Bug 2233162

Summary:	on syncable exports, listing file may have bad permissions if umask is too restrictive
Product:	Red Hat Satellite	Reporter:	Joniel Pasqualetto <jpasqual>
Component:	Inter Satellite Sync	Assignee:	Chris Roberts <chrobert>
Status:	CLOSED ERRATA	QA Contact:	Vladimír Sedmík <vsedmik>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	6.12.4	CC:	casmith, chrobert, paji, rlavi, vsedmik
Target Milestone:	6.15.0	Keywords:	Triaged
Target Release:	Unused
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2024-04-23 17:14:08 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Joniel Pasqualetto 2023-08-21 15:37:14 UTC

Description of problem:

When exporting on syncable format, the "listing" file is  supposed to have permissions 644. If the user running the export command has an umask too restrictive, the permissions of the listing file will follow.

Version-Release number of selected component (if applicable):


How reproducible:
Always

Steps to Reproduce:
1. Set umask to 0077
2. export a repository/cv/library on syncable format
3. check the permissions of the file

Actual results: file is created with permissions based on the umask


Expected results: file should have 644 regardless of umask for the user running the command


Additional info: Users that do the export and simply copy/rsync the exported content keeping permissions may have issues on the disconnected side while trying to enable repositories.

Comment 1 Partha Aji 2023-09-14 17:57:02 UTC

Connecting redmine issue https://projects.theforeman.org/issues/36689 from this bug

Comment 2 Bryan Kearney 2023-09-14 20:03:01 UTC

Moving this bug to POST for triage into Satellite since the upstream issue https://projects.theforeman.org/issues/36689 has been resolved.

Comment 3 Brad Buckingham 2023-10-30 11:29:29 UTC

Bulk setting Target Milestone = 6.15.0 where sat-6.15.0+ is set.

Comment 4 Vladimír Sedmík 2024-01-23 09:12:08 UTC

Verified in 6.15.0 snap 7.0

Steps:
1) Sync some yum and file repos with immediate download policy.
2) Publish them in a CV.
3) Export the CV/repos/library in syncable format and check the permissions of the exported files.

All exported files had 0644 (-rw-r--r--) permissions. The only exception was metadata.json with 0600, which is expected.

Comment 7 errata-xmlrpc 2024-04-23 17:14:08 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: Satellite 6.15.0 release), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2024:2010