From 7f32c6c3ae5f5b387b461fc0aafc6b61f080cf4a Mon Sep 17 00:00:00 2001
From: Arne Fitzenreiter <arne_f@ipfire.org>
Date: Sat, 5 Sep 2009 14:11:20 +0200
Subject: [PATCH] Fix permissions of openvpn lease database.

---
 config/rootfiles/core/31/update.sh | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/config/rootfiles/core/31/update.sh b/config/rootfiles/core/31/update.sh
index fcbee29baf..48afaa9bdc 100644
--- a/config/rootfiles/core/31/update.sh
+++ b/config/rootfiles/core/31/update.sh
@@ -117,7 +117,7 @@ grub-install --no-floppy ${ROOT::`expr length $ROOT`-1} --recheck
 #
 #perl -e "require '/var/ipfire/lang.pl'; &Lang::BuildCacheLang"
 #
-# Add "script-security 3 system" to openvpn config
+# Add some entries to openvpn config
 #
 if [ ! -x "/var/ipfire/ovpn/server.conf" ]; then
 	grep -q "script-security" /var/ipfire/ovpn/server.conf \
@@ -131,8 +131,9 @@ fi
 
 if [ ! -x "/var/ipfire/ovpn/ovpn-leases.db" ]; then
 	touch /var/ipfire/ovpn/ovpn-leases.db
+	chmod 700 /var/ipfire/ovpn/ovpn-leases.db
+	chown nobody:nobody /var/ipfire/ovpn/ovpn-leases.db
 fi
-        
 #
 # Delete old lm-sensor modullist...
 #
-- 
2.39.2