Bug 1934121

Summary: Not strict restrictive permissions in the doc folders: perl-devel [rhel-7.7.z]
Product: Red Hat Enterprise Linux 7 Reporter: Petr Pisar <ppisar>
Component: perlAssignee: perl-maint-list
Status: CLOSED NOTABUG QA Contact: RHEL CS Apps Subsystem QE <rhel-cs-apps-subsystem-qe>
Severity: low Docs Contact:
Priority: unspecified    
Version: 7.7CC: bnater, dvolkov, jorton, lkuprova, mkyral, perl-maint-list, ppisar
Target Milestone: rcKeywords: EasyFix, Patch, Triaged
Target Release: ---   
Hardware: Unspecified   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1806523 Environment:
Last Closed: 2021-03-02 14:53:26 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Petr Pisar 2021-03-02 14:45:08 UTC
+++ This bug was initially created as a clone of Bug #1806523 +++

Description of problem:
Files in documentation folder have 'loose' permissions:
    In the file /usr/share/doc/perl-devel-5.16.3/perl-example.stp , the permission is 0664. 0755 is expected or more restrictive

Version-Release number of selected component (if applicable):
    perl-devel-5.16.3-294.el7_6.x86_64

[...]
--- Additional comment from Petr Pisar on 2020-02-24 13:14:58 GMT ---

This bug is caused by a 0002 umask on the build server. A simple fix is needed to the specification file:

 #copy the example script
-cp -a %{SOURCE5} .
+install -m 0644 %{SOURCE5} .

----

The build infrastructure change also affects RHEL-7.7.z builds and would produce a broken build. We need to correct the spec file there in order not to create regressions.

Comment 1 Petr Pisar 2021-03-02 14:53:26 UTC
Actually this would not be regression: An affected perl-devel-5.16.3-294.el7_6.x86_64 has already been released:

$ rpm -qlvp perl-devel-5.16.3-294.el7_6.x86_64.rpm |grep stp
-rw-rw-r--    1 root     root                      576 čen 17  2013 /usr/share/doc/perl-devel-5.16.3/perl-example.stp
-rw-r--r--    1 root     root                      799 led  7  2019 /usr/share/systemtap/tapset/libperl5.16.3-64.stp

Thus the same malformed perl-devel-5.16.3-294.el7_6.1.x86_64.rpm won't be a regression:

$ rpm -qlvp perl-devel-5.16.3-294.el7_6.1.x86_64.rpm |grep stp
-rw-rw-r--    1 root     root                      576 čen 17  2013 /usr/share/doc/perl-devel-5.16.3/perl-example.stp
-rw-r--r--    1 root     root                      799 bře  2 15:21 /usr/share/systemtap/tapset/libperl5.16.3-64.stp