Hide Forgot
Created attachment 1140801 [details] The SCAP report part of it. Description of problem: The firmware files of crystalhd-firmware don't pass the SCAP test because of wrong permissions. Version-Release number of selected component (if applicable): crystalhd-firmware-3.10.0-11.fc23.noarch.rpm How reproducible: every time Steps to Reproduce: 1. run the scap-workbench for fedora Actual results: See attachment. Expected results: No fail messages.
No, this report is invalid. firmware files aren't expected to be executable.
I think, the problem is not the executable. The problem are, that files are "rw" by group. And all other firmware files are that not. ll /lib/firmware/ . . -rw-r--r--. 1 root root 31828 4. Feb 12:23 hfi1_dc8051.fw -rw-r--r--. 1 root root 16848 4. Feb 12:23 hfi1_fabric.fw -rw-r--r--. 1 root root 33168 4. Feb 12:23 hfi1_pcie.fw -rw-r--r--. 1 root root 5360 4. Feb 12:23 hfi1_sbus.fw -rw-r--r--. 1 root root 72684 4. Feb 12:23 htc_7010.fw -rw-r--r--. 1 root root 50980 4. Feb 12:23 htc_9271.fw -rw-r--r--. 1 root root 1251036 4. Feb 12:23 i2400m-fw-usb-1.4.sbcf -rw-r--r--. 1 root root 1334532 4. Feb 12:23 i2400m-fw-usb-1.5.sbcf -rw-r--r--. 1 root root 1531932 4. Feb 12:23 i6050-fw-usb-1.5.sbcf for example. And so only the files from this package let the test fails.
Fixed for rawhide, thx