diff options
| author | Rob Crittenden <rcrit@ipa.greyoak.com> | 2008-07-01 09:57:46 -0400 |
|---|---|---|
| committer | Rob Crittenden <rcrit@ipa.greyoak.com> | 2008-07-01 15:06:59 -0400 |
| commit | ec597b0ef1010b3da4980b5ad2da8c0034b409f2 (patch) | |
| tree | 3e65150e24fb82aee1db93c072844c4fcd371d60 /ipa-server/ipa-install/ipa-server-certinstall | |
| parent | 6cce2f45e8b48422b2c3534b7a73c10ba95ad2fe (diff) | |
| download | freeipa-ec597b0ef1010b3da4980b5ad2da8c0034b409f2.tar.gz freeipa-ec597b0ef1010b3da4980b5ad2da8c0034b409f2.tar.xz freeipa-ec597b0ef1010b3da4980b5ad2da8c0034b409f2.zip | |
Ensure correct permissions and file ownership of Apache NSS database
451098
Diffstat (limited to 'ipa-server/ipa-install/ipa-server-certinstall')
| -rw-r--r-- | ipa-server/ipa-install/ipa-server-certinstall | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/ipa-server/ipa-install/ipa-server-certinstall b/ipa-server/ipa-install/ipa-server-certinstall index e7696270..7e089213 100644 --- a/ipa-server/ipa-install/ipa-server-certinstall +++ b/ipa-server/ipa-install/ipa-server-certinstall @@ -19,6 +19,8 @@ # import sys +import os +import pwd import traceback @@ -144,6 +146,16 @@ def main(): print server_cert set_http_cert_name(server_cert[0]) + # Fix the database permissions + os.chmod(NSS_DIR + "/cert8.db", 0640) + os.chmod(NSS_DIR + "/key3.db", 0640) + os.chmod(NSS_DIR + "/secmod.db", 0640) + + pent = pwd.getpwnam("apache") + os.chown(NSS_DIR + "/cert8.db", 0, pent.pw_gid ) + os.chown(NSS_DIR + "/key3.db", 0, pent.pw_gid ) + os.chown(NSS_DIR + "/secmod.db", 0, pent.pw_gid ) + except Exception, e: print "an unexpected error occurred: %s" % str(e) traceback.print_exc() |