Bug 1702426
| Summary: | ipa-server-common expected file permissions in package don't match runtime permissions | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Ryan Mullett <rmullett> |
| Component: | ipa | Assignee: | IPA Maintainers <ipa-maint> |
| Status: | CLOSED ERRATA | QA Contact: | ipa-qe <ipa-qe> |
| Severity: | medium | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 7.6 | CC: | cheimes, frenaud, ksiddiqu, ndehadra, pasik, pierre-yves.goubet, pvoborni, rcritten, tscherf |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | ipa-4.6.6-1.el7 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2020-03-31 19:55:19 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Ryan Mullett
2019-04-23 18:29:20 UTC
These are all %ghost directories and are appearing now due to a change in rpm, https://bugzilla.redhat.com/show_bug.cgi?id=1406611 *** Bug 1702430 has been marked as a duplicate of this bug. *** Additional ghosted files: From rpm: ipa-client-common-4.6.4-10.el7_6.3.noarch /etc/ipa/nssdb/cert8.db SHOULD BE: 000 ACTUALLY IS: 644 -- From rpm: ipa-client-common-4.6.4-10.el7_6.3.noarch /etc/ipa/nssdb/key3.db SHOULD BE: 000 ACTUALLY IS: 644 -- From rpm: ipa-client-common-4.6.4-10.el7_6.3.noarch /etc/ipa/nssdb/pwdfile.txt SHOULD BE: 000 ACTUALLY IS: 600 -- From rpm: ipa-client-common-4.6.4-10.el7_6.3.noarch /etc/ipa/nssdb/secmod.db SHOULD BE: 000 ACTUALLY IS: 644 -- From rpm: ipa-client-common-4.6.4-10.el7_6.3.noarch /etc/pki/ca-trust/source/ipa.p11-kit SHOULD BE: 000 ACTUALLY IS: 600 Upstream ticket: https://pagure.io/freeipa/issue/7934 Fixed upstream master: https://pagure.io/freeipa/c/a4254489147eaa0d2e6b7810182f1f3ed35b6324 https://pagure.io/freeipa/c/7fe10d9903878d25987c44a8def72b6f056f3dd1 Fixed upstream ipa-4-7: https://pagure.io/freeipa/c/ab26121b9e3f7d74e7675d6635ca2d167c7dc1e7 https://pagure.io/freeipa/c/f3a9251224f98305aa767a42e98f8c3627504ace Fixed upstream ipa-4-6: https://pagure.io/freeipa/c/b7afb147722b74237a2ce03b1fb20e9094f8246e https://pagure.io/freeipa/c/c7712c17f3e92a29c4ca55a29fe210abbc2adc58 Verified using upstream tests test_installation.py::TestInstallMaster::test_file_permissions
Snip from output of executed logs.
======================================
'tls_ca_cert': u'/root/.ipa/ca.crt',
'tls_version_max': u'tls1.2',
'tls_version_min': u'tls1.2',
'validate_api': False,
'verbose': 0,
'version': u'4.6.6', ***** IPA VERSION *****
'wait_for_dns': 0,
'webui_prod': True}
uname: ('Linux', 'runner.testrelm.test', '3.10.0-1109.el7.x86_64', '#1 SMP Sat Nov 2 11:57:33 EDT 2019', 'x86_64')
euid: 0, egid: 0
working dir: /usr/lib/python2.7/site-packages/ipatests
sys.version: 2.7.5 (default, Sep 26 2019, 13:23:47)
[GCC 4.8.5 20150623 (Red Hat 4.8.5-39)]
[1m============================= test session starts ==============================[0m
platform linux2 -- Python 2.7.5, pytest-4.6.6, py-1.8.0, pluggy-0.13.0 -- /usr/bin/python2
cachedir: .pytest_cache
metadata: {'Python': '2.7.5', 'Platform': 'Linux-3.10.0-1109.el7.x86_64-x86_64-with-redhat-7.8-Maipo', 'Packages': {'py': '1.8.0', 'pytest': '4.6.6', 'pluggy': '0.13.0'}, 'Plugins': {u'html': u'1.22.0', u'multihost': u'1.1', u'sourceorder': u'0.5', u'metadata': u'1.8.0'}}
rootdir: /usr/lib/python2.7/site-packages/ipatests
plugins: metadata-1.8.0, html-1.22.0, multihost-1.1, sourceorder-0.5
[1mcollecting ... [0mcollected 7 items
test_integration/test_installation.py::TestInstallMaster::test_install_master [32mPASSED[0m[36m [ 14%][0m
test_integration/test_installation.py::TestInstallMaster::test_install_kra [32mPASSED[0m[36m [ 28%][0m
test_integration/test_installation.py::TestInstallMaster::test_install_dns [32mPASSED[0m[36m [ 42%][0m
test_integration/test_installation.py::TestInstallMaster::test_ipactl_restart_pki_tomcat [32mPASSED[0m[36m [ 57%][0m
test_integration/test_installation.py::TestInstallMaster::test_WSGI_worker_process [32mPASSED[0m[36m [ 71%][0m
test_integration/test_installation.py::TestInstallMaster::test_error_for_yubikey [32mPASSED[0m[36m [ 85%][0m
test_integration/test_installation.py::TestInstallMaster::test_file_permissions [32mPASSED[0m[36m [100%][0m ***** APPLICABLE TEST FOR THIS BZ *****
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:1083 |