Hide Forgot
Description of problem: Configuration file under folder /etc/virt-who.d/ may contain passwords but its permissions are 644 (rw-r--r--). It should be 600 (rw-------) to prevent non-root users to read the configuration file. Version-Release number of selected component (if applicable): virt-who-0.17-7.el7.noarch subscription-manager-1.17.10-1.el7.x86_64 python-rhsm-1.17.6-1.el7.x86_64 How reproducible: Always Steps to Reproduce: 1. Create any config file under /etc/virt-who.d/ # vim /etc/virt-who.d/hyperv 2.Check the permission of this config file. [root@cloud-qe-16-vm-03 virt-who.d]# ll /etc/virt-who.d/hyperv -rw-r--r--. 1 root root 114 Aug 19 02:43 /etc/virt-who.d/hyperv Actual results: its permissions are 644 (rw-r--r--) Expected results: Any file under /etc/virt-who.d/ should be 600 (rw-------) to prevent non-root users to read the configuration file. Additional info:
I don't think this is necessary. The /etc/virt-who.d directory has drwx------ perms, so non-root users can't access anything in the directory and it does't matter what perms those files have.