diff options
| author | Christian Breunig <christian@breunig.cc> | 2026-03-05 16:36:11 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-03-05 16:36:11 +0100 |
| commit | 7c520f8ec786f6cff411188498822eab00e69afd (patch) | |
| tree | ca270d2011999fe34c93f350b5f8bab116f24f1a /python | |
| parent | 5ea47f5c7dab6cee38aef355fd78d434a10dd463 (diff) | |
| parent | c11f22119a52a1f150c4929fed81fe00db2d55dc (diff) | |
| download | vyos-1x-7c520f8ec786f6cff411188498822eab00e69afd.tar.gz vyos-1x-7c520f8ec786f6cff411188498822eab00e69afd.zip | |
Merge pull request #5027 from sarthurdev/T8326
geoip: T8326: Resolve permission issue on database paths
Diffstat (limited to 'python')
| -rw-r--r-- | python/vyos/geoip.py | 11 |
1 files changed, 7 insertions, 4 deletions
diff --git a/python/vyos/geoip.py b/python/vyos/geoip.py index 9a2b40899..619af0785 100644 --- a/python/vyos/geoip.py +++ b/python/vyos/geoip.py @@ -229,10 +229,13 @@ def geoip_update(firewall=None, policy=None): set_name = f'GEOIP_CC{vprefix}_{path[0]}_{path[1]}_{path[3]}' policy_sets[f'v{version}'][set_name] = db_return_ranges(codes, version) - render(nftables_geoip_conf, 'firewall/nftables-geoip-update.j2', { - 'firewall_sets': firewall_sets, - 'policy_sets': policy_sets - }) + render( + nftables_geoip_conf, + 'firewall/nftables-geoip-update.j2', + {'firewall_sets': firewall_sets, 'policy_sets': policy_sets}, + group='vyattacfg', + permission=0o664, + ) result = run(f'nft --file {nftables_geoip_conf}') if result != 0: |