diff options
author | Dave Brolley <brolley@redhat.com> | 2009-09-14 15:46:34 -0400 |
---|---|---|
committer | Dave Brolley <brolley@redhat.com> | 2009-09-14 15:46:34 -0400 |
commit | 20ab90b5217b3e294cef1f845bc9a794b365a983 (patch) | |
tree | 232b4b6b2504bb7c55a5b6a167fdf053f5d93605 /stap-serverd | |
parent | b9c1510ee2ef5283d7faafad4e82a4bb933d9e29 (diff) | |
download | systemtap-steved-20ab90b5217b3e294cef1f845bc9a794b365a983.tar.gz systemtap-steved-20ab90b5217b3e294cef1f845bc9a794b365a983.tar.xz systemtap-steved-20ab90b5217b3e294cef1f845bc9a794b365a983.zip |
Authorize new certificates created for servers started by root as authorized signers.
Update NEWS with the latest usage infor for --unprivileged.
Diffstat (limited to 'stap-serverd')
-rwxr-xr-x | stap-serverd | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/stap-serverd b/stap-serverd index 4eee8c38..5b05a819 100755 --- a/stap-serverd +++ b/stap-serverd @@ -56,6 +56,11 @@ function initialization { -x `which ${stap_exec_prefix}stap-client`; then ${stap_exec_prefix}stap-authorize-server-cert $ssl_db/$stap_certfile fi + # If we are root, then add the server's certificate as a trusted + # signer. + if test $EUID = 0; then + ${stap_exec_prefix}stap-authorize-signing-cert $ssl_db/$stap_certfile + fi elif ! test -f $stap_ssl_db/client/cert8.db; then # If the client's database does not exist, then initialize it with our certificate. # Do this only if the client has been installed. |