dracut.sh in dracut as used in Red Hat Enterprise Linux 6 Fedora 16 and 17 and possibly other products creates initramfs images with world-readable permissions which might allow local users to obtain sensitive information.