rpms/cyrus-imapd
5
0
Fork 0
Code Issues Pull Requests Releases Activity

Run sscg with proper GID

Browse Source 
sscg should be run as mail group otherwise pem file is not accessible
by mail group thus by imap process
This commit is contained in:
Pavel Zhukov 2019-05-16 09:03:07 +02:00
parent c604c5bde7
commit 64295f2be8
2 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
cyrus-imapd-init.service
View File

@ -7,5 +7,6 @@ ConditionPathExists=!/etc/pki/cyrus-imapd/cyrus-imapd-ca.pem
[Service]
Type=oneshot
Group=mail
RemainAfterExit=no
ExecStart=/usr/bin/sscg --package cyrus-imapd --cert-file /etc/pki/cyrus-imapd/cyrus-imapd.pem --cert-key-file /etc/pki/cyrus-imapd/cyrus-imapd-key.pem --ca-file /etc/pki/cyrus-imapd/cyrus-imapd-ca.pem

5
cyrus-imapd.spec
View File

@ -9,7 +9,7 @@
Name: cyrus-imapd
Version: 3.0.9
Release: 1%{?dist}
Release: 2%{?dist}
%define ssl_pem_file /etc/pki/%name/%name.pem
@ -693,6 +693,9 @@ getent passwd cyrus >/dev/null || /usr/sbin/useradd -c "Cyrus IMAP Server" -d /v
%changelog
* Thu May 16 2019 Pavel Zhukov <pzhukov@redhat.com> - 3.0.9-2
- Run sscg as mail group for proper certs permissions
* Thu Mar 14 2019 Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.9-1
- Update to 3.0.9.