From bc2d33c53058960b43b2160a4aad6d652c4461cc Mon Sep 17 00:00:00 2001 From: Scott Mayhew Date: Mon, 3 Feb 2025 18:16:05 -0500 Subject: [PATCH] Address rpm verify issues 1. Fix the ownership of /var/lib/nfs/statd/state. It should be owned by root:root, not rpcuser:rpcuser. This was fixed in RHEL8 in https://bugzilla.redhat.com/show_bug.cgi?id=1733445 but that change was never propagated to RHEL 9 or Fedora. 2. Both /var/lib/nfs/etab and /var/lib/nfs/rmtab are marked as %config files, but they're not config files. They state files, just like /var/lib/nfs/statd/state, so they should be marked %ghost instead. Resolves: RHEL-64340 Resolves: RHEL-72823 Signed-off-by: Scott Mayhew --- nfs-utils.spec | 14 +++++++++----- 1 file changed, 9 insertions(+), 5 deletions(-) diff --git a/nfs-utils.spec b/nfs-utils.spec index 01ce3df..519ffd4 100644 --- a/nfs-utils.spec +++ b/nfs-utils.spec @@ -2,7 +2,7 @@ Summary: NFS utilities and supporting clients and daemons for the kernel NFS ser Name: nfs-utils URL: http://linux-nfs.org/ Version: 2.5.4 -Release: 29%{?dist} +Release: 30%{?dist} Epoch: 1 # group all 32bit related archs @@ -368,9 +368,9 @@ fi %dir %attr(700,rpcuser,rpcuser) %{_sharedstatedir}/nfs/statd %dir %attr(700,rpcuser,rpcuser) %{_sharedstatedir}/nfs/statd/sm %dir %attr(700,rpcuser,rpcuser) %{_sharedstatedir}/nfs/statd/sm.bak -%ghost %attr(644,rpcuser,rpcuser) %{_statdpath}/state -%config(noreplace) %{_sharedstatedir}/nfs/etab -%config(noreplace) %{_sharedstatedir}/nfs/rmtab +%ghost %attr(644,root,root) %{_statdpath}/state +%ghost %attr(644,root,root) %{_sharedstatedir}/nfs/etab +%ghost %attr(644,root,root) %{_sharedstatedir}/nfs/rmtab %config(noreplace) %{_sysconfdir}/request-key.d/id_resolver.conf %config(noreplace) %{_sysconfdir}/modprobe.d/lockd.conf %config(noreplace) %{_sysconfdir}/nfs.conf @@ -428,7 +428,7 @@ fi %dir %attr(700,rpcuser,rpcuser) %{_sharedstatedir}/nfs/statd %dir %attr(700,rpcuser,rpcuser) %{_sharedstatedir}/nfs/statd/sm %dir %attr(700,rpcuser,rpcuser) %{_sharedstatedir}/nfs/statd/sm.bak -%ghost %attr(644,rpcuser,rpcuser) %{_statdpath}/state +%ghost %attr(644,root,root) %{_statdpath}/state %config(noreplace) %{_sysconfdir}/nfsmount.conf %config(noreplace) %{_sysconfdir}/nfs.conf %config(noreplace) %{_sysconfdir}/request-key.d/id_resolver.conf @@ -513,6 +513,10 @@ fi %{_mandir}/*/nfsiostat.8.gz %changelog +* Mon Feb 3 2025 Scott Mayhew 2.5.4-30 +- fix ownership of /var/lib/nfs/statd/state (RHEL-72823) +- /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340) + * Wed Jan 8 2025 Steve Dickson 2.5.4-29 - conffile: add 'arg' argument to conf_remove_now() (RHEL-70923)