summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndrew Tridgell <tridge@samba.org>2006-09-27 06:02:07 +0000
committerGerald (Jerry) Carter <jerry@samba.org>2007-10-10 14:20:22 -0500
commit9b1e1e2e5dcfd286af7155ceb824f91cf0e5b5b6 (patch)
treec039182fa4ec9095ce76411263153773b9ec29d7
parent4c3b07b654f4eb9041da0e9a84bc60d667901fe5 (diff)
downloadsamba-9b1e1e2e5dcfd286af7155ceb824f91cf0e5b5b6.tar.gz
samba-9b1e1e2e5dcfd286af7155ceb824f91cf0e5b5b6.tar.bz2
samba-9b1e1e2e5dcfd286af7155ceb824f91cf0e5b5b6.zip
r18943: Samba4 wants its databases private to root. I know some of them could
potentially be public, but we'd need to think about them carefully. (This used to be commit 142a235f663f707eee3f16d0c1265b01fe1ecf32)
-rw-r--r--source4/lib/db_wrap.c5
1 files changed, 5 insertions, 0 deletions
diff --git a/source4/lib/db_wrap.c b/source4/lib/db_wrap.c
index e64f4fa647..b7a6a17ef8 100644
--- a/source4/lib/db_wrap.c
+++ b/source4/lib/db_wrap.c
@@ -124,6 +124,11 @@ struct ldb_context *ldb_wrap_connect(TALLOC_CTX *mem_ctx,
if (lp_parm_bool(-1, "ldb", "nosync", False)) {
flags |= LDB_FLG_NOSYNC;
}
+
+ /* we usually want Samba databases to be private. If we later
+ find we need one public, we will need to add a parameter to
+ ldb_wrap_connect() */
+ ldb_set_create_perms(ldb, 0600);
ret = ldb_connect(ldb, real_url, flags, options);
if (ret != LDB_SUCCESS) {