diff options
| author | Tanguy Raufflet <tanguy.raufflet@savoirfairelinux.com> | 2024-10-23 14:58:06 +0200 |
|---|---|---|
| committer | Khem Raj <raj.khem@gmail.com> | 2024-10-24 05:52:19 -0700 |
| commit | 6f6aa306025eb63c3ad1320d885d720c11834095 (patch) | |
| tree | db2d1c900ca79bc71609c090cb55aea62e97635b | |
| parent | 793557a317dd0393d9a68d0aa79e041d7bfdcdda (diff) | |
| download | meta-openembedded-6f6aa306025eb63c3ad1320d885d720c11834095.tar.gz | |
netdata: modify apps.plugin permissions
Modification of the group for the apps.plugin file (from root to
netdata) and removal of execution authorization for the “others”.
This modification improves security by limiting the netdata group to
execute the plugin as root.
Signed-off-by: Tanguy Raufflet <tanguy.raufflet@savoirfairelinux.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
| -rw-r--r-- | meta-webserver/recipes-webadmin/netdata/netdata_1.47.3.bb | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/meta-webserver/recipes-webadmin/netdata/netdata_1.47.3.bb b/meta-webserver/recipes-webadmin/netdata/netdata_1.47.3.bb index 841894ede9..3b9ae9ca89 100644 --- a/meta-webserver/recipes-webadmin/netdata/netdata_1.47.3.bb +++ b/meta-webserver/recipes-webadmin/netdata/netdata_1.47.3.bb | |||
| @@ -83,7 +83,8 @@ do_compile:append() { | |||
| 83 | 83 | ||
| 84 | do_install:append() { | 84 | do_install:append() { |
| 85 | #set S UID for plugins | 85 | #set S UID for plugins |
| 86 | chmod 4755 ${D}${libexecdir}/netdata/plugins.d/apps.plugin | 86 | chown root:netdata ${D}${libexecdir}/netdata/plugins.d/apps.plugin |
| 87 | chmod 4750 ${D}${libexecdir}/netdata/plugins.d/apps.plugin | ||
| 87 | rm -rf ${D}/${localstatedir}/ | 88 | rm -rf ${D}/${localstatedir}/ |
| 88 | 89 | ||
| 89 | if ${@bb.utils.contains('DISTRO_FEATURES','systemd','true','false',d)}; then | 90 | if ${@bb.utils.contains('DISTRO_FEATURES','systemd','true','false',d)}; then |