Explorar el Código

Permissions on root gpg keyring

Bob Mottram hace 7 años
padre
commit
2a5038d209

+ 2
- 0
src/freedombone-base-email Ver fichero

@@ -1629,6 +1629,8 @@ function configure_gpg {
1629 1629
 
1630 1630
     if [ ! -d /root/.gnupg ]; then
1631 1631
         cp -r /home/$MY_USERNAME/.gnupg /root/
1632
+        chmod 700 /root/.gnupg
1633
+        chmod 600 /root/.gnupg/*
1632 1634
     fi
1633 1635
     gpg_agent_setup root
1634 1636
     gpg_agent_setup $MY_USERNAME

+ 4
- 0
src/freedombone-restore-local Ver fichero

@@ -108,6 +108,8 @@ function check_admin_user {
108 108
 function copy_gpg_keys {
109 109
     echo $"Copying GPG keys from admin user to root"
110 110
     cp -r /home/$ADMIN_USERNAME/.gnupg /root
111
+    chmod 700 /root/.gnupg
112
+    chmod 600 /root/.gnupg/*
111 113
 }
112 114
 
113 115
 function restore_configfiles {
@@ -340,6 +342,8 @@ function restore_gpg {
340 342
                         backup_unmount_drive
341 343
                         exit 283
342 344
                     fi
345
+                    chmod 700 /root/.gnupg
346
+                    chmod 600 /root/.gnupg/*
343 347
                 fi
344 348
             fi
345 349
         done

+ 4
- 0
src/freedombone-restore-remote Ver fichero

@@ -99,6 +99,8 @@ DATABASE_PASSWORD=$(${PROJECT_NAME}-pass -u root -a mariadb)
99 99
 function copy_gpg_keys {
100 100
     echo $"Copying GPG keys from admin user to root"
101 101
     cp -r /home/$ADMIN_USERNAME/.gnupg /root
102
+    chmod 700 /root/.gnupg
103
+    chmod 600 /root/.gnupg/*
102 104
 }
103 105
 
104 106
 function restore_configfiles {
@@ -306,6 +308,8 @@ function restore_gpg {
306 308
                     if [ ! "$?" = "0" ]; then
307 309
                         exit 283
308 310
                     fi
311
+                    chmod 700 /root/.gnupg
312
+                    chmod 600 /root/.gnupg/*
309 313
                 fi
310 314
             fi
311 315
         fi

+ 2
- 0
src/freedombone-utils-keys Ver fichero

@@ -240,6 +240,8 @@ function interactive_key_recovery {
240 240
     ${PROJECT_NAME}-recoverkey -u $MY_USERNAME
241 241
     if [ -d /home/$MY_USERNAME/.gnupg ]; then
242 242
         cp -rf /home/$MY_USERNAME/.gnupg /root
243
+        chmod 700 /root/.gnupg
244
+        chmod 600 /root/.gnupg/*
243 245
     fi
244 246
 }
245 247