From e557a3eaae777d102418c1c1d23681f26d21fb50 Mon Sep 17 00:00:00 2001
From: Jeremy Lecour <jlecour@evolix.fr>
Date: Fri, 13 Dec 2019 09:50:04 +0100
Subject: [PATCH] apache: improve permissions in save_apache_status script

---
 CHANGELOG.md                       |  1 +
 apache/files/save_apache_status.sh | 10 +++++++---
 2 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 47d0b6c9..ae9c0998 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -36,6 +36,7 @@ The **patch** part changes incrementally at each release.
 * webapps/evoadmin-web Overload templates if needed
 
 ### Changed
+* apache: improve permissions in save_apache_status script
 * elasticsearch: listen on local interface only by default
 * evocheck: upstream version 19.11.2
 * evocheck: cron jobs execute in verbose
diff --git a/apache/files/save_apache_status.sh b/apache/files/save_apache_status.sh
index d65b2e08..8ca29f15 100644
--- a/apache/files/save_apache_status.sh
+++ b/apache/files/save_apache_status.sh
@@ -7,11 +7,15 @@ URL="http://127.0.0.1/server-status"
 TS=`date +%Y%m%d%H%M%S`
 FILE="${DIR}/${TS}.html"
 
-mkdir -p "${DIR}"
-
-wget -q -O "${FILE}" "${URL}"
+if [ ! -d "${DIR}" ]; then
+    mkdir -p "${DIR}"
+    chown root:adm "${DIR}"
+    chmod 750 "${DIR}"
+fi
 
+wget -q -U "save_apache_status" -O "${FILE}" "${URL}"
 chmod 640 "${FILE}"
+chown root:adm "${FILE}"
 
 find "${DIR}" -type f -mtime +1 -delete