Bug 1149374
| Summary: | wrong "/" permissions (should be 555) | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Karel Volný <kvolny> |
| Component: | initscripts | Assignee: | initscripts Maintenance Team <initscripts-maint-list> |
| Status: | CLOSED ERRATA | QA Contact: | qe-baseos-daemons |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 7.1 | CC: | jmarko, jscotka, kvolny, lnykryn, ovasik |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | initscripts-9.49.20-1.el7 | Doc Type: | Bug Fix |
| Doc Text: | Story Points: | --- | |
| Clone Of: | 1066591 | Environment: | |
| Last Closed: | 2015-03-05 10:53:36 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1066591 | ||
| Bug Blocks: | |||
|
Comment 2
Ondrej Vasik
2014-10-04 07:26:48 UTC
Adding lnykryn to cc - as https://bugzilla.redhat.com/show_bug.cgi?id=1030691 seems to be possible duplicate of this issue. Lukas, what do you think? Symptoms are the same... Yep it looks similar, if you have some reproducer, I can provide a test package. Karel said he is able to reproduce it within the beaker environment. Karel, is it possible to adjust some packages or you rely on the available repositories there? Or if it is not possible you can patch the initscripts directly in your test. https://git.fedorahosted.org/cgit/initscripts.git/diff/?id=23eb694a61d155a0b5ce4403e1e0d8dc70653e76 (with small change: fedora-import-state -> rhel-import-state) (In reply to Ondrej Vasik from comment #5) > Karel said he is able to reproduce it within the beaker environment. Karel, > is it possible to adjust some packages or you rely on the available > repositories there? machine installation relies on what's in repos, we do upgrades only post-install, so it depends on when the change happens? - reading further, I understand that it is on each boot (In reply to Lukáš Nykrýn from comment #6) > Or if it is not possible you can patch the initscripts directly in your > test. > https://git.fedorahosted.org/cgit/initscripts.git/diff/ > ?id=23eb694a61d155a0b5ce4403e1e0d8dc70653e76 okay, so I've patched the file and rebooted: [0 root@auto-x86-64-001 ~]# diff /usr/lib/systemd/rhel-import-state~ /usr/lib/systemd/rhel-import-state 4,6d3 < # exit early if root isn't writeable < [ -w / ] || exit 0 < 9c6 < cp -a -t / . --- > find . -mindepth 1 -maxdepth 1 -exec cp -av -t / {} \; 13c10 < find . | ( cd /; restorecon -i -f -; ) || : --- > find . -mindepth 1 -print0 | { cd / && xargs --null restorecon -i; } [0 root@auto-x86-64-001 ~]# ls -ld / drwxr-xr-x. 24 root root 4096 22. kvě 04.56 / obviously, it is not enough so ... `chmod -w /` and reboot cool, [0 root@auto-x86-64-001 ~]# ls -ld / dr-xr-xr-x. 24 root root 4096 7. říj 09.51 / [0 root@auto-x86-64-001 ~]# rpm -V filesystem [0 root@auto-x86-64-001 ~]# now let's verify that it gets changed again without the patch: [0 root@auto-x86-64-001 ~]# mv /usr/lib/systemd/rhel-import-state~ /usr/lib/systemd/rhel-import-state mv: přepsat „/usr/lib/systemd/rhel-import-state“? y and reboot ... and the problem is back: [0 root@auto-x86-64-001 ~]# ls -ld / drwxr-xr-x. 24 root root 4096 7. říj 10.00 / [0 root@auto-x86-64-001 ~]# rpm -V filesystem .M....... / so, it looks like this patch really fixes the issue Ok, thanks, reassigning to initscripts. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2015-0471.html |