From f7e0728583726bbaf6b484889e09496b9d1c6f2c Mon Sep 17 00:00:00 2001
From: Gabriel Carneiro <gabriel.chaves.carneiro@gmail.com>
Date: Sun, 17 Nov 2024 21:02:49 -0300
Subject: [PATCH] add permission change in post

---
 DEBIAN/postinst | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/DEBIAN/postinst b/DEBIAN/postinst
index 929c7e6..3f1ee2d 100755
--- a/DEBIAN/postinst
+++ b/DEBIAN/postinst
@@ -6,4 +6,9 @@ set -e
 
 db_get alice-auth/ldap-bind-password
 
-sed -i "s/ldap_default_authtok =.*/ldap_default_authtok = $RET/" /etc/sssd/sssd.conf
+SSSD_CONFIG=/etc/sssd/sssd.conf
+
+sed -i "s/ldap_default_authtok =.*/ldap_default_authtok = $RET/" $SSSD_CONFIG
+
+chmod 600 $SSSD_CONFIG
+chown root:root $SSSD_CONFIG