From 604917bd8bf04fdb80dd9865cafa96111eb4c920 Mon Sep 17 00:00:00 2001
From: Meo597 <197331664+Meo597@users.noreply.github.com>
Date: Mon, 19 May 2025 03:40:53 +0800
Subject: [PATCH] Reduce log directory permissions

---
 alpinelinux/install-release.sh | 7 ++++++-
 install-release.sh             | 7 +++++--
 2 files changed, 11 insertions(+), 3 deletions(-)

diff --git a/alpinelinux/install-release.sh b/alpinelinux/install-release.sh
index d10a7dd..bef0a03 100644
--- a/alpinelinux/install-release.sh
+++ b/alpinelinux/install-release.sh
@@ -153,10 +153,15 @@ install_confdir() {
 install_log() {
     LOG='0'
     if [ ! -d '/var/log/xray/' ]; then
-        install -d -o nobody -g nobody /var/log/xray/
+        install -d -m 755 -o 0 -g 0 /var/log/xray/
         install -m 600 -o nobody -g nobody /dev/null /var/log/xray/access.log
         install -m 600 -o nobody -g nobody /dev/null /var/log/xray/error.log
         LOG='1'
+    else
+        chown 0:0 /var/log/xray/
+        chmod 755 /var/log/xray/
+        chown nobody:nobody /var/log/xray/*.log
+        chmod 600 /var/log/xray/*.log
     fi
 }
 
diff --git a/install-release.sh b/install-release.sh
index ff1f707..739d12d 100755
--- a/install-release.sh
+++ b/install-release.sh
@@ -510,12 +510,15 @@ install_xray() {
   # Used to store Xray log files
   if [[ "$NO_LOGFILES" -eq '0' ]]; then
     if [[ ! -d '/var/log/xray/' ]]; then
-      install -d -m 700 -o "$INSTALL_USER_UID" -g "$INSTALL_USER_GID" /var/log/xray/
+      install -d -m 755 -o 0 -g 0 /var/log/xray/
       install -m 600 -o "$INSTALL_USER_UID" -g "$INSTALL_USER_GID" /dev/null /var/log/xray/access.log
       install -m 600 -o "$INSTALL_USER_UID" -g "$INSTALL_USER_GID" /dev/null /var/log/xray/error.log
       LOG='1'
     else
-      chown -R "$INSTALL_USER_UID:$INSTALL_USER_GID" /var/log/xray/
+      chown 0:0 /var/log/xray/
+      chmod 755 /var/log/xray/
+      chown "$INSTALL_USER_UID:$INSTALL_USER_GID" /var/log/xray/*.log
+      chmod 600 /var/log/xray/*.log
     fi
   fi
 }