Skip to content

Commit 90f0b50

Browse files
committed
Harden permissions on the /var/log/usbguard folder
1 parent 1477faa commit 90f0b50

2 files changed

Lines changed: 2 additions & 1 deletion

File tree

Makefile.am

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -119,6 +119,7 @@ install-daemon-conf: $(top_builddir)/usbguard-daemon.conf
119119
$(MKDIR_P) $(DESTDIR)/$(usbguard_confdir)
120120
$(MKDIR_P) $(DESTDIR)/$(usbguard_confdir)/IPCAccessControl.d
121121
$(MKDIR_P) $(DESTDIR)/${localstatedir}/log/usbguard
122+
chmod 0700 $(DESTDIR)/${localstatedir}/log/usbguard
122123
$(INSTALL) -m 600 $(top_builddir)/usbguard-daemon.conf \
123124
$(DESTDIR)/$(usbguard_confdir)/usbguard-daemon.conf
124125
if ! test -f "$(DESTDIR)/$(usbguard_confdir)/rules.conf"; then \

usbguard-tmpfiles.conf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
d /var/log/usbguard 0755 root root - -
1+
d /var/log/usbguard 0700 root root - -

0 commit comments

Comments
 (0)