Bug 1571969

Summary:	Starting libvirt causes "rpm -V libvirt-daemon-config-nwfilter" to fail
Product:	Red Hat Enterprise Linux 7	Reporter:	Ryan Barry <rbarry>
Component:	libvirt	Assignee:	Libvirt Maintainers <libvirt-maint>
Status:	CLOSED DUPLICATE	QA Contact:	Virtualization Bugs <virt-bugs>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	7.5	CC:	rbalakri, yalzhang
Target Milestone:	rc	Keywords:	Regression
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2018-04-26 03:23:15 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1436519

Description Ryan Barry 2018-04-25 20:12:04 UTC

Description of problem:
Starting libvirt for the first time causes it to remove and recreate all files in /etc/libvirt/nwfilter, except they are created as 0600 instead of 0644, which causes verification to fail

Version-Release number of selected component (if applicable):
libvirt.x86_64 0:3.9.0-14.el7_5.2 

How reproducible:
100%

Steps to Reproduce:
1. Install 7.5
2. Install libvirt
3. rpm -V libvirt-config-daemon-nwfilter
4. systemctl start libvirtd.service
5. rpm -V libvirt-config-daemon-nwfilter

Actual results:
[root@localhost ~]# rpm -V libvirt-daemon-config-nwfilter
[root@localhost ~]# service libvirtd start
Redirecting to /bin/systemctl start libvirtd.service
[root@localhost ~]# rpm -V libvirt-daemon-config-nwfilter
.M.......  g /etc/libvirt/nwfilter/allow-arp.xml
.M.......  g /etc/libvirt/nwfilter/allow-dhcp-server.xml
.M.......  g /etc/libvirt/nwfilter/allow-dhcp.xml
.M.......  g /etc/libvirt/nwfilter/allow-incoming-ipv4.xml
.M.......  g /etc/libvirt/nwfilter/allow-ipv4.xml
.M.......  g /etc/libvirt/nwfilter/clean-traffic.xml
.M.......  g /etc/libvirt/nwfilter/no-arp-ip-spoofing.xml
.M.......  g /etc/libvirt/nwfilter/no-arp-mac-spoofing.xml
.M.......  g /etc/libvirt/nwfilter/no-arp-spoofing.xml
.M.......  g /etc/libvirt/nwfilter/no-ip-multicast.xml
.M.......  g /etc/libvirt/nwfilter/no-ip-spoofing.xml
.M.......  g /etc/libvirt/nwfilter/no-mac-broadcast.xml
.M.......  g /etc/libvirt/nwfilter/no-mac-spoofing.xml
.M.......  g /etc/libvirt/nwfilter/no-other-l2-traffic.xml
.M.......  g /etc/libvirt/nwfilter/no-other-rarp-traffic.xml
.M.......  g /etc/libvirt/nwfilter/qemu-announce-self-rarp.xml
.M.......  g /etc/libvirt/nwfilter/qemu-announce-self.xml


Expected results:
libvirt should use the correct permissions

Additional info:

Comment 3 yalzhang@redhat.com 2018-04-26 03:23:15 UTC


*** This bug has been marked as a duplicate of bug 1559284 ***