[Rpm-maint] [rpm-software-management/rpm] rpm 4.20 triggers a dac_read_search capability request (Issue #3468)

[Panu Matilainen]

Hmm, something here doesn't add up. Like @dmnks pointed out elsewhere, `sudo sh -c 'echo $HOME'` does return `root` without any extra switches, in so rpm should also do the right thing. And, looking at `sudo strace -o /tmp/rebuild.log rpm --rebuilddb` output, I see 

> newfstatat(AT_FDCWD, "/root/.config/rpm", 0x7ffeb3ea6200, AT_SYMLINK_NOFOLLOW) = -1 EACCES (Permission denied)
newfstatat(AT_FDCWD, "/root/.config/rpm/rpmrc", 0x7ffeb3ea6200, AT_SYMLINK_NOFOLLOW) = -1 EACCES (Permission denied)
> access("~/.config/rpm/rpmrc", R_OK)     = -1 EACCES (Permission denied)

But these are for root as you'd expect, and they also should be allowed.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/3468#issuecomment-2503473685
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/issues/3468/2503473685 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20241127/83854ad4/attachment-0001.htm>