dnsmasq: tighten config file permissions
authorKevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
Thu, 11 Oct 2018 08:46:42 +0000 (09:46 +0100)
committerKevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
Tue, 30 Oct 2018 09:25:32 +0000 (09:25 +0000)
commit3dba85254719215747e150301081477a47b38645
tree9e6243bdf8bf514c6e6772aeb757195eb939220a
parent162e016fed96eeea410e305b7edaf7008cf6ab77
dnsmasq: tighten config file permissions

Install following as config files (600) perms instead of as data (644)

/usr/share/dnsmasq/dhcpbogushostname.conf
/usr/share/dnsmasq/trust-anchors.conf
/usr/share/dnsmasq/rfc6761.conf
/etc/hotplug.d/ntp/25-dnsmasqsec
/etc/config/dhcp
/etc/dnsmasq.conf

dnsmasq reads relevant config files before dropping root privilege and
running as dnsmasq:dnsmasq

ntpd runs as root so the hotplug script is still accessible

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
package/network/services/dnsmasq/Makefile