0060bfb GPO_CHILD: Create directories in gpo_cache with right permissions

Authored and Committed by lslebodn 7 years ago
    GPO_CHILD: Create directories in gpo_cache with right permissions
    
    The parent directory has to have execute bit if we want to create
    subdirectories or read files there.
    
    sh-4.3$ mkdir dir
    sh-4.3$ echo "test" > dir/test_file
    sh-4.3$ chmod 644 dir/
    sh-4.3$ ls dir/
    test_file
    sh-4.3$ cat dir/test_file
    cat: dir/test_file: Permission denied
    
    It was not probelm for sssd in root mode
    because root has by default capbilities DAC_OVERRIDE and DAC_READ_SEARCH
    which bypass file read, write, and execute permission checks
    and directory read and execute permission checks
    
    Resolves:
    https://fedorahosted.org/sssd/ticket/2962
    
    Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
    (cherry picked from commit d0e0cf6ee47ab538efc47c7882f498f1b5e0f0c7)