protect bind password and hide policies

diff --git a/openvpn-plugin-auth-ldap.spec b/openvpn-plugin-auth-ldap.spec
index ca78a0a4b675f0ecb0cbb724fc7bd9bcfc1dcee2..3b738d0819a075edac65e41a9457838f67201a9a 100644 (file)
--- a/openvpn-plugin-auth-ldap.spec
+++ b/openvpn-plugin-auth-ldap.spec
@@ -66,5 +66,5 @@ rm -rf $RPM_BUILD_ROOT
 %files
 %defattr(644,root,root,755)
 %doc LICENSE README.md
-%config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/auth-ldap.conf
+%config(noreplace) %verify(not md5 mtime size) %attr(640,root,root) %{_sysconfdir}/auth-ldap.conf
 %attr(755,root,root) %{_libdir}/openvpn-auth-ldap.so