Correctly set permissions on LDAP configuration file to only allow owner / group, since this file contains a multi-master replication password in plain text

pull/4/head
Timothy Pearson 5 years ago
parent a7e5e023a2
commit 81b65a2d55

@ -3375,6 +3375,11 @@ int LDAPManager::writeLDAPConfFile(LDAPRealmConfig realmcfg, LDAPMachineRole mac
delete systemconfig;
if (chmod(KDE_CONFDIR "/ldap/ldapconfigrc", S_IRUSR|S_IWUSR|S_IRGRP) < 0) {
if (errstr) *errstr = TQString("Unable to change permissions of \"%1\"").arg(KDE_CONFDIR "/ldap/ldapconfigrc");
return -1;
}
return 0;
}

Loading…
Cancel
Save