Commit 636fde21 authored by Alan's avatar Alan
Browse files

live-persist: ASP config file should be world-readable

Refs: #14594
parent 0f3866d6
......@@ -374,8 +374,7 @@ activate_volumes ()
# Regardless of the mountpoint access rights, disable persistence
# configuration files with wrong access rights.
for f in $(ls /live/persistence/*_unlocked/persistence.conf \
/live/persistence/*_unlocked/live-additional-software.conf || true)
for f in $(ls /live/persistence/*_unlocked/persistence.conf || true)
do
if ! persistence_conf_file_has_correct_access_rights "$f" "600"
then
......@@ -383,6 +382,14 @@ activate_volumes ()
disable_and_create_empty_persistence_conf_file "$f"
fi
done
for f in $(ls /live/persistence/*_unlocked/live-additional-software.conf || true)
do
if ! persistence_conf_file_has_correct_access_rights "$f" "644"
then
warning "Disabling '$f', that has unsafe access rights"
disable_and_create_empty_persistence_conf_file "$f"
fi
done
# Migrate persistence settings
for conf in $(ls /live/persistence/*_unlocked/persistence.conf || true)
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment