[Freeipa-devel] [freeipa PR#15] Secure permissions of Custodia server.keys (opened)

[tiran]

tiran's pull request #15: "Secure permissions of Custodia server.keys" was opened

PR body:
Custodia's server.keys file contain the private RSA keys for encrypting
and signing Custodia messages. The file was created with permission 644
and is only secured by permission 700 of the directory
/etc/ipa/custodia. The installer and upgrader ensure that the file
has 600.

https://bugzilla.redhat.com/show_bug.cgi?id=1353936
https://fedorahosted.org/freeipa/ticket/6056

See the full pull-request at https://github.com/freeipa/freeipa/pull/15
... or pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/15/head:pr15
git checkout pr15
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: freeipa-pr-15.patch
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160824/8614fe72/attachment.ksh>