summaryrefslogtreecommitdiffstats
path: root/python/samba
diff options
context:
space:
mode:
authorBjörn Baumbach <bb@sernet.de>2013-10-29 17:49:55 +0100
committerKarolin Seeger <kseeger@samba.org>2013-11-11 11:14:36 +0100
commit83a3ae18ddb945defc3a2f1d5ca2fb743fa43724 (patch)
tree3bc7e459b6ae28d5391c2df890d93bd10d0f8abb /python/samba
parent63d98ed90466295d0e946f79868d3d7aad6e7589 (diff)
downloadsamba-83a3ae18ddb945defc3a2f1d5ca2fb743fa43724.tar.gz
samba-83a3ae18ddb945defc3a2f1d5ca2fb743fa43724.tar.xz
samba-83a3ae18ddb945defc3a2f1d5ca2fb743fa43724.zip
CVE-2013-4476: samba-tool provision: create ${private_dir}/tls with mode 0700
Bug: https://bugzilla.samba.org/show_bug.cgi?id=10234 Signed-off-by: Björn Baumbach <bb@sernet.de> Reviewed-by: Stefan Metzmacher <metze@samba.org>
Diffstat (limited to 'python/samba')
-rw-r--r--python/samba/provision/__init__.py2
1 files changed, 1 insertions, 1 deletions
diff --git a/python/samba/provision/__init__.py b/python/samba/provision/__init__.py
index d8f353f54ae..4920735b247 100644
--- a/python/samba/provision/__init__.py
+++ b/python/samba/provision/__init__.py
@@ -2025,7 +2025,7 @@ def provision(logger, session_info, smbconf=None,
if not os.path.exists(paths.private_dir):
os.mkdir(paths.private_dir)
if not os.path.exists(os.path.join(paths.private_dir, "tls")):
- os.mkdir(os.path.join(paths.private_dir, "tls"))
+ os.makedirs(os.path.join(paths.private_dir, "tls"), 0700)
if not os.path.exists(paths.state_dir):
os.mkdir(paths.state_dir)