summaryrefslogtreecommitdiffstats
path: root/install/tools/ipa-upgradeconfig
diff options
context:
space:
mode:
authorTomas Babej <tbabej@redhat.com>2013-07-16 12:10:54 +0200
committerMartin Kosek <mkosek@redhat.com>2013-07-16 12:17:40 +0200
commit7a105604e265222cf6f96b0ac060d4f1b2504b6c (patch)
tree22a9b92905f5f36259dc29b00f21a3931334eaae /install/tools/ipa-upgradeconfig
parent0fa42af840579d641ceb76974fb4c0277c9c6d6b (diff)
downloadfreeipa-7a105604e265222cf6f96b0ac060d4f1b2504b6c.tar.gz
freeipa-7a105604e265222cf6f96b0ac060d4f1b2504b6c.tar.xz
freeipa-7a105604e265222cf6f96b0ac060d4f1b2504b6c.zip
Change group ownership of CRL publish directory
Spec file modified so that /var/lib/ipa/pki-ca/publish/ is no longer owned by created with package installation. The directory is rather created/removed with the CA instance itself. This ensures proper creation/removeal, group ownership and SELinux context. https://fedorahosted.org/freeipa/ticket/3727
Diffstat (limited to 'install/tools/ipa-upgradeconfig')
-rw-r--r--install/tools/ipa-upgradeconfig7
1 files changed, 4 insertions, 3 deletions
diff --git a/install/tools/ipa-upgradeconfig b/install/tools/ipa-upgradeconfig
index 4e9216964..4fbcdb6bf 100644
--- a/install/tools/ipa-upgradeconfig
+++ b/install/tools/ipa-upgradeconfig
@@ -690,15 +690,16 @@ def migrate_crl_publish_dir(ca):
caconfig.CS_CFG_PATH, e)
return False
+ # Prepare target publish dir (creation, permissions, SELinux context)
+ # Run this every update to ensure proper values
+ publishdir = ca.prepare_crl_publish_dir()
+
if old_publish_dir == caconfig.CRL_PUBLISH_PATH:
# publish dir is already updated
root_logger.info('Publish directory already set to new location')
sysupgrade.set_upgrade_state('dogtag', 'moved_crl_publish_dir', True)
return False
- # Prepare target publish dir (permissions, SELinux context)
- publishdir = ca.prepare_crl_publish_dir()
-
# Copy all CRLs to new directory
root_logger.info('Copy all CRLs to new publish directory')
try: