On 04/04/16 23:48, Pat Riehecky wrote:
> On 04/03/2016 03:21 AM, Steven Haigh wrote:
>> Recently I've been using 'yum verify' to examine some storage issues
>> with file system corruption (not an SL7 problem). I've been noticing
>> that a lot of permissions at runtime get changed - which causes yum
>> verify to point these out.
>>
>> Its my opinion that the permissions that are needed at runtime for
>> various things should actually be packaged into the RPMs installed -
>> therefore there should be no difference between install time and runtime
>> permissions.
>>
>> For example:
>> $ yum verify
>> Loaded plugins: fastestmirror, verify
>> ==================== Installed Packages ====================
>> bind.x86_64 : The Berkeley Internet Name Domain (BIND) DNS (Domain Name
>> System) server
>>      File: /run/named
>>          Problem:  mode does not match
>>          Current:  user:wrx, group:wrx, other:---
>>          Original: user:wrx, group:-rx, other:-rx
>>
>> bind-chroot.x86_64 : A chroot runtime environment for the ISC BIND DNS
>> server, named(8)
>>      File: /var/named/chroot/usr/lib64/bind
>>          Problem:  group does not match
>>          Current:  root
>>          Original: named
>>                                     --------
>>          Problem:  mode does not match
>>          Current:  user:wrx, group:-rx, other:-rx
>>          Original: user:wrx, group:-rx, other:---
>>
>> filesystem.x86_64 : The basic directory layout for a Linux system
>>      File: /mnt
>>          Problem:  mode does not match
>>          Current:  user:-rx, group:-rx, other:-rx
>>          Original: user:wrx, group:-rx, other:-rx
>> verify done
>>
>> If you fix these permissions back to the default, then they get changed
>> again via the reboot / systemctl stop/start.
>>
>> My question is, shouldn't these be corrected upstream in the packages
>> provided?
>>
> 
> Getting this corrected upstream makes sense to me.  Can I have you file
> a few bugzillas and put me on the CC list?

Ok, I've finally gotten around to doing this - the excitement of an IPv6
deployment across all my kit at home just had to be done first ;)

I've added you to the CC list on the two I've filed - I figure submit
two as canaries to see what the feedback / result will be and go from
there...

-- 
Steven Haigh

Email: [log in to unmask]
Web: https://www.crc.id.au
Phone: (03) 9001 6090 - 0412 935 897