Change the permission of the new config file /etc/systemd/system/pki-tomcatd@pki-tomcat.service.d/ipa.conf to 644. This fixes the systemd warning Configuration file /etc/systemd/system/pki-tomcatd@pki-tomcat.service.d/ipa.conf is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway. Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>