Attachment 304123 Details for Bug 444602 – set permissions on mod_nss database

[patch] set permissions on mod_nss database

freeipa-8-nssperms.patch (text/plain), 1.50 KB, created by Rob Crittenden on 2008-04-29 14:38:16 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Rob Crittenden

Created: 2008-04-29 14:38:16 UTC

Size: 1.50 KB

patch

obsolete

>From f6eca1fbcd24db253f4e559f396a065c62837a07 Mon Sep 17 00:00:00 2001
>From: Rob Crittenden <rcritten@redhat.com>
>Date: Mon, 28 Apr 2008 15:28:13 -0400
>Subject: [PATCH] Fix ownership of the Apache NSS cert and key databases.
>
>The group "apache" needs to have read access to them so they will work in
>Fedora 9+.
>---
> ipa-server/ipaserver/httpinstance.py |   10 ++++++++++
> 1 files changed, 10 insertions(+), 0 deletions(-)
>
>diff --git a/ipa-server/ipaserver/httpinstance.py b/ipa-server/ipaserver/httpinstance.py
>index a55cf25..c5f8b50 100644
>--- a/ipa-server/ipaserver/httpinstance.py
>+++ b/ipa-server/ipaserver/httpinstance.py
>@@ -160,6 +160,16 @@ class HTTPInstance(service.Service):
>             ca.create_server_cert("Server-Cert", "cn=%s,ou=Apache Web Server" % self.fqdn, ds_ca)
>             ca.create_signing_cert("Signing-Cert", "cn=%s,ou=Signing Certificate,o=Identity Policy Audit" % self.fqdn, ds_ca)
> 
>+        # Fix the database permissions
>+        os.chmod(NSS_DIR + "/cert8.db", 0640)
>+        os.chmod(NSS_DIR + "/key3.db", 0640)
>+        os.chmod(NSS_DIR + "/secmod.db", 0640)
>+
>+        pent = pwd.getpwnam("apache")
>+        os.chown(NSS_DIR + "/cert8.db", 0, pent.pw_gid )
>+        os.chown(NSS_DIR + "/key3.db", 0, pent.pw_gid )
>+        os.chown(NSS_DIR + "/secmod.db", 0, pent.pw_gid )
>+
>     def __setup_autoconfig(self):
>         prefs_txt = ipautil.template_file(ipautil.SHARE_DIR + "preferences.html.template", self.sub_dict)
>         prefs_fd = open("/usr/share/ipa/html/preferences.html", "w")
>-- 
>1.5.3.3
>

Actions: View | Diff

Attachments on bug 444602: 304123