`supermin` augenrules

[bphd]

NOTE: Please refer to the Reporting Bug and Requesting Features wiki page before creating any new GitHub issues.

audit-userspace/init.d/Makefile.am

Line 68 in 22c1642

chmod 0750 $(DESTDIR)$(sbindir)/augenrules

8441313#diff-e3bd1114a2959a0cb463f24061c706b9994a23bb79dafd361828c5d3c857bef5
https://github.com/libguestfs/supermin/blob/f5a3deef588759c49dc862427a265aced612002d/src/ext2fs-c.c#L530-L539
libguestfs/supermin@f5a3dee#diff-43a61855ffa4b25027dacc23718fb03fa0160f4f49b3e080b4938382e9c2ee45
@sgrubb @stevegrubb @libguestfs @rwmjones (@ptoscano @hillu @olafhering)

Some distro files are not public readable, so supermin cannot copy them
into the appliance. This is a problem with your Linux distro. Please ask
your distro to stop doing pointless security by obscurity.
You can ignore these warnings. You do not need to use sudo.

[stevegrubb]

There are some files that are not publicly readable for common criteria purposes.

[bphd]

@stevegrubb:
common criteria purposes

@rwmjones:
stop doing pointless security by obscurity

[hillu]

Why was I tagged in this issue? And what is the actual problem?

[rwmjones]

Why was I tagged in this issue? And what is the actual problem?

I think it's something to do with this message in supermin. However I'd also like to know what the actual problem is, otherwise please don't tag me (or hillu).

[stevegrubb]

Closing this. The permissions in the make file are not the final permissions. The packaging system can overide it. Review of the Fedora spec file shows permissions are 0755, so I modified it. And no, it is not security by obscurity. The purpose is that if a common user can even attempt to run the utilities related to the audit trail, it adds a lot more monitoring to detect who is trying to alter the audit trail.