From 7840dd1b53fd735d69a8aefe1c0e9c87fa896e72 Mon Sep 17 00:00:00 2001 From: Armin Kuster Date: Mon, 26 Jun 2023 09:31:15 -0400 Subject: bastille: bastille/config should not be world writeable. Signed-off-by: Armin Kuster --- dynamic-layers/meta-perl/recipes-security/bastille/bastille_3.2.1.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dynamic-layers/meta-perl/recipes-security/bastille/bastille_3.2.1.bb b/dynamic-layers/meta-perl/recipes-security/bastille/bastille_3.2.1.bb index e7852d9..f2ef335 100644 --- a/dynamic-layers/meta-perl/recipes-security/bastille/bastille_3.2.1.bb +++ b/dynamic-layers/meta-perl/recipes-security/bastille/bastille_3.2.1.bb @@ -138,7 +138,7 @@ do_install () { install -m 0644 OSMap/OSX.bastille ${D}${datadir}/Bastille/OSMap install -m 0644 OSMap/OSX.system ${D}${datadir}/Bastille/OSMap - install -m 0777 ${WORKDIR}/config ${D}${sysconfdir}/Bastille/config + install -m 0644 ${WORKDIR}/config ${D}${sysconfdir}/Bastille/config for file in `cat Modules.txt` ; do install -m 0644 Questions/$file.txt ${D}${datadir}/Bastille/Questions -- cgit v1.2.3-54-g00ecf