Hi Coiby,
On Wed, Aug 24, 2022 at 6:40 PM Coiby Xu <coxu(a)redhat.com> wrote:
Hi Lichen,
Maybe it's better to use rpm %ghost directive like
"%ghost %attr(600, root, root) ..." in this case.
I think %ghost% may not
be able to handle $KDUMP_LOG_PATH very well.
Thanks!
Lichen
On Wed, Aug 24, 2022 at 04:16:14PM +0800, Lichen Liu wrote:
>Decrease the risk that of leaking information that could potentially
>be used to exploit the crash further (think location of keys).
>
>Signed-off-by: Lichen Liu <lichliu(a)redhat.com>
>---
> kdumpctl | 1 +
> 1 file changed, 1 insertion(+)
>
>diff --git a/kdumpctl b/kdumpctl
>index 126ecb9..0e37d36 100755
>--- a/kdumpctl
>+++ b/kdumpctl
>@@ -691,6 +691,7 @@ load_kdump()
> # and release it.
> exec 12>&2
> exec 2>> $KDUMP_LOG_PATH/kdump.log
>+ chmod 600 $KDUMP_LOG_PATH/kdump.log
> PS4='+ $(date "+%Y-%m-%d %H:%M:%S") ${BASH_SOURCE}@${LINENO}:
'
> set -x
>
>--
>2.31.1
>_______________________________________________
>kexec mailing list -- kexec(a)lists.fedoraproject.org
>To unsubscribe send an email to kexec-leave(a)lists.fedoraproject.org
>Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
>List Archives:
https://lists.fedoraproject.org/archives/list/kexec@lists.fedoraproject.org
>Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
--
Best regards,
Coiby