ENT-13161: Aligned Hub package perms for share/GUI on EL and Debian platforms with the MPF

[nickanderson]

The MPF enforces permissions of 400 and group and user ownership of root. While
the mis-alignment stabilizes, it does cause verification errors for RPM packages
that persists. This change brings the packaged permissions of share/GUI in
alignment with the MPF.

Ticket: ENT-13161
Changelog: Title

[nickanderson]

The debs failed building the first time, made a change and building again.

I think the RPM change looks good in my manual testing.

Checking rpm -V on el9

upgraded
Installed:
cfengine-nova-hub-3.27.0a.5376ae9fb-3389.el9.x86_64

[root@hub packages]# rpm -V cfengine-nova-hub
S.5....T.  c /var/cfengine/httpd/conf/httpd.conf
.M.......    /var/cfengine/httpd/htdocs
.M...U...    /var/cfengine/httpd/logs
.M....G..    /var/cfengine/state

after running bootstrap to self:

[root@hub packages]# rpm -V cfengine-nova-hub
S.5....T.  c /var/cfengine/httpd/conf/httpd.conf
.M.......    /var/cfengine/httpd/htdocs
.M...U...    /var/cfengine/httpd/logs
SM5...GT.    /var/cfengine/httpd/php/etc/php-fpm.conf
S.5....T.    /var/cfengine/share/GUI/application/config/config.php
.M....G..    /var/cfengine/state

That looks like a pretty good improvement. 1 file from share/GUI and it's not a permission difference modification.

Compared with 3.24.2 after clean install:

[root@hub packages]# cf-agent --version
CFEngine Core 3.24.2
CFEngine Enterprise 3.24.2
[root@hub packages]# rpm -V cfengine-nova-hub | grep -c "share/GUI"
49988

And after bootstrap to self:

[root@hub packages]# rpm -V cfengine-nova-hub | grep -c "share/GUI"

52683

[nickanderson]

Trying to fix perms for ppkeys on debian package. Unsure why, but my change seems to be causing bootstrap to fail with ppkeys being UNTRUSTED (755) instead of (x00)

[nickanderson]

@cf-bottom jenkins please!

[cf-bottom]

Alright, I triggered a build:

Jenkins: https://ci.cfengine.com/job/pr-pipeline/12489/

Packages: http://buildcache.cfengine.com/packages/testing-pr/jenkins-pr-pipeline-12489/

[craigcomstock]

was cherry picking something else and this was missing included this change along with my cherry pick for #1594

in 3.24.x: #1865
and 3.21.x: #1866