Create KDC and kadmind log files with mode 0640 In krb5_klog_init(), use open() and fdopen() to open log files so that we can specify a mode. Specify a mode which doesn't include the group-write, other-read, or other-write bits even if the process umask allows them. [ghudson@mit.edu: wrote commit message, de-indented post-open setup code] https://github.com/krb5/krb5/commit/9914b93516bbce9b1123ed5f9f796b7028944892 Author: Robbie Harwood Committer: Greg Hudson Commit: 9914b93516bbce9b1123ed5f9f796b7028944892 Branch: master src/lib/kadm5/logger.c | 21 ++++++++++++--------- 1 files changed, 12 insertions(+), 9 deletions(-)