Christian Heimes d9ab0097e1 Secure permissions of Custodia server.keys ...

Custodia's server.keys file contain the private RSA keys for encrypting
and signing Custodia messages. The file was created with permission 644
and is only secured by permission 700 of the directory
/etc/ipa/custodia. The installer and upgrader ensure that the file
has 600.

https://bugzilla.redhat.com/show_bug.cgi?id=1353936
https://fedorahosted.org/freeipa/ticket/6056

Reviewed-By: Martin Basti <mbasti@redhat.com>

2016-08-24 16:59:43 +02:00

..

plugins

DNS server upgrade: do not fail when DNS server did not respond

2016-08-16 14:23:30 +02:00

server

support schema files from third-party plugins

2016-08-19 15:34:26 +02:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

adtrustinstance.py

DNS Locations: hide option --no-msdcs in adtrust-install

2016-06-27 13:35:00 +02:00

bindinstance.py

Remove sys.exit from install modules and scripts

2016-08-16 18:22:44 +02:00

ca.py

Remove sys.exit from install modules and scripts

2016-08-16 18:22:44 +02:00

cainstance.py

Remove sys.exit from install modules and scripts

2016-08-16 18:22:44 +02:00

certs.py

Create server and host certs with DNS altname

2016-07-19 14:18:04 +02:00

custodiainstance.py

Secure permissions of Custodia server.keys

2016-08-24 16:59:43 +02:00

dns.py

Remove sys.exit from install modules and scripts

2016-08-16 18:22:44 +02:00

dnskeysyncinstance.py

delegate removal of master DNS record and replica keys to separate functions

2016-06-17 18:55:19 +02:00

dogtaginstance.py

Skip CS.cfg update if cert nickname not known

2016-06-29 08:52:29 +02:00

dsinstance.py

support schema files from third-party plugins

2016-08-19 15:34:26 +02:00

httpinstance.py

Configure httpd service from installer instead of directly from RPM

2016-04-22 10:19:25 +02:00

installutils.py

Remove sys.exit from install modules and scripts

2016-08-16 18:22:44 +02:00

ipa_backup.py

ipa-backup: backup /etc/tmpfiles.d/dirsrv-<instance>.conf

2016-08-09 18:29:21 +02:00

ipa_cacert_manage.py

Improvements for the ipa-cacert-manage man and help

2016-08-09 16:09:08 +02:00

ipa_kra_install.py

Incorrect message when KRA already installed

2016-05-20 16:17:54 +02:00

ipa_ldap_updater.py

Remove sys.exit from install modules and scripts

2016-08-16 18:22:44 +02:00

ipa_otptoken_import.py

pylint: supress false positive no-member errors

2016-03-02 14:57:36 +01:00

ipa_replica_prepare.py

server install: do not prompt for cert file PIN repeatedly

2016-08-17 15:11:55 +02:00

ipa_restore.py

backup: use in-server API in ipa-backup and ipa-restore

2016-06-30 11:04:05 +02:00

ipa_server_certinstall.py

server install: do not prompt for cert file PIN repeatedly

2016-08-17 15:11:55 +02:00

ipa_server_upgrade.py

Remove unused imports

2015-12-23 07:59:22 +01:00

ipa_winsync_migrate.py

fix incorrect name of ipa-winsync-migrate command in help

2016-03-02 12:52:14 +01:00

kra.py

Modify error message to install first instance of KRA

2015-12-02 17:21:32 +01:00

krainstance.py

Remove sys.exit from install modules and scripts

2016-08-16 18:22:44 +02:00

krbinstance.py

set krbcanonicalname on host entry during krbinstance configuration

2016-06-23 09:48:06 +02:00

ldapupdate.py

fix upgrade: wait for proper DS socket after DS restart

2016-02-23 17:35:20 +01:00

memcacheinstance.py

Use absolute imports

2015-08-12 18:17:23 +02:00

ntpinstance.py

Add NTP to the list of services stored in IPA masters LDAP subtree

2016-06-15 13:51:48 +02:00

odsexporterinstance.py

ipaplatform: Move remaining user/group constants to ipaplatform.constants.

2016-03-23 13:32:55 +01:00

opendnssecinstance.py

Use ODS_USER/ODS_GROUP in opendnssec_conf.template

2016-03-23 13:32:55 +01:00

otpdinstance.py

Enable pylint missing-final-newline check

2015-12-23 07:59:22 +01:00

replication.py

Remove sys.exit from install modules and scripts

2016-08-16 18:22:44 +02:00

schemaupdate.py

Server Upgrade: fix traceback caused by cidict

2015-09-03 14:11:52 +02:00

service.py

Fixes CA always being presented as running

2016-06-15 18:11:28 +02:00

sysupgrade.py

Remove wildcard imports

2015-12-23 07:59:22 +01:00

upgradeinstance.py

Remove wildcard imports

2015-12-23 07:59:22 +01:00