Be explicit about setting perms for the ldb. Helps others who may use this api.
authorJeremy Allison <jra@samba.org>
Wed, 27 Aug 2008 18:28:18 +0000 (11:28 -0700)
committerJeremy Allison <jra@samba.org>
Wed, 27 Aug 2008 18:28:18 +0000 (11:28 -0700)
Jeremy.
(This used to be commit f0ea0f3502037db878238942ee0729f6940e0b01)

source3/groupdb/mapping_ldb.c

index ce65d7c..7ce879f 100644 (file)
@@ -60,6 +60,9 @@ static bool init_group_mapping(void)
        ldb = ldb_init(NULL);
        if (ldb == NULL) goto failed;
 
+       /* Ensure this db is created read/write for root only. */
+       ldb_set_create_perms(ldb, 0600);
+
        existed = file_exist(db_path, NULL);
 
        if (lp_parm_bool(-1, "groupmap", "nosync", False)) {