Bug 2140994

Summary: typo in postinstall scriptlet - 'chmod 0600 /var/log/ipaupgrade.lo'
Product: Red Hat Enterprise Linux 8 Reporter: Sam Morris <sam>
Component: ipaAssignee: Rafael Jeffman <rjeffman>
Status: CLOSED ERRATA QA Contact: ipa-qe <ipa-qe>
Severity: low Docs Contact:
Priority: unspecified    
Version: 8.7CC: abokovoy, ftrivino, mpolovka, rcritten, rjeffman, sumenon, suwu, tscherf
Target Milestone: rcKeywords: Triaged
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ipa-4.9.10-8.module+el8.8.0+17351+9a3fb056 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2023-05-16 08:29:08 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Sam Morris 2022-11-08 10:57:09 UTC
Description of problem:
I noticed this in today's upgrade:

  Upgrading        : ipa-client-4.9.10-3.module+el8.7.0+15888+685a878f.x86_64
  Running scriptlet: ipa-client-4.9.10-3.module+el8.7.0+15888+685a878f.x86_64
chmod: cannot access '/var/log/ipaupgrade.lo': No such file or directory

Version-Release number of selected component (if applicable):
ipa-client-4.9.10-6.module+el8.7.0+16405+581a7c1e.x86_64

Steps to Reproduce:
1. Install ipa-client on RHEL 8.6
2. Join a domain (ipa-client-install)
3. Upgrade from RHEL 8.6 -> 8.7

Additional info:
# rpm -q --scripts ipa-client | grep chmod
        chmod 0600 /var/log/ipaupgrade.lo

Comment 1 Sam Morris 2022-11-08 10:59:33 UTC
The typo is not present at https://gitlab.com/redhat/centos-stream/rpms/ipa/-/blob/0e045611f211373e443f08fcdc83e3b08320a36d/freeipa.spec#L1263

I don't know if I'm looking in the right place, CentOS 8 Stream is a bit of a mystery to me...

Comment 2 Alexander Bokovoy 2022-11-08 13:48:36 UTC
8 Stream is done in reverse at the moment, it tracks post-release for RHEL 8.

Thank you for the report, this will be fixed in the next update, whenever that comes.

Comment 3 Trivino 2022-11-24 08:33:16 UTC
Fixed upstream:
master:
    https://pagure.io/freeipa/c/56708d60703db794e02609f41f81da8e29313ddd Set the mode on ipaupgrade.log during RPM %post snipppet

ipa-4-9:
    https://pagure.io/freeipa/c/d8174b0ca60ef123f268f34f47b8be123b8d1c89 Set the mode on ipaupgrade.log during RPM %post snipppet

Comment 8 Sudhir Menon 2022-12-12 10:16:51 UTC
Verified manually.

[root@replica ~]# cat /etc/redhat-release 
Red Hat Enterprise Linux release 8.7 (Ootpa)
[root@replica ~]# rpm -q ipa-client
ipa-client-4.9.10-6.module+el8.7.0+16405+581a7c1e.x86_64
Client configuration complete.
The ipa-client-install command was successful
[root@replica ~]# rpm -q --scripts ipa-client | grep chmod
        chmod 0600 /var/log/ipaupgrade.lo

[root@replica ~]# dnf update

[root@replica ~]# cat /etc/redhat-release 
Red Hat Enterprise Linux release 8.8 Beta (Ootpa)
[root@replica ~]# rpm -q ipa-client
ipa-client-4.9.10-8.module+el8.8.0+17351+9a3fb056.x86_64
[root@replica ~]# rpm -q --scripts ipa-client | grep chmod
        chmod 0600 /var/log/ipaupgrade.log

Comment 9 Florence Blanc-Renaud 2023-02-13 09:24:29 UTC
*** Bug 2169044 has been marked as a duplicate of this bug. ***

Comment 11 errata-xmlrpc 2023-05-16 08:29:08 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (idm:client and idm:DL1 bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:2794