From 0565cf050b9734b9997adc9801862bdb19deb90c Mon Sep 17 00:00:00 2001
From: z3APA3A <3APA3A@3proxy.ru>
Date: Fri, 8 Feb 2019 12:34:44 +0300
Subject: [PATCH] Linux installation: do not allow proxy account to write to
 chrooted config dir

---
 Makefile.Linux | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/Makefile.Linux b/Makefile.Linux
index 29b0f4d..fa4742d 100644
--- a/Makefile.Linux
+++ b/Makefile.Linux
@@ -141,7 +141,9 @@ install: install-chroot-dir install-bin install-etc install-log install-man inst
 	stty echo ;\
 	fi
 	@chown -R proxy:proxy $(CHROOTDIR)
-	@chmod 660  $(CHROOTDIR)/conf/*
+	@chmod 550  $(CHROOTDIR)/
+	@chmod 550  $(CHROOTDIR)/conf/
+	@chmod 440  $(CHROOTDIR)/conf/*
 	@echo ""
 	@echo 3proxy installed.
 	@echo use