ldb: Fix permissions of new ldg files.

This one fixes together with 2eaf4ed62 bug #5715 and CVE-2008-3789.

Thanks to Steve Langasek <vorlon@debian.org> for reporting!

Karolin
(cherry picked from commit b666d0a4b597218f5f5020bf36d80d84dcbf7259)

diff --git a/source/lib/ldb/common/ldb.c b/source/lib/ldb/common/ldb.c
index e469c49399ac169617fc6b72efa92bada4268a6c..743711b9672ca73a482767a855c7dc9db439d2a6 100644 (file)
--- a/source/lib/ldb/common/ldb.c
+++ b/source/lib/ldb/common/ldb.c
@@ -51,7 +51,7 @@ struct ldb_context *ldb_init(void *mem_ctx)
        }
 
        ldb_set_utf8_default(ldb);
-       ldb_set_create_perms(ldb, 0666);
+       ldb_set_create_perms(ldb, 0600);
 
        return ldb;
 }