swissmakers_gmbh/fail2ban-ui
12
1
Fork 0
mirror of https://github.com/swissmakers/fail2ban-ui.git synced 2026-04-17 14:03:15 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity

Also set the FACL recursively on the DEV stack

Browse Source
This commit is contained in:
Michael Reber
2026-01-21 20:21:13 +01:00
parent e3e279f2ae
commit 6f88462670
1 changed files with 11 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
development/ssh_and_local/fail2ban-ssh-custom-cont-init.d/99-ssh-acl
View File

@@ -54,15 +54,24 @@ chmod 0440 /etc/sudoers.d/fail2ban-ui
mkdir -p /config/fail2ban/{action.d,filter.d,jail.d} mkdir -p /config/fail2ban/{action.d,filter.d,jail.d}
# Apply both access ACL and default ACL (so new files/dirs inherit) # Apply both access ACL and default ACL (so new files/dirs inherit)
# First apply recursively to existing files/directories, then set default ACLs
for d in /config/fail2ban /config/fail2ban/action.d /config/fail2ban/filter.d /config/fail2ban/jail.d; do for d in /config/fail2ban /config/fail2ban/action.d /config/fail2ban/filter.d /config/fail2ban/jail.d; do
setfacl -m u:testuser:rwX,m::rwX "$d" # Apply access ACL recursively to existing files/directories
setfacl -R -m u:testuser:rwX,m::rwX "$d"
# Set default ACL so new files/dirs inherit permissions
setfacl -d -m u:testuser:rwX,m::rwX "$d" setfacl -d -m u:testuser:rwX,m::rwX "$d"
# Also ensure the directory itself has the access ACL
setfacl -m u:testuser:rwX,m::rwX "$d"
done done
# /etc/fail2ban is a symlink to /config/fail2ban in this image; setfacl follows symlinks by default. # /etc/fail2ban is a symlink to /config/fail2ban in this image; setfacl follows symlinks by default.
if [ -e /etc/fail2ban ]; then if [ -e /etc/fail2ban ]; then
setfacl -m u:testuser:rwX,m::rwX /etc/fail2ban || true # Apply recursively to existing files/directories
setfacl -R -m u:testuser:rwX,m::rwX /etc/fail2ban || true
# Set default ACL
setfacl -d -m u:testuser:rwX,m::rwX /etc/fail2ban || true setfacl -d -m u:testuser:rwX,m::rwX /etc/fail2ban || true
# Ensure the symlink target has access ACL
setfacl -m u:testuser:rwX,m::rwX /etc/fail2ban || true
fi fi
echo "[custom-init] ssh + acl setup complete" echo "[custom-init] ssh + acl setup complete"