case "$1" in
configure)
- # Make sur /etc/libnss-mysql-root.cfg isn't world/group readable
- [ -f /etc/libnss-mysql-root.cfg ] && chmod 0600 /etc/libnss-mysql-root.cfg
+ # Make sur /etc/libnss-mysql-root.cfg is only root:shadow readable
+ if [ -f /etc/libnss-mysql-root.cfg ]
+ then
+ chmod 0640 /etc/libnss-mysql-root.cfg
+ chown root:shadow /etc/libnss-mysql-root.cfg
+ fi
;;