kdc.key should not be visible to all

While the world certainly is interested in our privates, we
should not just go ahead and show it to them.

https://pagure.io/freeipa/issue/6973

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
This commit is contained in:
Stanislav Laznicka
2017-05-31 14:14:34 +02:00
committed by Martin Babinsky
parent 71adc8cd3f
commit 3b6892783e

View File

@@ -370,8 +370,8 @@ def request_cert(
request_parameters['cert-postsave-command'] = post_command
if perms:
request_parameters['key-perms'] = perms[0]
request_parameters['cert-perms'] = perms[1]
request_parameters['cert-perms'] = perms[0]
request_parameters['key-perms'] = perms[1]
result = cm.obj_if.add_request(request_parameters)
try: