Bug 797980 - auditd: Remove unreasonable file permission checks on startup.
Summary: auditd: Remove unreasonable file permission checks on startup.
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: audit
Version: rawhide
Hardware: All
OS: Linux
unspecified
low
Target Milestone: ---
Assignee: Steve Grubb
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-02-27 17:40 UTC by Sverd Johnsen
Modified: 2012-03-10 02:11 UTC (History)
1 user (show)

Fixed In Version: audit-2.2-1.fc17
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-03-10 02:11:45 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
A patch demonstrating removal. (1.93 KB, application/octet-stream)
2012-02-27 17:40 UTC, Sverd Johnsen
no flags Details

Description Sverd Johnsen 2012-02-27 17:40:52 UTC
Created attachment 566114 [details]
A patch demonstrating removal.

Description of problem:

auditd complains if executable files it uses are not 0750 permissions.

Typical checks look like this:

if ((buf.st_mode & (S_IRUSR|S_IWUSR|S_IXUSR|S_IRGRP|S_IXGRP)) !=
                   (S_IRUSR|S_IWUSR|S_IXUSR|S_IRGRP|S_IXGRP)) {

auditd should relax any of these checks or don't do them at all. 

Version-Release number of selected component (if applicable):

2.1.3

How reproducible:

Change permissions to something stricter, expect it to start normally.

Comment 1 Steve Grubb 2012-03-02 00:18:34 UTC
This was fixed in svn a month ago.
https://fedorahosted.org/audit/changeset/622

new upstream release today will be available soon.

Comment 2 Fedora Update System 2012-03-02 00:25:11 UTC
audit-2.2-1.fc17 has been submitted as an update for Fedora 17.
https://admin.fedoraproject.org/updates/audit-2.2-1.fc17

Comment 3 Fedora Update System 2012-03-05 20:58:06 UTC
Package audit-2.2-1.fc17:
* should fix your issue,
* was pushed to the Fedora 17 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing audit-2.2-1.fc17'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2012-2908/audit-2.2-1.fc17
then log in and leave karma (feedback).

Comment 4 Fedora Update System 2012-03-10 02:11:45 UTC
audit-2.2-1.fc17 has been pushed to the Fedora 17 stable repository.  If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.