You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Michael Prokop 08f68c829b MT#22361 Remember file permissions through pre-commit hook + restore-permissions helper script ... Git doesn't track file permissions (except for the executable flag). For sensitive data (like the 'ssl' directory and file 'constants.yml' with passwords included) we've to prevent non-root users from accessing those files. hooks/pre-commit is inspired and based on the implementation as present in etckeeper (and luckily we're license compatible) and takes care of storing the file permissions inside file /etc/ngcp-config/.ngcpcfg_perms. The restore-permissions helper script takes care of restoring the permissions after cloning the ngcpcfg repository via ngcpcfg itself (being actions decrypt, pull (PRO-only) + initialise (PRO-only)). It can be executed manually as well via `usr/share/ngcp-ngcpcfg/helper/restore-permissions /etc/ngcp-config/` (or wherever the according ngcpcfg repository is placed at). Regarding the commit integration: git(1) itself doesn't track file permissions, so we can't detect changes to file permissions using git itself. Our new pre-commit hook records file permissions via the .ngcpcfg_perms file. Now by just invoking it during 'ngcpcfg commit' time we can ensure that even if there have been any file permission changes in the working directory the file .ngcpcfg_perms is then up2date and committed. JFTR: The solution via the git pre-commit hook ensures that no matter whether you're using 'ngcpcfg commit …' or 'git commit …' you always get the file permissions handled via .ngcpcfg_perms. Now if you want to change file permissions in a clean working directory and commit *without* using 'ngcpcfg commit' but directly via git itself then you've to use 'git commit --allow-empty ...' and thanks to the pre-commit hook the file .ngcpcfg_perms will still be up2date. Change-Id: I84d608585c626b52112ff649893e232e441c59d8		10 years ago
..
apply	MT#17219 Use $@ instead of $* when we need to preserve argument grouping	10 years ago
build	MT#17219 Use $@ instead of $* when we need to preserve argument grouping	10 years ago
check	MT#19571 Add ngcpcfg option to force validation	10 years ago
commit	MT#22361 Remember file permissions through pre-commit hook + restore-permissions helper script	10 years ago
decrypt	MT#22361 Remember file permissions through pre-commit hook + restore-permissions helper script	10 years ago
diff	MT#17219 Use $@ instead of $* when we need to preserve argument grouping	10 years ago
encrypt	MT#22567 Create /etc/ngcp-config-crypted.tgz* files with more restrict file permissions	10 years ago
etckeeper	MT#14229 clean shellcheck warnings	11 years ago
initialise	MT#22361 Remember file permissions through pre-commit hook + restore-permissions helper script	10 years ago
log	MT#17219 Use $@ instead of $* when we need to preserve argument grouping	10 years ago
services	MT#17163 services: restart ha.d after monit and before the rest	10 years ago
show	MT#15803 Add ngcpcfg log/show scripts to improve usability	10 years ago
status	MT#16393 Check for branch 'master' being active	10 years ago
values	MT#14229 clean shellcheck warnings	11 years ago