Skip to content

lint: Check for potential uid drift for files in /etc #1562

@cgwalters

Description

@cgwalters

Now that we have parsers for both tmpfiles.d and sysusers.d, we can detect the case where files in /etc are owned by a floating uid/gid and warn.

However we should not warn if there's a tmpfiles.d entry which does a chown, which is a standard workaround for components/packages which have floating uid/gids; e.g. we shouldn't warn on if we detect
/usr/lib/tmpfiles.d/polkit.conf:Z /etc/polkit-1/localauthority - polkitd polkitd

(Humm actually this is tangential but it seems that rpm-ostree auto-synthesized

cat /usr/lib/tmpfiles.d/polkit-tmpfiles.conf 
d /etc/polkit-1/rules.d 0750 root polkitd - -

which seems kind of wrong because it should actually be Z here probably)

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions