ease file-permissions, they sometimes cause issues
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org>
This commit is contained in:
@@ -78,7 +78,7 @@
|
||||
</commands>
|
||||
<files index="0">
|
||||
<file name="/etc/postfix/mysql-virtual_alias_maps.cf" chown="root:postfix"
|
||||
chmod="0640">
|
||||
chmod="0644">
|
||||
<content><![CDATA[
|
||||
user = <SQL_UNPRIVILEGED_USER>
|
||||
password = <SQL_UNPRIVILEGED_PASSWORD>
|
||||
@@ -89,7 +89,7 @@ query = SELECT destination FROM mail_virtual WHERE email = '%s' AND trim(destina
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/postfix/mysql-virtual_mailbox_domains.cf"
|
||||
chown="root:postfix" chmod="0640">
|
||||
chown="root:postfix" chmod="0644">
|
||||
<content><![CDATA[
|
||||
user = <SQL_UNPRIVILEGED_USER>
|
||||
password = <SQL_UNPRIVILEGED_PASSWORD>
|
||||
@@ -100,7 +100,7 @@ query = SELECT domain FROM panel_domains WHERE domain = '%s' AND isemaildomain =
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/postfix/mysql-virtual_mailbox_maps.cf"
|
||||
chown="root:postfix" chmod="0640">
|
||||
chown="root:postfix" chmod="0644">
|
||||
<content><![CDATA[
|
||||
user = <SQL_UNPRIVILEGED_USER>
|
||||
password = <SQL_UNPRIVILEGED_PASSWORD>
|
||||
@@ -112,7 +112,7 @@ query = SELECT CONCAT(homedir,maildir) FROM mail_users WHERE email = '%s'
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/postfix/mysql-virtual_sender_permissions.cf"
|
||||
chown="root:postfix" chmod="0640">
|
||||
chown="root:postfix" chmod="0644">
|
||||
<content><![CDATA[
|
||||
user = <SQL_UNPRIVILEGED_USER>
|
||||
password = <SQL_UNPRIVILEGED_PASSWORD>
|
||||
@@ -123,7 +123,7 @@ query = SELECT DISTINCT username FROM mail_users WHERE email in ((SELECT mail_vi
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/postfix/mysql-virtual_uid_maps.cf" chown="root:postfix"
|
||||
chmod="0640">
|
||||
chmod="0644">
|
||||
<content><![CDATA[
|
||||
user = <SQL_UNPRIVILEGED_USER>
|
||||
password = <SQL_UNPRIVILEGED_PASSWORD>
|
||||
@@ -135,7 +135,7 @@ query = SELECT uid FROM mail_users WHERE email = '%s'
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/postfix/mysql-virtual_gid_maps.cf" chown="root:postfix"
|
||||
chmod="0640">
|
||||
chmod="0644">
|
||||
<content><![CDATA[
|
||||
user = <SQL_UNPRIVILEGED_USER>
|
||||
password = <SQL_UNPRIVILEGED_PASSWORD>
|
||||
@@ -270,7 +270,7 @@ dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/libexec/dove
|
||||
<daemon name="dovecot" version="2.2" title="Dovecot" default="true">
|
||||
<install><![CDATA[yum install dovecot dovecot-mysql dovecot-pigeonhole]]></install>
|
||||
<file name="/etc/dovecot/dovecot.conf" chown="root:root"
|
||||
chmod="0640" backup="true">
|
||||
chmod="0644" backup="true">
|
||||
<content><![CDATA[
|
||||
## Dovecot configuration file
|
||||
|
||||
@@ -360,7 +360,7 @@ dict {
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/dovecot/conf.d/10-auth.conf" chown="root:0"
|
||||
chmod="0640" backup="true">
|
||||
chmod="0644" backup="true">
|
||||
<content><![CDATA[
|
||||
##
|
||||
## Authentication processes
|
||||
@@ -495,7 +495,7 @@ auth_mechanisms = plain
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/dovecot/conf.d/10-logging.conf" chown="root:0"
|
||||
chmod="0640" backup="true">
|
||||
chmod="0644" backup="true">
|
||||
<content><![CDATA[
|
||||
##
|
||||
## Log destination.
|
||||
@@ -585,7 +585,7 @@ plugin {
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/dovecot/conf.d/10-mail.conf" chown="root:0"
|
||||
chmod="0640" backup="true">
|
||||
chmod="0644" backup="true">
|
||||
<content><![CDATA[
|
||||
##
|
||||
## Mailbox locations and namespaces
|
||||
@@ -961,7 +961,7 @@ mbox_write_locks = fcntl
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/dovecot/conf.d/10-master.conf" chown="root:0"
|
||||
chmod="0640" backup="true">
|
||||
chmod="0644" backup="true">
|
||||
<content><![CDATA[
|
||||
#default_process_limit = 100
|
||||
#default_client_limit = 1000
|
||||
@@ -1086,7 +1086,7 @@ service dict {
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/dovecot/conf.d/10-ssl.conf" chown="root:0"
|
||||
chmod="0640" backup="true">
|
||||
chmod="0644" backup="true">
|
||||
<content><![CDATA[
|
||||
##
|
||||
## SSL settings
|
||||
@@ -1152,7 +1152,7 @@ ssl = no
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/dovecot/conf.d/15-lda.conf" chown="root:0"
|
||||
chmod="0640" backup="true">
|
||||
chmod="0644" backup="true">
|
||||
<content><![CDATA[
|
||||
##
|
||||
## LDA specific settings (also used by LMTP)
|
||||
@@ -1206,7 +1206,7 @@ protocol lda {
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/dovecot/conf.d/15-mailboxes.conf" chown="root:0"
|
||||
chmod="0640" backup="true">
|
||||
chmod="0644" backup="true">
|
||||
<content><![CDATA[
|
||||
##
|
||||
## Mailbox definitions
|
||||
@@ -1263,7 +1263,7 @@ namespace inbox {
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/dovecot/conf.d/20-imap.conf" chown="root:0"
|
||||
chmod="0640" backup="true">
|
||||
chmod="0644" backup="true">
|
||||
<content><![CDATA[
|
||||
##
|
||||
## IMAP specific settings
|
||||
@@ -1330,7 +1330,7 @@ protocol imap {
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/dovecot/conf.d/20-lmtp.conf" chown="root:0"
|
||||
chmod="0640" backup="true">
|
||||
chmod="0644" backup="true">
|
||||
<content><![CDATA[
|
||||
##
|
||||
## LMTP specific settings
|
||||
@@ -1355,7 +1355,7 @@ protocol lmtp {
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/dovecot/conf.d/20-managesieve.conf" chown="root:0"
|
||||
chmod="0640" backup="true">
|
||||
chmod="0644" backup="true">
|
||||
<content><![CDATA[
|
||||
##
|
||||
## ManageSieve specific settings
|
||||
@@ -1437,7 +1437,7 @@ protocol sieve {
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/dovecot/conf.d/20-pop3.conf" chown="root:0"
|
||||
chmod="0640" backup="true">
|
||||
chmod="0644" backup="true">
|
||||
<content><![CDATA[
|
||||
##
|
||||
## POP3 specific settings
|
||||
@@ -1541,7 +1541,7 @@ protocol pop3 {
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/dovecot/conf.d/90-sieve.conf" chown="root:0"
|
||||
chmod="0640" backup="true">
|
||||
chmod="0644" backup="true">
|
||||
<content><![CDATA[
|
||||
##
|
||||
## Settings for the Sieve interpreter
|
||||
@@ -1658,7 +1658,7 @@ plugin {
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/dovecot/dovecot-sql.conf.ext" chown="root:0"
|
||||
chmod="0640">
|
||||
chmod="0644">
|
||||
<content><![CDATA[
|
||||
# This file is opened as root, so it should be owned by root and mode 0600.
|
||||
#
|
||||
@@ -1813,7 +1813,7 @@ iterate_query = SELECT username AS user FROM mail_users
|
||||
<!-- Proftpd -->
|
||||
<daemon name="proftpd" version="1.3" title="ProFTPd" default="true">
|
||||
<install><![CDATA[yum install proftpd proftpd-mysql]]></install>
|
||||
<file name="/etc/proftpd/proftpd.conf" chown="root:0" chmod="0600"
|
||||
<file name="/etc/proftpd/proftpd.conf" chown="root:0" chmod="0644"
|
||||
backup="true">
|
||||
<content><![CDATA[
|
||||
# This is the ProFTPD configuration file
|
||||
@@ -2275,7 +2275,7 @@ ControlsLog /var/log/proftpd/controls.log
|
||||
<service type="system" title="{{lng.admin.configfiles.etc}}">
|
||||
<!-- Cronjob -->
|
||||
<daemon name="cron" title="Cronjob for froxlor" mandatory="true">
|
||||
<file name="/etc/cron.d/froxlor" chown="root:0" chmod="0640">
|
||||
<file name="/etc/cron.d/froxlor" chown="root:0" chmod="0644">
|
||||
<content><![CDATA[
|
||||
#
|
||||
# Set PATH, otherwise restart-scripts won't find start-stop-daemon
|
||||
@@ -2302,7 +2302,7 @@ PATH=/sbin:/bin:/usr/sbin:/usr/bin
|
||||
<daemon name="libnss" title="libnss-mysql (required for FCGID/php-fpm/mpm-itk)">
|
||||
<install><![CDATA[yum --enablerepo=extras install epel-release]]></install>
|
||||
<install><![CDATA[yum install libnss-mysql nscd]]></install>
|
||||
<file name="/etc/libnss-mysql.cfg" chown="root:root" chmod="0600"
|
||||
<file name="/etc/libnss-mysql.cfg" chown="root:root" chmod="0644"
|
||||
backup="true">
|
||||
<content><![CDATA[
|
||||
getpwnam SELECT username,'x',uid,gid,'Froxlor Customer',homedir,shell \
|
||||
@@ -2357,7 +2357,7 @@ password <SQL_UNPRIVILEGED_PASSWORD>
|
||||
<command><![CDATA[sed -i.bak 's|^\\(socket\\).*$|\\1\\"{{sql.socket}}\\"|' /etc/libnss-mysql.cfg]]></command>
|
||||
</commands>
|
||||
<file name="/etc/libnss-mysql-root.cfg" chown="root:root"
|
||||
chmod="0600" backup="true">
|
||||
chmod="0644" backup="true">
|
||||
<content><![CDATA[
|
||||
username <SQL_UNPRIVILEGED_USER>
|
||||
password <SQL_UNPRIVILEGED_PASSWORD>
|
||||
|
||||
Reference in New Issue
Block a user