coturn: restrict access to the configuration file

The file can contain secrets, in particular a shared secret used by
other services to generate credentials for the TURN server.
This commit is contained in:
Karel Balej 2025-06-05 19:35:15 +02:00 committed by Toyam Cox
parent 123f290f14
commit 4453e80486
2 changed files with 3 additions and 1 deletions

View file

@ -1,5 +1,7 @@
case "${ACTION}" in
post)
setcap CAP_NET_BIND_SERVICE=+ep usr/bin/turnserver
chmod 640 etc/turnserver.conf
chown :_coturn etc/turnserver.conf
;;
esac

View file

@ -1,7 +1,7 @@
# Template file for 'coturn'
pkgname=coturn
version=4.7.0
revision=1
revision=2
build_style=configure
configure_args="
--prefix=/usr