Fix for tzdata-update inheriting an unusable umask
When updating /etc/localtime, tzdata-update applies the current process umask to determine the file permissions.
If the umask is a restrictive value, such as 077, the new /etc/localtime file may not be readable by non-root users. To resolve this, tzdata-update now sets the permissions to rw-r--r-- (0644) unconditionally.
tzdata-update was rewritten in a Red Hat patch
(glibc-rh1200555.patch) but it misses a feature of
the old tzdata-update that was the chunk:
---8<---
long int sret;
sret = INTERNAL_SYSCALL (fchmod, err, 2, fd, 0644);
if (INTERNAL_SYSCALL_ERROR_P (sret, err))
goto clean_up;
---8<---
So, depending of the umask set (e.g. 0077), it may
create a /etc/localtime that is unreadable by non root
users.
Test case should be simple, just set the umask and
run /usr/sbin/tzdata-update.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
https://rhn.redhat.com/errata/RHSA-2017-0680.html
tzdata-update was rewritten in a Red Hat patch (glibc-rh1200555.patch) but it misses a feature of the old tzdata-update that was the chunk: ---8<--- long int sret; sret = INTERNAL_SYSCALL (fchmod, err, 2, fd, 0644); if (INTERNAL_SYSCALL_ERROR_P (sret, err)) goto clean_up; ---8<--- So, depending of the umask set (e.g. 0077), it may create a /etc/localtime that is unreadable by non root users. Test case should be simple, just set the umask and run /usr/sbin/tzdata-update.