- run as root:dehydrated by default to allow special group read

[packages/dehydrated.git] / tld.patch

diff --git a/tld.patch b/tld.patch
index 57beb42e535bef30e248dfb31f89913f5f49deba..d70c46676fa6eff30181247616f278ca541ca9df 100644 (file)
--- a/tld.patch
+++ b/tld.patch
@@ -1,12 +1,21 @@
 diff -ur dehydrated-0.6.2.orig/dehydrated dehydrated-0.6.2/dehydrated
 --- dehydrated-0.6.2.orig/dehydrated   2018-04-25 21:22:40.000000000 +0000
-+++ dehydrated-0.6.2/dehydrated        2018-05-27 19:22:45.065763589 +0000
++++ dehydrated-0.6.2/dehydrated        2018-12-19 22:00:23.842403000 +0000
 @@ -1,4 +1,4 @@
 -#!/usr/bin/env bash
 +#!/bin/bash
  
  # dehydrated by lukas2511
  # Source: https://dehydrated.io
+@@ -11,7 +11,7 @@
+ [[ -n "${ZSH_VERSION:-}" ]] && set -o SH_WORD_SPLIT && set +o FUNCTION_ARGZERO && set -o NULL_GLOB && set -o noglob
+ [[ -z "${ZSH_VERSION:-}" ]] && shopt -s nullglob && set -f
+ 
+-umask 077 # paranoid umask, we're creating private keys
++umask 027 # allow root and dehydrated group only to protect private keys
+ 
+ # Close weird external file descriptors
+ exec 3>&-
 @@ -28,7 +28,7 @@
  done
  SCRIPTDIR="$( cd -P "$( dirname "$SOURCE" )" && pwd )"
@@ -25,6 +34,17 @@ diff -ur dehydrated-0.6.2.orig/dehydrated dehydrated-0.6.2/dehydrated
    KEYSIZE="4096"
    WELLKNOWN=
    PRIVATE_KEY_RENEW="yes"
+@@ -148,8 +148,8 @@
+   IP_VERSION=
+   CHAINCACHE=
+   AUTO_CLEANUP="no"
+-  DEHYDRATED_USER=
+-  DEHYDRATED_GROUP=
++  DEHYDRATED_USER="root"
++  DEHYDRATED_GROUP="dehydrated"
+   API="auto"
+ 
+   if [[ -z "${CONFIG:-}" ]]; then
 @@ -255,8 +255,8 @@
  
    [[ -z "${CERTDIR}" ]] && CERTDIR="${BASEDIR}/certs"
@@ -38,7 +58,7 @@ diff -ur dehydrated-0.6.2.orig/dehydrated dehydrated-0.6.2/dehydrated
    [[ -n "${PARAM_LOCKFILE_SUFFIX:-}" ]] && LOCKFILE="${LOCKFILE}-${PARAM_LOCKFILE_SUFFIX}"
 diff -ur dehydrated-0.6.2.orig/docs/examples/config dehydrated-0.6.2/docs/examples/config
 --- dehydrated-0.6.2.orig/docs/examples/config 2018-04-25 21:22:40.000000000 +0000
-+++ dehydrated-0.6.2/docs/examples/config      2018-05-27 19:12:46.943770323 +0000
++++ dehydrated-0.6.2/docs/examples/config      2018-12-19 21:54:12.003403000 +0000
 @@ -40,11 +40,11 @@
  # default: <unset>
  #CONFIG_D=