github-personal/firezone
1
0
Fork 0
mirror of https://github.com/outbackdingo/firezone.git synced 2026-01-27 10:18:54 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore(gui-client): fix IPC log permissions (#6355)

Browse Source 
Closes #6289

Since the IPC service deletes its own logs now, we don't need to allow
users in the group `firezone-client` to have write permissions on the
logs
This commit is contained in:
Reactor Scram
2024-08-21 01:28:45 -05:00
committed by GitHub
parent dd46a489b3
commit a3d6410535
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
rust/gui-client/src-tauri/deb_files/firezone-client-ipc.service
View File

@@ -7,8 +7,8 @@ CapabilityBoundingSet=CAP_CHOWN CAP_NET_ADMIN
DeviceAllow=/dev/net/tun
LockPersonality=true
LogsDirectory=dev.firezone.client
# Allow users in `firezone` group to delete log files
LogsDirectoryMode=775
# Allow anyone to read log files
LogsDirectoryMode=755
MemoryDenyWriteExecute=true
NoNewPrivileges=true
PrivateMounts=true