From 158862cc528ad0f9c848bcd19e5676d1271605ab Mon Sep 17 00:00:00 2001
From: Arjan H <github@hakwerk.com>
Date: Sat, 18 Feb 2023 11:22:30 +0100
Subject: [PATCH] Make sure that cron_d file is not group writable (#67)

---
 control.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/control.sh b/control.sh
index d6685b5..64f5573 100755
--- a/control.sh
+++ b/control.sh
@@ -76,6 +76,7 @@ start_cron() {
     apt update
     apt install -y cron
     [ -e /boulder/labca/setup_complete ] && [ ! -e /etc/cron.d/labca ] && ln -sf /labca/cron_d /etc/cron.d/labca || true
+    chmod g-w /labca/cron_d
     [ -e /logs/cron.log ] || touch /logs/cron.log
     tail -f -n0 /logs/cron.log &
     service cron start