Skip to content

Commit 6cf34c1

Browse files
committed
Set correct permissions PHPmyadmin
1 parent 2e7773c commit 6cf34c1

File tree

3 files changed

+21
-12
lines changed

3 files changed

+21
-12
lines changed

func/upgrade.sh

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -625,6 +625,8 @@ upgrade_phpmyadmin() {
625625
chmod 0640 /var/lib/phpmyadmin/blowfish_secret.inc.php
626626
fi
627627
chown hestiamail:hestiamail /usr/share/phpmyadmin/tmp
628+
chown -R root:hestiamail /etc/phpmyadmin/
629+
628630
chmod 0770 /usr/share/phpmyadmin/tmp
629631
else
630632
# Display upgrade information
@@ -659,6 +661,9 @@ upgrade_phpmyadmin() {
659661
chmod 0640 /var/lib/phpmyadmin/blowfish_secret.inc.php
660662
fi
661663

664+
# Make sure to give it the correct permissions
665+
chown -R root:hestiamail /etc/phpmyadmin/
666+
662667
# Clean up source files
663668
rm -fr phpMyAdmin-$pma_v-all-languages
664669
rm -f phpMyAdmin-$pma_v-all-languages.tar.gz

install/hst-install-debian.sh

Lines changed: 8 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1853,16 +1853,14 @@ if [ "$mysql" = 'yes' ] || [ "$mysql8" = 'yes' ]; then
18531853

18541854
# Create copy of config file
18551855
cp -f $HESTIA_INSTALL_DIR/phpmyadmin/config.inc.php /etc/phpmyadmin/
1856-
mkdir -p /var/lib/phpmyadmin/tmp
1857-
chmod 770 /var/lib/phpmyadmin/tmp
1858-
chown -R root:www-data /usr/share/phpmyadmin/tmp/
18591856

18601857
# Set config and log directory
18611858
sed -i "s|'configFile' => ROOT_PATH . 'config.inc.php',|'configFile' => '/etc/phpmyadmin/config.inc.php',|g" /usr/share/phpmyadmin/libraries/vendor_config.php
18621859

18631860
# Create temporary folder and change permission
1864-
chmod 770 /usr/share/phpmyadmin/tmp
1865-
chown -R root:www-data /usr/share/phpmyadmin/tmp/
1861+
mkdir -p /var/lib/phpmyadmin/tmp
1862+
chmod 770 /var/lib/phpmyadmin/tmp
1863+
chown -R hestiamail:www-data /usr/share/phpmyadmin/tmp/
18661864

18671865
# Generate blow fish
18681866
blowfish=$(head /dev/urandom | tr -dc A-Za-z0-9 | head -c 32)
@@ -1881,7 +1879,7 @@ if [ "$mysql" = 'yes' ] || [ "$mysql8" = 'yes' ]; then
18811879
source $HESTIA_INSTALL_DIR/phpmyadmin/pma.sh > /dev/null 2>&1
18821880

18831881
# Limit access to /etc/phpmyadmin/
1884-
chown -R root:www-data /etc/phpmyadmin/
1882+
chown -R root:hestiamail /etc/phpmyadmin/
18851883
chmod 640 /etc/phpmyadmin/config.inc.php
18861884
chmod 750 /etc/phpmyadmin/conf.d/
18871885
fi
@@ -1915,6 +1913,10 @@ if [ "$postgresql" = 'yes' ]; then
19151913
rm phppgadmin-v$pga_v.tar.gz
19161914
write_config_value "DB_PGA_ALIAS" "phppgadmin"
19171915
$HESTIA/bin/v-change-sys-db-alias 'pga' "phppgadmin"
1916+
1917+
# Limit access to /etc/phppgadmin/
1918+
chown -R root:hestiamail /etc/phppgadmin/
1919+
chmod 640 /etc/phppgadmin/config.inc.php
19181920
fi
19191921

19201922
#----------------------------------------------------------#

install/hst-install-ubuntu.sh

Lines changed: 8 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1887,16 +1887,14 @@ if [ "$mysql" = 'yes' ] || [ "$mysql8" = 'yes' ]; then
18871887

18881888
# Create copy of config file
18891889
cp -f $HESTIA_INSTALL_DIR/phpmyadmin/config.inc.php /etc/phpmyadmin/
1890-
mkdir -p /var/lib/phpmyadmin/tmp
1891-
chmod 770 /var/lib/phpmyadmin/tmp
1892-
chown -R root:www-data /usr/share/phpmyadmin/tmp/
18931890

18941891
# Set config and log directory
18951892
sed -i "s|'configFile' => ROOT_PATH . 'config.inc.php',|'configFile' => '/etc/phpmyadmin/config.inc.php',|g" /usr/share/phpmyadmin/libraries/vendor_config.php
18961893

18971894
# Create temporary folder and change permission
1898-
chmod 770 /usr/share/phpmyadmin/tmp
1899-
chown -R root:www-data /usr/share/phpmyadmin/tmp/
1895+
mkdir -p /var/lib/phpmyadmin/tmp
1896+
chmod 770 /var/lib/phpmyadmin/tmp
1897+
chown -R hestiamail:www-data /usr/share/phpmyadmin/tmp/
19001898

19011899
# Generate blow fish
19021900
blowfish=$(head /dev/urandom | tr -dc A-Za-z0-9 | head -c 32)
@@ -1915,7 +1913,7 @@ if [ "$mysql" = 'yes' ] || [ "$mysql8" = 'yes' ]; then
19151913
source $HESTIA_INSTALL_DIR/phpmyadmin/pma.sh > /dev/null 2>&1
19161914

19171915
# Limit access to /etc/phpmyadmin/
1918-
chown -R root:www-data /etc/phpmyadmin/
1916+
chown -R root:hestiamail /etc/phpmyadmin/
19191917
chmod 640 /etc/phpmyadmin/config.inc.php
19201918
chmod 750 /etc/phpmyadmin/conf.d/
19211919
fi
@@ -1949,6 +1947,10 @@ if [ "$postgresql" = 'yes' ]; then
19491947
rm phppgadmin-v$pga_v.tar.gz
19501948
write_config_value "DB_PGA_ALIAS" "phppgadmin"
19511949
$HESTIA/bin/v-change-sys-db-alias 'pga' "phppgadmin"
1950+
1951+
# Limit access to /etc/phppgadmin/
1952+
chown -R root:hestiamail /etc/phppgadmin/
1953+
chmod 640 /etc/phppgadmin/config.inc.php
19521954
fi
19531955

19541956
#----------------------------------------------------------#

0 commit comments

Comments
 (0)