Bug 647834
| Summary: | Consider addition of %verify(not md5 size mtime) to configuration files | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 6 | Reporter: | Eduard Benes <ebenes> |
| Component: | nss | Assignee: | Elio Maldonado Batiz <emaldona> |
| Status: | CLOSED ERRATA | QA Contact: | Aleš Mareček <amarecek> |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | 6.0 | CC: | amarecek, hkario, rrelyea |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | nss-3.12.9-1.el6 | Doc Type: | Bug Fix |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2011-05-19 14:03:49 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
Edward, Could you explain to me what the "%verify(not md5 size mtime)" part does? (In reply to comment #1) > Edward, Could you explain to me what the "%verify(not md5 size mtime)" part > does? Rather than introduce some misunderstanding I'll try to forward following docs which explain it quite nicely: http://www.rpm.org/max-rpm-snapshot/s1-rpm-inside-files-list-directives.html#S3-RPM-INSIDE-FLIST-VERIFY-DIRECTIVE An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on therefore solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHBA-2011-0692.html |
RPM verify test fails after installation due to changed configuration files. I would suggest just to add "%verify(not md5 size mtime)" as we do in RHEL 5 spec file. Current RHEL 6 spec file (nss-3.12.8-1.el6_0.src.rpm.spec): %config(noreplace) %{_sysconfdir}/pki/nssdb/cert8.db %config(noreplace) %{_sysconfdir}/pki/nssdb/key3.db %config(noreplace) %{_sysconfdir}/pki/nssdb/secmod.db %config(noreplace) %{_sysconfdir}/pki/nssdb/cert9.db %config(noreplace) %{_sysconfdir}/pki/nssdb/key4.db %config(noreplace) %{_sysconfdir}/pki/nssdb/pkcs11.txt RHEL 5 spec: %config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/cert8.db %config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/key3.db %config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/pki/nssdb/secmod.db Steps to reproduce: # rpm -qV nss-sysinit nss .......T. c /etc/pki/nssdb/pkcs11.tx ..5...... c /etc/pki/nssdb/secmod.db