netdata: modify apps.plugin permissions

Modification of the group for the apps.plugin file (from root to
netdata) and removal of execution authorization for the “others”.

This modification improves security by limiting the netdata group to
execute the plugin as root.

Signed-off-by: Tanguy Raufflet <tanguy.raufflet@savoirfairelinux.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
Tanguy Raufflet 2024-10-23 14:58:06 +02:00 committed by Khem Raj
parent 793557a317
commit 6f6aa30602
No known key found for this signature in database
GPG Key ID: BB053355919D3314

View File

@ -83,7 +83,8 @@ do_compile:append() {
do_install:append() {
#set S UID for plugins
chmod 4755 ${D}${libexecdir}/netdata/plugins.d/apps.plugin
chown root:netdata ${D}${libexecdir}/netdata/plugins.d/apps.plugin
chmod 4750 ${D}${libexecdir}/netdata/plugins.d/apps.plugin
rm -rf ${D}/${localstatedir}/
if ${@bb.utils.contains('DISTRO_FEATURES','systemd','true','false',d)}; then