From c547fbda55bd8b7fdd2acc190ee2f7cf758e6986 Mon Sep 17 00:00:00 2001
From: Silvio Rhatto <rhatto@riseup.net>
Date: Mon, 25 Jan 2010 19:15:35 -0200
Subject: Ensuring post-update hook is setuid www-data

---
 manifests/init.pp | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

(limited to 'manifests')

diff --git a/manifests/init.pp b/manifests/init.pp
index 3be6bdb..65dc2cb 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -86,12 +86,11 @@ class ikiwiki {
         # See http://ikiwiki.info/rcs/git/
         #     http://ikiwiki.info/forum/multi-user_setup_of_ikiwiki__44___gitosis_and_apache2_in_Debian_Sid/
         #
-        # TODO: ensure the post-update hook is setuid.
-        #
         file { "/var/git/repositories/${name}.git/hooks/post-update":
           ensure => present,
           owner  => www-data,
           group  => gitosis,
+          mode   => 4550,
         }
       }
     }
-- 
cgit v1.2.3