[Pkg-libvirt-commits] [SCM] Libvirt Debian packaging branch, master, updated. debian/1.0.5-3-1-gd233204

[Guido Günther]

The following commit has been merged in the master branch:
commit d233204406248aab8d75224c4524ab05d27178aa
Author: Guido Günther <agx at sigxcpu.org>
Date:   Sat Jun 1 12:10:12 2013 +0200

    Make sure qemu.conf isn't world readable by default
    
    since the user might add passwords to it.
    
    Closes: #710537

diff --git a/debian/libvirt-bin.postinst b/debian/libvirt-bin.postinst
index 5e3f127..3ad45c9 100644
--- a/debian/libvirt-bin.postinst
+++ b/debian/libvirt-bin.postinst
@@ -61,6 +61,8 @@ add_statoverrides()
 
     SANLOCK_DIR="/var/lib/libvirt/sanlock"
 
+    QEMU_CONF="/etc/libvirt/qemu.conf"
+
     for dir in ${ROOT_DIRS}; do
         if ! dpkg-statoverride --list "${dir}" >/dev/null 2>&1; then
             chown root:root "${dir}"
@@ -79,6 +81,11 @@ add_statoverrides()
         chown root:root "${SANLOCK_DIR}"
         chmod 0700 "${SANLOCK_DIR}"
     fi
+
+    if ! dpkg-statoverride --list "${QEMU_CONF}" >/dev/null 2>&1; then
+        chown root:root "${QEMU_CONF}"
+        chmod 0600 "${QEMU_CONF}"
+    fi
 }
 
 

-- 
Libvirt Debian packaging