[Pkg-libvirt-commits] [SCM] Libvirt Debian packaging branch, wheezy, updated. debian/0.9.12-11-5-gce7ef48

[Guido Günther]

The following commit has been merged in the wheezy branch:
commit 5bc00dfcb7af814ceb752d58e43004769a31e8fa
Author: Guido Günther <agx at sigxcpu.org>
Date:   Sat Jun 1 12:10:12 2013 +0200

    Make sure qemu.conf isn't world readable by default
    
    since the user might add passwords to it.
    
    Closes: #710537

diff --git a/debian/libvirt-bin.postinst b/debian/libvirt-bin.postinst
index 53119a2..510bee7 100644
--- a/debian/libvirt-bin.postinst
+++ b/debian/libvirt-bin.postinst
@@ -61,6 +61,8 @@ add_statoverrides()
 
     SANLOCK_DIR="/var/lib/libvirt/sanlock"
 
+    QEMU_CONF="/etc/libvirt/qemu.conf"
+
     for dir in ${ROOT_DIRS}; do
         if ! dpkg-statoverride --list "${dir}" >/dev/null 2>&1; then
             chown root:root "${dir}"
@@ -79,6 +81,11 @@ add_statoverrides()
         chown root:root "${SANLOCK_DIR}"
         chmod 0700 "${SANLOCK_DIR}"
     fi
+
+    if ! dpkg-statoverride --list "${QEMU_CONF}" >/dev/null 2>&1; then
+        chown root:root "${QEMU_CONF}"
+        chmod 0600 "${QEMU_CONF}"
+    fi
 }
 
 

-- 
Libvirt Debian packaging