* Fri Sep 12 2025 Brian Read <brianr@koozali.org> 11.1-8.sme

- Remove www from systemd-journal group and setuid bit in journal wrapper [SME: 13121]
This commit is contained in:
2025-09-12 12:23:48 +01:00
parent 55cb7a6f05
commit a9dbafc584

View File

@@ -6,7 +6,7 @@ Summary: Daily mail statistics for SME Server
%define name smeserver-mailstats %define name smeserver-mailstats
Name: %{name} Name: %{name}
%define version 11.1 %define version 11.1
%define release 7 %define release 8
Version: %{version} Version: %{version}
Release: %{release}%{?dist} Release: %{release}%{?dist}
License: GPL License: GPL
@@ -84,12 +84,18 @@ install -Dpm 0755 journalwrap %{buildroot}%{_bindir}/journalwrap
%post %post
/sbin/ldconfig /sbin/ldconfig
usermod -aG systemd-journal www #Remove www from systemd-journal group as is potential security risk
gpasswd -d www systemd-journal
# and set setuid bit for c wrapper called from log detail web page
chmod u+s /usr/bin/journalwrap
%postun %postun
/sbin/ldconfig /sbin/ldconfig
%changelog %changelog
* Fri Sep 12 2025 Brian Read <brianr@koozali.org> 11.1-8.sme
- Remove www from systemd-journal group and setuid bit in journal wrapper [SME: 13121]
* Fri Sep 12 2025 Brian Read <brianr@koozali.org> 11.1-7.sme * Fri Sep 12 2025 Brian Read <brianr@koozali.org> 11.1-7.sme
- Truncate Geoip table and add other category [SME: 13121] - Truncate Geoip table and add other category [SME: 13121]
- Cope with blank data in action1 [SME: 13121] - Cope with blank data in action1 [SME: 13121]