From: Ralph Wuerthner <ralph.wuerthner@de.ibm.com>
Date: Wed, 26 Feb 2020 13:01:50 +0000 (+0100)
Subject: s3:smbprofile: make smbprofile.tdb none readable for others
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4a6837d48cb46c9889a85643738fa4e642ce0ded;p=thirdparty%2Fsamba.git

s3:smbprofile: make smbprofile.tdb none readable for others

Signed-off-by: Ralph Wuerthner <ralph.wuerthner@de.ibm.com>
Reviewed-by: Xavi Hernandez <xhernandez@redhat.com>
Reviewed-by: Martin Schwenke <martin@meltin.net>
Reviewed-by: Anoop C S <anoopcs@samba.org>
---

diff --git a/source3/profile/profile.c b/source3/profile/profile.c
index f7768ef61f3..b4820f37477 100644
--- a/source3/profile/profile.c
+++ b/source3/profile/profile.c
@@ -141,7 +141,7 @@ bool profile_setup(struct messaging_context *msg_ctx, bool rdonly)
 	smbprofile_state.internal.db = tdb_wrap_open(
 		NULL, db_name, 0,
 		rdonly ? 0 : TDB_CLEAR_IF_FIRST|TDB_MUTEX_LOCKING,
-		O_CREAT | (rdonly ? O_RDONLY : O_RDWR), 0644);
+		O_CREAT | (rdonly ? O_RDONLY : O_RDWR), 0640);
 	TALLOC_FREE(db_name);
 	if (smbprofile_state.internal.db == NULL) {
 		return false;