From a54e2aafb67eef0fa6fffae364087300daddff09 Mon Sep 17 00:00:00 2001 From: Ihor Aleksandrychiev Date: Wed, 3 Dec 2025 10:42:55 +0200 Subject: [PATCH] Execute revoke_unsafe_functions.sql in the postinstall scripts Ticket: ENT-13568 Signed-off-by: Ihor Aleksandrychiev --- packaging/cfengine-nova-hub/cfengine-nova-hub.spec.in | 1 + packaging/cfengine-nova-hub/debian/rules | 1 + packaging/common/cfengine-hub/postinstall.sh | 1 + 3 files changed, 3 insertions(+) diff --git a/packaging/cfengine-nova-hub/cfengine-nova-hub.spec.in b/packaging/cfengine-nova-hub/cfengine-nova-hub.spec.in index 0a95de657..a2991d063 100644 --- a/packaging/cfengine-nova-hub/cfengine-nova-hub.spec.in +++ b/packaging/cfengine-nova-hub/cfengine-nova-hub.spec.in @@ -166,6 +166,7 @@ cp %{_basedir}/nova/db/schema.sql $RPM_BUILD_ROOT%prefix/share/db/ cp %{_basedir}/nova/db/schema_settings.sql $RPM_BUILD_ROOT%prefix/share/db/ cp %{_basedir}/nova/db/ootb_settings.sql $RPM_BUILD_ROOT%prefix/share/db/ cp %{_basedir}/nova/db/ootb_import.sql $RPM_BUILD_ROOT%prefix/share/db/ +cp %{_basedir}/nova/db/revoke_unsafe_functions.sql $RPM_BUILD_ROOT%prefix/share/db/ mkdir -p $RPM_BUILD_ROOT/var/log/ touch $RPM_BUILD_ROOT/var/log/postgresql.log diff --git a/packaging/cfengine-nova-hub/debian/rules b/packaging/cfengine-nova-hub/debian/rules index c21541376..2ed79b8da 100755 --- a/packaging/cfengine-nova-hub/debian/rules +++ b/packaging/cfengine-nova-hub/debian/rules @@ -75,6 +75,7 @@ install: build cp $(BASEDIR)/nova/db/schema_settings.sql $(CURDIR)/debian/tmp$(PREFIX)/share/db/ cp $(BASEDIR)/nova/db/ootb_settings.sql $(CURDIR)/debian/tmp$(PREFIX)/share/db/ cp $(BASEDIR)/nova/db/ootb_import.sql $(CURDIR)/debian/tmp$(PREFIX)/share/db/ + cp $(BASEDIR)/nova/db/revoke_unsafe_functions.sql $(CURDIR)/debian/tmp$(PREFIX)/share/db/ # ENT-2708, ENT-2846 chmod 600 $(CURDIR)/debian/tmp$(PREFIX)/share/GUI/application/config/*.php diff --git a/packaging/common/cfengine-hub/postinstall.sh b/packaging/common/cfengine-hub/postinstall.sh index 6660d23c3..c40c4b6a2 100644 --- a/packaging/common/cfengine-hub/postinstall.sh +++ b/packaging/common/cfengine-hub/postinstall.sh @@ -889,6 +889,7 @@ else # cfdb schema relies on cfsettings already existing for a foreign data wrapper association for shared and personal host groups tables chown cfpostgres "$PREFIX/share/db/schema.sql" && su cfpostgres -c "$PREFIX/bin/psql cfdb -f $PREFIX/share/db/schema.sql" && chown root "$PREFIX/share/db/schema.sql" chown cfpostgres "$PREFIX/share/db/ootb_import.sql" && su cfpostgres -c "$PREFIX/bin/psql cfdb -f $PREFIX/share/db/ootb_import.sql" && chown root "$PREFIX/share/db/ootb_import.sql" + chown cfpostgres "$PREFIX/share/db/revoke_unsafe_functions.sql" && su cfpostgres -c "$PREFIX/bin/psql cfdb -f $PREFIX/share/db/revoke_unsafe_functions.sql" && chown root "$PREFIX/share/db/revoke_unsafe_functions.sql" ) (