Project

General

Profile

« Previous | Next » 

Revision a9f06590

Added by Dominic Cleal over 11 years ago

refs #2109 - restrict secret token to root:foreman, move before service start

View differences:

rpms/epel-5/SPECS/foreman.spec
fi
%post
if [ ! -f %{_datadir}/%{name}/config/initializers/local_secret_token.rb ]; then
touch %{_datadir}/%{name}/config/initializers/local_secret_token.rb
chmod 0640 %{_datadir}/%{name}/config/initializers/local_secret_token.rb
chgrp foreman %{_datadir}/%{name}/config/initializers/local_secret_token.rb
rake -f %{_datadir}/%{name}/Rakefile security:generate_token >/dev/null 2>&1 || :
fi
/sbin/chkconfig --add %{name} || :
(/sbin/service foreman status && /sbin/service foreman restart) >/dev/null 2>&1
[ -f %{_datadir}/%{name}/config/initializers/local_secret_token.rb ] || \
rake -f %{_datadir}/%{name}/Rakefile security:generate_token >/dev/null 2>&1 || :
exit 0
%posttrans
rpms/epel-6/SPECS/foreman.spec
fi
%post
if [ ! -f %{_datadir}/%{name}/config/initializers/local_secret_token.rb ]; then
touch %{_datadir}/%{name}/config/initializers/local_secret_token.rb
chmod 0640 %{_datadir}/%{name}/config/initializers/local_secret_token.rb
chgrp foreman %{_datadir}/%{name}/config/initializers/local_secret_token.rb
rake -f %{_datadir}/%{name}/Rakefile security:generate_token >/dev/null 2>&1 || :
fi
/sbin/chkconfig --add %{name} || :
(/sbin/service foreman status && /sbin/service foreman restart) >/dev/null 2>&1
[ -f %{_datadir}/%{name}/config/initializers/local_secret_token.rb ] || \
rake -f %{_datadir}/%{name}/Rakefile security:generate_token >/dev/null 2>&1 || :
exit 0
%posttrans
rpms/fedora-16/SPECS/foreman.spec
fi
%post
if [ ! -f %{_datadir}/%{name}/config/initializers/local_secret_token.rb ]; then
touch %{_datadir}/%{name}/config/initializers/local_secret_token.rb
chmod 0640 %{_datadir}/%{name}/config/initializers/local_secret_token.rb
chgrp foreman %{_datadir}/%{name}/config/initializers/local_secret_token.rb
rake -f %{_datadir}/%{name}/Rakefile security:generate_token >/dev/null 2>&1 || :
fi
/sbin/chkconfig --add %{name} || :
(/sbin/service foreman status && /sbin/service foreman restart) >/dev/null 2>&1
[ -f %{_datadir}/%{name}/config/initializers/local_secret_token.rb ] || \
rake -f %{_datadir}/%{name}/Rakefile security:generate_token >/dev/null 2>&1 || :
exit 0
%posttrans
rpms/fedora-17/SPECS/foreman.spec
fi
%post
if [ ! -f %{_datadir}/%{name}/config/initializers/local_secret_token.rb ]; then
touch %{_datadir}/%{name}/config/initializers/local_secret_token.rb
chmod 0640 %{_datadir}/%{name}/config/initializers/local_secret_token.rb
chgrp foreman %{_datadir}/%{name}/config/initializers/local_secret_token.rb
rake -f %{_datadir}/%{name}/Rakefile security:generate_token >/dev/null 2>&1 || :
fi
/sbin/chkconfig --add %{name} || :
(/sbin/service foreman status && /sbin/service foreman restart) >/dev/null 2>&1
[ -f %{_datadir}/%{name}/config/initializers/local_secret_token.rb ] || \
rake -f %{_datadir}/%{name}/Rakefile security:generate_token >/dev/null 2>&1 || :
exit 0
%posttrans

Also available in: Unified diff