Fix to enforce secure ownership for Webmin init scripts https://github.com/webmin/webmin/issues/2809

2026-08-06 03:51:10 +02:00
parent 9b4c722f75
commit c4d7207942
1 changed files with 2 additions and 1 deletions
@@ -71,7 +71,7 @@ if ($product) {
 			}
 		&flush_file_lines($temp);
 		&copy_source_dest($temp, "/etc/init.d/$product");
-		chmod(0755, "/etc/init.d/$product");
+		&set_ownership_permissions(0, 0, 0755, "/etc/init.d/$product");
 		&unlink_file($temp);
 		if ($status == 2 || $want_boot) {
 			&enable_at_boot($product);
@@ -100,6 +100,7 @@ if ($product) {
 		}
 	elsif (-d "/etc/init.d") {
 		copy_source_dest("$root_directory/webmin-init", "/etc/init.d/$product");
+		&set_ownership_permissions(0, 0, 0755, "/etc/init.d/$product");
 		system("chkconfig --add $product >/dev/null 2>&1");
 		}
 	}