From df18c1e1c034cd0162747eb357efdcbbdf22ff1c Mon Sep 17 00:00:00 2001 From: Watson Sato Date: Tue, 19 Mar 2019 16:50:09 +0100 Subject: [PATCH] Remove --quiet from rpm command It doesn't work with --setperms. See https://bugzilla.redhat.com/show_bug.cgi?id=1690469. --- .../rpm_verification/rpm_verify_permissions/ansible/shared.yml | 2 +- .../rpm_verification/rpm_verify_permissions/bash/shared.sh | 2 +- .../rpm_verification/rpm_verify_permissions/rule.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/linux_os/guide/system/software/integrity/software-integrity/rpm_verification/rpm_verify_permissions/ansible/shared.yml b/linux_os/guide/system/software/integrity/software-integrity/rpm_verification/rpm_verify_permissions/ansible/shared.yml index abce9e17f5..e05696d46c 100644 --- a/linux_os/guide/system/software/integrity/software-integrity/rpm_verification/rpm_verify_permissions/ansible/shared.yml +++ b/linux_os/guide/system/software/integrity/software-integrity/rpm_verification/rpm_verify_permissions/ansible/shared.yml @@ -13,7 +13,7 @@ @ANSIBLE_ENSURE_PLATFORM@ - name: "Correct file permissions with RPM" - shell: "rpm --quiet --setperms $(rpm -qf '{{ item }}')" + shell: "rpm --setperms $(rpm -qf '{{ item }}')" args: warn: False # Ignore ANSIBLE0006, we can't correct permissions using rpm module with_items: "{{ files_with_incorrect_permissions.stdout_lines }}" diff --git a/linux_os/guide/system/software/integrity/software-integrity/rpm_verification/rpm_verify_permissions/bash/shared.sh b/linux_os/guide/system/software/integrity/software-integrity/rpm_verification/rpm_verify_permissions/bash/shared.sh index 5689b6d84b..7705f0df3b 100644 --- a/linux_os/guide/system/software/integrity/software-integrity/rpm_verification/rpm_verify_permissions/bash/shared.sh +++ b/linux_os/guide/system/software/integrity/software-integrity/rpm_verification/rpm_verify_permissions/bash/shared.sh @@ -28,5 +28,5 @@ SETPERMS_RPM_LIST=( $(echo "${SETPERMS_RPM_LIST[@]}" | tr ' ' '\n' | sort -u | t # correct values for RPM_PACKAGE in "${SETPERMS_RPM_LIST[@]}" do - rpm --quiet --setperms "${RPM_PACKAGE}" + rpm --setperms "${RPM_PACKAGE}" done diff --git a/linux_os/guide/system/software/integrity/software-integrity/rpm_verification/rpm_verify_permissions/rule.yml b/linux_os/guide/system/software/integrity/software-integrity/rpm_verification/rpm_verify_permissions/rule.yml index e233c8b02f..1d5090894b 100644 --- a/linux_os/guide/system/software/integrity/software-integrity/rpm_verification/rpm_verify_permissions/rule.yml +++ b/linux_os/guide/system/software/integrity/software-integrity/rpm_verification/rpm_verify_permissions/rule.yml @@ -19,7 +19,7 @@ description: |-
Next, run the following command to reset its permissions to the correct values: -
$ sudo rpm --quiet --setperms PACKAGENAME
+
$ sudo rpm --setperms PACKAGENAME
rationale: |- Permissions on system binaries and configuration files that are too generous