Merge pull request #1630 from RaspAP/sec/restapi-svc

Security: set restapi.service file ownership
RaspAP · Aug 3, 2024 · 3a5766d · 3a5766d
2 parents 98c2a7c + 4afd67f
commit 3a5766d
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/installers/common.sh b/installers/common.sh
@@ -544,7 +544,9 @@ function _install_restapi() {
 
     fi
     python3 -m pip install -r "$raspap_dir/api/requirements.txt" --break-system-packages || _install_status 1 " Unable to install pip modules"
-
+
+    echo "Setting permissions on restapi systemd unit control file"
+    sudo chown -c root:root $webroot_dir/installers/restapi.service || _install_status 1 "Unable change owner and/or group"
     echo "Moving restapi systemd unit control file to /lib/systemd/system/"
     sudo mv $webroot_dir/installers/restapi.service /lib/systemd/system/ || _install_status 1 "Unable to move restapi.service file"
     sudo systemctl daemon-reload