Skip to content
Snippets Groups Projects

Compare revisions

Changes are shown as if the source revision was being merged into the target revision. Learn more about comparing revisions.

Source

Select target project
No results found

Target

Select target project
  • mika/sssd
  • guillem/debian-pkg-sssd
  • john.veitch/sssd
  • jgullberg/sssd
  • gioele/sssd
  • oktay454/sssd
  • sergiodj/sssd
  • 3v1n0/sssd
  • jfalk-guest/sssd
  • sathieu/sssd
  • dpward/sssd
  • sssd-team/sssd
  • ahasenack/sssd
  • jbicha/sssd
  • yrro-guest/sssd
15 results
Show changes
Commits on Source (4)
sssd (2.5.2-3) UNRELEASED; urgency=medium
* rules: Explicitly set sssd-user as root.
* install: Add sssd-pcsc.rules to -common.
* postinst: Correct file/dir permissions and ownership when the daemon
is run as root. (Closes: #994807)
-- Timo Aaltonen <tjaalton@debian.org> Wed, 22 Sep 2021 09:23:33 +0300
sssd (2.5.2-2) unstable; urgency=medium
* rules: Disable tests for now. (Closes: #994479)
......
......@@ -43,6 +43,7 @@ override_dh_auto_configure:
--without-python2-bindings \
--with-syslog=journald \
--with-pid-path=/run \
--with-sssd-user=root \
--with-sudo
override_dh_auto_test:
......
......@@ -62,5 +62,6 @@ usr/share/man/man5/sssd.conf.5*
usr/share/man/man8/idmap_sss.8*
usr/share/man/man8/sssd.8*
usr/share/man/man8/sssd_krb5_locator_plugin.8*
usr/share/polkit-1/rules.d/sssd-pcsc.rules
usr/share/sssd/*
usr/share/systemtap
......@@ -30,7 +30,7 @@ case "$1" in
--gecos "SSSD system user" \
sssd > $OUT
fi
chown sssd:sssd \
chown -R root:root \
$HOME/db \
$HOME/gpo_cache \
$HOME/mc \
......@@ -40,14 +40,19 @@ case "$1" in
$HOME/secrets \
/etc/sssd \
/var/log/sssd
chown root:sssd $LIBDIR/p11_child
chmod 4754 $LIBDIR/p11_child
chmod 755 $HOME/gpo_cache $HOME/mc $HOME/pipes $HOME/pubconf
chmod 751 $HOME/deskprofile
# for easier review keep the same order as on sssd.spec
chmod 700 $HOME/db
chmod 775 $HOME/mc
chmod 700 $HOME/secrets
chmod 751 $HOME/deskprofile
chmod 755 $HOME/pipes
chmod 750 $HOME/pipes/private
chmod 755 $HOME/pubconf
chmod 755 $HOME/gpo_cache
chmod 750 /var/log/sssd
chmod 700 /etc/sssd
chmod 711 /etc/sssd
chmod 700 $HOME/db $HOME/pipes/private $HOME/secrets
if [ -f /etc/sssd/sssd.conf ]; then
chown root:root /etc/sssd/sssd.conf
chmod 0600 /etc/sssd/sssd.conf
......
......@@ -5,9 +5,8 @@ LIBDIR=/usr/libexec/sssd
case "$1" in
configure)
chown root:sssd $LIBDIR/selinux_child
chmod 4754 $LIBDIR/selinux_child
chown sssd:sssd /var/lib/sss/keytabs
chmod 0750 $LIBDIR/selinux_child
chown -R root:root /var/lib/sss/keytabs
chmod 700 /var/lib/sss/keytabs
;;
esac
......
......@@ -5,8 +5,7 @@ LIBDIR=/usr/libexec/sssd
case "$1" in
configure)
chown root:sssd $LIBDIR/krb5_child $LIBDIR/ldap_child
chmod 4754 $LIBDIR/krb5_child $LIBDIR/ldap_child
chmod 0750 $LIBDIR/krb5_child $LIBDIR/ldap_child
;;
esac
......
......@@ -5,8 +5,7 @@ LIBDIR=/usr/libexec/sssd
case "$1" in
configure)
chown root:sssd $LIBDIR/proxy_child
chmod 4754 $LIBDIR/proxy_child
chmod 0750 $LIBDIR/proxy_child
;;
esac
......