File tree Expand file tree Collapse file tree 3 files changed +10
-4
lines changed
Expand file tree Collapse file tree 3 files changed +10
-4
lines changed Original file line number Diff line number Diff line change @@ -38,7 +38,7 @@ if [ "$release" -eq 8 ]; then
3838 flex whois rssh git idn zip sudo bc ftp lsof ntpdate rrdtool quota
3939 e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
4040 bsdmainutils cron hestia hestia-nginx hestia-php expect libmail-dkim-perl
41- unrar-free vim-common"
41+ unrar-free vim-common acl "
4242else
4343 software=" nginx apache2 apache2-utils apache2-suexec-custom
4444 libapache2-mod-ruid2 libapache2-mod-fcgid libapache2-mod-php php
5050 flex whois rssh git idn zip sudo bc ftp lsof ntpdate rrdtool quota
5151 e2fslibs bsdutils e2fsprogs curl imagemagick fail2ban dnsutils
5252 bsdmainutils cron hestia hestia-nginx hestia-php expect libmail-dkim-perl
53- unrar-free vim-common"
53+ unrar-free vim-common acl "
5454fi
5555
5656# Defining help function
Original file line number Diff line number Diff line change @@ -36,7 +36,7 @@ software="apache2 apache2.2-common apache2-suexec-custom apache2-utils
3636 ntpdate php php-cgi php-common php-curl phpmyadmin php-mysql php-imap php-ldap
3737 php-apcu phppgadmin php-pgsql postgresql postgresql-contrib proftpd-basic quota
3838 roundcube-core roundcube-mysql roundcube-plugins rrdtool rssh spamassassin
39- sudo hestia hestia-nginx hestia-php vim-common vsftpd whois zip"
39+ sudo hestia hestia-nginx hestia-php vim-common vsftpd whois zip acl "
4040
4141# Defining help function
4242help () {
Original file line number Diff line number Diff line change @@ -173,6 +173,13 @@ if [ -d "/etc/roundcube" ]; then
173173 chown root:www-data /etc/roundcube/debian-db*
174174fi
175175
176+ # Check if acl package is installed
177+ if [ ! -e ' /usr/bin/setfacl' ]; then
178+ echo " (*) Install acl package and hardening user permissions..."
179+ apt-get -qq update > /dev/null 2>&1
180+ apt-get -qq -y install acl > /dev/null 2>&1
181+ fi
182+
176183# Add a general group for normal users created by Hestia
177184if [ -z " $( grep ^hestia-users: /etc/group) " ]; then
178185 groupadd " hestia-users"
@@ -189,7 +196,6 @@ for user in `ls /usr/local/hestia/data/users/`; do
189196 for ftp_user in $( cat /etc/passwd | grep -v " ^$user :" | grep " ^$user .*:$uid :$uid :" | cut -d " :" -f1) ; do
190197 usermod -a -G " hestia-users" " $ftp_user "
191198 done
192-
193199 fi
194200 setfacl -m " g:hestia-users:---" " $HOMEDIR /$user "
195201done
You can’t perform that action at this time.
0 commit comments