docker: chmod o-rwx the output directory

1 files changed, 8 insertions, 0 deletions

diff --git a/docker/entrypoint.sh b/docker/entrypoint.sh
index 5674e36..61ecd1e 100755
--- a/docker/entrypoint.sh
+++ b/docker/entrypoint.sh
@@ -8,6 +8,13 @@
 set -o errexit -o nounset -o pipefail
 
 readonly base_dir=/usr/src
+readonly cfg_path=/etc/cgitize/cgitize.toml
+
+secure_repo_dir() {
+    local dir
+    dir="$( /get_output_dir.py -- "$cfg_path" )"
+    chmod -- o-rwx "$dir"
+}
 
 schedule_to_cron() {
     local schedule
@@ -55,6 +62,7 @@ setup_cron_task() {
 }
 
 main() {
+    secure_repo_dir
     setup_cron_task "$@"
 }