diff options
| author | sarthurdev <965089+sarthurdev@users.noreply.github.com> | 2026-02-27 14:40:08 +0100 |
|---|---|---|
| committer | sarthurdev <965089+sarthurdev@users.noreply.github.com> | 2026-03-05 16:07:54 +0100 |
| commit | c11f22119a52a1f150c4929fed81fe00db2d55dc (patch) | |
| tree | bc569997cdb7c1ff5be2e8e6bc6fd91a4dcf2357 /python | |
| parent | 440e116cebac31cb51507b23add9d5c5cb414513 (diff) | |
| download | vyos-1x-c11f22119a52a1f150c4929fed81fe00db2d55dc.tar.gz vyos-1x-c11f22119a52a1f150c4929fed81fe00db2d55dc.zip | |
geoip: T8326: Resolve permission issue on database path
Restore required sudo on geoip op-mode
Ensures group/permission set on geoip nftables config
Diffstat (limited to 'python')
| -rw-r--r-- | python/vyos/geoip.py | 11 |
1 files changed, 7 insertions, 4 deletions
diff --git a/python/vyos/geoip.py b/python/vyos/geoip.py index 9a2b40899..619af0785 100644 --- a/python/vyos/geoip.py +++ b/python/vyos/geoip.py @@ -229,10 +229,13 @@ def geoip_update(firewall=None, policy=None): set_name = f'GEOIP_CC{vprefix}_{path[0]}_{path[1]}_{path[3]}' policy_sets[f'v{version}'][set_name] = db_return_ranges(codes, version) - render(nftables_geoip_conf, 'firewall/nftables-geoip-update.j2', { - 'firewall_sets': firewall_sets, - 'policy_sets': policy_sets - }) + render( + nftables_geoip_conf, + 'firewall/nftables-geoip-update.j2', + {'firewall_sets': firewall_sets, 'policy_sets': policy_sets}, + group='vyattacfg', + permission=0o664, + ) result = run(f'nft --file {nftables_geoip_conf}') if result != 0: |