-fi
-
-# only restore dchroot part into fstab
-grep -A 200 "^# dchroots" fstab >> fstab.originst || true
-mv fstab.originst fstab
-
-# only restore the human users from passwd/group
-for i in passwd group; do
- perl -naF: -e 'print if $F[2] > 1000 && $F[2] < 60000' $i >> $i.originst
- mv $i.originst $i
-done
+ chmod 640 /etc/shadow
+ chown root:shadow /etc/shadow
+ chmod 700 /etc/ssl/private
+ chmod 640 /etc/ssl/private/ssl-cert-*
+ chown root:ssl-cert /etc/ssl/private/ssl-cert*
+
+ # only restore dchroot part into fstab
+ grep -A 200 "^#.*chroot" fstab >> fstab.originst || true
+ mv fstab.originst fstab
+
+ # only restore the human users from passwd/group
+ for i in passwd group; do
+ perl -naF: -e 'print if $F[2] > 1000 && $F[2] < 60000' $i >> $i.originst
+ mv $i.originst $i
+ done