Bug 1965794

Summary: Inconsistent permissions for grub.cfg
Product: [Fedora] Fedora Reporter: Roshan Shariff <roshan.shariff>
Component: grub2Assignee: Javier Martinez Canillas <fmartine>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 34CC: fmartine, lkundrak, pgnet.dev, pjones
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: grub2-2.06-3.fc35 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-07-06 09:54:30 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Roshan Shariff 2021-05-30 01:42:14 UTC
Description of problem:

The packages grub2-pc and grub2-efi-{x64,ia32} specify inconsistent permissions for the file /boot/grub2/grub.cfg.  The first assigns it mode 644, whereas the others give it mode 700. This results in rpm verification failing for one of those packages.

# rpm -qlvf --filesbypkg /boot/grub2/grub.cfg | grep ' /boot/grub2/grub.cfg'
grub2-pc                  /boot/grub2/grub.cfg
-rw-r--r--    1 root     root                        0 Apr 11 17:14 /boot/grub2/grub.cfg
grub2-efi-x64             /boot/grub2/grub.cfg
-rwx------    1 root     root                        0 Apr 11 17:14 /boot/grub2/grub.cfg
grub2-efi-ia32            /boot/grub2/grub.cfg
-rwx------    1 root     root                        0 Apr 11 17:14 /boot/grub2/grub.cfg

# rpm -V grub2-pc
.M.......  c /boot/grub2/grub.cfg

Version-Release number of selected component (if applicable):

$ rpm -q grub2-pc grub2-efi-ia32 grub2-efi-x64
grub2-pc-2.06~rc1-4.fc34.x86_64
grub2-efi-ia32-2.06~rc1-4.fc34.x86_64
grub2-efi-x64-2.06~rc1-4.fc34.x86_64

How reproducible:

Consistently.

Steps to Reproduce:
1. Run the above "rpm -qlvf ..." command
2. Or, run "rpm -V grub2-\*"

Actual results:

The packages have different permissions for /boot/grub2/grub.cfg

Expected results:

Consistent permissions, and passing rpm verification.

Comment 1 Fedora Update System 2021-07-06 09:49:30 UTC
FEDORA-2021-21ed0c951f has been submitted as an update to Fedora 35. https://bodhi.fedoraproject.org/updates/FEDORA-2021-21ed0c951f

Comment 2 Fedora Update System 2021-07-06 09:54:30 UTC
FEDORA-2021-21ed0c951f has been pushed to the Fedora 35 stable repository.
If problem still persists, please make note of it in this bug report.