--- rpms/smeserver-openvpn-bridge/contribs7/smeserver-openvpn-bridge.spec	2009/04/12 16:11:15	1.18
+++ rpms/smeserver-openvpn-bridge/contribs7/smeserver-openvpn-bridge.spec	2009/04/14 09:02:42	1.19
@@ -1,4 +1,4 @@
-# $Id: smeserver-openvpn-bridge.spec,v 1.17 2009/03/18 15:58:53 vip-ire Exp $
+# $Id: smeserver-openvpn-bridge.spec,v 1.18 2009/04/12 16:11:15 vip-ire Exp $
 # Authority: vip-ire
 # Name: Daniel Berteaud
 
@@ -6,7 +6,7 @@ Summary: OpenVPN, a strong VPN solution
 %define name smeserver-openvpn-bridge
 Name: %{name}
 %define version 2.0
-%define release 20
+%define release 21
 Version: %{version}
 Release: %{release}%{?dist}
 License: GPL
@@ -36,6 +36,7 @@ Patch19: smeserver-openvpn-bridge-2.0-lo
 Patch20: smeserver-openvpn-bridge-2.0-openvpn_2_1_compat.patch
 Patch21: smeserver-openvpn-bridge-2.0-cipher_auto.patch
 Patch22: smeserver-openvpn-bridge-2.0-remove_obsolete_init_scripts.patch
+Patch23: smeserver-openvpn-bridge-2.0-fix_perms_on_pub_dir.patch
 
 BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot
 BuildArchitectures: noarch
@@ -54,6 +55,10 @@ This package contains all the needed scr
 to have a full working openvpn server running in bridge mode.
 
 %changelog
+* Tue Apr 14 2009 Daniel B. <daniel@firewall-services.com> [2.0-21]
+- Fixe permissions on public directory (pub and ccd) which must be readable
+  by everyone (especially user nobody)
+
 * Sun Apr 12 2009 Daniel B. <daniel@firewall-services.com> [2.0-20]
 - remove obsolete init scripts reset-openvpn and openvpn-bridge
 
@@ -182,6 +187,7 @@ to have a full working openvpn server ru
 %patch20 -p1
 %patch21 -p1
 %patch22 -p1
+%patch23 -p1
 
 %build
 perl createlinks
@@ -199,6 +205,9 @@ perl createlinks
   --file /var/service/openvpn-bridge/run 'attr(0755,root,root)' \
   --file /var/service/openvpn-bridge/log/run 'attr(0755,root,root)' \
   --dir /var/log/openvpn-bridge 'attr(0750,smelog,smelog)' \
+  --dir /etc/openvpn/bridge/pub 'attr(0755,root,root)' \
+  --dir /etc/openvpn/bridge/priv 'attr(0750,root,root)' \
+  --dir /etc/openvpn/bridge/ccd 'attr(0755,root,root)' \
   --file /usr/bin/ovpn-bridge-update-crl  'attr(0750,root,root)' \
   > %{name}-%{version}-filelist