-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 10/29/2013 01:05 PM, Jakub Hrozek wrote:
On Tue, Oct 29, 2013 at 01:03:33PM -0400, Stephen Gallagher wrote:
> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
>
> On 10/29/2013 12:57 PM, Lukas Slebodnik wrote:
>> On (29/10/13 17:27), Jakub Hrozek wrote:
>>> When I started writing 1.11.2 release notes, I realized that
>>> we did not amend documentation when we removed the ability to
>>> create public krb5 directories.
>>
>>> From aaacd6ed5f46df6a23d54553c1ce48a5c61e2626 Mon Sep 17
>>> 00:00:00 2001 From: Jakub Hrozek <jhrozek(a)redhat.com> Date:
>>> Tue, 29 Oct 2013 17:26:39 +0100 Subject: [PATCH] MAN:
>>> Document that krb5 directories can only be created as
>>> private
>>>
>>> --- src/man/sssd-krb5.5.xml | 13 +++---------- 1 file
>>> changed, 3 insertions(+), 10 deletions(-)
>>>
>>> diff --git a/src/man/sssd-krb5.5.xml
>>> b/src/man/sssd-krb5.5.xml index
>>>
e8d693aa8ad6ff11c88ee0e9d5d7445c610baad9..cda99abb5878c963ce5791467defd463c7781226
>>>
>>>
100644 --- a/src/man/sssd-krb5.5.xml +++
>>> b/src/man/sssd-krb5.5.xml @@ -137,16 +137,9 @@
<para>
>>> Directory to store credential caches. All the substitution
>>> sequences of krb5_ccname_template can -
>>> be used here, too, except %d and %P. If the - directory does
>>> not exist, it will be created. If %u, - %U, %p or %h are
>>> used, a private directory belonging - to the user is created.
>>> Otherwise, a public directory - with restricted deletion flag
>>> (aka sticky bit, as - described in -
>>> <citerefentry> - <refentrytitle>chmod</refentrytitle> -
>>> <manvolnum>1</manvolnum> - </citerefentry> for details) is
>>> created. + be used here, too, except %d and %P. + The
>>> directory is created as private, owned by the + user, with
>>> permissions set to 0700.
>>
>> Stephen suggested on IRC following sentence.
>>
>> The directory is created as private and owned by the user, with
>> permissions set to 0700 (unusable by any other user).
>>
>
> Sorry, on a second reading, just drop "(unusable by any other
> user)". It's redundant.
Thanks for the review, a new patch is attached.
Ack
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)
Comment: Using GnuPG with Thunderbird -
http://www.enigmail.net/
iEYEARECAAYFAlJv6xYACgkQeiVVYja6o6NjHACeLrlkO4rTs+5dklUZhfkprxl2
R8oAoKd7CoFHgpcSowTDQaiCpIh3OvbC
=B4lh
-----END PGP SIGNATURE-----