Bug 1703572

Summary:	[RFE] Add Fedora-specific setxid whitelist
Product:	[Fedora] Fedora	Reporter:	Robbie Harwood <rharwood>
Component:	rpmgrill	Assignee:	Orphan Owner <extras-orphan>
Status:	CLOSED WONTFIX	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	rawhide	CC:	dhiru, kparal, roman, santiago
Target Milestone:	---	Keywords:	FutureFeature
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2026-06-26 02:08:13 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Robbie Harwood 2019-04-26 17:54:51 UTC

rpmgrill has support for whitelisting setxid binaries seen here: https://github.com/default-to-open/rpmgrill/blob/master/lib/RPM/Grill/Plugin/Setxid.pm#L37

However, task-rpmgrill doesn't make use of this, which means that dist.rpmgrill.setxid just flags every single one, like mine here: https://taskotron.fedoraproject.org/artifacts/all/661354a8-66ab-11e9-99bb-52540077ca13/tests.yml/rpmgrill.json

Would it be possible to ship a Fedora-specific setxid whitelist in the Fedora rpmgrill package, as rpmlint does?  This would allow the task to actually be useful in taskotron, as well as making it clear how to get on the whitelist (file a bug against rpmgrill).  (If you do go this route, please include at least /usr/bin/ksu on the whitelist, else I'll file another ticket. :) )

Comment 1 Fedora Admin user for bugzilla script actions 2025-05-31 02:29:23 UTC

This package has changed maintainer in Fedora. Reassigning to the new maintainer of this component.

Comment 2 Fedora Admin user for bugzilla script actions 2026-05-14 01:24:46 UTC

This package has changed maintainer in Fedora. Reassigning to the new maintainer of this component.

Comment 3 Maxwell G 2026-06-26 02:08:13 UTC

Automation has figured out the package is retired in Fedora Rawhide.

If you like it to be unretired, please open a ticket at
https://forge.fedoraproject.org/releng/tickets/issues/new?template=.forgejo%2fISSUE_TEMPLATE%2funretire-package.md