Christian Heimes ba8cbb8c62 Ensure that public cert and CA bundle are readable ...

In CIS hardened mode, the process umask is 027. This results in some
files not being world readable. Ensure that write_certificate_list()
calls in client installer, server installer, and upgrader create cert
bundles with permission bits 0644.

Fixes: https://pagure.io/freeipa/issue/7594
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Tibor Dudlak <tdudlak@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2018-06-27 11:05:01 +02:00

..

advise

ipa-advise: remove plugin config-fedora-authconfig

2018-05-21 14:32:38 -04:00

dnssec

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

install

Ensure that public cert and CA bundle are readable

2018-06-27 11:05:01 +02:00

plugins

ipaserver config plugin: Increase search records minimum limit

2018-06-21 14:42:15 -04:00

secrets

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

dcerpc_common.py

trust: detect and error out when non-AD trust with IPA domain name exists

2017-12-07 21:18:51 +02:00

dcerpc.py

Use intended format() method of translation object

2018-06-21 15:30:58 +02:00

dns_data_management.py

DNS update: reduce timeout for CA records

2017-08-30 13:02:59 +02:00

Makefile.am

Build: Makefiles for Python packages

2016-11-09 13:08:32 +01:00

p11helper.py

py3: softhsm key_id must be bytes

2017-06-01 09:24:24 +02:00

rpcserver.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

servroles.py

Removes NTP server role from servroles and description

2018-04-09 11:00:02 -04:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Have all the scripts run in python 3 by default

2018-02-15 18:43:12 +01:00

topology.py

fix incorrect suffix handling in topology checks

2017-06-05 18:37:37 +02:00