diff options
| author | Minteck <nekostarfan@gmail.com> | 2021-08-09 15:39:56 +0200 |
|---|---|---|
| committer | Minteck <nekostarfan@gmail.com> | 2021-08-09 15:39:56 +0200 |
| commit | bdb80424adb6a3d0b37285f817118592f4e21b18 (patch) | |
| tree | f447005becd79b0d2c1e5dee557428f9a66772eb /README.md | |
| parent | 94c57fa247ba107fce8fc1d1fc355191229dbddc (diff) | |
| download | main-bdb80424adb6a3d0b37285f817118592f4e21b18.tar.gz main-bdb80424adb6a3d0b37285f817118592f4e21b18.tar.bz2 main-bdb80424adb6a3d0b37285f817118592f4e21b18.zip | |
Securing the security
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 12 |
1 files changed, 10 insertions, 2 deletions
@@ -10,13 +10,21 @@ $ sudo visudo And add the following lines: ```text -www-data ALL=(ALL:ALL) NOPASSWD: /usr/bin/apt-get -www-data ALL=(ALL:ALL) NOPASSWD: /usr/bin/do-release-upgrade +www-data ALL=(ALL:ALL) NOPASSWD: /usr/bin/mtsp-apt-get-1 +www-data ALL=(ALL:ALL) NOPASSWD: /usr/bin/mtsp-apt-get-2 +www-data ALL=(ALL:ALL) NOPASSWD: /usr/bin/mtsp-do-release-upgrade www-data ALL=(ALL:ALL) NOPASSWD: /usr/bin/lshw ``` (replacing `www-data` by the name of the user that runs your Web server) +You will need to : +* create a `/usr/bin/mtsp-apt-get-1` file that does `apt-get update` +* create a `/usr/bin/mtsp-apt-get-2` file that does `apt-get upgrade -s` +* create a `/usr/bin/mtsp-do-release-upgrade` file that does `do-release-upgrade -c` + +And make sure to have the `x` permission bit so we can run these files! + ### Groups Add your server user (usually `www-data`) to the following groups: * `syslog` (required to write /var/log) |