On 10/04/16 12:05, Steven Haigh wrote:
> On 04/04/16 23:48, Pat Riehecky wrote:
>> On 04/03/2016 03:21 AM, Steven Haigh wrote:
>>> Recently I've been using 'yum verify' to examine some storage issues
>>> with file system corruption (not an SL7 problem). I've been noticing
>>> that a lot of permissions at runtime get changed - which causes yum
>>> verify to point these out.
>>>
>>> Its my opinion that the permissions that are needed at runtime for
>>> various things should actually be packaged into the RPMs installed -
>>> therefore there should be no difference between install time and runtime
>>> permissions.
>>>
>>> For example:
>>> $ yum verify
>>> Loaded plugins: fastestmirror, verify
>>> ==================== Installed Packages ====================
>>> bind.x86_64 : The Berkeley Internet Name Domain (BIND) DNS (Domain Name
>>> System) server
>>>      File: /run/named
>>>          Problem:  mode does not match
>>>          Current:  user:wrx, group:wrx, other:---
>>>          Original: user:wrx, group:-rx, other:-rx
>>>
>>> bind-chroot.x86_64 : A chroot runtime environment for the ISC BIND DNS
>>> server, named(8)
>>>      File: /var/named/chroot/usr/lib64/bind
>>>          Problem:  group does not match
>>>          Current:  root
>>>          Original: named
>>>                                     --------
>>>          Problem:  mode does not match
>>>          Current:  user:wrx, group:-rx, other:-rx
>>>          Original: user:wrx, group:-rx, other:---
>>>
>>> filesystem.x86_64 : The basic directory layout for a Linux system
>>>      File: /mnt
>>>          Problem:  mode does not match
>>>          Current:  user:-rx, group:-rx, other:-rx
>>>          Original: user:wrx, group:-rx, other:-rx
>>> verify done
>>>
>>> If you fix these permissions back to the default, then they get changed
>>> again via the reboot / systemctl stop/start.
>>>
>>> My question is, shouldn't these be corrected upstream in the packages
>>> provided?
>>>
>>
>> Getting this corrected upstream makes sense to me.  Can I have you file
>> a few bugzillas and put me on the CC list?
> 
> Ok, I've finally gotten around to doing this - the excitement of an IPv6
> deployment across all my kit at home just had to be done first ;)
> 
> I've added you to the CC list on the two I've filed - I figure submit
> two as canaries to see what the feedback / result will be and go from
> there...

Sorry - for the reference of the list:
	https://bugzilla.redhat.com/1325620
	https://bugzilla.redhat.com/1325621


-- 
Steven Haigh

Email: [log in to unmask]
Web: https://www.crc.id.au
Phone: (03) 9001 6090 - 0412 935 897