bootstrap.sh: disable some overly permissive settings in settings.local.php

This avoids warnings in the status report after "drin bootstrap --devel"

diff --git a/libexec/bootstrap.sh b/libexec/bootstrap.sh
index ff69fb0..75f245c 100755 (executable)
--- a/libexec/bootstrap.sh
+++ b/libexec/bootstrap.sh
@@ -160,6 +160,11 @@ then
   $DRUSH --yes en devel
 
   cp sites/example.settings.local.php sites/default/settings.local.php
   $DRUSH --yes en devel
 
   cp sites/example.settings.local.php sites/default/settings.local.php

+
+  # Disable some overly permissive settings
+  sed -i -e "s/^\(\$settings\['rebuild_access'\]\).*$/\1 = FALSE;/g" sites/default/settings.local.php
+  sed -i -e "s/^\(\$settings\['skip_permissions_hardening'\]\).*$/\1 = FALSE;/g" sites/default/settings.local.php
+

   chmod 444 sites/default/settings.local.php
 
   if ! grep -q "^include \$app_root . '/' . \$site_path . '/settings.local.php';" sites/default/settings.php;
   chmod 444 sites/default/settings.local.php
 
   if ! grep -q "^include \$app_root . '/' . \$site_path . '/settings.local.php';" sites/default/settings.php;