[ClusterLabs] Question on permissions for pcsd ghost files

[Hayden,Robert]

Working through an audit and need to determine what the expected permissions are for the following files.

[root at techval13]# rpm -V pcs
.M.......  c /var/lib/pcsd/pcs_settings.conf
.M.......  c /var/lib/pcsd/pcs_users.conf
.M.......  c /var/lib/pcsd/pcsd.cookiesecret
.M.......  c /var/lib/pcsd/pcsd.crt
.M.......  c /var/lib/pcsd/pcsd.key
.M.......  c /var/lib/pcsd/tokens

Looking at the RPM spec, these appear to be ghost files with permissions set to 000 in the spec.

[root at techval13]# rpm -q --dump pcs | grep /var/lib/pcsd/pcs_settings.conf
/var/lib/pcsd/pcs_settings.conf 0 1541089158 0000000000000000000000000000000000000000000000000000000000000000 0100000 root root 1 0 0 X

Currently, the permissions after a normal installation are listed in the "first" column from my custom report output.  The second column is the "expected" permissions from the RPM spec.

  644 | 000 | /var/lib/pcsd/pcs_settings.conf | pcs-0.9.165-6.0.1.el7.x86_64
  644 | 000 | /var/lib/pcsd/pcs_users.conf | pcs-0.9.165-6.0.1.el7.x86_64
  700 | 000 | /var/lib/pcsd/pcsd.cookiesecret | pcs-0.9.165-6.0.1.el7.x86_64
  700 | 000 | /var/lib/pcsd/pcsd.crt | pcs-0.9.165-6.0.1.el7.x86_64
  700 | 000 | /var/lib/pcsd/pcsd.key | pcs-0.9.165-6.0.1.el7.x86_64
  600 | 000 | /var/lib/pcsd/tokens | pcs-0.9.165-6.0.1.el7.x86_64

Any help or guidance would be greatly appreciated.

Thanks
Robert




CONFIDENTIALITY NOTICE This message and any included attachments are from Cerner Corporation and are intended only for the addressee. The information contained in this message is confidential and may constitute inside or non-public information under international, federal, or state securities laws. Unauthorized forwarding, printing, copying, distribution, or use of such information is strictly prohibited and may be unlawful. If you are not the addressee, please promptly delete this message and notify the sender of the delivery error by e-mail or you may call Cerner's corporate offices in Kansas City, Missouri, U.S.A at (+1) (816)221-1024.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clusterlabs.org/pipermail/users/attachments/20190419/e82e630f/attachment.html>