Bug 1288086 - /var/run/pluto should have 755 and has 700
/var/run/pluto should have 755 and has 700
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: libreswan (Show other bugs)
All Linux
medium Severity low
: rc
: ---
Assigned To: Paul Wouters
Jaroslav Aster
Depends On:
  Show dependency treegraph
Reported: 2015-12-03 08:10 EST by Ondrej Moriš
Modified: 2016-11-15 11:27 EST (History)
1 user (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2016-05-10 20:16:33 EDT
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Ondrej Moriš 2015-12-03 08:10:38 EST
Description of problem:

Currently /var/run/pluto directory have 755 rights after package installation (given by specfile). When ipsec is starting it is changed by both initscript and /usr/libexec/ipsec/setup to 700 by chmod. Moreover, second chmod is currently rejected by selinux (see BZ#1287182) and generates AVC (it is harmless, because acls are changes by first chmod anyway). rpm -V then fails because it detects this change.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1. rpm -V libreswan

Actual results:

# rpm -V libreswan; echo $?
.M.......    /var/run/pluto

Expected results:

# rpm -V libreswan; echo $?

Additional info:

Thanks to Tuomo Soini for pointing to this issue.
Comment 8 errata-xmlrpc 2016-05-10 20:16:33 EDT
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.


Note You need to log in before you can comment on or make changes to this bug.