summaryrefslogtreecommitdiffstats
path: root/abs/core/runit-scripts/runitscripts/services/certmaster/run
diff options
context:
space:
mode:
authorJames Meyer <james.meyer@operamail.com>2011-12-07 19:17:37 (GMT)
committerJames Meyer <james.meyer@operamail.com>2011-12-07 19:17:37 (GMT)
commit4e8d09d05069baf219f474509a52041c863cca5d (patch)
tree870b3589e6dab9722a24122f415e5b86508848b2 /abs/core/runit-scripts/runitscripts/services/certmaster/run
parent5a2e494e4fe3984528ba8a48c313d780c1924699 (diff)
downloadlinhes_pkgbuild-4e8d09d05069baf219f474509a52041c863cca5d.zip
linhes_pkgbuild-4e8d09d05069baf219f474509a52041c863cca5d.tar.gz
linhes_pkgbuild-4e8d09d05069baf219f474509a52041c863cca5d.tar.bz2
runit-scripts: additional scripts
-certmaster -func -powermate -rsyslog -xymon
Diffstat (limited to 'abs/core/runit-scripts/runitscripts/services/certmaster/run')
-rw-r--r--abs/core/runit-scripts/runitscripts/services/certmaster/run29
1 files changed, 29 insertions, 0 deletions
diff --git a/abs/core/runit-scripts/runitscripts/services/certmaster/run b/abs/core/runit-scripts/runitscripts/services/certmaster/run
new file mode 100644
index 0000000..0f5add7
--- /dev/null
+++ b/abs/core/runit-scripts/runitscripts/services/certmaster/run
@@ -0,0 +1,29 @@
+#!/bin/bash
+if [ ! -e /etc/pki/certmaster/ca/certmaster.key ]
+then
+ /usr/bin/certmaster daemon
+ while [ ! -e /etc/pki/certmaster/ca/certmaster.key ]
+ do
+ sleep 5
+ done
+ killall -9 certmaster
+fi
+ setfacl --remove-all /etc/pki/certmaster/ca/certmaster.key
+
+ for i in nobody http
+ do
+ setfacl -d -R -m u:$i:rX /etc/pki/certmaster/
+ setfacl -R -m u:$i:rX /etc/pki/certmaster/
+
+ setfacl -R -m mask:rwx /etc/pki/certmaster/
+ setfacl -R -m u:$i:rX /etc/pki/certmaster/ca/certmaster.key
+
+ setfacl -d -R -m u:$i:rX /var/lib/certmaster
+ setfacl -R -m u:$i:rX /var/lib/certmaster
+ setfacl -d -R -m u:$i:rX /var/lib/certmaster/certmaster
+ setfacl -R -m u:$i:rX /var/lib/certmaster/certmaster
+ setfacl -d -R -m u:$i:rX /var/lib/certmaster/certmaster/certs
+ setfacl -R -m u:$i:rX /var/lib/certmaster/certmaster/certs
+ done
+
+exec /usr/bin/certmaster