ldb: Fix permissions of group_mapping.ldb.

This one fixes bug #5715 and CVE-2008-3789.
(cherry picked from commit a94f44c49f668fcf12f4566777a668043326bf97)
(This used to be commit 2eaf4ed62220246bcc1a9702166b0b4f381fdae3)

diff --git a/source3/groupdb/mapping_ldb.c b/source3/groupdb/mapping_ldb.c
index 6775f612e79bb419b40f60953852d3d18af52df0..ce65d7c46d571c506329877b2481cdbf3a810295 100644 (file)
--- a/source3/groupdb/mapping_ldb.c
+++ b/source3/groupdb/mapping_ldb.c
@@ -74,7 +74,13 @@ static bool init_group_mapping(void)
        if (ret != LDB_SUCCESS) {
                goto failed;
        }
-       
+
+       /* force the permissions on the ldb to 0600 - this will fix
+          existing databases as well as new ones */
+       if (chmod(db_path, 0600) != 0) {
+               goto failed;
+       }
+
        if (!existed) {
                /* initialise the ldb with an index */
                struct ldb_ldif *ldif;