-
- # only restore dchroot part into fstab
- grep -A 200 "^# dchroots" fstab >> fstab.originst || true
- mv fstab.originst fstab
-
- # only restore the human users from passwd/group
- for i in passwd group; do
- perl -naF: -e 'print if $F[2] > 1000 && $F[2] < 60000' $i >> $i.originst
- mv $i.originst $i
- done
-
- # only restore some passwords from shadow
- egrep 'martin|netti|joe' shadow >> shadow.originst
- mv shadow.originst shadow
+ chmod 700 /etc/ssl/private
+ chmod 640 /etc/ssl/private/ssl-cert-*
+ chown root:ssl-cert /etc/ssl/private/ssl-cert*
+ echo "none /tmp tmpfs defaults 0 0" >> /etc/fstab