[SSSD] [PATCH] Add expandable sequences to krb5_ccachedir

Simo Sorce ssorce at redhat.com
Wed Feb 24 14:56:47 UTC 2010


On Wed, 24 Feb 2010 12:05:18 +0100
Sumit Bose <sbose at redhat.com> wrote:

> +    old_umask = umask(0000);
> +    ret = mkdir(dirname, 01777);
> +    umask(old_umask);
> +    if (ret != EOK) {
> +        DEBUG(1, ("mkdir [%s] failed: [%d][%s].\n", dirname, errno,
> +                  strerror(errno)));
> +        return errno;
> +    }
> +

NACK.
We do not want to give every user on the system freedom to write what
they want in these directories.

All parents need to be root.root 0755

If the admins wants it differently they will have to pre-create the
parent directories themselves.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York



More information about the sssd-devel mailing list