From 6d6bb2169c90a859ca28cfc28f5163642097d3a6 Mon Sep 17 00:00:00 2001 From: Jeremy Cline Date: Thu, 24 Jan 2019 15:52:01 +0100 Subject: [PATCH] synapse user should own its configuration directory (rhbz 1662672) --- matrix-synapse.spec | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/matrix-synapse.spec b/matrix-synapse.spec index cf8e0bb..b1ee5fc 100644 --- a/matrix-synapse.spec +++ b/matrix-synapse.spec @@ -4,7 +4,7 @@ Name: matrix-%{srcname} Version: 0.34.0.1 -Release: 1%{?dist} +Release: 2%{?dist} Summary: A Matrix reference homeserver written in Python using Twisted License: ASL 2.0 URL: https://github.com/matrix-org/%{srcname} @@ -108,17 +108,20 @@ exit 0 %files %license LICENSE %doc *.rst -%dir %{_sysconfdir}/synapse -%config(noreplace) %{_sysconfdir}/synapse/* %config(noreplace) %{_sysconfdir}/sysconfig/synapse %{python3_sitelib}/synapse/ %{python3_sitelib}/matrix_synapse*.egg-info/ %{_bindir}/* %{_unitdir}/synapse.service %attr(755,synapse,synapse) %dir %{_sharedstatedir}/synapse +%attr(755,synapse,synapse) %dir %{_sysconfdir}/synapse +%attr(644,synapse,synapse) %config(noreplace) %{_sysconfdir}/synapse/* %changelog +* Thu Jan 24 2019 Jeremy Cline - 0.34.0.1-2 +- synapse user should own its configuration directory (rhbz 1662672) + * Fri Jan 11 2019 Jeremy Cline - 0.34.0.1-1 - Update to v0.34.0.1, fixes CVE-2019-5885