URL: https://github.com/SSSD/sssd/pull/457 Title: #457: ipa: Removal of umask(0) in selinux_child
bachradsusi commented: """ The problem with the test case is that it uses old path. `/etc/selinux/targeted/modules/active` changed to `/etc/selinux/targeted/active/modules/`
``` [root@centos7 targeted]# rpm -q libsemanage libsemanage-2.5-8.el7.x86_64 [root@centos7 targeted]# ls -ld /etc/selinux/targeted/active/ /etc/selinux/targeted/active/modules/ drwx------. 3 root root 206 Jan 15 17:24 /etc/selinux/targeted/active/ drwx------. 4 root root 33 Jan 15 17:24 /etc/selinux/targeted/active/modules/ [root@centos7 targeted]# umask 777 [root@centos7 targeted]# semodule -B [root@centos7 targeted]# ls -ld /etc/selinux/targeted/active/ /etc/selinux/targeted/active/modules/ d---------. 3 root root 206 Jan 15 17:27 /etc/selinux/targeted/active/ d---------. 4 root root 33 Jan 15 17:27 /etc/selinux/targeted/active/modules/ ``` """
See the full comment at https://github.com/SSSD/sssd/pull/457#issuecomment-357745646