rndc.key keeps losing group read access

[akust0m]

Hey,

I *think* this may be cPanel doing this, I'm not entirely sure.

But '/etc/rndc.key' keeps switching back to 600 but I'd like it set to 640. The file is set to named:named (owner:group).

The reason for this is because I'm using a server monitoring platform where I've written a custom module to extra DNS query information. The user that the monitoring agent runs as has been added to the 'named' group. Every minute the monitoring agent will run a script and part of that script is a call to 'rndc stats' which requires the ability to read the file '/etc/rndc.key'.

Does cPanel have an ongoing check in place to revert permissions on '/etc/rndc.key' back to 600? If so, is there a way I can prevent this from happening and keep it on 640?

Thanks!

 

[dalem]

upcp sets the permissions back to 600
create a create a file /scripts/postupcp an add

chmod 640 /etc/rndc.key

to the file

 

[cPanelLauren]

The suggestion is correct - cPanel does modify this during upcp and a postupcp script would be the best/only way to handle the issue. The documentation on Script Hoks should be helpful Guide to Standardized Hooks - Script Hooks - Developer Documentation - cPanel Documentation