Changeset 705

Timestamp:

02/22/06 01:33:29 (7 years ago)

Author:

anarcat

Message:

[project @ alternc: changeset 2005-08-29 19:21:31 by anarcat]
regler les permissions des fichiers BIND sous (mode) 640 et (groupe)
:bind pour que le bind en sandbox (-u bind) puisse les lire

Original author: anarcat
Date: 2005-08-29 19:21:31

File:

• src/do_domaines.sh (modified) (10 diffs)

src/do_domaines.sh

@@ -1 +1 @@
 #!/bin/ksh
 #
-# $Id: do_domaines.sh,v 1.30 2005/06/09 12:15:52 arnaud-lb Exp $
+# $Id: do_domaines.sh,v 1.31 2005/08/29 19:21:31 anarcat Exp $
 # ----------------------------------------------------------------------
 # AlternC - Web Hosting System
@@ -131 +131 @@
 {
     echo $1 | awk '{z=split($NF, a, ".") ; print substr(a[z-1], 1, 1)}'
+}
+
+function fix_master_perms
+{
+    chown :bind $1
+    chmod 640 $1
 }
 
@@ -169 +175 @@
             $awk -v NEW_SERIAL=$NEW_SERIAL '{if ($3 =="serial") print "         "NEW_SERIAL "   ; serial"; else print $0}' < $1 > $TMPFILE && \
                 $mv -f $TMPFILE $1 && \
-                chmod 644 $1
+                fix_master_perms $1
             return 0
         else
@@ -206 +212 @@
                 echo "$DOMLINE" >> $NAMED_MASTER/$DOM
             fi
+            fix_master_perms $NAMED_MASTER/$DOM
 
         fi
@@ -290 +297 @@
         if [ -f "$NAMED_MASTER/$DOM" ] ; then
                 $sed -e "/^$esub[[:space:]]*IN[[:space:]]*A[[:space:]]/d" < "$NAMED_MASTER/$DOM" > "$NAMED_MASTER/$DOM.$$" && mv "$NAMED_MASTER/$DOM.$$" "$NAMED_MASTER/$DOM"
+                fix_master_perms "$NAMED_MASTER/$DOM"
         fi
 
@@ -316 +324 @@
                 $cp -f $NAMED_ETC/$NAMED_CONF $NAMED_ETC/$NAMED_CONF.prec
                 $sed s/"@@DOMAINE@@"/"${1}"/g >> $NAMED_ETC/$NAMED_CONF < $NAMED_ETC/$NAMED_TPL
+                fix_master_perms $NAMED_ETC/$NAMED_CONF
                 $cp -f $BIND2_ROOT/$SECONDARY_LIST $BIND2_ROOT/$SECONDARY_LIST.prec
                 $sed s/"@@DOMAINE@@"/"${1}"/g >> $BIND2_ROOT/$SECONDARY_LIST < $BIND2_ROOT/$NAMED_TPL
+                fix_master_perms $BIND2_ROOT/$SECONDARY_LIST
                 RESTART_NAMED="true"
         fi
@@ -338 +348 @@
                 $cp -f $BIND2_ROOT/$SECONDARY_LIST $BIND2_ROOT/$SECONDARY_LIST.prec
                 $mv -f $BIND2_ROOT/$SECONDARY_LIST.tmp $BIND2_ROOT/$SECONDARY_LIST
+                fix_master_perms $BIND2_ROOT/$SECONDARY_LIST
         fi
 }
@@ -361 +372 @@
         echo "$MXLINE" >> "$NAMED_MASTER/$DOM"
     fi
+   fix_master_perms "$NAMED_MASTER/$DOM"
 
     increment_serial "$NAMED_MASTER/${1}"
@@ -394 +406 @@
                         $sed s/"@@DOMAINE@@"/"${i}"/g >> $BIND2_ROOT/$SECONDARY_LIST < $BIND2_ROOT/$NAMED_TPL
                 done
+                fix_master_perms "$BIND2_ROOT/$SECONDARY_LIST"
         fi
         
@@ -511 +524 @@
                 $sed s/"        "/"@"/g > $FIC_TMP_SUB.tmp < $FIC_TMP_SUB
                 $mv -f $FIC_TMP_SUB.tmp $FIC_TMP_SUB
+                fix_master_perms "$FIC_TMP_SUB"
         
                 if [ `$wc -l $FIC_TMP_SUB | $awk {'print $1'}` -gt 0 ] ; then