public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/rust-siguldry] f44: Mark the config directory world-readable
@ 2026-06-01 18:42 Jeremy Cline
0 siblings, 0 replies; only message in thread
From: Jeremy Cline @ 2026-06-01 18:42 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : rpms/rust-siguldry
Branch : f44
Commit : df78708199dc8f3f0d806bf96f4130861984f626
Author : Jeremy Cline <jeremycline@microsoft.com>
Date : 2026-05-20T07:24:21-04:00
Stats : +8/-8 in 2 file(s)
URL : https://src.fedoraproject.org/rpms/rust-siguldry/c/df78708199dc8f3f0d806bf96f4130861984f626?branch=f44
Log:
Mark the config directory world-readable
There's nothing secret in any of the configuration files; all secrets
are encrypted with systemd-creds. The bridge service, in particular,
runs as a dynamic user and needs to be able to read its config.
Additionally, the systemd units (implicitly) have systemd configure the
config directory as 0755, so this also fixes the systemd warning on
startup.
---
diff --git a/rust-siguldry.spec b/rust-siguldry.spec
index e919f1c..1dd01f1 100644
--- a/rust-siguldry.spec
+++ b/rust-siguldry.spec
@@ -170,10 +170,10 @@ use the "sigul-client" feature of the "%{crate}" crate.
%install
%cargo_install
-install -d -p -m 0750 %{buildroot}%{_sysconfdir}/siguldry
-install -D -p -m 0640 server.toml.example %{buildroot}%{_sysconfdir}/siguldry/server.toml
-install -D -p -m 0640 bridge.toml.example %{buildroot}%{_sysconfdir}/siguldry/bridge.toml
-install -D -p -m 0640 client.toml.example %{buildroot}%{_sysconfdir}/siguldry/client.toml
+install -d -p -m 0755 %{buildroot}%{_sysconfdir}/siguldry
+install -D -p -m 0644 server.toml.example %{buildroot}%{_sysconfdir}/siguldry/server.toml
+install -D -p -m 0644 bridge.toml.example %{buildroot}%{_sysconfdir}/siguldry/bridge.toml
+install -D -p -m 0644 client.toml.example %{buildroot}%{_sysconfdir}/siguldry/client.toml
install -D -p -m 0644 %{SOURCE2} %{buildroot}%{_sysusersdir}/siguldry.conf
## Server-related files ##
diff --git a/rust2rpm.toml b/rust2rpm.toml
index 9b31faa..c59fffa 100644
--- a/rust2rpm.toml
+++ b/rust2rpm.toml
@@ -37,10 +37,10 @@ file = "siguldry-sysuser.conf"
[scripts.install]
post = [
- "install -d -p -m 0750 %{buildroot}%{_sysconfdir}/siguldry",
- "install -D -p -m 0640 server.toml.example %{buildroot}%{_sysconfdir}/siguldry/server.toml",
- "install -D -p -m 0640 bridge.toml.example %{buildroot}%{_sysconfdir}/siguldry/bridge.toml",
- "install -D -p -m 0640 client.toml.example %{buildroot}%{_sysconfdir}/siguldry/client.toml",
+ "install -d -p -m 0755 %{buildroot}%{_sysconfdir}/siguldry",
+ "install -D -p -m 0644 server.toml.example %{buildroot}%{_sysconfdir}/siguldry/server.toml",
+ "install -D -p -m 0644 bridge.toml.example %{buildroot}%{_sysconfdir}/siguldry/bridge.toml",
+ "install -D -p -m 0644 client.toml.example %{buildroot}%{_sysconfdir}/siguldry/client.toml",
"install -D -p -m 0644 %{SOURCE2} %{buildroot}%{_sysusersdir}/siguldry.conf",
"",
"## Server-related files ##",
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-06-01 18:42 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-06-01 18:42 [rpms/rust-siguldry] f44: Mark the config directory world-readable Jeremy Cline
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox