diff options
| author | Simo Sorce <ssorce@redhat.com> | 2009-09-28 07:51:26 -0400 |
|---|---|---|
| committer | Simo Sorce <ssorce@redhat.com> | 2009-09-28 08:41:27 -0400 |
| commit | 5ab9ed3c42781ae1911d253d56d67dc0288d55f7 (patch) | |
| tree | 9a3488b5c41fdbf37e5f58ced2ce1057b7583cff /contrib/sssd.spec.in | |
| parent | cd23ef0605ec295ee9578dc3d9a749c89a947f42 (diff) | |
| download | sssd-5ab9ed3c42781ae1911d253d56d67dc0288d55f7.tar.gz sssd-5ab9ed3c42781ae1911d253d56d67dc0288d55f7.tar.xz sssd-5ab9ed3c42781ae1911d253d56d67dc0288d55f7.zip | |
Tighten up permission.
SSSD may contain passwords and other sensitive data, make sure we always keep its
permission tight. Also make /etc/sssd permission very strict, just in case,
admins may inadvertently copy an sssd.conf file without checking it's
permissions.
Diffstat (limited to 'contrib/sssd.spec.in')
| -rw-r--r-- | contrib/sssd.spec.in | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/contrib/sssd.spec.in b/contrib/sssd.spec.in index 5dc45d28d..9513a6b6e 100644 --- a/contrib/sssd.spec.in +++ b/contrib/sssd.spec.in @@ -129,7 +129,7 @@ rm -rf $RPM_BUILD_ROOT %attr(755,root,root) %dir %{pipepath} %attr(700,root,root) %dir %{pipepath}/private %attr(750,root,root) %dir %{_var}/log/%{name} -%dir %{_sysconfdir}/sssd +%attr(700,root,root) %dir %{_sysconfdir}/sssd %config(noreplace) %{_sysconfdir}/sssd/sssd.conf %{_mandir}/man5/sssd.conf.5* %{_mandir}/man5/sssd-krb5.5* |