This request is superseded by
request 1194743
(Show diff)
Overview
Request 1193773 superseded
Supplement to the "crowdsec" package. We're currently missing packaged Remediators ("Bouncers").
- Created by aeneas_jaissle
- In state superseded
-
Package maintainer:
aeneas_jaissle
- Superseded by 1194743
Loading...
Request History
aeneas_jaissle created request
Supplement to the "crowdsec" package. We're currently missing packaged Remediators ("Bouncers").
@Alexander_Naumov, @WernerFink, @ahodgkinson, @bitshuffler, @dbuss, @duwe, @gregfreemyer, @jjolly, @jsegitz, @lrupp, @mseben, @msmeissn, @ojkastl_buildservice, @psmt, @varkoly, @vpereirabr: review reminder
Looks good, thanks for the SR.
Shouldn't the file be executable? And why only allow root access to that file? There should be no "secrets" in it.
Why allow everyone read access (
755on the directory) and then restrict everyone but root to read this file?I take it the service needs to be run as root to have permissions for using iptables etc?
Good catch, that wasn't intended. The script is now 0755, but should normally only be used by root (-scripts). It does configuration manipulation like adding a local API key to the bouncer config. New SR on its' way.