diff options
| author | Craig Jennings <c@cjennings.net> | 2026-07-08 13:09:54 -0500 |
|---|---|---|
| committer | Craig Jennings <c@cjennings.net> | 2026-07-08 13:09:54 -0500 |
| commit | 63f73e06d5ce1475c671ba69817f5f1404691188 (patch) | |
| tree | 5ceb91564441a69e8ccfbfbe62e630a6a9c59528 /scripts/testing/run-maint-scenarios.sh | |
| parent | 8d6233d71feedd81e42007575f876b3e4d1c10c4 (diff) | |
| download | archsetup-63f73e06d5ce1475c671ba69817f5f1404691188.tar.gz archsetup-63f73e06d5ce1475c671ba69817f5f1404691188.zip | |
fix(maint): uncurate /etc/ssl/private — it was a real misconfig
pacman warned filesystem 755 vs package 700 on both hosts: a world-listable private-key directory, not runtime hardening as the previous commit claimed. pacman never resets existing directory permissions, so I chmod'd 700 on ratio and velox and removed the curation entry. Integrity reads an honest zero on both.
Diffstat (limited to 'scripts/testing/run-maint-scenarios.sh')
0 files changed, 0 insertions, 0 deletions