Hide Forgot
Description of problem: The directories under the /usr/share/(crypto-policies are not owned by the crypto-policies package. The files contained in these directories are owned but the directories themselves are not. This is violating the packaging guidelines https://docs.fedoraproject.org/en-US/packaging-guidelines/#_file_and_directory_ownership Version-Release number of selected component (if applicable): crypto-policies-20181217-6.git9a35207.el8.noarch How reproducible: deterministic Steps to Reproduce: 1. rpm -ql crypto-policies 2. rpm -qf /usr/share/crypto-policies/FIPS/ Actual results: /etc/crypto-policies /etc/crypto-policies/back-ends /etc/crypto-policies/back-ends/bind.config /etc/crypto-policies/back-ends/gnutls.config /etc/crypto-policies/back-ends/java.config /etc/crypto-policies/back-ends/krb5.config /etc/crypto-policies/back-ends/libreswan.config /etc/crypto-policies/back-ends/nss.config /etc/crypto-policies/back-ends/openjdk.config /etc/crypto-policies/back-ends/openssh.config /etc/crypto-policies/back-ends/opensshserver.config /etc/crypto-policies/back-ends/openssl.config /etc/crypto-policies/back-ends/opensslcnf.config /etc/crypto-policies/config /etc/crypto-policies/local.d /usr/bin/fips-finish-install /usr/bin/fips-mode-setup /usr/bin/update-crypto-policies /usr/share/crypto-policies /usr/share/crypto-policies/DEFAULT/bind.txt /usr/share/crypto-policies/DEFAULT/gnutls.txt /usr/share/crypto-policies/DEFAULT/java.txt /usr/share/crypto-policies/DEFAULT/krb5.txt /usr/share/crypto-policies/DEFAULT/libreswan.txt /usr/share/crypto-policies/DEFAULT/nss.txt /usr/share/crypto-policies/DEFAULT/openssh.txt /usr/share/crypto-policies/DEFAULT/opensshserver.txt /usr/share/crypto-policies/DEFAULT/openssl.txt /usr/share/crypto-policies/DEFAULT/opensslcnf.txt /usr/share/crypto-policies/EMPTY/bind.txt /usr/share/crypto-policies/EMPTY/gnutls.txt /usr/share/crypto-policies/EMPTY/java.txt /usr/share/crypto-policies/EMPTY/krb5.txt /usr/share/crypto-policies/EMPTY/libreswan.txt /usr/share/crypto-policies/EMPTY/nss.txt /usr/share/crypto-policies/EMPTY/openssh.txt /usr/share/crypto-policies/EMPTY/opensshserver.txt /usr/share/crypto-policies/EMPTY/openssl.txt /usr/share/crypto-policies/EMPTY/opensslcnf.txt /usr/share/crypto-policies/FIPS/bind.txt /usr/share/crypto-policies/FIPS/gnutls.txt /usr/share/crypto-policies/FIPS/java.txt /usr/share/crypto-policies/FIPS/krb5.txt /usr/share/crypto-policies/FIPS/libreswan.txt /usr/share/crypto-policies/FIPS/nss.txt /usr/share/crypto-policies/FIPS/openssh.txt /usr/share/crypto-policies/FIPS/opensshserver.txt /usr/share/crypto-policies/FIPS/openssl.txt /usr/share/crypto-policies/FIPS/opensslcnf.txt /usr/share/crypto-policies/FUTURE/bind.txt /usr/share/crypto-policies/FUTURE/gnutls.txt /usr/share/crypto-policies/FUTURE/java.txt /usr/share/crypto-policies/FUTURE/krb5.txt /usr/share/crypto-policies/FUTURE/libreswan.txt /usr/share/crypto-policies/FUTURE/nss.txt /usr/share/crypto-policies/FUTURE/openssh.txt /usr/share/crypto-policies/FUTURE/opensshserver.txt /usr/share/crypto-policies/FUTURE/openssl.txt /usr/share/crypto-policies/FUTURE/opensslcnf.txt /usr/share/crypto-policies/LEGACY/bind.txt /usr/share/crypto-policies/LEGACY/gnutls.txt /usr/share/crypto-policies/LEGACY/java.txt /usr/share/crypto-policies/LEGACY/krb5.txt /usr/share/crypto-policies/LEGACY/libreswan.txt /usr/share/crypto-policies/LEGACY/nss.txt /usr/share/crypto-policies/LEGACY/openssh.txt /usr/share/crypto-policies/LEGACY/opensshserver.txt /usr/share/crypto-policies/LEGACY/openssl.txt /usr/share/crypto-policies/LEGACY/opensslcnf.txt /usr/share/crypto-policies/default-config /usr/share/crypto-policies/reload-cmds.sh /usr/share/licenses/crypto-policies /usr/share/licenses/crypto-policies/COPYING.LESSER /usr/share/man/man7/crypto-policies.7.gz /usr/share/man/man8/fips-finish-install.8.gz /usr/share/man/man8/fips-mode-setup.8.gz /usr/share/man/man8/update-crypto-policies.8.gz After step 2 file /usr/share/crypto-policies/FIPS is not owned by any package Expected results: directories such as /usr/share/crypto-policies/FIPS should be included Additional info:
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:3644