[Opendnssec-user] ods-signerd changing file mode of signed zones

[Rickard Bellgrim]

On Fri, Mar 28, 2014 at 11:01 AM, Mathieu Arnold <mat at mat.cc> wrote:

>
>
> +--On 28 mars 2014 07:42:18 +0100 Rickard Bellgrim <rickard at opendnssec.org
> >
> wrote:
> | On Thu, Mar 27, 2014 at 5:45 PM, Mathieu Arnold <mat at mat.cc> wrote:
> |
> |> I've browsed ODS's sources, and can't really figure out why it would
> |> happen, I can't see anywhere where umask is changed, or even where file
> |> modes are used to write to files...
> |>
> |
> |  Are you running SoftHSM 1.3.6? It uses umask when opening the token
> | database, but restores it right after.
> |
> |
> https://github.com/opendnssec/SoftHSMv1/commit/dc2914a396f79bd131e2f620dc
> | 710b7e0bff1b6f
>
> Yes, I am, that solves it then :-)
> As my softhsm token db are still 644, I believe it fails in doing what it
> thinks it does.
>

SoftHSM would only set 600 on new files. It won't change it on existing
files. Your token db was probably created by an earlier version, right?

(It still is an issue that the main application (ods-signer) gets affected.)

// Rickard
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20140328/1ab6848e/attachment.htm>