diff options
| author | Cecil <knoppmyth@gmail.com> | 2011-12-09 17:18:27 (GMT) |
|---|---|---|
| committer | Cecil <knoppmyth@gmail.com> | 2011-12-09 17:18:27 (GMT) |
| commit | c034db2c880091379f7e58c2938a9689d78fbaa9 (patch) | |
| tree | 8a074205a2f3bf6ee7fb5945c53e1a1618d41973 /abs/core/runit-scripts/runitscripts/services/certmaster | |
| parent | 73b42144585c603fc64e7b1d6a126ceb7c486870 (diff) | |
| parent | b0c5755ade92ee5b76a6d56248e64254876bc931 (diff) | |
| download | linhes_pkgbuild-c034db2c880091379f7e58c2938a9689d78fbaa9.zip linhes_pkgbuild-c034db2c880091379f7e58c2938a9689d78fbaa9.tar.gz linhes_pkgbuild-c034db2c880091379f7e58c2938a9689d78fbaa9.tar.bz2 | |
Merge branch 'testing' of ssh://cesman@linhes.org/mount/repository/linhes_pkgbuild into testing
Diffstat (limited to 'abs/core/runit-scripts/runitscripts/services/certmaster')
| -rw-r--r-- | abs/core/runit-scripts/runitscripts/services/certmaster/run | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/abs/core/runit-scripts/runitscripts/services/certmaster/run b/abs/core/runit-scripts/runitscripts/services/certmaster/run new file mode 100644 index 0000000..0f5add7 --- /dev/null +++ b/abs/core/runit-scripts/runitscripts/services/certmaster/run @@ -0,0 +1,29 @@ +#!/bin/bash +if [ ! -e /etc/pki/certmaster/ca/certmaster.key ] +then + /usr/bin/certmaster daemon + while [ ! -e /etc/pki/certmaster/ca/certmaster.key ] + do + sleep 5 + done + killall -9 certmaster +fi + setfacl --remove-all /etc/pki/certmaster/ca/certmaster.key + + for i in nobody http + do + setfacl -d -R -m u:$i:rX /etc/pki/certmaster/ + setfacl -R -m u:$i:rX /etc/pki/certmaster/ + + setfacl -R -m mask:rwx /etc/pki/certmaster/ + setfacl -R -m u:$i:rX /etc/pki/certmaster/ca/certmaster.key + + setfacl -d -R -m u:$i:rX /var/lib/certmaster + setfacl -R -m u:$i:rX /var/lib/certmaster + setfacl -d -R -m u:$i:rX /var/lib/certmaster/certmaster + setfacl -R -m u:$i:rX /var/lib/certmaster/certmaster + setfacl -d -R -m u:$i:rX /var/lib/certmaster/certmaster/certs + setfacl -R -m u:$i:rX /var/lib/certmaster/certmaster/certs + done + +exec /usr/bin/certmaster |