[debian-edu-commits] [Git][debian-edu/debian-edu-config][buster-security] Improve debian/debian-edu-config.postinst fix to only run once on upgrades.

[Dominik George]

Dominik George pushed to branch buster-security at Debian Edu / debian-edu-config


Commits:
91322195 by Holger Levsen at 2019-12-16T16:07:27Z
Improve debian/debian-edu-config.postinst fix to only run once on upgrades.

Signed-off-by: Holger Levsen <holger at layer-acht.org>

- - - - -


2 changed files:

- debian/changelog
- debian/debian-edu-config.postinst


Changes:

=====================================
debian/changelog
=====================================
@@ -5,6 +5,10 @@ debian-edu-config (2.10.65+deb10u3) buster-security; urgency=high
     - Set proper rights for users in kadm5.acl file. (Closes: #946797)
   * Adjust debian/debian-edu-config.postinst to fix kadm5.acl upon upgrades.
 
+  [ Holger Levsen ]
+  * Improve debian/debian-edu-config.postinst fix to only run once on
+    upgrades.
+
  -- Dominik George <natureshadow at debian.org>  Mon, 16 Dec 2019 16:29:19 +0100
 
 debian-edu-config (2.10.65+deb10u2) buster; urgency=medium


=====================================
debian/debian-edu-config.postinst
=====================================
@@ -257,10 +257,12 @@ configure)
         cp /etc/cfengine3/debian-edu/promises.cf /var/lib/cfengine3/inputs
     fi
 
-    # Set proper rights for users.
-    if [ -f /etc/krb5kdc/kadm5.acl ] ; then
-        sed -i 's/\(\*@INTERN[[:space:]]*\)cil/\1CIl/' /etc/krb5kdc/kadm5.acl
-        service krb5-admin-server restart
+    # Set proper rights for users - see #946797
+    if dpkg --compare-versions "$2" le "2.11.9" ; then
+        if [ -f /etc/krb5kdc/kadm5.acl ] ; then
+            sed -i 's/\(\*@INTERN[[:space:]]*\)cil/\1CIl/' /etc/krb5kdc/kadm5.acl
+            service krb5-admin-server restart
+        fi
     fi
     ;;
 esac



View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/commit/91322195965f091f419132ea7fd733d502bb0dee

-- 
View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/commit/91322195965f091f419132ea7fd733d502bb0dee
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-edu-commits/attachments/20191216/1d52d84c/attachment-0001.html>