r18943: Samba4 wants its databases private to root. I know some of them could

potentially be public, but we'd need to think about them
carefully.
(This used to be commit 142a235f663f707eee3f16d0c1265b01fe1ecf32)

diff --git a/source4/lib/db_wrap.c b/source4/lib/db_wrap.c
index e64f4fa647b31c2e03763deb736e604c832af917..b7a6a17ef84d55873a2cc4707c667f1b070760a6 100644 (file)
--- a/source4/lib/db_wrap.c
+++ b/source4/lib/db_wrap.c
@@ -124,6 +124,11 @@ struct ldb_context *ldb_wrap_connect(TALLOC_CTX *mem_ctx,
        if (lp_parm_bool(-1, "ldb", "nosync", False)) {
                flags |= LDB_FLG_NOSYNC;
        }
+
+       /* we usually want Samba databases to be private. If we later
+          find we need one public, we will need to add a parameter to
+          ldb_wrap_connect() */
+       ldb_set_create_perms(ldb, 0600);
        
        ret = ldb_connect(ldb, real_url, flags, options);
        if (ret != LDB_SUCCESS) {