Jochen Kellner via FreeIPA-users wrote:
>
> Hi,
>
> I've re-installed my test system with Fedora 40. ipa-healthcheck says:
>
> {
> "source": "ipahealthcheck.ipa.files",
> "check": "TomcatFileCheck",
> "result": "WARNING",
> "uuid": "0cad1a21-d450-4c68-845f-e72a640af360",
> "when": "20240610020014Z",
> "duration": "0.000986",
> "kw": {
> "key": "_var_lib_pki_pki-tomcat_conf_ca_CS.cfg_mode",
> "path": "/var/lib/pki/pki-tomcat/conf/ca/CS.cfg",
> "type": "mode",
> "expected": "0660",
> "got": "0664",
> "msg": "Permissions of /var/lib/pki/pki-tomcat/conf/ca/CS.cfg are too
> permissive: 0664 and should be 0660"
> }
> },
>
> Otherwise the system seems to run fine. Might be a packaging problem...
Were only IPA packages updated or also dogtag-pki* or tomcat? I assume
healthcheck output was clean prior to upgrading? I'm trying to narrow
down where to look for the root cause.
In any case I'd heed the warning and tighten up the perms.
Thanks for the report.
rob
--
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
