prosody: restrict access to the configuration file

The file can contains secrets, such as the shared secret for a TURN
server or SQL database credentials.
This commit is contained in:
Karel Balej 2025-06-05 19:36:36 +02:00 committed by Toyam Cox
parent 4453e80486
commit 5e0a8c4d19
2 changed files with 7 additions and 1 deletions

6
srcpkgs/prosody/INSTALL Normal file
View file

@ -0,0 +1,6 @@
case "${ACTION}" in
post)
chmod 640 etc/prosody/prosody.cfg.lua
chown :prosody etc/prosody/prosody.cfg.lua
;;
esac

View file

@ -1,7 +1,7 @@
# Template file for 'prosody'
pkgname=prosody
version=13.0.1
revision=1
revision=2
build_style=configure
configure_args="
--ostype=linux