After installing the server, ensure that the naspasswd file

	is readable ONLY by the owner, to minimize security issues...

diff --git a/Makefile b/Makefile
index 946af68..8081f9f 100644 (file)
--- a/Makefile
+++ b/Makefile
@@ -40,6 +40,7 @@ install:
                [ $$i != radiusd.conf.in -a ! -f $(R)$(raddbdir)/$$i ] && \
                 $(INSTALL) -m 644 $$i $(R)$(raddbdir); \
        done; \
+       chmod go-rwx $(R)$(raddbdir)/naspasswd; \
        for i in dictionary*; do \
                [ ! -f $(R)$(raddbdir)/$$i ] && $(INSTALL) -m 644 $$i $(R)$(raddbdir); \
                if [ "`find $$i -newer $(R)$(raddbdir)/$$i`" ]; then \