set sane permissions on cache/lockfiles/feed-icons instead of hardcoding a+rwx

This commit is contained in:
Andrew Dolgov 2025-07-12 08:33:51 +03:00
parent dea41c6a3d
commit d9e2cd44ce
No known key found for this signature in database
GPG Key ID: 1A56B4FA25D4AF2A
2 changed files with 4 additions and 5 deletions

View File

@ -65,10 +65,9 @@ done
# - fatal error: could not open certificate file "/root/.postgresql/postgresql.crt": Permission denied
chown -R app:app /root # /.postgresql
# TODO chown -R app:app should be enough (?)
for d in cache lock feed-icons; do
chmod 777 $DST_DIR/$d
find $DST_DIR/$d -type f -exec chmod 666 {} \;
chown -R app:app $DST_DIR/$d
chmod -R u=rwX,g=rX,o=rX $DST_DIR/$d
done
sudo -u app cp ${SCRIPT_ROOT}/config.docker.php $DST_DIR/config.php

View File

@ -55,8 +55,8 @@ done
chown -R app:app /root # /.postgresql
for d in cache lock feed-icons; do
chmod 777 $DST_DIR/$d
find $DST_DIR/$d -type f -exec chmod 666 {} \;
chown -R app:app $DST_DIR/$d
chmod -R u=rwX,g=rX,o=rX $DST_DIR/$d
done
sudo -u app cp ${SCRIPT_ROOT}/config.docker.php $DST_DIR/config.php