Change default umask to 0026

Change-Id: I9e5627c3abb70d5f08825ce4cee3b7858ad166ee

diff --git a/packaging/cert-svc.spec b/packaging/cert-svc.spec
index 8433bd07f4ceeaf3123b16d83d1b3949da675a53..52b3ff3e571db773c80557639badcc77f4d8d6c1 100644 (file)
--- a/packaging/cert-svc.spec
+++ b/packaging/cert-svc.spec
@@ -192,8 +192,8 @@ fi
 %dir %attr(-, %{user_name}, %{group_name}) %cert_svc_pkcs12
 %dir %attr(-, %{user_name}, %{group_name}) %cert_svc_db_path
 %attr(-, %{user_name}, %{group_name}) %cert_svc_ca_bundle
-%attr(-, %{user_name}, %{group_name}) %cert_svc_db_path/certs-meta.db
-%attr(-, %{user_name}, %{group_name}) %cert_svc_db_path/certs-meta.db-journal
+%attr(640, %{user_name}, %{group_name}) %cert_svc_db_path/certs-meta.db
+%attr(640, %{user_name}, %{group_name}) %cert_svc_db_path/certs-meta.db-journal
 %attr(-, %{user_name}, %{group_name}) %cert_svc_ro_path
 
 %files devel

diff --git a/systemd/cert-server.service.in b/systemd/cert-server.service.in
index 3b5f5c0840bafc5376732564646e59fde0a957ed..88ebc02bce106a34523604b67cce03baf0d72c3b 100644 (file)
--- a/systemd/cert-server.service.in
+++ b/systemd/cert-server.service.in
@@ -6,3 +6,4 @@ ExecStart=@BIN_DIR@/cert-server
 User=@USER_NAME@
 Group=@GROUP_NAME@
 SmackProcessLabel=@SMACK_DOMAIN_NAME@
+UMask=0026