Bug 2144502 - something changes /var/lib/fprint access mode
Summary: something changes /var/lib/fprint access mode
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: fprintd
Version: 38
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: ---
Assignee: Benjamin Berg
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-11-21 13:56 UTC by Sandro Bonazzola
Modified: 2024-05-08 12:25 UTC (History)
1 user (show)

Fixed In Version: fprintd-1.94.2-11.fc40.x86_64
Clone Of:
Environment:
Last Closed: 2024-05-08 12:25:06 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Sandro Bonazzola 2022-11-21 13:56:02 UTC
Description of problem:

Configuring a fresh Fedora 37 instance and checked the result with:

$ sudo oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_standard --report report.html  /usr/share/xml/scap/ssg/content/ssg-fedora-ds.xml

detected permissions changes on fprintd. Manual check also show it:

# rpm -qV fprintd
.M.......    /var/lib/fprint

# rpm -qlv fprintd|grep /var/lib
drwxr-xr-x    2 root     root                        0 Jul 21 05:50 /var/lib/fprint

# ls -ld /var/lib/fprint
drwx------. 1 root root 0 21 lug 05.50 /var/lib/fprint


Applying the proposed fix `rpm --restore fprintd` work for a while, then something changes again the permissions on the directory.
If the required permissions are `drwx------` I think the fprintd packaging should be corrected accordingly.
If soomething is changing the permissions there without being supposed to, it should be identified and fixed for not doing it.

Version-Release number of selected component (if applicable):
# rpm -qv fprintd
fprintd-1.94.2-3.fc37.x86_64

Comment 1 Fedora Admin user for bugzilla script actions 2023-01-10 12:17:42 UTC
This package has changed maintainer in Fedora. Reassigning to the new maintainer of this component.

Comment 2 Fedora Admin user for bugzilla script actions 2023-01-11 00:17:08 UTC
This package has changed maintainer in Fedora. Reassigning to the new maintainer of this component.

Comment 3 Sandro Bonazzola 2023-05-03 13:01:56 UTC
Seems related to bug #2069297 , according to https://bugzilla.redhat.com/show_bug.cgi?id=2069297#c4 it's fixedin fc39.

Benjamin, Bastien can you please confirm?

Comment 4 Sandro Bonazzola 2023-09-18 07:25:44 UTC
Still reproduces in f38

Comment 5 Aoife Moloney 2024-05-07 15:52:44 UTC
This message is a reminder that Fedora Linux 38 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 38 on 2024-05-21.
It is Fedora's policy to close all bug reports from releases that are no longer
maintained. At that time this bug will be closed as EOL if it remains open with a
'version' of '38'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, change the 'version' 
to a later Fedora Linux version. Note that the version field may be hidden.
Click the "Show advanced fields" button if you do not see it.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora Linux 38 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora Linux, you are encouraged to change the 'version' to a later version
prior to this bug being closed.

Comment 6 Sandro Bonazzola 2024-05-08 12:25:06 UTC
Reporting as fixed on Fedora 40 with fprintd-1.94.2-11.fc40.x86_64.
Closing current release.


Note You need to log in before you can comment on or make changes to this bug.