Bug 2513497

Summary: gnupg2: systemd user unit files have wrong permissions 0755 instead of 0644
Product: [Fedora] Fedora Reporter: Petr Sklenar <psklenar>
Component: gnupg2Assignee: Jakub Jelen <jjelen>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: unspecified    
Version: 45CC: bcl, crypto-team, jjelen, tm
Target Milestone: ---Flags: fedora-admin-xmlrpc: mirror+
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2026-08-10 16:10:40 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Petr Sklenar 2026-08-10 14:00:59 UTC 
Description of problem:
Systemd user unit files shipped by gnupg2 subpackages (dirmngr, gpg-agent, keyboxd) have executable permissions (0755) instead of the required 0644.

Per Fedora Packaging Guidelines for Systemd:
"Unit files and drop-ins must be world-readable (i.e. mode 0644)"
https://docs.fedoraproject.org/en-US/packaging-guidelines/Systemd/

Version-Release number of selected component:
gnupg2-2.4.9-17.fc45.x86_64

How reproducible:
Always

Steps to Reproduce:
1. Install gnupg2
2. Run: stat -c "%a %n" /usr/lib/systemd/user/gpg-agent.service /usr/lib/systemd/user/gpg-agent.socket /usr/lib/systemd/user/gpg-agent-browser.socket /usr/lib/systemd/user/gpg-agent-extra.socket /usr/lib/systemd/user/gpg-agent-ssh.socket /usr/lib/systemd/user/dirmngr.service /usr/lib/systemd/user/dirmngr.socket /usr/lib/systemd/user/keyboxd.service /usr/lib/systemd/user/keyboxd.socket

Actual Results:
  755 /usr/lib/systemd/user/gpg-agent.service
  755 /usr/lib/systemd/user/gpg-agent.socket
  755 /usr/lib/systemd/user/gpg-agent-browser.socket
  755 /usr/lib/systemd/user/gpg-agent-extra.socket
  755 /usr/lib/systemd/user/gpg-agent-ssh.socket
  755 /usr/lib/systemd/user/dirmngr.service
  755 /usr/lib/systemd/user/dirmngr.socket
  755 /usr/lib/systemd/user/keyboxd.service
  755 /usr/lib/systemd/user/keyboxd.socket

Expected Results:
All nine unit files should have mode 0644.

Additional info:
- Tested on: VM installed from:
https://kojipkgs.fedoraproject.org/compose/rawhide/Fedora-Rawhide-20260807.n.0/compose/Workstation/x86_64/iso/Fedora-Workstation-Live-Rawhide-20260807.n.0.x86_64.iso
Comment 1 Jakub Jelen 2026-08-10 16:10:40 UTC 
Thank you for the report. Good catch! 

Fixed in

https://src.fedoraproject.org/rpms/gnupg2/c/f2a95f7a06c30562246f5cbd27d0096ccb698013?branch=rawhide

and built in rawhide:

https://koji.fedoraproject.org/koji/taskinfo?taskID=148935414