X-Git-Url: https://git.hcoop.net/hcoop/domtool2.git/blobdiff_plain/988c0f6aa53b84f03848cf418a0006e9e2ca793b..660f5874aa860c9cb2bf4c3022aca4d971ae815c:/scripts/domtool-publish

diff --git a/scripts/domtool-publish b/scripts/domtool-publish
index b9f6ffc..9a9a01a 100755
--- a/scripts/domtool-publish
+++ b/scripts/domtool-publish
@@ -40,8 +40,8 @@ case $1 in
 		/usr/bin/rsync -r --delete /var/domtool/zones/ /etc/bind/zones/
 		/bin/chown -R bind /etc/bind/zones
 		/bin/cp /var/domtool/named.conf.local /etc/bind/
-		/bin/chown root:bind_config /etc/bind/named.conf.local
-		/bin/chmod u=rw,g=rw,o=r /etc/bind/named.conf.local
+		/bin/chown root:bind /etc/bind/named.conf.local
+		/bin/chmod 644 /etc/bind/named.conf.local
 		/etc/init.d/bind9 restart
 	;;
 	exim)
@@ -79,6 +79,11 @@ case $1 in
 		/etc/init.d/apache2 reload
         ;;
         firewall)
+	       # Ideally this would check if the config worked first
+	       # (ferm failing just uses the previous config at
+	       # least). Does it need to chown/chmod the generated
+	       # rules?
+	       /bin/cp /var/domtool/firewall/*.conf /etc/ferm/
 	       /etc/init.d/ferm reload
 	;;
 	*)