From f4881bd81a71b3a08814fc2ff2a7da3153e0c5f5 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Petr=20Men=C5=A1=C3=ADk?= Date: Tue, 14 Jan 2025 13:55:10 +0100 Subject: [PATCH] Add unbound members group access to control key Recent openssl genrsa does not use umask for generated keys. There is no strong reason why every member of unbound group should be able read server key. But control key would be quite useful to be group readable and to allow control access to whole group. Allowing access to control by group membership, not via sudo. --- smallapp/unbound-control-setup.sh.in | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/smallapp/unbound-control-setup.sh.in b/smallapp/unbound-control-setup.sh.in index 4a358f6bd..c2a79a242 100644 --- a/smallapp/unbound-control-setup.sh.in +++ b/smallapp/unbound-control-setup.sh.in @@ -204,7 +204,8 @@ fi # remove unused permissions chmod o-rw \ "$SVR_BASE.pem" \ - "$SVR_BASE.key" \ + "$SVR_BASE.key" +chmod g+r,o-rw \ "$CTL_BASE.pem" \ "$CTL_BASE.key" -- 2.47.2