Bug#571631: libapache2-mod-shib2: shib-keygen generates world-readable key file

[Scott Cantor]

> Thank you for the offer!  I think it's going to be a bit tricky for you to
> do something upstream that will also work in Debian without modifications,
> since you won't be able to rely on the group that we're creating as part
> of the package installation, so I suspect we should probably carry a local
> patch here to make the ownership line up with what the package is doing.
> Unless you want to document creation of a particular user and group as
> part of the package installation, but my guess is that probably isn't the
> direction you want to go.

No, but if there's some kind of command line option that can be used to
automate what the script needs to do, you can just suggest that. I'm sure
there are conveniences that would help people running it as non-root, I just
haven't explored it.
 
-- Scott