From: Silvio Rhatto <rhatto@riseup.net>
Date: Mon, 25 Jan 2010 21:15:35 +0000 (-0200)
Subject: Ensuring post-update hook is setuid www-data
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=c547fbda55bd8b7fdd2acc190ee2f7cf758e6986;p=puppet-ikiwiki.git

Ensuring post-update hook is setuid www-data
---

diff --git a/manifests/init.pp b/manifests/init.pp
index 3be6bdb..65dc2cb 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -86,12 +86,11 @@ class ikiwiki {
         # See http://ikiwiki.info/rcs/git/
         #     http://ikiwiki.info/forum/multi-user_setup_of_ikiwiki__44___gitosis_and_apache2_in_Debian_Sid/
         #
-        # TODO: ensure the post-update hook is setuid.
-        #
         file { "/var/git/repositories/${name}.git/hooks/post-update":
           ensure => present,
           owner  => www-data,
           group  => gitosis,
+          mode   => 4550,
         }
       }
     }