[Pkg-sssd-devel] sssd: Changes to 'master'

[Timo Aaltonen]

 debian/changelog            |    7 +++++++
 debian/sssd-common.dirs     |    1 +
 debian/sssd-common.postinst |    3 ++-
 3 files changed, 10 insertions(+), 1 deletion(-)

New commits:
commit 738ab758400eceee11a57279cb1970ba60762bf2
Author: Timo Aaltonen <tjaalton at debian.org>
Date:   Thu Mar 8 10:27:10 2018 +0200

    common.dirs, common.postinst: Add dir for secrets with correct permissions. (Closes: #892315)

diff --git a/debian/changelog b/debian/changelog
index ee80726..47a1cc4 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+sssd (1.16.0-4) UNRELEASED; urgency=medium
+
+  * common.dirs, common.postinst: Add dir for secrets with correct
+    permissions. (Closes: #892315)
+
+ -- Timo Aaltonen <tjaalton at debian.org>  Thu, 08 Mar 2018 10:26:48 +0200
+
 sssd (1.16.0-3) unstable; urgency=medium
 
   * Install responder service and socket files again.
diff --git a/debian/sssd-common.dirs b/debian/sssd-common.dirs
index 93dad48..c7f4de5 100644
--- a/debian/sssd-common.dirs
+++ b/debian/sssd-common.dirs
@@ -7,4 +7,5 @@ var/lib/sss/mc
 var/lib/sss/pipes
 var/lib/sss/pipes/private
 var/lib/sss/pubconf
+var/lib/sss/secrets
 var/log/sssd
diff --git a/debian/sssd-common.postinst b/debian/sssd-common.postinst
index 47d0884..32500d2 100644
--- a/debian/sssd-common.postinst
+++ b/debian/sssd-common.postinst
@@ -37,6 +37,7 @@ case "$1" in
             $HOME/pipes \
             $HOME/pipes/private \
             $HOME/pubconf \
+            $HOME/secrets \
             /etc/sssd \
             /var/log/sssd
         chown root:sssd $LIBDIR/p11_child
@@ -45,7 +46,7 @@ case "$1" in
         chmod 755 $HOME/gpo_cache $HOME/mc $HOME/pipes $HOME/pubconf
         chmod 750 /var/log/sssd
         chmod 711 /etc/sssd
-        chmod 700 $HOME/db $HOME/pipes/private
+        chmod 700 $HOME/db $HOME/pipes/private $HOME/secrets
         if [ -f /etc/sssd/sssd.conf ]; then
             chown root:root /etc/sssd/sssd.conf
             chmod 0600 /etc/sssd/sssd.conf