Ensure gnupg directory and files are owned by ossec

freedomofpress · Dec 22, 2020 · c639a03 · c639a03
1 parent 4a5f6d3
commit c639a03
Showing 1 changed file with 5 additions and 4 deletions.
diff --git a/install_files/securedrop-ossec-server/DEBIAN/postinst b/install_files/securedrop-ossec-server/DEBIAN/postinst
@@ -28,10 +28,11 @@ case "$1" in
 
         chown root:${GROUP} ${OSSEC_HOME}/rules/local_rules.xml
         chmod 440 ${OSSEC_HOME}/rules/local_rules.xml
-
-	# Ensure correct gnupg directory permissions
-	find ${OSSEC_HOME}/.gnupg -type f -exec chmod 600 {} \;
-	find ${OSSEC_HOME}/.gnupg -type d -exec chmod 700 {} \;
+
+        # Ensure correct gnupg directory permissions and ownership
+        chown -R ossec:${GROUP} ${OSSEC_HOME}/.gnupg
+        find ${OSSEC_HOME}/.gnupg -type f -exec chmod 600 {} \;
+        find ${OSSEC_HOME}/.gnupg -type d -exec chmod 700 {} \;
 
         # Replace localhost with 127.0.0.1 for smtp_server due to
         #  https://github.com/ossec/ossec-hids/issues/1145