[incubator-trafficcontrol] 01/02: in rpm build, set permissions of conf files to not be world-readable

[ro...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

rob pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/incubator-trafficcontrol.git

commit e3729e7a638bab29acdfbfca0572cf9f0006845d
Author: Dan Kirkwood <da...@apache.org>
AuthorDate: Fri Mar 2 11:55:55 2018 -0700

    in rpm build, set permissions of conf files to not be world-readable
---
 traffic_ops/build/traffic_ops.spec | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/traffic_ops/build/traffic_ops.spec b/traffic_ops/build/traffic_ops.spec
index 4631b9d..0b8e4d5 100644
--- a/traffic_ops/build/traffic_ops.spec
+++ b/traffic_ops/build/traffic_ops.spec
@@ -222,10 +222,11 @@ fi
 
 %files
 %defattr(644,root,root,755)
-%attr(755,root,root) %{PACKAGEDIR}/app/bin/*
-%attr(755,root,root) %{PACKAGEDIR}/app/script/*
-%attr(755,root,root) %{PACKAGEDIR}/app/db/*.pl
-%config(noreplace)/opt/traffic_ops/app/conf/*
+%attr(755,%{TRAFFIC_OPS_USER},%{TRAFFIC_OPS_GROUP}) %{PACKAGEDIR}/app/bin/*
+%attr(755,%{TRAFFIC_OPS_USER},%{TRAFFIC_OPS_GROUP}) %{PACKAGEDIR}/app/script/*
+%attr(755,%{TRAFFIC_OPS_USER},%{TRAFFIC_OPS_GROUP}) %{PACKAGEDIR}/app/db/*.pl
+%config(noreplace) %attr(750,%{TRAFFIC_OPS_USER},%{TRAFFIC_OPS_GROUP}) /opt/traffic_ops/app/conf
+%config(noreplace) %attr(750,%{TRAFFIC_OPS_USER},%{TRAFFIC_OPS_GROUP}) /opt/traffic_ops/app/db/dbconf.yml
 %config(noreplace)/var/www/files/osversions.cfg
 %{PACKAGEDIR}/app/cpanfile
 %{PACKAGEDIR}/app/db

-- 
To stop receiving notification emails like this one, please contact
rob@apache.org.