no other files allowed under /opt/nextcloud thanks to code signing

This commit is contained in:
mwiegand 2022-02-23 18:41:35 +01:00
parent 8092b5faff
commit 60bc44a946
3 changed files with 7 additions and 5 deletions

View file

@ -1,6 +1,6 @@
<?php <?php
require_once __DIR__ . '/lib/base.php'; require_once '/opt/nextcloud/lib/base.php';
if (\OCP\Util::needUpgrade()) { if (\OCP\Util::needUpgrade()) {
exit(99); exit(99);

View file

@ -114,7 +114,8 @@ actions['install_nextcloud'] = {
# UPGRADE # UPGRADE
files['/opt/nextcloud/upgrade_status.php'] = { files['/opt/nextcloud_upgrade_status.php'] = {
'source': 'upgrade_status.php',
'owner': 'www-data', 'owner': 'www-data',
'group': 'www-data', 'group': 'www-data',
'mode': '640', 'mode': '640',
@ -127,7 +128,7 @@ actions['upgrade_nextcloud'] = {
'command': repo.libs.nextcloud.occ('upgrade'), 'command': repo.libs.nextcloud.occ('upgrade'),
'unless': 'sudo -u www-data php /opt/nextcloud/upgrade_status.php; test $? -ne 99', 'unless': 'sudo -u www-data php /opt/nextcloud/upgrade_status.php; test $? -ne 99',
'needs': [ 'needs': [
'file:/opt/nextcloud/upgrade_status.php', 'file:/opt/nextcloud_upgrade_status.php',
'action:install_nextcloud', 'action:install_nextcloud',
], ],
} }
@ -145,7 +146,8 @@ actions['nextcloud_add_missing_inidces'] = {
# RESCAN # RESCAN
files['/opt/nextcloud/rescan'] = { files['/opt/nextcloud_rescan'] = {
'source': 'rescan',
'owner': 'www-data', 'owner': 'www-data',
'group': 'www-data', 'group': 'www-data',
'mode': '550', 'mode': '550',

View file

@ -73,7 +73,7 @@ defaults = {
'user': 'www-data', 'user': 'www-data',
}, },
'nextcloud-rescan': { 'nextcloud-rescan': {
'command': '/opt/nextcloud/rescan', 'command': '/opt/nextcloud_rescan',
'when': 'Sun 00:00:00', 'when': 'Sun 00:00:00',
'user': 'www-data', 'user': 'www-data',
}, },