Tighten permissions for service-bound certificates to 440
This commit is contained in:
+1
-1
@@ -133,7 +133,7 @@
|
||||
# ------------------------------------------------------------------
|
||||
|
||||
# Example service mapping (format: CN:pki_dir:user.group:chmod:service:owner:restartflag:restart|reload:displayname)
|
||||
#set_list DYNTLS_DOMAINSERVICE_LIST "mail02.example365.tld:postfix:root.root:444:postfix:root:1:restart:Postfix"
|
||||
#set_list DYNTLS_DOMAINSERVICE_LIST "mail02.example365.tld:postfix:root.root:440:postfix:root:1:restart:Postfix"
|
||||
|
||||
# ------------------------------------------------------------------
|
||||
# OPTIONAL COMMAND HOOKS
|
||||
|
||||
Reference in New Issue
Block a user