Commits on May 21, 2019

1. Add restic_mode variable …

   It should be possible to allow all users to run the restic binary.
   For that the variable restic_mode should be set to 0755 to set the
   permissions of the file accordingly.

   

   jkirk committed May 21, 2019
   Configuration menu

   • View commit details
   • Copy full SHA for ec419b7
   • Browse repository at this point

   Copy the full SHA

   ec419b7 View commit details

   Browse the repository at this point in the history

2. Only set capability cap_dac_read_search+ep when "others" have no exec… …

   …ute permission
   
   In PR paulfantom#42 we talked about that it should be possible to to allow all
   users to run the restic binary. It was objected by @TheLastProject that
   the capability cap_dac_read_search is set and that would give ANY user
   read access to ANY file. To prevent that, the capability should only be
   set if "other" users have no execute permission on the restic binary.
   
   But on the the other hand, if a restic_group other than 'root' is set,
   we need the capability, so setting it in that case.

   

   jkirk committed May 21, 2019
   Configuration menu

   • View commit details
   • Copy full SHA for ab82f5c
   • Browse repository at this point

   Copy the full SHA

   ab82f5c View commit details

   Browse the repository at this point in the history