swtpm/debian/swtpm-tools.postinst.in
Stefan Berger 5d613001c1 debian/rpm: Adjust build and runtime dependencies and directory ownership
Remove tpm-tools from runtime dependencies. Keep trousers for the
creation of the 'tss' user for now. Add python related dependencies.

Adjust the directory ownership for /var/lib/swtpm-localca to tss:root and
the mode flags to 0750. The new CA now may still be created as tss:tss but
users in the tss group will not have access to it.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
2020-08-28 16:27:15 -04:00

10 lines
206 B
Bash

#!/bin/sh
SWTPM_LOCALCA_DIR=@LOCALSTATEDIR@/lib/swtpm-localca
if ! [ -d $SWTPM_LOCALCA_DIR ]; then
mkdir -p $SWTPM_LOCALCA_DIR
chown @TSS_USER@:root $SWTPM_LOCALCA_DIR
chmod 0750 $SWTPM_LOCALCA_DIR
fi