Safer ud-replicate

diff --git a/ud-replicate b/ud-replicate
index 34ee677..8ab5ade 100755 (executable)
--- a/ud-replicate
+++ b/ud-replicate
@@ -10,6 +10,6 @@ trap "rm -f lock > /dev/null 2>&1" exit
 rsync -e ssh -rp sshdist@samosa:/var/cache/userdir-ldap/hosts/$HOST . > /dev/null 2>&1
 makedb $HOST/passwd.tdb -o passwd.db > /dev/null 2>&1
 (umask 027 && makedb $HOST/shadow.tdb -o shadow.db) > /dev/null 2>&1
-chown root.shadow shadow.db
+chown root.shadow shadow.db; chmod 0640 shadow.db
 makedb $HOST/group.tdb -o group.db > /dev/null 2>&1
 ln -sf $HOST/ssh-rsa-shadow . > /dev/null 2>&1