Revert "ease file-permissions, they sometimes cause issues"
This reverts commit 5ead5e9c90.
part of this commit is reverted as most files shouldn't be world readable
This commit is contained in:
@@ -380,7 +380,7 @@ local-address=<SERVERIP>,127.0.0.1
|
||||
</commands>
|
||||
<files index="0">
|
||||
<file name="/etc/postfix/mysql-virtual_alias_maps.cf" chown="root:postfix"
|
||||
chmod="0644">
|
||||
chmod="0640">
|
||||
<content><![CDATA[
|
||||
user = <SQL_UNPRIVILEGED_USER>
|
||||
password = <SQL_UNPRIVILEGED_PASSWORD>
|
||||
@@ -391,7 +391,7 @@ query = SELECT destination FROM mail_virtual WHERE email = '%s' AND trim(destina
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/postfix/mysql-virtual_mailbox_domains.cf"
|
||||
chown="root:postfix" chmod="0644">
|
||||
chown="root:postfix" chmod="0640">
|
||||
<content><![CDATA[
|
||||
user = <SQL_UNPRIVILEGED_USER>
|
||||
password = <SQL_UNPRIVILEGED_PASSWORD>
|
||||
@@ -402,7 +402,7 @@ query = SELECT domain FROM panel_domains WHERE domain = '%s' AND isemaildomain =
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/postfix/mysql-virtual_mailbox_maps.cf"
|
||||
chown="root:postfix" chmod="0644">
|
||||
chown="root:postfix" chmod="0640">
|
||||
<content><![CDATA[
|
||||
user = <SQL_UNPRIVILEGED_USER>
|
||||
password = <SQL_UNPRIVILEGED_PASSWORD>
|
||||
@@ -414,7 +414,7 @@ query = SELECT CONCAT(homedir,maildir) FROM mail_users WHERE email = '%s'
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/postfix/mysql-virtual_sender_permissions.cf"
|
||||
chown="root:postfix" chmod="0644">
|
||||
chown="root:postfix" chmod="0640">
|
||||
<content><![CDATA[
|
||||
user = <SQL_UNPRIVILEGED_USER>
|
||||
password = <SQL_UNPRIVILEGED_PASSWORD>
|
||||
@@ -425,7 +425,7 @@ query = SELECT DISTINCT username FROM mail_users WHERE email in ((SELECT mail_vi
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/postfix/mysql-virtual_uid_maps.cf" chown="root:postfix"
|
||||
chmod="0644">
|
||||
chmod="0640">
|
||||
<content><![CDATA[
|
||||
user = <SQL_UNPRIVILEGED_USER>
|
||||
password = <SQL_UNPRIVILEGED_PASSWORD>
|
||||
@@ -437,7 +437,7 @@ query = SELECT uid FROM mail_users WHERE email = '%s'
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/postfix/mysql-virtual_gid_maps.cf" chown="root:postfix"
|
||||
chmod="0644">
|
||||
chmod="0640">
|
||||
<content><![CDATA[
|
||||
user = <SQL_UNPRIVILEGED_USER>
|
||||
password = <SQL_UNPRIVILEGED_PASSWORD>
|
||||
@@ -694,7 +694,7 @@ debugger_command =
|
||||
</file>
|
||||
<include>//service[@type='smtp']/general/files[@index=0]</include>
|
||||
<file name="/etc/postfix/sasl/smtpd.conf" chown="root:root"
|
||||
chmod="0644">
|
||||
chmod="0600">
|
||||
<content><![CDATA[
|
||||
pwcheck_method: auxprop
|
||||
auxprop_plugin: sql
|
||||
@@ -809,7 +809,7 @@ service auth {
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/dovecot/conf.d/10-auth.conf" chown="root:root"
|
||||
chmod="0644" backup="true">
|
||||
chmod="0640" backup="true">
|
||||
<content><![CDATA[
|
||||
##
|
||||
## Authentication processes
|
||||
@@ -955,7 +955,7 @@ userdb {
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/dovecot/dovecot-sql.conf.ext" chown="root:0"
|
||||
chmod="0644" backup="true">
|
||||
chmod="0640" backup="true">
|
||||
<content><![CDATA[
|
||||
driver = mysql
|
||||
connect = host=<SQL_HOST> dbname=<SQL_DB> user=<SQL_UNPRIVILEGED_USER> password=<SQL_UNPRIVILEGED_PASSWORD>
|
||||
@@ -971,7 +971,7 @@ iterate_query = SELECT username AS user FROM mail_users WHERE (imap = 1 OR pop3
|
||||
<!-- Courier -->
|
||||
<daemon name="courier" title="Courier">
|
||||
<install><![CDATA[apt-get install courier-pop courier-imap courier-authlib-mysql]]></install>
|
||||
<file name="/etc/courier/authdaemonrc" chown="root:0" chmod="0644"
|
||||
<file name="/etc/courier/authdaemonrc" chown="root:0" chmod="0600"
|
||||
backup="true">
|
||||
<content><![CDATA[
|
||||
##VERSION: $Id: authdaemonrc.in,v 1.8 2001/10/07 02:16:22 mrsam Exp $
|
||||
@@ -1045,7 +1045,7 @@ authdaemonvar=/var/run/courier/authdaemon
|
||||
]]>
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/courier/authmysqlrc" chown="root:0" chmod="0644"
|
||||
<file name="/etc/courier/authmysqlrc" chown="root:0" chmod="0600"
|
||||
backup="true">
|
||||
<content><![CDATA[
|
||||
MYSQL_SERVER <SQL_HOST>
|
||||
@@ -1074,7 +1074,7 @@ MYSQL_AUXOPTIONS_FIELD CONCAT("allowimap=",imap,",allowpop3=",pop3)
|
||||
<!-- Proftpd -->
|
||||
<daemon name="proftpd" title="ProFTPd" default="true">
|
||||
<install><![CDATA[apt-get install proftpd-basic proftpd-mod-mysql]]></install>
|
||||
<file name="/etc/proftpd/proftpd.conf" chown="root:0" chmod="0644"
|
||||
<file name="/etc/proftpd/proftpd.conf" chown="root:0" chmod="0600"
|
||||
backup="true">
|
||||
<content><![CDATA[
|
||||
#
|
||||
@@ -1274,7 +1274,7 @@ LoadModule mod_ifsession.c
|
||||
]]>
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/proftpd/sql.conf" chown="root:0" chmod="0644"
|
||||
<file name="/etc/proftpd/sql.conf" chown="root:0" chmod="0600"
|
||||
backup="true">
|
||||
<content><![CDATA[
|
||||
<IfModule mod_sql.c>
|
||||
@@ -1364,7 +1364,7 @@ no
|
||||
</content>
|
||||
</file>
|
||||
<file name="/etc/pure-ftpd/db/mysql.conf" chown="root:0"
|
||||
chmod="0644" backup="true">
|
||||
chmod="0640" backup="true">
|
||||
<content><![CDATA[
|
||||
MYSQLServer <SQL_HOST>
|
||||
MYSQLUser <SQL_UNPRIVILEGED_USER>
|
||||
@@ -1411,7 +1411,7 @@ UPLOADGID=
|
||||
<service type="system" title="{{lng.admin.configfiles.etc}}">
|
||||
<!-- Cronjob -->
|
||||
<daemon name="cron" title="Cronjob for froxlor" mandatory="true">
|
||||
<file name="/etc/cron.d/froxlor" chown="root:0" chmod="0644">
|
||||
<file name="/etc/cron.d/froxlor" chown="root:0" chmod="0640">
|
||||
<content><![CDATA[
|
||||
#
|
||||
# Set PATH, otherwise restart-scripts won't find start-stop-daemon
|
||||
@@ -1440,7 +1440,7 @@ PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
|
||||
<!-- libnss-mysql -->
|
||||
<daemon name="libnss" title="libnss-mysql (required for FCGID/php-fpm/mpm-itk)">
|
||||
<install><![CDATA[apt-get install libnss-mysql-bg nscd]]></install>
|
||||
<file name="/etc/libnss-mysql.cfg" chown="root:root" chmod="0644"
|
||||
<file name="/etc/libnss-mysql.cfg" chown="root:root" chmod="0600"
|
||||
backup="true">
|
||||
<content><![CDATA[
|
||||
getpwnam SELECT username,'x',uid,gid,'Froxlor Customer',homedir,shell \
|
||||
@@ -1496,7 +1496,7 @@ socket /var/run/mysqld/mysqld.sock
|
||||
<content><![CDATA[sed -i.bak 's|^\\(socket\\).*$|\\1\\"{{sql.socket}}\\"|' /etc/libnss-mysql.cfg]]></content>
|
||||
</command>
|
||||
<file name="/etc/libnss-mysql-root.cfg" chown="root:root"
|
||||
chmod="0644" backup="true">
|
||||
chmod="0600" backup="true">
|
||||
<content><![CDATA[
|
||||
username <SQL_UNPRIVILEGED_USER>
|
||||
password <SQL_UNPRIVILEGED_PASSWORD>
|
||||
|
||||
Reference in New Issue
Block a user