userdir-ldap-slapd.conf.in: Rhonda points out dnsZoneEntry should not be world readable

diff --git a/debian/changelog b/debian/changelog
index 9c1bcac..0839d77 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,8 +1,9 @@
 userdir-ldap (0.3.87) UNRELEASED; urgency=medium
 
-  * 
+  * userdir-ldap-slapd.conf.in: Rhonda points out dnsZoneEntry should not be
+    world readable
 
- -- Peter Palfrader <weasel@debian.org>  Sun, 07 Dec 2014 16:43:59 +0100
+ -- Peter Palfrader <weasel@debian.org>  Fri, 17 Apr 2015 20:34:18 +0200
 
 userdir-ldap (0.3.86) unstable; urgency=medium
 

diff --git a/userdir-ldap-slapd.conf.in b/userdir-ldap-slapd.conf.in
index 63ccf7f..f8f3303 100644 (file)
--- a/userdir-ldap-slapd.conf.in
+++ b/userdir-ldap-slapd.conf.in
@@ -86,7 +86,7 @@ access to attrs=facsimileTelephoneNumber,telephoneNumber,postalAddress,postalCod
        by * none
 
 # rest is globally readable
-access to attrs=access,accountComment,accountStatus,admin,allowedGroups,allowedHost,architecture,bandwidth,cn,comment,dc,description,disk,distribution,dnsTTL,dnsZoneEntry,exportOptions,gecos,gid,gidNumber,homeDirectory,host,hostname,icqUin,ipHostNumber,ircNick,jabberJID,keyFingerPrint,labeledURI,mXRecord,machine,member,memory,mn,objectClass,ou,physicalHost,purpose,shadowExpire,shadowLastChange,shadowMax,shadowMin,shadowWarning,sn,sponsor,sponsor-admin,sshRSAHostKey,status,subGroup,supplementaryGid,uid,uidNumber
+access to attrs=access,accountComment,accountStatus,admin,allowedGroups,allowedHost,architecture,bandwidth,cn,comment,dc,description,disk,distribution,dnsTTL,exportOptions,gecos,gid,gidNumber,homeDirectory,host,hostname,icqUin,ipHostNumber,ircNick,jabberJID,keyFingerPrint,labeledURI,mXRecord,machine,member,memory,mn,objectClass,ou,physicalHost,purpose,shadowExpire,shadowLastChange,shadowMax,shadowMin,shadowWarning,sn,sponsor,sponsor-admin,sshRSAHostKey,status,subGroup,supplementaryGid,uid,uidNumber
        by * read
 
 access to *