summaryrefslogtreecommitdiffstats
path: root/contrib
diff options
context:
space:
mode:
authorSimo Sorce <ssorce@redhat.com>2009-09-28 07:51:26 -0400
committerSimo Sorce <ssorce@redhat.com>2009-09-28 08:41:27 -0400
commit5ab9ed3c42781ae1911d253d56d67dc0288d55f7 (patch)
tree9a3488b5c41fdbf37e5f58ced2ce1057b7583cff /contrib
parentcd23ef0605ec295ee9578dc3d9a749c89a947f42 (diff)
downloadsssd-5ab9ed3c42781ae1911d253d56d67dc0288d55f7.tar.gz
sssd-5ab9ed3c42781ae1911d253d56d67dc0288d55f7.tar.xz
sssd-5ab9ed3c42781ae1911d253d56d67dc0288d55f7.zip
Tighten up permission.
SSSD may contain passwords and other sensitive data, make sure we always keep its permission tight. Also make /etc/sssd permission very strict, just in case, admins may inadvertently copy an sssd.conf file without checking it's permissions.
Diffstat (limited to 'contrib')
-rw-r--r--contrib/sssd.spec.in2
1 files changed, 1 insertions, 1 deletions
diff --git a/contrib/sssd.spec.in b/contrib/sssd.spec.in
index 5dc45d28d..9513a6b6e 100644
--- a/contrib/sssd.spec.in
+++ b/contrib/sssd.spec.in
@@ -129,7 +129,7 @@ rm -rf $RPM_BUILD_ROOT
%attr(755,root,root) %dir %{pipepath}
%attr(700,root,root) %dir %{pipepath}/private
%attr(750,root,root) %dir %{_var}/log/%{name}
-%dir %{_sysconfdir}/sssd
+%attr(700,root,root) %dir %{_sysconfdir}/sssd
%config(noreplace) %{_sysconfdir}/sssd/sssd.conf
%{_mandir}/man5/sssd.conf.5*
%{_mandir}/man5/sssd-krb5.5*