On Mon, Mar 09, 2009 at 05:02:03PM +0100, Michael Schroeder wrote:
Thanks. The strace indeed reveals what's going on: the aaa_base postinstall scriptlet contains: touch root/.bash_history chmod 600 root/.bash_history
On your system, /root/.bash_history is a symlink pointing to /dev/null, thus 'chmod 600 root/.bash_history' changes the mode of /dev/null.
Ah, that explains why the attributes were changed. I have set this symlink by intent, BTW. But it does not explain why the audit system have not revealed it.
The scriptlet should be changed to be a bit more careful, I guess. CC to ro@suse.de, the aaa_base maintainer.
Thanks! I hope we agree that symlinking .bash_history to /dev/null should not be forbidden ;-) -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org