IdP files/directories permissions "reset"

[Peter Schober]

Youssef GHORBAL via users <users at shibboleth.net> [2025-04-03 19:40 CEST]:
> I've somehow butchered permissions/ownerships of an IdP installation directory (/opt/shibboleth-idp)
> Is there a refrence somewhere I can check to reset to the
> expected/default permissions of files/dirs. Like "credentials/*" is
> supposed to be chmod xxx (same question for files ownership
> regarding the usage of a "jetty" user/group that will run the
> service)

FWIW, here's a snippet I include in a few places within my own
documentation, after having installed the IDP as root (i.e., anything
not handled by that sequence of commands still belongs to root):
https://wiki.univie.ac.at/display/federation/IDP+5+include+file-system-permissions
(Obviously) that assumes 'tomcat' as the user the JVM runs under.

-peter