Back to bug 1373646

Who When What Removed Added
Florian Weimer 2016-09-07 10:00:58 UTC Status NEW ASSIGNED
Assignee codonell fweimer
Florian Weimer 2016-09-12 08:56:59 UTC Status ASSIGNED POST
Fixed In Version glibc-2.12-1.195.el6
Doc Text Cause: When updating /etc/localtime, the tzdata-update program applies the process umask to determine the file permissions.

Consequence: If the umask is a restrictive value, such as 077, the new /etc/localtime file may not be readable by non-root users.

Fix: When updating /etc/localtime, tzdata-update now sets the permissions to rw-r--r-- (0644) unconditionally.

Result: Non-root users will be able to access the /etc/localtime file even if tzdata-update is run with a restrictive umask.
Doc Type If docs needed, set a value Bug Fix
Zdenek Pytela 2016-09-20 12:46:55 UTC CC dbodnarc
CC zpytela
Martin Cermak 2016-10-12 20:44:14 UTC CC mcermak
Carlos O'Donell 2016-10-13 00:07:39 UTC Status POST MODIFIED
CC codonell
errata-xmlrpc 2016-10-13 02:39:14 UTC Status MODIFIED ON_QA
Sergey Kolosov 2016-10-27 14:55:27 UTC Status ON_QA VERIFIED
CC skolosov
QA Contact qe-baseos-tools skolosov
Zdenek Pytela 2016-11-30 16:25:41 UTC Link ID Red Hat Knowledge Base (Solution) 2787791
Mark Flitter 2017-01-31 11:45:21 UTC CC mflitter
Docs Contact mflitter
Doc Text Cause: When updating /etc/localtime, the tzdata-update program applies the process umask to determine the file permissions.

Consequence: If the umask is a restrictive value, such as 077, the new /etc/localtime file may not be readable by non-root users.

Fix: When updating /etc/localtime, tzdata-update now sets the permissions to rw-r--r-- (0644) unconditionally.

Result: Non-root users will be able to access the /etc/localtime file even if tzdata-update is run with a restrictive umask.
Fix for tzdata-update inheriting an unusable umask

When updating /etc/localtime, tzdata-update applies the current process umask to determine the file permissions.

If the umask is a restrictive value, such as 077, the new /etc/localtime file may not be readable by non-root users. To resolve this, tzdata-update now sets the permissions to rw-r--r-- (0644) unconditionally.
errata-xmlrpc 2017-03-21 01:03:58 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2017-03-21 10:38:14 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2017-03-21 06:38:14 UTC

Back to bug 1373646