Skip to content

Commit e1d943c

Browse files
Xeefirs
authored andcommitted
fix: goreleaser config: mark /etc/default/tigrisfs as 0600
Otherwise it defaults to 0644, which could let malicious programs running in unprivileged user contexts access Tigris with the same permissions as the machine running tigrisfs. Signed-off-by: Xe Iaso <[email protected]>
1 parent 47c95a1 commit e1d943c

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

.goreleaser.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -41,6 +41,9 @@ nfpms:
4141
dst: /lib/systemd/user/[email protected]
4242
- src: pkg/defaults
4343
dst: /etc/default/tigrisfs
44+
type: "config|noreplace"
45+
file_info:
46+
mode: 0600
4447
scripts:
4548
postinstall: pkg/postinst
4649

0 commit comments

Comments
 (0)