[Pkg-samba-maint] r2147 - trunk/samba/debian

[vorlon at alioth.debian.org]

Author: vorlon
Date: 2008-08-27 07:51:37 +0000 (Wed, 27 Aug 2008)
New Revision: 2147

Modified:
   trunk/samba/debian/samba.postinst
Log:
take care of fixing up the group_mapping.ldb perms on upgrade

Modified: trunk/samba/debian/samba.postinst
===================================================================
--- trunk/samba/debian/samba.postinst	2008-08-27 07:42:11 UTC (rev 2146)
+++ trunk/samba/debian/samba.postinst	2008-08-27 07:51:37 UTC (rev 2147)
@@ -82,6 +82,14 @@
 
 # ------------------------- Debconf questions end ---------------------
 
+# fix the permissions on group_mapping.ldb (CVE-2008-3789)
+if dpkg --compare-versions "$2" lt-nl 2:3.2.2-1 \
+   && dpkg --compare-versions "$2" ge 3.2.0~pre2-1 \
+   && [ -e /var/lib/samba/group_mapping.ldb ]
+then
+	chmod 0600 /var/lib/samba/group_mapping.ldb
+fi
+
 # move a tdb that should have been in /var/lib all along
 if dpkg --compare-versions "$2" lt-nl 3.0.25b-2 \
    && dpkg --compare-versions "$2" ge 3.0.23-1 \