On Tue, Aug 16, 2016 at 05:01:55PM +0200, Jakub Hrozek wrote:
To test, run:
rpm -qf /var/lib/sss/secrets/
the directory was unowned before and should be owned by sssd-common now.
CI:
http://sssd-ci.duckdns.org/logs/job/51/74/summary.html
By the way Fabiano asked on IRC why I owned the directory as root.root
and not sssd.sssd. The reasons are:
- this is compatible with how the SECDB directory is created in
Makefile.am
- we never tested (AFAIK) the secrets responder as non-root
- the secrets should be accessible to root mostly anyway