X-Git-Url: https://git.cyclocoop.org/?a=blobdiff_plain;f=vm_hosted;h=c0193150da97652f8d749a6f6f47a3528019248a;hb=b02f4d3b84adf1daca5e6007024ddaa7f55c11dc;hp=e8fd3c42909bcc06e03636a3f32d90e775e2cacb;hpb=80909c24d0e4ca5061f3379852ac07b296760883;p=lhc%2Fateliers.git

diff --git a/vm_hosted b/vm_hosted
index e8fd3c4..c019315 100755
--- a/vm_hosted
+++ b/vm_hosted
@@ -511,7 +511,7 @@ rule_gitolite_configure () {
 	 --shell /bin/false \
 	 --system
 	sudo adduser git        git-data
-	sudo install -d -m 770 -o git -g git \
+	sudo install -d -m 750 -o git -g git \
 	 /etc/gitolite \
 	 /home/git/etc \
 	 /home/git/etc/ssh
@@ -744,6 +744,7 @@ rule_mysql_configure () {
 	 fi
 	sudo service tmpfs restart
 	sudo insserv -r mysql
+	sudo chmod ugo-x /etc/init.d/mysql
 	case $(sudo sv status mysql || true) in
 	 (''|run:*|*"s, normally up;"*)
 		sudo sv restart mysql
@@ -906,7 +907,9 @@ rule_nginx_configure () {
 	 done
 	rule apt_get_install spawn-fcgi fcgiwrap
 	sudo insserv --remove fcgiwrap
+	sudo chmod ugo-x /etc/init.d/fcgiwrap
 	#sudo insserv --remove nginx
+	#sudo chmod ugo-x /etc/init.d/nginx
 	rule tmpfs_configure
 	sudo service php5-fpm restart
 		# NOTE: relance les processus du pool
@@ -954,6 +957,7 @@ rule_nsd3_configure () { # NOTE: DNS autoritaire uniquement
 	} |
 	sudo install -m 640 -o root -g nsd /dev/stdin \
 	 /etc/nsd3/nsd.conf
+	sudo nsdc rebuild
 	sudo service nsd3 restart
  }
 rule_php5_fpm_configure () {
@@ -1211,6 +1215,7 @@ rule_postgresql_configure () {
 	 "$tool"/etc/postgresql/9.1/main/postgresql.conf \
 	        /etc/postgresql/9.1/main/postgresql.conf
 	sudo insserv -r postgresql
+	sudo chmod ugo-x /etc/init.d/postgresql
 	case $(sudo sv status postgres || true) in
 	 (''|run:*|*"s, normally up;"*)
 		sudo sv restart postgres
@@ -1222,7 +1227,7 @@ rule_postgresql_configure () {
 			# - supprime l'accès au schéma public depuis public,
 			#   de sorte à ce que les différents utilisateurices
 			#   ne voient pas leurs bases de données entre-elleux ;
-			# - ajoute le support de PL/PGSQL
+			# - ajoute le support de PL/PGSQL.
 			sudo -u postgres psql template1 -f - <<-EOF
 				REVOKE ALL ON DATABASE template1 FROM public;
 				REVOKE ALL ON SCHEMA   public    FROM public;