From: Tollef Fog Heen <tfheen@err.no>
Date: Tue, 23 Jul 2019 19:43:42 +0000 (+0200)
Subject: Restrict access to totpSeed
X-Git-Url: https://git.adam-barratt.org.uk/?p=mirror%2Fuserdir-ldap.git;a=commitdiff_plain;h=30887642f49a72a319950368542c7d1e7d4d1e74

Restrict access to totpSeed
---

diff --git a/userdir-ldap-slapd.conf.in b/userdir-ldap-slapd.conf.in
index eca64fd..be4988c 100644
--- a/userdir-ldap-slapd.conf.in
+++ b/userdir-ldap-slapd.conf.in
@@ -67,6 +67,10 @@ access to attrs=c,l,loginShell,ircNick,labeledURI,icqUIN,jabberJID,onVacation,bi
 access to attrs=userPassword,sudoPassword,webPassword,rtcPassword,bATVToken
 	by * compare
 
+# inaccessible to everybody
+access to attrs=totpSeed
+	by * none
+
 # readable only by self
 access to attrs=sshrsaauthkey
 	by self read