import kexec-tools-2.0.24-7.el8

SOURCES/kdumpctl

@@ -694,6 +694,7 @@ load_kdump()
 	# and release it.
 	exec 12>&2
 	exec 2>> $KDUMP_LOG_PATH/kdump.log
+	chmod 600 $KDUMP_LOG_PATH/kdump.log
 	PS4='+ $(date "+%Y-%m-%d %H:%M:%S") ${BASH_SOURCE}@${LINENO}: '
 	set -x
 

SPECS/kexec-tools.spec

@@ -1,6 +1,6 @@
 Name: kexec-tools
 Version: 2.0.24
-Release: 6%{?dist}
+Release: 7%{?dist}
 License: GPLv2
 Group: Applications/System
 Summary: The kexec/kdump userspace component
@@ -393,6 +393,9 @@ done
 %endif
 
 %changelog
+* Sun Sep 18 2022 Pingfan Liu <piliu@redhat.com> - 2.0.24-7
+- kdumpctl: make the kdump.log root-readable-only
+
 * Mon Jul 18 2022 Pingfan Liu <piliu@redhat.com> - 2.0.24-6
 - kdump-lib: Add the CoreOS kernel dir to the boot_dirlist
 - kdump-lib: attempt to fix BOOT_IMAGE detection