distro/rpm: use minimalistic file permissions

Config directory and files within can be created with distro-defaults,
since we only need read permission for this dir.

Other dirs have permissions updated to conform to tmpfiles.d.

diff --git a/distro/rpm/knot-resolver.spec b/distro/rpm/knot-resolver.spec
index c2b54d7027918f574a7c7c9b919f231dbfe9734b..00508cb69cb78e52a873698fbc61dc8b6a44d000 100644 (file)
--- a/distro/rpm/knot-resolver.spec
+++ b/distro/rpm/knot-resolver.spec
@@ -272,12 +272,12 @@ fi
 %doc %{_pkgdocdir}/AUTHORS
 %doc %{_pkgdocdir}/NEWS
 %doc %{_pkgdocdir}/examples
-%attr(755,root,knot-resolver) %dir %{_sysconfdir}/knot-resolver
-%attr(644,root,knot-resolver) %config(noreplace) %{_sysconfdir}/knot-resolver/kresd.conf
-%attr(644,root,knot-resolver) %config(noreplace) %{_sysconfdir}/knot-resolver/root.hints
-%attr(644,root,knot-resolver) %{_sysconfdir}/knot-resolver/icann-ca.pem
-%attr(775,root,knot-resolver) %dir %{_sharedstatedir}/knot-resolver
-%attr(664,root,knot-resolver) %{_sharedstatedir}/knot-resolver/root.keys
+%dir %{_sysconfdir}/knot-resolver
+%config(noreplace) %{_sysconfdir}/knot-resolver/kresd.conf
+%config(noreplace) %{_sysconfdir}/knot-resolver/root.hints
+%{_sysconfdir}/knot-resolver/icann-ca.pem
+%attr(750,knot-resolver,knot-resolver) %dir %{_sharedstatedir}/knot-resolver
+%attr(640,knot-resolver,knot-resolver) %{_sharedstatedir}/knot-resolver/root.keys
 %{_unitdir}/kresd@.service
 %{_unitdir}/kres-cache-gc.service
 %{_unitdir}/kresd.target
@@ -287,7 +287,7 @@ fi
 %{_tmpfilesdir}/knot-resolver.conf
 %ghost /run/%{name}
 %ghost %{_localstatedir}/cache/%{name}
-%attr(770,root,knot-resolver) %dir %{_libdir}/%{name}
+%attr(750,knot-resolver,knot-resolver) %dir %{_libdir}/%{name}
 %{_sbindir}/kresd
 %{_sbindir}/kresc
 %{_sbindir}/kres-cache-gc