[PATCH] increase security of configuration file to 0600 (token and other sensitive information)

This thread contains a patchset. You're looking at the original emails, but you may wish to use the patch review UI. Review patch

[PATCH] increase security of configuration file to 0600 (token and other sensitive information)

tetsumaki <yd-alpine@tetsumaki.net>

Details

Message ID: <20221116181123.6801-1-yd-alpine@tetsumaki.net>
DKIM signature: missing

Download raw message

1 year, 10 months ago

Patch: +4 -3

From: tetsumaki <yd-alpinelinux@tetsumaki.net>

https://github.com/crowdsecurity/cs-firewall-bouncer/blob/main/debian/rules#L27
https://github.com/crowdsecurity/cs-firewall-bouncer/blob/main/rpm/SPECS/crowdsec-firewall-bouncer.spec#L44
---
 testing/cs-firewall-bouncer/APKBUILD | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/testing/cs-firewall-bouncer/APKBUILD b/testing/cs-firewall-bouncer/APKBUILD
index 789cc41764..577a7bd233 100644
--- a/testing/cs-firewall-bouncer/APKBUILD
+++ b/testing/cs-firewall-bouncer/APKBUILD
@@ -1,8 +1,9 @@
+# Contributor: tetsumaki <yd-alpine@tetsumaki.net>
 # Contributor: Kevin Daudt <kdaudt@alpinelinux.org>
 # Maintainer: Kevin Daudt <kdaudt@alpinelinux.org>
 pkgname=cs-firewall-bouncer
 pkgver=0.0.24
-pkgrel=1
+pkgrel=2
 pkgdesc="Crowdsec bouncer for firewalls"
 url="https://github.com/crowdsecurity/cs-firewall-bouncer"
 arch="all"
@@ -31,8 +32,8 @@ package() {
 	install -Dm0755 crowdsec-firewall-bouncer -t "$pkgdir"/usr/bin/
 	install -dm0755 "$pkgdir"/etc/crowdsec/bouncers
 	BACKEND=iptables API_KEY="" envsubst \
-		<config/crowdsec-firewall-bouncer.yaml \
-		>"$pkgdir"/etc/crowdsec/bouncers/crowdsec-firewall-bouncer.yaml
+		< config/crowdsec-firewall-bouncer.yaml \
+		| install -Dm0600 /dev/stdin "$pkgdir"/etc/crowdsec/bouncers/crowdsec-firewall-bouncer.yaml
 
 	install -Dm0755 "$srcdir"/$pkgname.initd \
 		"$pkgdir"/etc/init.d/cs-firewall-bouncer
-- 
2.38.1

~alpine/aports

[PATCH] increase security of configuration file to 0600 (token and other sensitive information)