On 26/09/2020 14.39, Christian Boltz wrote:
However, the directory is packaged with 700 permissions [1], so the problem might come back with the next apache update.
If someone has an idea for a more permanent solution (that also survives apache updates), please speak up ;-)
Regards,
Christian Boltz
[1] # rpm -qvl apache2 |grep ssl.key drwx------ 2 root root 0 Apr 8 2011 /etc/apache2/ssl.key
setfacl -m g:root:rwx /etc/apache2/ssl.key/ after an update, getfacl /etc/apache2/ssl.key/ still shows the extra ACL permissions present. otherwise, we could still write a custom update-script and/or use /etc/permissions or you create a hardlink with ln and let dehydrated access the key there. Because then directory permissions dont apply. -- To unsubscribe, e-mail: heroes+unsubscribe@opensuse.org To contact the owner, e-mail: heroes+owner@opensuse.org