From de9548d9e95bee9dee016511c3feb5d9aef2633c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Gardais=20J=C3=A9r=C3=A9my?=
 <jeremy.gardais@univ-rennes1.fr>
Date: Mon, 12 Apr 2021 16:45:18 +0200
Subject: [PATCH] Limit access to backup files

---
 proxmox/backup.pve.content.sh | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/proxmox/backup.pve.content.sh b/proxmox/backup.pve.content.sh
index 18fa37e..4455a36 100755
--- a/proxmox/backup.pve.content.sh
+++ b/proxmox/backup.pve.content.sh
@@ -120,6 +120,11 @@ main() {                                                        # {{{
 	ln --force -- "${local_bkp_dir}/pve.${TODAY_VAR}.tar.gz" "${local_bkp_dir}/pve.latest.tar.gz" \
 		|| exit 3
 	## }}}
+	## Fix backups permissions {{{
+	### Only readable by backup (user) and adm (group)
+	chown -R backup:adm -- "${local_bkp_dir}" \
+		&& chmod 'u+rwX,g+rX,o-rwx' -R -- "${local_bkp_dir}"
+	## }}}
 
 }
 # }}}