[java-identity-provider COMMIT] /trunk/idp-distribution/src/main/resources/bin/build.xml

[noreply at shibboleth.net]

Author: rdw
Date: Tue Oct 28 06:58:21 2014
New Revision: 6794

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=6794&view=rev
Log:
IDP-487  Lock down conf to be root readable only.

Modified:
    trunk/idp-distribution/src/main/resources/bin/build.xml

Modified: trunk/idp-distribution/src/main/resources/bin/build.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-distribution/src/main/resources/bin/build.xml?rev=6794&r1=6793&r2=6794&view=diff
==============================================================================
--- trunk/idp-distribution/src/main/resources/bin/build.xml (original)
+++ trunk/idp-distribution/src/main/resources/bin/build.xml Tue Oct 28 06:58:21 2014
@@ -646,8 +646,10 @@
 	</target>
 	
 	<target name="reprotect" depends="gettarget">
+		<!-- See IdP 487 -->
         <chmod perm="755" dir="${idp.target.dir}/bin" includes="**/*.sh"/>
         <chmod perm="600" dir="${idp.target.dir}/credentials" includes="**/*.key"/>
+        <chmod perm="600" dir="${idp.target.dir}/conf" includes="**/*"/>
         <chmod perm="444" dir="${idp.target.dir}/system" includes="**/*"/>
         <attrib readonly="true">
             <fileset dir="${idp.target.dir}/system" includes="**/*"/>