From e588f0bc36b1f199afc41389b052d991453af3f8 Mon Sep 17 00:00:00 2001 From: Jeremy Allison Date: Wed, 27 Aug 2008 11:28:18 -0700 Subject: Be explicit about setting perms for the ldb. Helps others who may use this api. Jeremy. (This used to be commit f0ea0f3502037db878238942ee0729f6940e0b01) --- source3/groupdb/mapping_ldb.c | 3 +++ 1 file changed, 3 insertions(+) (limited to 'source3/groupdb/mapping_ldb.c') diff --git a/source3/groupdb/mapping_ldb.c b/source3/groupdb/mapping_ldb.c index ce65d7c46d..7ce879fb6e 100644 --- a/source3/groupdb/mapping_ldb.c +++ b/source3/groupdb/mapping_ldb.c @@ -60,6 +60,9 @@ static bool init_group_mapping(void) ldb = ldb_init(NULL); if (ldb == NULL) goto failed; + /* Ensure this db is created read/write for root only. */ + ldb_set_create_perms(ldb, 0600); + existed = file_exist(db_path, NULL); if (lp_parm_bool(-1, "groupmap", "nosync", False)) { -- cgit