If -f is used and the output file name with ".new" appended already

exists, unlink it first and then create it safely rather than
truncating it.  This is much safer when creating files in a
world-writable directory.

Also add documentation for keytab merging.

1 files changed, 5 insertions, 0 deletions

diff --git a/NEWS b/NEWS
index d2f12bd..d8c4e00 100644
--- a/NEWS
+++ b/NEWS
@@ -14,6 +14,11 @@ wallet 0.6 (unreleased)
     keytab keys into that file rather than moving aside the old keytab and
     creating a new keytab with only the new keys.
 
+    If -f is used and the output file name with ".new" appended already
+    exists, unlink it first and then create it safely rather than
+    truncating it.  This is much safer when creating files in a
+    world-writable directory.
+
     Support enforcing a naming policy for wallet objects via a Perl
     function in the wallet server configuration file.