- config files shouldn't be readable by all; they contain passwords

Changed files:
    drbd.spec -> 1.135

diff --git a/drbd.spec b/drbd.spec
index e490f2c08b4e8f71d3a749beb544f116c5fd8541..c78c4607ad07e234f700b8afa01c75cb2e7e87d6 100644 (file)
--- a/drbd.spec
+++ b/drbd.spec
@@ -138,9 +138,9 @@ fi
 %attr(754,root,root) /etc/rc.d/init.d/drbd
 %attr(755,root,root) %{_sysconfdir}/ha.d/resource.d/drbddisk
 %attr(755,root,root) %{_sysconfdir}/ha.d/resource.d/drbdupper
-%dir %{_sysconfdir}/drbd.d
-%config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/drbd.conf
-%config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/drbd.d/global_common.conf
+%attr(750,root,root) %dir %{_sysconfdir}/drbd.d
+%attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/drbd.conf
+%attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/drbd.d/global_common.conf
 %{_mandir}/man[58]/*
 %dir /usr/lib/drbd
 %attr(755,root,root) /usr/lib/drbd/*