carbonblack/cb-event-forwarder

Correct Service Permissions

jjfallete opened this issue · 0 comments

The CB Event Forwarder service permissions are incorrectly set to 755 (-rwxr-xr-x) by default.

The system daemon reports this misconfiguration like:
systemd[1]: Configuration file /etc/systemd/system/cb-event-forwarder.service is marked executable. Please remove executable permission bits. Proceeding anyway.

To correct we do this:
chmod 644 /etc/systemd/system/cb-event-forwarder.service

Since the service path may be different depending on OS distro, I believe simply adding the above line to the fix script may not be correct, I'm unsure what the best approach is. This was tested on EL6 and EL8.

Recommend adding this fix to:
cb-edr-fix-permissions.sh

I made a change to the make file for future installs in pull #225