On Tue, Aug 16, 2016 at 8:29 PM, Jakub Hrozek <jhrozek(a)redhat.com> wrote:
On Tue, Aug 16, 2016 at 05:01:55PM +0200, Jakub Hrozek wrote:
> To test, run:
> rpm -qf /var/lib/sss/secrets/
> the directory was unowned before and should be owned by sssd-common now.
By the way Fabiano asked on IRC why I owned the directory as root.root
and not sssd.sssd. The reasons are:
- this is compatible with how the SECDB directory is created in
- we never tested (AFAIK) the secrets responder as non-root
- the secrets should be accessible to root mostly anyway
sssd-devel mailing list
I wonder if your patch also doesn't solve:
Can you check and, if it does, mention it in the commit message?