SYSTEMD: don't use 'chown -R' for non-folders

SSSD · Sep 14, 2024 · b7b4050 · b7b4050
1 parent 068dbdf
commit b7b4050
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/src/sysv/systemd/sssd-kcm.service.in b/src/sysv/systemd/sssd-kcm.service.in
@@ -12,8 +12,8 @@ Environment=DEBUG_LOGGER=--logger=files
 ExecStartPre=+-/bin/chown -f root:root @sssdconfdir@
 ExecStartPre=+-/bin/chown -f root:root @sssdconfdir@/sssd.conf
 ExecStartPre=+-/bin/chown -f -R root:root @sssdconfdir@/conf.d
-ExecStartPre=+-/bin/chown -f -R root:root @secdbpath@/*.ldb
-ExecStartPre=+-/bin/chown -f -R root:root @logpath@/sssd_kcm.log
+ExecStartPre=+-/bin/chown -f root:root @secdbpath@/*.ldb
+ExecStartPre=+-/bin/chown -f root:root @logpath@/sssd_kcm.log
 ExecStart=@libexecdir@/sssd/sssd_kcm ${DEBUG_LOGGER}
 CapabilityBoundingSet= CAP_DAC_OVERRIDE CAP_CHOWN CAP_SETGID CAP_SETUID
 SecureBits=noroot noroot-locked

diff --git a/src/sysv/systemd/sssd.service.in b/src/sysv/systemd/sssd.service.in
@@ -14,8 +14,8 @@ ExecStartPre=+-/bin/chown -f root:root @sssdconfdir@
 ExecStartPre=+-/bin/chown -f root:root @sssdconfdir@/sssd.conf
 ExecStartPre=+-/bin/chown -f -R root:root @sssdconfdir@/conf.d
 ExecStartPre=+-/bin/chown -f -R root:root @sssdconfdir@/pki
-ExecStartPre=+-/bin/chown -f -R root:root @dbpath@/*.ldb
-ExecStartPre=+-/bin/chown -f -R root:root @logpath@/*.log
+ExecStartPre=+-/bin/chown -f root:root @dbpath@/*.ldb
+ExecStartPre=+-/bin/chown -f root:root @logpath@/*.log
 ExecStart=@sbindir@/sssd -i ${DEBUG_LOGGER}
 Type=notify
 NotifyAccess=main