fix(update): make /usr/local/bin symlinks and package checks non-blocking under systemd sandbox (v1.3.5)
This commit is contained in:
1 parent
c638f14c06
commit
9c1e705b13
4 files changed
+22
-16
No files matched your search
+3
-2
@@ -192,14 +192,15 @@ www-data ALL=(ALL) NOPASSWD: /usr/sbin/asterisk, /usr/sbin/nginx, /usr/bin/syste
|
||||
EOF
|
||||
chmod 0440 /etc/sudoers.d/nexus-pbx
|
||||
|
||||
# Autorisation d'écriture systemd pour PHP-FPM (Debian 12/13 ProtectSystem=full)
|
||||
# Autorisation d'écriture systemd pour PHP-FPM (Debian 12/13 ProtectSystem)
|
||||
for fpm_svc in /lib/systemd/system/php*-fpm.service /usr/lib/systemd/system/php*-fpm.service; do
|
||||
if [ -f "$fpm_svc" ]; then
|
||||
svc_name=$(basename "$fpm_svc")
|
||||
mkdir -p "/etc/systemd/system/${svc_name}.d"
|
||||
cat << 'EOF_OVERRIDE' > "/etc/systemd/system/${svc_name}.d/override.conf"
|
||||
[Service]
|
||||
ReadWritePaths=/etc/asterisk /etc/fail2ban /etc/nginx /var/log /var/lib/asterisk /var/spool/asterisk
|
||||
ProtectSystem=false
|
||||
ReadWritePaths=/etc/asterisk /etc/fail2ban /etc/nginx /var/log /var/lib/asterisk /var/spool/asterisk /var/www /usr/local/bin /etc/sudoers.d
|
||||
EOF_OVERRIDE
|
||||
fi
|
||||
done
|
||||
|
||||
Reference in new issue
Block a user