File GRUB_RESCUE_initrd.patch of Package rear23a.32113

--- usr/share/rear/pack/GNU/Linux/900_create_initramfs.sh.orig	2018-08-10 12:36:00.000000000 +0200
+++ usr/share/rear/pack/GNU/Linux/900_create_initramfs.sh	2024-01-15 14:25:04.758563081 +0100
@@ -78,4 +78,10 @@ case "$REAR_INITRD_COMPRESSION" in
         fi
         ;;
 esac
+
+# Only root should be allowed to access the initrd
+# because the ReaR recovery system can contain secrets
+# cf. https://github.com/rear/rear/issues/3122
+test -s "$TMP_DIR/$REAR_INITRD_FILENAME" && chmod 0600 "$TMP_DIR/$REAR_INITRD_FILENAME"
+
 popd >/dev/null
openSUSE Build Service is sponsored by