[Freeipa-devel] [PATCH] set perms on mod_nss database

[Simo Sorce]

On Tue, 2008-04-29 at 10:39 -0400, Rob Crittenden wrote:
> The version of NSS in Fedora 9 required changes to mod_nss to do the 
> NSS_Initialize() in the children. This means that the apache user
> needs 
> to be able to read the database.
> 
> The solution was to set the database mode to 640 root:apache.
> 
> IPA creates its own database and sets the mode to 600 root:root
> 
> The installer needs to accommodate this change.
> 
> The F9 package has this fix as a patch in the spec file. We need to 
> commit this to the tree as well.


Ack

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York