From 7ad4fb5826976530fc193174ba545b9e2f1017e0 Mon Sep 17 00:00:00 2001
From: Lari Huttunen <mit-code@huttu.net>
Date: Tue, 5 Mar 2013 16:23:37 +0100
Subject: [PATCH] postfix + cyrus: Fix key perms.

---
 cyrus/manifests/init.pp   | 4 ++--
 postfix/manifests/init.pp | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/cyrus/manifests/init.pp b/cyrus/manifests/init.pp
index a162d73..46260c6 100644
--- a/cyrus/manifests/init.pp
+++ b/cyrus/manifests/init.pp
@@ -57,9 +57,9 @@ class cyrus {
     file { "${ssl::private}/cyrus.key":
         ensure  => present,
         source  => $cyrus_key,
-        mode    => "0600",
+        mode    => "0640",
         owner   => "root",
-        group   => "root",
+        group   => "mail",
         notify  => Service["cyrus-imapd"],
     }
 
diff --git a/postfix/manifests/init.pp b/postfix/manifests/init.pp
index cdac1ca..8dffa47 100644
--- a/postfix/manifests/init.pp
+++ b/postfix/manifests/init.pp
@@ -86,7 +86,7 @@ class postfix {
         source  => $postfix_key,
         mode    => "0640",
         owner   => "root",
-        group   => "root",
+        group   => "postfix",
         require => Package["postfix"],
         notify  => Service["postfix"],
     }