* Fri Sep 12 2025 Brian Read <brianr@koozali.org> 11.1-8.sme
- Remove www from systemd-journal group and setuid bit in journal wrapper [SME: 13121]
This commit is contained in:
@@ -6,7 +6,7 @@ Summary: Daily mail statistics for SME Server
|
|||||||
%define name smeserver-mailstats
|
%define name smeserver-mailstats
|
||||||
Name: %{name}
|
Name: %{name}
|
||||||
%define version 11.1
|
%define version 11.1
|
||||||
%define release 7
|
%define release 8
|
||||||
Version: %{version}
|
Version: %{version}
|
||||||
Release: %{release}%{?dist}
|
Release: %{release}%{?dist}
|
||||||
License: GPL
|
License: GPL
|
||||||
@@ -84,12 +84,18 @@ install -Dpm 0755 journalwrap %{buildroot}%{_bindir}/journalwrap
|
|||||||
|
|
||||||
%post
|
%post
|
||||||
/sbin/ldconfig
|
/sbin/ldconfig
|
||||||
usermod -aG systemd-journal www
|
#Remove www from systemd-journal group as is potential security risk
|
||||||
|
gpasswd -d www systemd-journal
|
||||||
|
# and set setuid bit for c wrapper called from log detail web page
|
||||||
|
chmod u+s /usr/bin/journalwrap
|
||||||
|
|
||||||
%postun
|
%postun
|
||||||
/sbin/ldconfig
|
/sbin/ldconfig
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Fri Sep 12 2025 Brian Read <brianr@koozali.org> 11.1-8.sme
|
||||||
|
- Remove www from systemd-journal group and setuid bit in journal wrapper [SME: 13121]
|
||||||
|
|
||||||
* Fri Sep 12 2025 Brian Read <brianr@koozali.org> 11.1-7.sme
|
* Fri Sep 12 2025 Brian Read <brianr@koozali.org> 11.1-7.sme
|
||||||
- Truncate Geoip table and add other category [SME: 13121]
|
- Truncate Geoip table and add other category [SME: 13121]
|
||||||
- Cope with blank data in action1 [SME: 13121]
|
- Cope with blank data in action1 [SME: 13121]
|
||||||
|
Reference in New Issue
Block a user