X-Git-Url: http://git.home-dn.net/?p=manu%2Flibnss-mysql-bg.git;a=blobdiff_plain;f=debian%2Flibnss-mysql-bg.postinst;h=d0e4df51e3d807f408feb8e79d1937a5b6de547b;hp=f78ffd14821b499ca7d69e3d10363e2830c08362;hb=232a60b046fdc5946aebb20ca0d2c0ff6be13c3b;hpb=3b68c4617dbfe199b3d8ddd44e4d5ef5e488bb50

diff --git a/debian/libnss-mysql-bg.postinst b/debian/libnss-mysql-bg.postinst
index f78ffd1..d0e4df5 100644
--- a/debian/libnss-mysql-bg.postinst
+++ b/debian/libnss-mysql-bg.postinst
@@ -20,8 +20,12 @@ set -e
 case "$1" in
     configure)
 
-    # Make sur /etc/libnss-mysql-root.cfg isn't world/group readable
-    [ -f /etc/libnss-mysql-root.cfg ] && chmod 0600 /etc/libnss-mysql-root.cfg
+    # Make sur /etc/libnss-mysql-root.cfg is only root:shadow readable
+    if [ -f /etc/libnss-mysql-root.cfg ]
+    then
+        chmod 0640 /etc/libnss-mysql-root.cfg
+        chown root:shadow /etc/libnss-mysql-root.cfg
+    fi
 
     ;;