restrict access to openwebrx users file

2021-02-18 20:57:41 +01:00 · 2021-02-18 20:57:41 +01:00 · 0d77aaff26
parent b06a629ffb
commit 0d77aaff26
1 changed files with 2 additions and 1 deletions
--- a/debian/openwebrx.postinst
+++ b/debian/openwebrx.postinst
@ -19,7 +19,8 @@ case "$1" in
    if [ ! -e "${OWRX_USERS_FILE}" ]; then
      # create an empty users file now to avoid permission problems later
      echo "[]" > "${OWRX_USERS_FILE}"
-      chown "${OWRX_USER}". ${OWRX_USERS_FILE}
+      chown "${OWRX_USER}". "${OWRX_USERS_FILE}"
+      chmod 0600 "${OWRX_USERS_FILE}"
    fi

    db_get openwebrx/admin_user_password