From Bugzilla Helper: User-Agent: Mozilla/4.78 [en] (X11; U; Linux 2.4.9-21 i686) Description of problem: The /etc/sysconfig/rhn/up2date file is installed with 600 permissions. But the upgrade of the package creates a file /etc/sysconfig/rhn/up2date.rpmnew with 644 permissions. If the original file is supposed to have 600 permissions shouldn't the .rpmnew file also have 600 permissions? Version-Release number of selected component (if applicable): How reproducible: Didn't try Steps to Reproduce: 1. Run the up2date command to update the up2date package. 2. 3. Additional info:
up2date is mainly 600 because it could possibly contain proxy user/pass info. But since the standard up2date config doesnt include this, it should be okay.
of course, this sounds like a potential rpm bug, so reassigning there.
Permissions on *.rpmnew don't matter a bit, as the file can be extracted from the package payload using any convenient means where file permissions are meaningless. Note that the permissions are 600 because the file may be locally modified.