From 25db5ea4c1439038cbe35a6d0b8f80da62fe1a91 Mon Sep 17 00:00:00 2001 From: Frantisek Krenzelok Date: Mon, 29 Jul 2024 13:22:32 +0200 Subject: [PATCH] Remove write permition from directory-hash Related: RHEL-21094 --- ca-certificates.spec | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/ca-certificates.spec b/ca-certificates.spec index 5d6865e..f0af6d8 100644 --- a/ca-certificates.spec +++ b/ca-certificates.spec @@ -38,7 +38,7 @@ Name: ca-certificates Version: 2024.2.69_v8.0.303 # for y-stream, please always use 91 <= release < 100 (91,92,93) # for z-stream release branches, please use 90 <= release < 91 (90.0, 90.1, ...) -Release: 91.1%{?dist} +Release: 91.2%{?dist} License: MIT AND GPL-2.0-or-later URL: https://fedoraproject.org/wiki/CA-Certificates @@ -185,7 +185,7 @@ mkdir -p -m 755 $RPM_BUILD_ROOT%{catrustdir}/source/anchors mkdir -p -m 755 $RPM_BUILD_ROOT%{catrustdir}/source/blocklist mkdir -p -m 755 $RPM_BUILD_ROOT%{catrustdir}/extracted mkdir -p -m 755 $RPM_BUILD_ROOT%{catrustdir}/extracted/pem -mkdir -p -m 755 $RPM_BUILD_ROOT%{catrustdir}/extracted/pem/directory-hash +mkdir -p -m 555 $RPM_BUILD_ROOT%{catrustdir}/extracted/pem/directory-hash mkdir -p -m 755 $RPM_BUILD_ROOT%{catrustdir}/extracted/openssl mkdir -p -m 755 $RPM_BUILD_ROOT%{catrustdir}/extracted/java mkdir -p -m 755 $RPM_BUILD_ROOT%{catrustdir}/extracted/edk2 @@ -395,6 +395,8 @@ fi %changelog +*Mon Jul 29 2024 Frantisek Krenzelok - 2024.2.69_v8.0.303-91.2 +- Remowe write permition from directory-hash *Mon Jul 29 2024 Frantisek Krenzelok - 2024.2.69_v8.0.303-91.1 - Reduce dependency on p11-kit to only the trust subpackage - Own the Directory-hash directory