Bug 1321530

Summary: Wrong permissions for firmware files.
Product: [Fedora] Fedora Reporter: Frank Büttner <bugzilla>
Component: libcrystalhdAssignee: Nicolas Chauvet (kwizart) <kwizart>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 23CC: kwizart
Target Milestone: ---Keywords: Reopened
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-07-20 10:28:02 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
The SCAP report part of it. none

Description Frank Büttner 2016-03-28 08:22:26 UTC
Created attachment 1140801 [details]
The SCAP report part of it.

Description of problem:
The firmware files of crystalhd-firmware don't pass the SCAP test because of  wrong permissions.

Version-Release number of selected component (if applicable):
crystalhd-firmware-3.10.0-11.fc23.noarch.rpm

How reproducible:
every time

Steps to Reproduce:
1. run the scap-workbench for fedora

Actual results:
See attachment.

Expected results:
No fail messages.

Comment 1 Nicolas Chauvet (kwizart) 2016-03-28 08:58:59 UTC
No, this report is invalid. firmware files aren't expected to be executable.

Comment 2 Frank Büttner 2016-03-28 09:24:20 UTC
I think, the problem is not the executable.
The problem are, that files are "rw" by group.
And all other firmware files are that not.
ll /lib/firmware/
.
.
-rw-r--r--. 1 root root   31828  4. Feb 12:23 hfi1_dc8051.fw
-rw-r--r--. 1 root root   16848  4. Feb 12:23 hfi1_fabric.fw
-rw-r--r--. 1 root root   33168  4. Feb 12:23 hfi1_pcie.fw
-rw-r--r--. 1 root root    5360  4. Feb 12:23 hfi1_sbus.fw
-rw-r--r--. 1 root root   72684  4. Feb 12:23 htc_7010.fw
-rw-r--r--. 1 root root   50980  4. Feb 12:23 htc_9271.fw
-rw-r--r--. 1 root root 1251036  4. Feb 12:23 i2400m-fw-usb-1.4.sbcf
-rw-r--r--. 1 root root 1334532  4. Feb 12:23 i2400m-fw-usb-1.5.sbcf
-rw-r--r--. 1 root root 1531932  4. Feb 12:23 i6050-fw-usb-1.5.sbcf

for example.
And so only the files from this package let the test fails.

Comment 3 Nicolas Chauvet (kwizart) 2016-07-20 10:28:02 UTC
Fixed for rawhide, thx