805124 - Do a security review of all world-readable config file

- fixed permission on selinux policy files
daviddavis · Mar 22, 2012 · e79f329 · e79f329
1 parent c145cfc
commit e79f329
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/selinux/katello-selinux/katello-selinux.spec b/selinux/katello-selinux/katello-selinux.spec
@@ -129,7 +129,7 @@ fi
 %files
 %defattr(-,root,root,0755)
 %doc %{modulename}.fc %{modulename}.if %{modulename}.te
-%{_datadir}/selinux/*/%{modulename}.pp.bz2
+%attr(0600,root,root) %{_datadir}/selinux/*/%{modulename}.pp.bz2
 %{_datadir}/selinux/devel/include/%{moduletype}/%{modulename}.if
 %{_mandir}/man1/katello-selinux-enable.1*
 %attr(0755,root,root) %{_sbindir}/%{name}-enable