-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi,
Please unblock dkimproxy and push it to Lenny. It fixes an important
unix rights issue for the domain keys that my package generates. The
public key is now world readable, and the private one is now only
readable by the dkimproxy user and root.
Thanks and sorry for my silly mistake with the 2 keys rights.
Thomas
diff -u dkimproxy-1.0.1/debian/postinst dkimproxy-1.0.1/debian/postinst
- --- dkimproxy-1.0.1/debian/postinst
+++ dkimproxy-1.0.1/debian/postinst
@@ -24,9 +24,12 @@
openssl genrsa -out /var/lib/dkimproxy/private.key 1024
openssl rsa -in /var/lib/dkimproxy/private.key -pubout -out
/var/lib/dkimproxy/public.key
fi
- -chmod 640 /var/lib/dkimproxy/public.key
+chmod 644 /var/lib/dkimproxy/public.key
chown root:dkimproxy /var/lib/dkimproxy/public.key
+chmod 640 /var/lib/dkimproxy/private.key
+chown dkimproxy:dkimproxy /var/lib/dkimproxy/private.key
+
#DEBHELPER#
exit 0
diff -u dkimproxy-1.0.1/debian/changelog dkimproxy-1.0.1/debian/changelog
- --- dkimproxy-1.0.1/debian/changelog
+++ dkimproxy-1.0.1/debian/changelog
@@ -1,3 +1,9 @@
+dkimproxy (1.0.1-7) unstable; urgency=low
+
+ * Better Unix rights for the keys in /var/lib/dkimproxy
+
+ -- Thomas Goirand <[EMAIL PROTECTED]> Mon, 18 Aug 2008 13:08:09 +0800
+
dkimproxy (1.0.1-6) unstable; urgency=low
* The previous version was introducing a bug in the init script (a space
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFIqll4l4M9yZjvmkkRAgMFAKDd++53N1YqKIH82UsUumNeUmBz9wCdE72Q
WW0n6uXfrAWfbhI+Fv9wY6E=
=tadB
-----END PGP SIGNATURE-----
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
