#2467 Set the right permissions in Makefile.am when installing from source
Closed: Fixed None Opened 9 years ago by jhrozek.

Previously, we would only set the right permissions (for instance, root.root 0700 for the db directory) in the specfile and Makefile.am would simply use whatever system umask was in use.

It would be more secure to set the right permissions when creating the directories, especially now that we set the right owner when sssd user is in effect. Also during the non-root work, we have already identified what the directories are.


Fields changed

description: Previously, we would only set the right permissions (for instance, root.root 0700 for the db directory) in the specfile and Makefile.am would simply use whatever system umask was in use. => Previously, we would only set the right permissions (for instance, root.root 0700 for the db directory) in the specfile and Makefile.am would simply use whatever system umask was in use.

It would be more secure to set the right permissions when creating the directories, especially now that we set the right owner when sssd user is in effect. Also during the non-root work, we have already identified what the directories are.

Fields changed

owner: somebody => jhrozek

Fields changed

owner: jhrozek => preichl

This is a cleanup after the first round of patches for #2370 landed. Moving to 1.12.

Feel free to reuse the permissions that are set in the specfile.

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.12.3

Fields changed

patch: 0 => 1

Fields changed

rhbz: => 0

resolution: => fixed
status: new => closed

Metadata Update from @jhrozek:
- Issue assigned to preichl
- Issue set to the milestone: SSSD 1.12.3

7 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/3509

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata