[xinetd] Change config files' permissions

jsynacek jsynacek at fedoraproject.org
Mon Sep 3 08:45:07 UTC 2012


commit 575aba85b7a22c9e542fe3ec3999b15d021285e7
Author: Jan Synacek <jsynacek at redhat.com>
Date:   Mon Sep 3 10:33:17 2012 +0200

    Change config files' permissions
    
    Resolves: #853144

 xinetd.spec |   14 +++++++++-----
 1 files changed, 9 insertions(+), 5 deletions(-)
---
diff --git a/xinetd.spec b/xinetd.spec
index fbd0d34..2de21ea 100644
--- a/xinetd.spec
+++ b/xinetd.spec
@@ -1,7 +1,7 @@
 Summary: A secure replacement for inetd
 Name: xinetd
 Version: 2.3.15
-Release: 3%{?dist}
+Release: 4%{?dist}
 License: xinetd
 Group: System Environment/Daemons
 Epoch: 2
@@ -119,12 +119,12 @@ make
 
 %install
 mkdir -p $RPM_BUILD_ROOT%{_unitdir}
-mkdir -p $RPM_BUILD_ROOT/etc/xinetd.d/
+mkdir -m 700 -p $RPM_BUILD_ROOT/etc/xinetd.d/
 # Remove unneeded service
 rm -f contrib/xinetd.d/ftp-sensor
 %make_install DAEMONDIR=$RPM_BUILD_ROOT/usr/sbin MANDIR=$RPM_BUILD_ROOT/%{_mandir}
-install -m 644 contrib/xinetd.conf $RPM_BUILD_ROOT/etc
-install -m 644 contrib/xinetd.d/* $RPM_BUILD_ROOT/etc/xinetd.d
+install -m 600 contrib/xinetd.conf $RPM_BUILD_ROOT/etc
+install -m 600 contrib/xinetd.d/* $RPM_BUILD_ROOT/etc/xinetd.d
 install -m 644 %{SOURCE1} $RPM_BUILD_ROOT%{_unitdir}
 
 rm -f $RPM_BUILD_ROOT/%{_mandir}/man8/itox*
@@ -133,7 +133,7 @@ rm -f $RPM_BUILD_ROOT/%{_mandir}/man8/xconv.pl*
 rm -f $RPM_BUILD_ROOT/usr/sbin/xconv.pl
 
 mkdir -p $RPM_BUILD_ROOT/etc/sysconfig
-install -m 644 %SOURCE3 $RPM_BUILD_ROOT/etc/sysconfig/xinetd
+install -m 600 %SOURCE3 $RPM_BUILD_ROOT/etc/sysconfig/xinetd
 
 %post
 %systemd_post xinetd.service
@@ -154,6 +154,10 @@ install -m 644 %SOURCE3 $RPM_BUILD_ROOT/etc/sysconfig/xinetd
 %{_mandir}/*/*
 
 %changelog
+* Mon Sep 03 2012 Jan Synáček <jsynacek at redhat.com> - 2:2.3.15-4
+- Change config files' permissions
+- Resolves: #853144
+
 * Wed Aug 22 2012 Jan Synáček <jsynacek at redhat.com> - 2:2.3.15-3
 - Replace the makeinstall macro
 - Add systemd-rpm macros


More information about the scm-commits mailing list