core: harden shell scripts against injection and insecure permissions (#13239)

This commit is contained in:
CanbiZ (MickLesk) 2026-03-23 22:22:23 +01:00 committed by GitHub
parent 283e762b83
commit c8606e9fcc
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
6 changed files with 25 additions and 13 deletions

View file

@ -150,7 +150,7 @@ function install() {
curl -fsSL "https://raw.githubusercontent.com/runtipi/runtipi/master/scripts/install.sh" -o "install.sh"
chmod +x install.sh
$STD ./install.sh
chmod 666 /opt/runtipi/state/settings.json 2>/dev/null || true
chmod 660 /opt/runtipi/state/settings.json 2>/dev/null || true
rm -f /opt/install.sh
msg_ok "Installed ${APP}"