From d4e5f9291ba847888909c7952231374253361209 Mon Sep 17 00:00:00 2001 From: Jens Maus Date: Mon, 25 Sep 2023 17:52:14 +0200 Subject: [PATCH] make sure ReGaHss will run on umask 0027 per default so that the regadom file will be generated with a bit more strict security settings. --- buildroot-external/overlay/WebUI/etc/init.d/S70ReGaHss | 3 +++ 1 file changed, 3 insertions(+) diff --git a/buildroot-external/overlay/WebUI/etc/init.d/S70ReGaHss b/buildroot-external/overlay/WebUI/etc/init.d/S70ReGaHss index 22910f150d..6839cef32f 100755 --- a/buildroot-external/overlay/WebUI/etc/init.d/S70ReGaHss +++ b/buildroot-external/overlay/WebUI/etc/init.d/S70ReGaHss @@ -96,6 +96,9 @@ start() { echo -n "Starting ReGaHss: " init + # make sure ReGaHss will run on umask 0027 per default + umask 0027 + # adjust the oom score (which is inherited by start-stop-daemon) # to ensure that others are killed first in case of low memory situations echo -900 >/proc/$$/oom_score_adj 2>/dev/null