Ensure gnupg directory and files are owned by ossec

freedomofpress · Nov 23, 2020 · d232986 · d232986
1 parent 5a0f089
commit d232986
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/install_files/securedrop-ossec-server/DEBIAN/postinst b/install_files/securedrop-ossec-server/DEBIAN/postinst
@@ -29,7 +29,8 @@ case "$1" in
         chown root:${GROUP} ${OSSEC_HOME}/rules/local_rules.xml
         chmod 440 ${OSSEC_HOME}/rules/local_rules.xml
 
-	# Ensure correct gnupg directory permissions
+	# Ensure correct gnupg directory permissions and ownership
+	chown -R ossec:${GROUP} ${OSSEC_HOME}/.gnupg
 	find ${OSSEC_HOME}/.gnupg -type f -exec chmod 600 {} \;
 	find ${OSSEC_HOME}/.gnupg -type d -exec chmod 700 {} \;