Warning: directory permissions differ on /etc/ssl/private/

Ran an update and saw this warning
(1/4) upgrading openssl warning: directory permissions differ on /etc/ssl/private/ filesystem: 755 package: 700

Is there a need to fix this with some chmod command or safe to ignore? Thank you.

Full update log below:

scott@endeavourOS:~$ yay
[sudo] password for scott: 
:: Synchronizing package databases...
 endeavouros is up to date
 core                  126.4 KiB   153 KiB/s 00:01 [--------------------------] 100%
 extra                   8.2 MiB  2.46 MiB/s 00:03 [--------------------------] 100%
 multilib              126.6 KiB   134 KiB/s 00:01 [--------------------------] 100%
:: Searching AUR for updates...
:: Checking development packages...
:: Searching databases for updates...
:: 4 packages to upgrade/install.
4  core/linux-lts          6.18.34-1 -> 6.18.35-1
3  core/linux-lts-headers  6.18.34-1 -> 6.18.35-1
2  core/openssl            3.6.2-2   -> 3.6.3-1
1  extra/serd              0.32.8-1  -> 0.32.10-1
==> Packages to exclude: (eg: "1 2 3", "1-3", "^4" or repo name)
 -> Excluding packages may cause partial upgrades and break systems
==> 
Sync Dependency (2): serd-0.32.10-1, openssl-3.6.3-1
Sync Explicit (2): linux-lts-6.18.35-1, linux-lts-headers-6.18.35-1
:: Synchronizing package databases...
 endeavouros is up to date
 core is up to date
 extra is up to date
 multilib is up to date
:: Starting full system upgrade...
resolving dependencies...
looking for conflicting packages...

Package (4)             Old Version  New Version  Net Change  Download Size

core/linux-lts          6.18.34-1    6.18.35-1     -0.01 MiB     144.19 MiB
core/linux-lts-headers  6.18.34-1    6.18.35-1      0.00 MiB      57.59 MiB
core/openssl            3.6.2-2      3.6.3-1        0.25 MiB       5.48 MiB
extra/serd              0.32.8-1     0.32.10-1      0.00 MiB       0.06 MiB

Total Download Size:   207.33 MiB
Total Installed Size:  421.82 MiB
Net Upgrade Size:        0.25 MiB

:: Proceed with installation? [Y/n] 
:: Retrieving packages...
 serd-0.32.10-1-x...    65.0 KiB  56.4 KiB/s 00:01 [--------------------------] 100%
 openssl-3.6.3-1-...     5.5 MiB  1486 KiB/s 00:04 [--------------------------] 100%
 linux-lts-header...    57.6 MiB  2.86 MiB/s 00:20 [--------------------------] 100%
 linux-lts-6.18.3...   144.2 MiB  3.07 MiB/s 00:47 [--------------------------] 100%
 Total (4/4)           207.3 MiB  4.38 MiB/s 00:47 [--------------------------] 100%
(4/4) checking keys in keyring                     [--------------------------] 100%
(4/4) checking package integrity                   [--------------------------] 100%
(4/4) loading package files                        [--------------------------] 100%
(4/4) checking for file conflicts                  [--------------------------] 100%
:: Running pre-transaction hooks...
(1/3) Saving Linux kernel modules...
(2/3) Remove DKMS modules
==> dkms remove --no-depmod nvidia/580.159.04 -k 6.18.34-1-lts
==> depmod 6.18.34-1-lts
(3/3) Removing kernel...
:: kernel-install removing kernel 6.18.34-1-lts
:: Processing package changes...
(1/4) upgrading openssl                            [--------------------------] 100%
warning: directory permissions differ on /etc/ssl/private/
filesystem: 755  package: 700
(2/4) upgrading linux-lts                          [--------------------------] 100%
(3/4) upgrading linux-lts-headers                  [--------------------------] 100%
(4/4) upgrading serd                               [--------------------------] 100%
:: Running post-transaction hooks...
(1/7) Restoring Linux kernel modules...
++ uname -r
+ KVER=7.0.11-arch1-1
+ test -e /usr/lib/modules/backup/7.0.11-arch1-1
+ rsync -AHXal --ignore-existing /usr/lib/modules/backup/7.0.11-arch1-1 /usr/lib/modules/
+ rm -rf /usr/lib/modules/backup
(2/7) Arming ConditionNeedsUpdate...
(3/7) Updating module dependencies...
(4/7) Install DKMS modules
==> dkms install --no-depmod nvidia/580.159.04 -k 6.18.35-1-lts
==> depmod 6.18.35-1-lts
(5/7) Running kernel-install...
:: kernel-install installing kernel 6.18.35-1-lts
(6/7) Checking for .pacnew and .pacsave files...
(7/7) Checking which packages need to be rebuilt

From time to time, some permissions on some files/directories delivered by some package change by upstream.

I would personally change the permission on that particular directory to be in accordance with what is delivered by the package.

sudo chmod 700 /etc/ssl/private

Yep did the same as @cactux posted a hour ago.

It’s an explicit change by the Arch Linux maintainers:

Slightly worryingly, it’s a fix for an 11½ year old bug :open_mouth: