[SCM] Samba Shared Repository - branch v4-2-test updated

Karolin Seeger kseeger at samba.org
Thu Oct 29 11:01:04 UTC 2015

The branch, v4-2-test has been updated
       via  f0238b7 ctdb: open the RO tracking db with perms 0600 instead of 0000
      from  1bbb6bf selftest: Avoid system krb5.conf in "none" test env


- Log -----------------------------------------------------------------
commit f0238b74af8089b7d3a4913d181a09ed107a2535
Author: Michael Adam <obnox at samba.org>
Date:   Tue Oct 27 10:20:31 2015 +0100

    ctdb: open the RO tracking db with perms 0600 instead of 0000
    While 0000 is possible from the UNIX/POSIX point of view,
    these permissions create problems in an environment with
    selinux enabled, which is more strict.
    This aligns the perms of the read only tracking db with other
    internal dbs.
    BUG: https://bugzilla.samba.org/show_bug.cgi?id=11577
    Signed-off-by: Michael Adam <obnox at samba.org>
    Reviewed-by: Amitay Isaacs <amitay at gmail.com>
    Autobuild-User(master): Amitay Isaacs <amitay at samba.org>
    Autobuild-Date(master): Wed Oct 28 06:13:09 CET 2015 on sn-devel-104
    (cherry picked from commit 0a90ed51245d4a7acb23d22e47ee3fd5b83819b0)
    Autobuild-User(v4-2-test): Karolin Seeger <kseeger at samba.org>
    Autobuild-Date(v4-2-test): Thu Oct 29 12:00:24 CET 2015 on sn-devel-104


Summary of changes:
 ctdb/server/ctdb_ltdb_server.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Changeset truncated at 500 lines:

diff --git a/ctdb/server/ctdb_ltdb_server.c b/ctdb/server/ctdb_ltdb_server.c
index 174a460..d6a36a5 100644
--- a/ctdb/server/ctdb_ltdb_server.c
+++ b/ctdb/server/ctdb_ltdb_server.c
@@ -723,7 +723,7 @@ int ctdb_set_db_readonly(struct ctdb_context *ctdb, struct ctdb_db_context *ctdb
 	ctdb_db->rottdb = tdb_open(ropath, 
-			      O_CREAT|O_RDWR, 0);
+			      O_CREAT|O_RDWR, 0600);
 	if (ctdb_db->rottdb == NULL) {
 		DEBUG(DEBUG_CRIT,("Failed to open/create the tracking database '%s'\n", ropath));

Samba Shared Repository

More information about the samba-cvs mailing list