This is an automated email from the git hooks/post-receive script. apo pushed a commit to annotated tag debian/8.0.36-2 in repository tomcat8.
commit 227c9e4010fc9adc642b389c1ced520b9806cef1 Author: Markus Koschany <[email protected]> Date: Fri Jul 29 11:04:29 2016 +0200 Do not unconditionally overwrite files in /etc/tomcat8 anymore. Closes: #825786 --- debian/tomcat8.postinst | 23 +++++++++++++++++++---- 1 file changed, 19 insertions(+), 4 deletions(-) diff --git a/debian/tomcat8.postinst b/debian/tomcat8.postinst index 306a0b1..516131e 100644 --- a/debian/tomcat8.postinst +++ b/debian/tomcat8.postinst @@ -48,10 +48,25 @@ case "$1" in # configuration files should not be modifiable by tomcat8 user, as this can be a security issue # (an attacker may insert code in a webapp and have access to all tomcat configuration) # but those files should be readable by tomcat8, so we set the group to tomcat8 - chown -Rh root:$TOMCAT8_GROUP /etc/tomcat8/* - if [ -f /etc/tomcat8/tomcat-users.xml ] ; then - chmod 640 /etc/tomcat8/tomcat-users.xml - fi + for i in tomcat-users.xml web.xml server.xml logging.properties context.xml catalina.properties; + do + if [ -f "/etc/tomcat8/$i" ]; then + chown root:$TOMCAT8_GROUP /etc/tomcat8/$i + chmod 640 /etc/tomcat8/$i + fi + done + # configuration policy files should not be modifiable by the tomcat8 user. Only + # diverge from default permissions for known Debian files + chown root:$TOMCAT8_GROUP /etc/tomcat8/policy.d + for i in 01system.policy 02debian.policy 03catalina.policy 04webapps.policy 50local.policy; + do + if [ -f "/etc/tomcat8/policy.d/$i" ]; then + chown root:$TOMCAT8_GROUP /etc/tomcat8/policy.d/$i + chmod 640 /etc/tomcat8/policy.d/$i + fi + done + chown -Rh root:$TOMCAT8_GROUP /etc/tomcat8/Catalina + chown -Rh $TOMCAT8_USER:$TOMCAT8_GROUP /var/lib/tomcat8/webapps /var/lib/tomcat8/lib chmod 775 /var/lib/tomcat8/webapps chmod 775 /etc/tomcat8/Catalina /etc/tomcat8/Catalina/localhost -- Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-java/tomcat8.git _______________________________________________ pkg-java-commits mailing list [email protected] http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-commits
