Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. https://bugzilla.redhat.com/show_bug.cgi?id=522210 --- Comment #5 from Matthew Harmsen <mharmsen@xxxxxxxxxx> 2009-09-16 13:24:02 EDT --- # rpmlint pki-ca-1.3.0-1.fc11.noarch.rpm pki-ca.noarch: E: non-readable /usr/share/pki/ca/conf/CS.cfg 0660 pki-ca.noarch: E: non-standard-dir-perm /usr/share/pki/ca/logs/signedAudit 0770 1 packages and 0 specfiles checked; 2 errors, 0 warnings. EXPLANATION: (1) The 'CS.cfg' file requires a mode of '0660' due to security sensitive information potentially contained within this file; therefore, it must not be viewable by others, and since this package is part of a cross-platform product, it may not rely exclusively upon SELinux access control. (2) Similarly, the 'signedAudit' directory requires a mode of '0770' as this directory, when enabled, contains security sensitive logfiles that must not be viewable by others, and since this package is part of a cross-platform product, it may not rely exclusively upon SELinux access control. -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug. _______________________________________________ Fedora-package-review mailing list Fedora-package-review@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-package-review