filesystem

#3 The /root has 550 permission which doesn't make conclusion how the root is able to write inside it and why the home dir of root is marked to read and execute for others.
Closed by ovasik. Opened by ultimate2609.

Closed
Reopen Issue

The /root permissions are 550 now even root doesn't have a "rwx"
there but still he is able to write files and there is not meaning to
have homedir access to others with 550. So making it 700 would make
a justification to it's permission.

I tried to push a patch but not able to with 403 as,

$ git show
commit 5e7f9996633f2f9d4709f446e37cb8f4b57f0e1b (HEAD -> upstream)
Author: Parikshit Khedekar pkhedeka@redhat.com
Date: Fri Feb 12 13:48:57 2021 +0530

Adding a change to /root permissions as even root doesn't have a "rwx"
there but still he is able to write files and there is not meaning to
have homedir access to others with 550.
Signed-off-by: Parikshit Khedekar <pkhedeka@redhat.com>

diff --git a/filesystem.spec b/filesystem.spec
index 327a8a8..1bc5769 100644
--- a/filesystem.spec
+++ b/filesystem.spec
@@ -214,7 +214,7 @@ restorecon /afs 2>/dev/null >/dev/null || :
%dir /mnt
%dir /opt
%attr(555,root,root) /proc
-%attr(550,root,root) /root
+%attr(700,root,root) /root
/run
/sbin
/srv
@@ -309,6 +309,10 @@ restorecon /afs 2>/dev/null >/dev/null || :
/var/yp

%changelog
+
+* Fri Feb 12 2021 Parikshit Khedekar pkhedeka@redhat.com - 3.14-2
+- Changing /root to 700 from 550
+
* Mon Jan 27 2020 Ondrej Vasik ovasik@redhat.com - 3.14-1
- do not restore context of /proc (#1722766)

Do you face some issue with the current 550 permissions? These permissions were changed to 550 long time ago per request of Red Hat's Security expert, see https://bugzilla.redhat.com/show_bug.cgi?id=517575 for more details - more directories changed permissions to follow the instruction - https://src.fedoraproject.org/rpms/filesystem/c/cd01d2d6d54f59ef8e177d0391bc734fba470ef4?branch=rawhide .

I didn't faced any issues but have a user with requesting correction to the permissions, the directive belongs to root and he can write to it whereas the permission 550 doesn't offer write mode for it and as it's a homedir no one should have access in terms of permission to it.
Indeed, even it is 550 no group member of root can read it though. I'm checking the links shared by you and will dig it bit more, your thoughts will help in it.

Got this man! Thanks for help and link we can close this! There is too much thank I thought

Metadata Update from @ovasik:
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.