>From 453fda440e6dbfe9a9449e6f6313e532a968a904 Mon Sep 17 00:00:00 2001 From: Michal Zidek Date: Thu, 9 Oct 2014 17:15:56 +0200 Subject: [PATCH 08/19] MONITOR: Allow confdb to be accessed by nonroot user --- src/monitor/monitor.c | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/src/monitor/monitor.c b/src/monitor/monitor.c index 905e66f25601d155557487ae9c7eb6d3145d3a83..d430f96c5af9b45c9641d700d9fbcd3590bdaae6 100644 --- a/src/monitor/monitor.c +++ b/src/monitor/monitor.c @@ -1696,7 +1696,6 @@ static errno_t load_configuration(TALLOC_CTX *mem_ctx, DEBUG(SSSDBG_FATAL_FAILURE, "Fatal error initializing confdb\n"); goto done; } - talloc_zfree(cdb_file); ret = confdb_init_db(config_file, ctx->cdb); if (ret != EOK) { @@ -1712,6 +1711,17 @@ static errno_t load_configuration(TALLOC_CTX *mem_ctx, goto done; } + /* Allow configuration database to be accessible + * when SSSD runs as nonroot */ + ret = chown(cdb_file, ctx->uid, ctx->gid); + if (ret != 0) { + ret = errno; + DEBUG(SSSDBG_FATAL_FAILURE, + "chown failed for [%s]: [%d][%s].\n", + cdb_file, ret, sss_strerror(ret)); + goto done; + } + *monitor = ctx; ret = EOK; -- 1.9.3