/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to debian/mandos-client.postrm

  • Committer: Teddy Hogeborn
  • Date: 2016-03-19 03:19:04 UTC
  • mto: (237.7.594 trunk)
  • mto: This revision was merged to the branch mainline in revision 341.
  • Revision ID: teddy@recompile.se-20160319031904-v76knawxxbef79xv
Client: Fix permissions on plugin helper directory.

The Makefile target "install-client-nokey" creates the plugin-helper
directory /usr/lib/<ARCH>/mandos/plugin-helpers as mode u=rwx,go=
(0700).  Make this also the case for the Debian package.  Also change
the Makefile so it does not install the plugin helper
"mandos-client-iprouteadddel" as setuid root; this is unnecessary and
was, due to dh_fixperms, never propagated to the Debian package
anyway.

* Makefile (install-client-nokey): Do not set setuid bit on
  "plugin-helpers/mandos-client-iprouteadddel".
* debian/mandos-client.postinst (configure): If older version, fix
  permissions on plugin helper directory.
* debian/rules (override_dh_fixperms-arch): Exclude plugin helper
  directory from dh_fixperms.

Show diffs side-by-side

added added

removed removed

Lines of Context:
debian/mandos-client.postrm
1
 
#!/bin/sh -e
 
1
#!/bin/sh
2
2
# This script can be called in the following ways:
3
3
#
4
4
# After the package was removed:
26
26
# If preinst fails during upgrade:
27
27
#       <new-postrm> abort-upgrade <old-version>
28
28
 
 
29
set -e
29
30
 
30
 
# Update the initramfs
 
31
# Update the initial RAM file system image
31
32
update_initramfs()
32
33
{
33
 
        if type update-initramfs >/dev/null 2>&1 ; then
34
 
                update-initramfs -u -k all
35
 
        fi
 
34
    update-initramfs -u -k all || :
36
35
}
37
36
 
38
 
 
39
37
case "$1" in
40
38
    remove)
41
39
        update_initramfs
42
40
        ;;
43
41
 
44
42
    purge)
45
 
        shred --remove /etc/keys/mandos/seckey.txt || :
 
43
        shred --remove /etc/keys/mandos/seckey.txt 2>/dev/null || :
46
44
        rm --force /etc/mandos/plugin-runner.conf \
47
45
            /etc/keys/mandos/pubkey.txt \
48
 
            /etc/keys/mandos/seckey.txt
49
 
        rmdir /etc/keys/mandos /etc/mandos/plugins.d /etc/mandos || :
 
46
            /etc/keys/mandos/seckey.txt \
 
47
            /etc/keys/mandos/dhparams.pem 2>/dev/null
 
48
        update_initramfs
50
49
        ;;
51
50
    upgrade|failed-upgrade|disappear|abort-install|abort-upgrade)
52
51
        ;;
53
52
 
54
53
    *)
55
 
        echo "$0 called with unknown argument \`$1'" 1>&2
 
54
        echo "$0 called with unknown argument '$1'" 1>&2
56
55
        exit 1
57
56
        ;;
58
57
esac