Skip to content

Commit

Permalink
Add unbound members group access to control key
Browse files Browse the repository at this point in the history
Recent openssl genrsa does not use umask for generated keys. There is no
strong reason why every member of unbound group should be able read
server key. But control key would be quite useful to be group readable
and to allow control access to whole group. Allowing access to control
by group membership, not via sudo.
  • Loading branch information
pemensik committed Jan 14, 2025
1 parent c3b5bff commit 0d0f45c
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions smallapp/unbound-control-setup.sh.in
Original file line number Diff line number Diff line change
Expand Up @@ -205,6 +205,7 @@ fi
chmod o-rw \
"$SVR_BASE.pem" \
"$SVR_BASE.key" \
chmod g+r,o-rw \
"$CTL_BASE.pem" \
"$CTL_BASE.key"

Expand Down

0 comments on commit 0d0f45c

Please sign in to comment.