s3:smbprofile: make smbprofile.tdb none readable for others

Signed-off-by: Ralph Wuerthner <ralph.wuerthner@de.ibm.com>
Reviewed-by: Xavi Hernandez <xhernandez@redhat.com>
Reviewed-by: Martin Schwenke <martin@meltin.net>
Reviewed-by: Anoop C S <anoopcs@samba.org>

diff --git a/source3/profile/profile.c b/source3/profile/profile.c
index f7768ef61f3dd4049fd2c42dfb36d3944beaecd9..b4820f3747743d5844804fdb95a43c4297d3e20f 100644 (file)
--- a/source3/profile/profile.c
+++ b/source3/profile/profile.c
@@ -141,7 +141,7 @@ bool profile_setup(struct messaging_context *msg_ctx, bool rdonly)
        smbprofile_state.internal.db = tdb_wrap_open(
                NULL, db_name, 0,
                rdonly ? 0 : TDB_CLEAR_IF_FIRST|TDB_MUTEX_LOCKING,
-               O_CREAT | (rdonly ? O_RDONLY : O_RDWR), 0644);
+               O_CREAT | (rdonly ? O_RDONLY : O_RDWR), 0640);
        TALLOC_FREE(db_name);
        if (smbprofile_state.internal.db == NULL) {
                return false;