From 5bce520a48128cd5d150c850ab3e843d9835c2d3 Mon Sep 17 00:00:00 2001 From: Peter Palfrader Date: Fri, 17 Apr 2015 20:42:41 +0200 Subject: [PATCH] remove dnsZoneEntry from restricted attributes to match config on db.d.o --- debian/changelog | 5 ++--- userdir-ldap-slapd.conf.in | 4 ++-- 2 files changed, 4 insertions(+), 5 deletions(-) diff --git a/debian/changelog b/debian/changelog index 0839d77..0d12ca6 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,9 +1,8 @@ userdir-ldap (0.3.87) UNRELEASED; urgency=medium - * userdir-ldap-slapd.conf.in: Rhonda points out dnsZoneEntry should not be - world readable + * remove dnsZoneEntry from restricted attributes to match config on db.d.o - -- Peter Palfrader Fri, 17 Apr 2015 20:34:18 +0200 + -- Peter Palfrader Fri, 17 Apr 2015 20:42:12 +0200 userdir-ldap (0.3.86) unstable; urgency=medium diff --git a/userdir-ldap-slapd.conf.in b/userdir-ldap-slapd.conf.in index f8f3303..8794277 100644 --- a/userdir-ldap-slapd.conf.in +++ b/userdir-ldap-slapd.conf.in @@ -73,7 +73,7 @@ access to attrs=sshrsaauthkey by * none # debian.org readable, authenticated user readable -access to attrs=activity-pgp,activity-from,dnsZoneEntry,c,l,loginShell,onVacation,birthDate,mailDisableMessage,gender,emailforward,mailCallout,mailGreylisting,mailRBL,mailRHSBL,mailWhitelist,mailContentInspectionAction,mailDefaultOptions +access to attrs=activity-pgp,activity-from,c,l,loginShell,onVacation,birthDate,mailDisableMessage,gender,emailforward,mailCallout,mailGreylisting,mailRBL,mailRHSBL,mailWhitelist,mailContentInspectionAction,mailDefaultOptions by peername.ip=127.0.0.1 read by domain=alioth.debian.org none by domain.subtree=@@DOMAIN@@ read @@ -86,7 +86,7 @@ access to attrs=facsimileTelephoneNumber,telephoneNumber,postalAddress,postalCod by * none # rest is globally readable -access to attrs=access,accountComment,accountStatus,admin,allowedGroups,allowedHost,architecture,bandwidth,cn,comment,dc,description,disk,distribution,dnsTTL,exportOptions,gecos,gid,gidNumber,homeDirectory,host,hostname,icqUin,ipHostNumber,ircNick,jabberJID,keyFingerPrint,labeledURI,mXRecord,machine,member,memory,mn,objectClass,ou,physicalHost,purpose,shadowExpire,shadowLastChange,shadowMax,shadowMin,shadowWarning,sn,sponsor,sponsor-admin,sshRSAHostKey,status,subGroup,supplementaryGid,uid,uidNumber +access to attrs=access,accountComment,accountStatus,admin,allowedGroups,allowedHost,architecture,bandwidth,cn,comment,dc,description,disk,distribution,dnsTTL,dnsZoneEntry,exportOptions,gecos,gid,gidNumber,homeDirectory,host,hostname,icqUin,ipHostNumber,ircNick,jabberJID,keyFingerPrint,labeledURI,mXRecord,machine,member,memory,mn,objectClass,ou,physicalHost,purpose,shadowExpire,shadowLastChange,shadowMax,shadowMin,shadowWarning,sn,sponsor,sponsor-admin,sshRSAHostKey,status,subGroup,supplementaryGid,uid,uidNumber by * read access to * -- 2.20.1