keeping ownership to the real user behind sudo
authorChris Koeritz <fred@gruntose.com>
Mon, 13 Nov 2017 03:23:38 +0000 (22:23 -0500)
committerChris Koeritz <fred@gruntose.com>
Mon, 13 Nov 2017 03:23:38 +0000 (22:23 -0500)
scripts/system/add_apache_site.sh
scripts/system/add_domain.sh

index 30ff1f50a7585056430b24733d12462aa12e6d27..57b5d519be85af004ec2f17bcae60036bc25a2c8 100644 (file)
@@ -66,6 +66,9 @@ function write_apache_config()
     Include /etc/apache2/conf-library/rewrite-enabling.conf
 </VirtualHost>
 " >"$site_config" 
+
+  chown "$(logname):$(logname)" "$site_config"
+  test_or_die "setting ownership on: $site_config"
 }
 
 # turns on the config file we create above for apache.
index e6b97fb6660fda2371481e1f05742872001f8ee1..80ebb2f37d0563e6d0d9b0d768d1e9b80a0797c3 100644 (file)
@@ -63,6 +63,10 @@ function write_new_domain_file()
 ${domain_name}.        IN A    ${IP_ADDRESS}
        IN HINFO        \"linux server\" \"${DISTRO}\"
 " >"$domain_file"
+
+  # our personalized configuration approach wants the real owner to own the file.
+  chown "$(logname):$(logname)" $domain_file
+  test_or_die "setting ownership on: $domain_file"
 }
 
 # hooks up a new config file into bind's list of zones.
@@ -86,6 +90,11 @@ zone \"${domain_name}\" in {
 ////////////////////////////////////////////////////////////////////////////
 
 " >> /etc/bind/named.conf.local
+
+  # keep ownership for the real user.
+  chown "$(logname):$(logname)" /etc/bind/named.conf.local
+  test_or_die "setting ownership on: /etc/bind/named.conf.local"
+
 }
 
 # adds a new subdomain under a containing domain.
@@ -123,6 +132,9 @@ ${subdomain}.${containing_domain}.    IN A    ${IP_ADDRESS}
         IN HINFO \"linux server\" \"${DISTRO}\"
 " >> /etc/bind/${containing_domain}.conf
 
+  # keep ownership for real user.
+  chown "$(logname):$(logname)" "/etc/bind/${containing_domain}.conf"
+  test_or_die "setting ownership on: /etc/bind/${containing_domain}.conf"
 }
 
 function restart_bind()