From 62e72c2a53e7b92dfd4eb62cf0da9196d75f774a Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Mon, 18 Sep 2017 11:31:45 -0400 Subject: [PATCH] Add exec to /var/lib/ipa/sysrestore for install status inquiries installutils.is_ipa_configured() previously required root privileges to see whether there were sysrestore or filestore files. The directory was mode 0700 so this function always returned False for non-root users. Relaxing permissions is is needed to run the tests as the jenkins user. Backed-up files retain their original FS permissions so this shouldn't disclose any previously unreadable backed-up configuration. https://pagure.io/freeipa/issue/7157 Reviewed-By: Tomas Krizek Reviewed-By: Stanislav Laznicka --- freeipa.spec.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/freeipa.spec.in b/freeipa.spec.in index 638886af3..811532ff8 100644 --- a/freeipa.spec.in +++ b/freeipa.spec.in @@ -1467,7 +1467,7 @@ fi %dir %{_localstatedir}/lib/ipa %attr(700,root,root) %dir %{_localstatedir}/lib/ipa/backup %attr(700,root,root) %dir %{_localstatedir}/lib/ipa/gssproxy -%attr(700,root,root) %dir %{_localstatedir}/lib/ipa/sysrestore +%attr(711,root,root) %dir %{_localstatedir}/lib/ipa/sysrestore %attr(700,root,root) %dir %{_localstatedir}/lib/ipa/sysupgrade %attr(755,root,root) %dir %{_localstatedir}/lib/ipa/pki-ca %ghost %{_localstatedir}/lib/ipa/pki-ca/publish