Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update config #19

Open
wants to merge 4 commits into
base: master
Choose a base branch
from
Open

Update config #19

wants to merge 4 commits into from

Commits on Jun 10, 2021

  1. Update rhel PAM config 

    This is more in line with current PAM setup for a service like sshd.  It
will handle systemd, audit, etc.
    @xyzzy42
    xyzzy42 committed Jun 10, 2021
    Configuration menu
    Copy the full SHA
    9463f0b View commit details
    Browse the repository at this point in the history

  2. Configure systemd unit to start after network 

    This needs the network to be up to work and also to bind to specific
IPs.  Add ordering dependency on network.target.
    @xyzzy42
    xyzzy42 committed Jun 10, 2021
    Configuration menu
    Copy the full SHA
    adacd30 View commit details
    Browse the repository at this point in the history

  3. Move logs to their own directory /var/log/webdavd 

    This is more in line with current practice for services that create
their own logfiles.

Add a line to the systemd unit that will create the log directory before
starting.  systemd will also handle permissions on the directory and can
do various things with namespaces to prevent access to other files in
/var or elsewhere.

Update logrotate to match.

Remove owner/permission setting for logrotate.  It will copy the
existing logfiles' values, which allows it to work properly if webdavd
runs as another user or with a different umask.
    @xyzzy42
    xyzzy42 committed Jun 10, 2021
    Configuration menu
    Copy the full SHA
    2289ac9 View commit details
    Browse the repository at this point in the history

  4. Turn on systemd ProtectSystem 

    This will protect various files from being edited by webdavd.

Additional protections, e.g. ProtectHome, cause a problem with webdavd's
worker attempts to start a new session as the remote user.
    @xyzzy42
    xyzzy42 committed Jun 10, 2021
    Configuration menu
    Copy the full SHA
    361bbce View commit details
    Browse the repository at this point in the history