Bug#946797: debian-edu-config: kadm5.acl should set proper rights for users

2019-12-16 Thread Holger Levsen
On Mon, Dec 16, 2019 at 04:58:32PM +0100, Dominik George wrote: > > Wolfgang, many thanks for this bug report and the quick fix. > > I'll upload to unstable right now and will coordinate with DSA and LTS > > the fixes for buster, stretch and jessie. > Are you aware that, as laid out on IRC, I am al

Bug#946797: debian-edu-config: kadm5.acl should set proper rights for users

2019-12-16 Thread Dominik George
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, > Wolfgang, many thanks for this bug report and the quick fix. > I'll upload to unstable right now and will coordinate with DSA and LTS > the fixes for buster, stretch and jessie. Are you aware that, as laid out on IRC, I am already doing that?

Bug#946797: debian-edu-config: kadm5.acl should set proper rights for users

2019-12-16 Thread Holger Levsen
On Mon, Dec 16, 2019 at 12:26:57AM +0100, Wolfgang Schweer wrote: > Also, /etc/krb5kdc/kadm5.acl should be fixed accordingly upon upgrades > by adding something like this to debian-edu-config.postinst: > > [configure case] > fi > + > +# Set proper rights for users. > +if [ -f /etc/krb

Bug#946797: debian-edu-config: kadm5.acl should set proper rights for users

2019-12-16 Thread Holger Levsen
Hi, Wolfgang, many thanks for this bug report and the quick fix. I'll upload to unstable right now and will coordinate with DSA and LTS the fixes for buster, stretch and jessie. On Mon, Dec 16, 2019 at 11:05:33AM +0100, Dominik George wrote: > > Severity: important > I propose this bug to be set

Bug#946797: debian-edu-config: kadm5.acl should set proper rights for users

2019-12-16 Thread Wolfgang Schweer
On Mon, Dec 16, 2019 at 01:09:53PM +0100, Dominik George wrote: > Also, I'd propose to turn the sed command into: > > sed -i 's/\(\*@INTERN[[:space:]]*\)cil/\1CIl/' /etc/krb5kdc/kadm5.acl > > This way, it will not destroy any legitimate additions a local admin made. Good point. Thanks, commit