refactor: change dir permission.

apps/common/utils/logger.py

@@ -25,5 +25,5 @@ class DailyTimedRotatingFileHandler(TimedRotatingFileHandler):
             os.path.basename(source)
         ]
         filename = os.path.join(*path)
-        os.makedirs(os.path.dirname(filename), exist_ok=True)
+        os.makedirs(os.path.dirname(filename), 0o700, exist_ok=True)
         return filename

apps/maxkb/settings/logging.py

@@ -122,4 +122,4 @@ LOGGING = {
 SYSLOG_ENABLE = CONFIG.SYSLOG_ENABLE
 
 if not os.path.isdir(LOG_DIR):
-    os.makedirs(LOG_DIR, mode=0o755)
+    os.makedirs(LOG_DIR, mode=0o700, exist_ok=True)

installer/start-maxkb.sh

@@ -1,7 +1,13 @@
 #!/bin/bash
 
+if [ ! -d /opt/maxkb/logs ]; then
     mkdir -p /opt/maxkb/logs
+    chmod 700 /opt/maxkb/logs
+fi
+if [ ! -d /opt/maxkb/local ]; then
     mkdir -p /opt/maxkb/local
+    chmod 700 /opt/maxkb/local
+fi
 mkdir -p /opt/maxkb/python-packages
 
 rm -f /opt/maxkb-app/tmp/*.pid

installer/start-redis.sh

@@ -1,11 +1,15 @@
 #!/bin/bash
 
+if [ ! -d /opt/maxkb/data/redis ]; then
     mkdir -p /opt/maxkb/data/redis
+    chmod 700 /opt/maxkb/data/redis
+fi
 mkdir -p /opt/maxkb/logs
 
 if [ ! -f /opt/maxkb/conf/redis.conf ]; then
   mkdir -p /opt/maxkb/conf
   touch /opt/maxkb/conf/redis.conf
+  chmod 700 /opt/maxkb/conf/redis.conf
   cat <<EOF > /opt/maxkb/conf/redis.conf
 bind 0.0.0.0
 port 6379