diff options
| author | Martin Basti <mbasti@redhat.com> | 2014-11-11 13:00:18 +0100 |
|---|---|---|
| committer | Jan Cholasta <jcholast@redhat.com> | 2014-11-18 18:49:42 +0000 |
| commit | 7c176b708eb855ea8774ad36ba72fd31952a8895 (patch) | |
| tree | f3dcea465d1cb229720e0a0275c8938545833d98 /install | |
| parent | 4c670919a5b15b70ff6efb50e9bb60eb45cecdba (diff) | |
Fix named working directory permissions
Just adding dir to specfile doesnt work, because is not guarantee the
named is installed, during RPM installation.
Ticket: https://fedorahosted.org/freeipa/ticket/4716
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Diffstat (limited to 'install')
| -rw-r--r-- | install/tools/ipa-upgradeconfig | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/install/tools/ipa-upgradeconfig b/install/tools/ipa-upgradeconfig index bc8a41ee9..7432f35fa 100644 --- a/install/tools/ipa-upgradeconfig +++ b/install/tools/ipa-upgradeconfig @@ -30,6 +30,7 @@ import shutil import pwd import fileinput import ConfigParser +import grp from ipalib import api import SSSDConfig @@ -1101,6 +1102,18 @@ def mask_named_regular(): return False +def fix_dyndb_ldap_workdir_permissions(): + """Fix dyndb-ldap working dir permissions. DNSSEC daemons requires it""" + if sysupgrade.get_upgrade_state('dns', 'dyndb_ipa_workdir_perm'): + return + + if bindinstance.named_conf_exists(): + root_logger.info('[Fix bind-dyndb-ldap IPA working directory]') + dnskeysync = dnskeysyncinstance.DNSKeySyncInstance() + dnskeysync.set_dyndb_ldap_workdir_permissions() + + sysupgrade.set_upgrade_state('dns', 'dyndb_ipa_workdir_perm', True) + def fix_schema_file_syntax(): """Fix syntax errors in schema files @@ -1373,6 +1386,7 @@ def main(): named_managed_keys_dir_option(), named_root_key_include(), mask_named_regular(), + fix_dyndb_ldap_workdir_permissions(), ) if any(named_conf_changes): |