Red Hat Bugzilla – Bug 1288086
/var/run/pluto should have 755 and has 700
Last modified: 2016-11-15 11:27:07 EST
Description of problem: Currently /var/run/pluto directory have 755 rights after package installation (given by specfile). When ipsec is starting it is changed by both initscript and /usr/libexec/ipsec/setup to 700 by chmod. Moreover, second chmod is currently rejected by selinux (see BZ#1287182) and generates AVC (it is harmless, because acls are changes by first chmod anyway). rpm -V then fails because it detects this change. Version-Release number of selected component (if applicable): libreswan-3.15-5.el6 How reproducible: 100% Steps to Reproduce: 1. rpm -V libreswan Actual results: # rpm -V libreswan; echo $? .M....... /var/run/pluto 1 Expected results: # rpm -V libreswan; echo $? 0 Additional info: Thanks to Tuomo Soini for pointing to this issue.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2016-0890.html