Bug 1811215 - /run/dbus permissions in the packa do not match the real ones
Summary: /run/dbus permissions in the packa do not match the real ones
Keywords:
Status: CLOSED DUPLICATE of bug 1797833
Alias: None
Product: Red Hat Enterprise Linux 8
Classification: Red Hat
Component: dbus
Version: 8.1
Hardware: Unspecified
OS: Unspecified
unspecified
low
Target Milestone: rc
: 8.0
Assignee: David King
QA Contact: Desktop QE
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-03-06 21:12 UTC by Carlos Santos
Modified: 2020-03-18 09:49 UTC (History)
0 users

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-03-18 09:49:52 UTC
Type: Bug
Target Upstream Version:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github ComplianceAsCode content issues 4802 0 None open Change permissions of /run/dbus on rhel8 2020-11-02 21:55:36 UTC

Description Carlos Santos 2020-03-06 21:12:13 UTC
Description of problem:

Customer is trying to comply with the Draft RHEL 8 STIG, which states that
"the default file permissions, ownership, and group membership of system files
and commands must match the vendor values." to comply with NIST 800-53r4 AU-9
and AC-3.

The RPM permissions for the /run/dbus directory are not the same as the
permssions for the file on the file system.

Version-Release number of selected component (if applicable):

dbus-daemon-1.12.8-9.el8.x86_64

How reproducible:

Always

Steps to Reproduce:
1. rpm -qlv dbus-daemon |grep -F /run/dbus
2. ls -ld /run/dbus

Actual results:

rpm -qlv dbus-daemon |grep -F /run/dbus
d---------    2 root    root                        0 Aug  1  2019 /run/dbus

$ ls -ld /run/dbus
drwxr-xr-x. 2 root root 60 Feb 16 19:04 /run/dbus

Expected results:

rpm -qlv dbus-daemon |grep -F /run/dbus
drwxr-xr-x    2 root    root                        0 Aug  1  2019 /run/dbus

$ ls -ld /run/dbus
drwxr-xr-x. 2 root root 60 Feb 16 19:04 /run/dbus

Additional info:

The bug is harmless because /run is a tmpfs which is populated by systemd and
other daemos as they run. The problem is that it makes the compliance checking
fail:

    https://github.com/ComplianceAsCode/content/issues/4802

Comment 1 David King 2020-03-18 09:49:52 UTC

*** This bug has been marked as a duplicate of bug 1797833 ***


Note You need to log in before you can comment on or make changes to this bug.