Ensuring post-update hook is setuid www-data

diff --git a/manifests/init.pp b/manifests/init.pp
index 3be6bdbdfffb19548e62761b2888dfdde2d05261..65dc2cb0b7f207427d2d96c5c69987bccd6af062 100644 (file)
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -86,12 +86,11 @@ class ikiwiki {
         # See http://ikiwiki.info/rcs/git/
         #     http://ikiwiki.info/forum/multi-user_setup_of_ikiwiki__44___gitosis_and_apache2_in_Debian_Sid/
         #
-        # TODO: ensure the post-update hook is setuid.
-        #
         file { "/var/git/repositories/${name}.git/hooks/post-update":
           ensure => present,
           owner  => www-data,
           group  => gitosis,
+          mode   => 4550,
         }
       }
     }