Use install to setup permissions directly
This commit is contained in:
parent
c8094c553d
commit
e3e7bad0ce
@ -158,17 +158,15 @@ if [ "$files" -eq 0 ] ; then
|
|||||||
echo "No rules detected, adding default"
|
echo "No rules detected, adding default"
|
||||||
%if 0%{?rhel}
|
%if 0%{?rhel}
|
||||||
if [ -e %{_datadir}/%{name}-rules/10-base-config.rules ] ; then
|
if [ -e %{_datadir}/%{name}-rules/10-base-config.rules ] ; then
|
||||||
cp %{_datadir}/%{name}-rules/10-base-config.rules /etc/audit/rules.d/audit.rules
|
install -m 0600 -u 0 -g 0 -p %{_datadir}/%{name}-rules/10-base-config.rules /etc/audit/rules.d/audit.rules
|
||||||
%else
|
%else
|
||||||
# FESCO asked for audit to be off by default. #1117953
|
# FESCO asked for audit to be off by default. #1117953
|
||||||
if [ -e %{_datadir}/%{name}-rules/10-no-audit.rules ] ; then
|
if [ -e %{_datadir}/%{name}-rules/10-no-audit.rules ] ; then
|
||||||
cp %{_datadir}/%{name}-rules/10-no-audit.rules /etc/audit/rules.d/audit.rules
|
install -m 0600 -u 0 -g 0 -p %{_datadir}/%{name}-rules/10-no-audit.rules /etc/audit/rules.d/audit.rules
|
||||||
%endif
|
%endif
|
||||||
else
|
else
|
||||||
touch /etc/audit/rules.d/audit.rules
|
install -m 0600 -u 0 -g 0 /dev/null /etc/audit/rules.d/audit.rules
|
||||||
fi
|
fi
|
||||||
# Fix up permissions
|
|
||||||
chmod 0600 /etc/audit/rules.d/audit.rules
|
|
||||||
# Make the new rules active
|
# Make the new rules active
|
||||||
augenrules --load || true
|
augenrules --load || true
|
||||||
fi
|
fi
|
||||||
|
Loading…
Reference in New Issue
Block a user