Permissions of files owned by accountsservice package diverge from RPM database

Issue

• After installing hardened RHEL8 system (with either PCI-DSS, E8 or HIPAA profile) the rule rpm_verify_permissions reports a finding that the folder /var/lib/AccountsService/icons (from accountsservice RPM) has different permissions compared to the ones expected in the package metadata stored in the rpm database.

• Installed directory /var/lib/AccountsService/icons (from accountsservice RPM) has different permissions compared to the ones expected by the package metadata stored in the rpm database. Also after fixing the permissions they change again after rebooting or changing the runlevel on the system.