[Opendnssec-user] Insufficient permissions for /var/softhsm/*.db

Stephane Bortzmeyer bortzmeyer at nic.fr
Sat Oct 31 14:01:22 UTC 2009


[I can no longer find a way to create a new ticket on Trac. Where
should I look? In the mean time, I report here.]

By default, using SoftHSM get:

% sudo ls -al /var/softhsm 
total 32
drwx------  2 root root  4096 Oct 27 15:14 .
drwxr-xr-x 19 root root  4096 Oct 27 12:14 ..
-rw-r--r--  1 root root 24576 Oct 27 15:14 slot0.db

OK, the directory is protected but not the database. I would prefer a
more "belts and suspenders" approach where the database would be in
mode 0600.



More information about the Opendnssec-user mailing list