="root:0"
|
<file name="/etc/dovecot/conf.d/10-auth.conf" chown="root:0"
|
||||||
chmod="0640" backup="true">
|
chmod="0644" backup="true">
|
||||||
<content><![CDATA[
|
<content><![CDATA[
|
||||||
##
|
##
|
||||||
## Authentication processes
|
## Authentication processes
|
||||||
@@ -2295,7 +2295,7 @@ auth_mechanisms = plain login
|
|||||||
</content>
|
</content>
|
||||||
</file>
|
</file>
|
||||||
<file name="/etc/dovecot/conf.d/10-mail.conf" chown="root:0"
|
<file name="/etc/dovecot/conf.d/10-mail.conf" chown="root:0"
|
||||||
chmod="0640" backup="true">
|
chmod="0644" backup="true">
|
||||||
<content><![CDATA[
|
<content><![CDATA[
|
||||||
##
|
##
|
||||||
## Mailbox locations and namespaces
|
## Mailbox locations and namespaces
|
||||||
@@ -2672,7 +2672,7 @@ mail_access_groups = vmail
|
|||||||
</content>
|
</content>
|
||||||
</file>
|
</file>
|
||||||
<file name="/etc/dovecot/conf.d/10-master.conf" chown="root:0"
|
<file name="/etc/dovecot/conf.d/10-master.conf" chown="root:0"
|
||||||
chmod="0640" backup="true">
|
chmod="0644" backup="true">
|
||||||
<content><![CDATA[
|
<content><![CDATA[
|
||||||
#default_process_limit = 100
|
#default_process_limit = 100
|
||||||
#default_client_limit = 1000
|
#default_client_limit = 1000
|
||||||
@@ -2806,7 +2806,7 @@ service dict {
|
|||||||
</content>
|
</content>
|
||||||
</file>
|
</file>
|
||||||
<file name="/etc/dovecot/conf.d/15-lda.conf" chown="root:0"
|
<file name="/etc/dovecot/conf.d/15-lda.conf" chown="root:0"
|
||||||
chmod="0640" backup="true">
|
chmod="0644" backup="true">
|
||||||
<content><![CDATA[
|
<content><![CDATA[
|
||||||
##
|
##
|
||||||
## LDA specific settings (also used by LMTP)
|
## LDA specific settings (also used by LMTP)
|
||||||
@@ -2860,7 +2860,7 @@ protocol lda {
|
|||||||
</content>
|
</content>
|
||||||
</file>
|
</file>
|
||||||
<file name="/etc/dovecot/conf.d/20-imap.conf" chown="root:0"
|
<file name="/etc/dovecot/conf.d/20-imap.conf" chown="root:0"
|
||||||
chmod="0640" backup="true">
|
chmod="0644" backup="true">
|
||||||
<content><![CDATA[
|
<content><![CDATA[
|
||||||
##
|
##
|
||||||
## IMAP specific settings
|
## IMAP specific settings
|
||||||
@@ -2927,7 +2927,7 @@ protocol imap {
|
|||||||
</content>
|
</content>
|
||||||
</file>
|
</file>
|
||||||
<file name="/etc/dovecot/conf.d/20-managesieve.conf" chown="root:0"
|
<file name="/etc/dovecot/conf.d/20-managesieve.conf" chown="root:0"
|
||||||
chmod="0640" backup="true">
|
chmod="0644" backup="true">
|
||||||
<content><![CDATA[
|
<content><![CDATA[
|
||||||
##
|
##
|
||||||
## ManageSieve specific settings
|
## ManageSieve specific settings
|
||||||
@@ -3009,7 +3009,7 @@ protocol sieve {
|
|||||||
</content>
|
</content>
|
||||||
</file>
|
</file>
|
||||||
<file name="/etc/dovecot/conf.d/20-pop3.conf" chown="root:0"
|
<file name="/etc/dovecot/conf.d/20-pop3.conf" chown="root:0"
|
||||||
chmod="0640" backup="true">
|
chmod="0644" backup="true">
|
||||||
<content><![CDATA[
|
<content><![CDATA[
|
||||||
##
|
##
|
||||||
## POP3 specific settings
|
## POP3 specific settings
|
||||||
@@ -3113,7 +3113,7 @@ protocol pop3 {
|
|||||||
</content>
|
</content>
|
||||||
</file>
|
</file>
|
||||||
<file name="/etc/dovecot/conf.d/90-sieve.conf" chown="root:0"
|
<file name="/etc/dovecot/conf.d/90-sieve.conf" chown="root:0"
|
||||||
chmod="0640" backup="true">
|
chmod="0644" backup="true">
|
||||||
<content><![CDATA[
|
<content><![CDATA[
|
||||||
##
|
##
|
||||||
## Settings for the Sieve interpreter
|
## Settings for the Sieve interpreter
|
||||||
@@ -3663,7 +3663,7 @@ no
|
|||||||
</content>
|
</content>
|
||||||
</file>
|
</file>
|
||||||
<file name="/etc/pure-ftpd/db/mysql.conf" chown="root:0"
|
<file name="/etc/pure-ftpd/db/mysql.conf" chown="root:0"
|
||||||
chmod="0640" backup="true">
|
chmod="0644" backup="true">
|
||||||
<content><![CDATA[
|
<content><![CDATA[
|
||||||
##############################################
|
##############################################
|
||||||
# #
|
# #
|
||||||
@@ -3847,7 +3847,7 @@ UPLOADGID=
|
|||||||
<service type="system" title="{{lng.admin.configfiles.etc}}">
|
<service type="system" title="{{lng.admin.configfiles.etc}}">
|
||||||
<!-- Cronjob -->
|
<!-- Cronjob -->
|
||||||
<daemon name="cron" title="Cronjob for froxlor" mandatory="true">
|
<daemon name="cron" title="Cronjob for froxlor" mandatory="true">
|
||||||
<file name="/etc/cron.d/froxlor" chown="root:0" chmod="0640">
|
<file name="/etc/cron.d/froxlor" chown="root:0" chmod="0644">
|
||||||
<content><![CDATA[
|
<content><![CDATA[
|
||||||
#
|
#
|
||||||
# Set PATH, otherwise restart-scripts won't find start-stop-daemon
|
# Set PATH, otherwise restart-scripts won't find start-stop-daemon
|
||||||
|
|||||||
Reference in New Issue
Block a user