- changed the umask handling. We now set the umask to 0 and explicitly

set the mode on all created files. I think this is a better policy.

- change the debug levels on some items

- fix a charset handling bug which affected foreign and extended
charset users

- no longer switch back to the original directory when idle, instead
switch to / as the original directory may not be readable by ordinary
users.

- fix some bugs where the create mode of files was not being
explicitly set (it was relying on the umask and using fopen). Not a
big bug as it only affected obscure commands like the messaging ops.

- got rid of the lock code in the lpq cache as its no longer needed

- rewrote smbrun to be faster and to remove the security hole. We now
don't actually need a external smbrun binary, its all done by smbd.

- add a more explicit warning about uids and gids of -1 or 65535
(This used to be commit 5aa735c940ccdb6acae5f28449d484181c912e49)

1 files changed, 1 insertions, 1 deletions

diff --git a/source3/passdb/smbpass.c b/source3/passdb/smbpass.c
index cd4a7ccf66..275ad5e353 100644
--- a/source3/passdb/smbpass.c
+++ b/source3/passdb/smbpass.c
@@ -60,7 +60,7 @@ do_pw_lock(int fd, int waitsecs, int type)
 
 int pw_file_lock(char *name, int type, int secs)
 {
-	int             fd = open(name, O_RDWR | O_CREAT, 0666);
+	int fd = open(name, O_RDWR | O_CREAT, 0600);
 	if (fd < 0)
 		return (-1);
 	if (do_pw_lock(fd, secs, type)) {