Hi, Spec file modified so that /var/lib/ipa/pki-ca/publish/ is owned by pkiuser group.
https://fedorahosted.org/freeipa/ticket/3727 Tomas
From 29e2368a0afc1aa55948ee34a51eab6519ee0cf2 Mon Sep 17 00:00:00 2001 From: Tomas Babej <tba...@redhat.com> Date: Thu, 20 Jun 2013 15:49:58 +0200 Subject: [PATCH] Change group ownership of CRL publish directory Spec file modified so that /var/lib/ipa/pki-ca/publish/ is owned by pkiuser group. https://fedorahosted.org/freeipa/ticket/3727 --- freeipa.spec.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/freeipa.spec.in b/freeipa.spec.in index 239811ac26aa84e1928cefb9c3adac58326ad9a7..699f6e31f8614ea654ad2bfb66e1c1441b238061 100644 --- a/freeipa.spec.in +++ b/freeipa.spec.in @@ -710,7 +710,7 @@ fi %attr(700,root,root) %dir %{_localstatedir}/lib/ipa/sysrestore %attr(700,root,root) %dir %{_localstatedir}/lib/ipa/sysupgrade %attr(755,root,root) %dir %{_localstatedir}/lib/ipa/pki-ca -%attr(755,root,root) %dir %{_localstatedir}/lib/ipa/pki-ca/publish +%attr(755,root,pkiuser) %dir %{_localstatedir}/lib/ipa/pki-ca/publish %attr(755,root,root) %{_libdir}/krb5/plugins/kdb/ipadb.so %{_mandir}/man1/ipa-replica-conncheck.1.gz %{_mandir}/man1/ipa-replica-install.1.gz -- 1.8.1.4
_______________________________________________ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel