Attachment 310671 Details for Bug 451098 – fix NSS database file permissions/ownership

[patch] fix NSS database file permissions/ownership

freeipa-53-certinstall.patch (text/plain), 1.33 KB, created by Rob Crittenden on 2008-07-01 14:11:25 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Rob Crittenden

Created: 2008-07-01 14:11:25 UTC

Size: 1.33 KB

patch

obsolete

>From 051e1a2ecb4420c131242816e2af7e768f4f4154 Mon Sep 17 00:00:00 2001
>From: Rob Crittenden <rcrit@ipa.greyoak.com>
>Date: Tue, 1 Jul 2008 09:57:46 -0400
>Subject: [PATCH] Ensure correct permissions and file ownership of Apache NSS database
>
>451098
>---
> ipa-server/ipa-install/ipa-server-certinstall |   12 ++++++++++++
> 1 files changed, 12 insertions(+), 0 deletions(-)
>
>diff --git a/ipa-server/ipa-install/ipa-server-certinstall b/ipa-server/ipa-install/ipa-server-certinstall
>index e769627..7e08921 100644
>--- a/ipa-server/ipa-install/ipa-server-certinstall
>+++ b/ipa-server/ipa-install/ipa-server-certinstall
>@@ -19,6 +19,8 @@
> #
> 
> import sys
>+import os
>+import pwd
> 
> import traceback
> 
>@@ -144,6 +146,16 @@ def main():
>             print server_cert
>             set_http_cert_name(server_cert[0])
> 
>+            # Fix the database permissions
>+            os.chmod(NSS_DIR + "/cert8.db", 0640)
>+            os.chmod(NSS_DIR + "/key3.db", 0640)
>+            os.chmod(NSS_DIR + "/secmod.db", 0640)
>+
>+            pent = pwd.getpwnam("apache")
>+            os.chown(NSS_DIR + "/cert8.db", 0, pent.pw_gid )
>+            os.chown(NSS_DIR + "/key3.db", 0, pent.pw_gid )
>+            os.chown(NSS_DIR + "/secmod.db", 0, pent.pw_gid )
>+
>     except Exception, e:
>         print "an unexpected error occurred: %s" % str(e)
>         traceback.print_exc()
>-- 
>1.5.4.1
>

Actions: View | Diff

Attachments on bug 451098: 310671