Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ld file permissions do not match what is declared in the rpm manifest #46

Open
jourdan opened this issue Nov 1, 2023 · 0 comments · May be fixed by #47
Open

ld file permissions do not match what is declared in the rpm manifest #46

jourdan opened this issue Nov 1, 2023 · 0 comments · May be fixed by #47
Assignees

Comments

@jourdan
Copy link

jourdan commented Nov 1, 2023

the postld file defined in the rpm spec file here https://github.com/NVIDIA/yum-packaging-precompiled-kmod/blob/main/yum-kmod-nvidia.spec#L40 is in the rpm database with permissions 0644.

However, in the postinstall section here https://github.com/NVIDIA/yum-packaging-precompiled-kmod/blob/main/yum-kmod-nvidia.spec#L172 the file gets an execute bit set. This causes security tooling we run to be unhappy as the file flags as modified since install (i.e. possible malware). The postld file should be defined with the desired permissions in the rpm spec rather than have them set in the %post section

@kmittman kmittman self-assigned this Nov 1, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants