From patchwork Thu Sep 10 14:43:27 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "MOESSBAUER, Felix" X-Patchwork-Id: 5454 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Thu, 10 Sep 2026 16:43:49 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-pj1-f57.google.com (mail-pj1-f57.google.com [209.85.216.57]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 68AEhl6k007774 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Thu, 10 Sep 2026 16:43:48 +0200 Received: by mail-pj1-f57.google.com with SMTP id 98e67ed59e1d1-38e54b6556asf5531511a91.2 for ; Thu, 10 Sep 2026 07:43:48 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1789051422; cv=pass; d=google.com; s=arc-20260327; b=noavJ6Fmb7yRJXwvaiTPfY7TawY6D1ZngIYq4b8YO1yZP7qRknuu+Nq8i16oJLsTiV 0Np0TgF/4fPZs/xRTRTITIpv1Dd6LAahmp8tpoeN3iEbnQ3Z7EaK86auAW6kbuoa1kZq LYklJ/SmcFV+XGBe/8HUBd/j3XAx7i82koHFQufT5JMnYDJq+z81X5sjHTLUnPFLsyKo x4A1o5Za44dBeB7HJCOTtQDaTuGCkG5DsiMMOoHsXyujoMANeyu0D0jxkgsSsSOqrTHj hMf/aVc2bRcMOIMFQvn4w69aIofkEVHCrB9O1gorDdQfRi3Yh1z36WBn82B3CqGALiR7 lVqw== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:message-id :date:subject:cc:to:from:dkim-signature; bh=0IbWSjG49cYVsRAVZxhhW26AMQUE+fgHVEtRAu9UCw4=; fh=nbtIUn5YatMRSAMCDcCeviGVV1wGRJJmUdg8ffsafCk=; b=bjJ0BQssrHJELPvc9W7vkqML9vYFKg4bGiTg+2Xsb8EKI6ExhXhAcYVqf99H19Ss+v FTIE1vomPH5/9NYDjecbIlhJwX0zj9aTRnjXGfbXFkxuOrRxoniOq5UNrXeq3zyjj/KB fLvIIzzkyl8DF1qx3iaf2KuhbPiiGFVyfmh5uGtf7QLMzKHX8z/bMF7BXG3MAWGPOBh5 Mqmb/SgTGfDUduPrtRosV3MsdKnYvOVkJmMPkrUiVNMjPhU3yQL4I3G79gcMVa+rlJDN M/nf6HYL1ZioDNGf7jPkSY9P36hztpvT8cXLlOo4zc7OtYfFn8SfHRCllSvLedtDsGLG ngzQ==; darn=isar-build.org ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=PsJmtWnf; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c202::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1789051422; x=1789656222; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:message-id:date:subject:cc:to:from:from:to:cc:subject :date:message-id:reply-to:content-type; bh=0IbWSjG49cYVsRAVZxhhW26AMQUE+fgHVEtRAu9UCw4=; b=jkWmC8Se34hhCZrmdaOhNSxVPcO8vTxq3eGtN3/PJaAGp/PYbb9DbmttIgd4hn5Fga Z8Ywi3eobiPKiLe2ysGWcXq5N+5s5dUSzhQdBnET3reVCDy0fXojguHMi+smBOFnIuF5 vFIVjquekoxIoyefo1D7A8hmD45j66PVbbh1ARcA3DcCFMIG/sUsIzx1k331eQLZudjn DS8WA+pN1U+HuU6+xdN6QSuO7qFs/VtLDGiAA9tcS01B1oJPZSAncs9MtoUVeqxvsrVm l3jHIARsSwhnxJf2b0P6D75kLBwwhMv4Nhoz7WRKrlzhe3Sek84Lel4QvTWuRf5VCHj8 RqYw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1789051422; x=1789656222; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:message-id:date:subject:cc:to:from:x-beenthere :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=0IbWSjG49cYVsRAVZxhhW26AMQUE+fgHVEtRAu9UCw4=; b=FjxQWkDT9JTWoohGV+IeD4VIKWfaWBJzPbpiVrmLki5V24gJMU/lOpavpzqhHxYQ1R KpXUznXV7Fqqe18XHGWbz7sE8ZR7V2yBwMOuE0iEDAmWiIk2EQWD+zC4K1rOMQ9mCNGh oPO2zAAB5EV+5d0YWDk5t73yikrMwc+sozGX02bN3NOWUZCYGeHEzcghOIqLqgv9/MiM 4cUxJzCvCJIpBiiN0Q4ZIk2uKIbXu492kgkdEj5rhOKyhcLRz6kY6tBdfma+JwU8FxNg DXJV0lIVEr/L2UBBUS1Q9nRy7dqbzMdRdxMgX85aln2c1yUOfI/vDiObaFZYSLGyH3pN jo4w== X-Forwarded-Encrypted: i=3; AKwUvBzO3gK7uIxVyavkvRxxMyBXjotkUDCLIdOD5Aj1jn6JJENIstdayBDZAvRqxrYVgZZDOSwGljg=@isar-build.org X-Gm-Message-State: AFuF++k1/iDFo2jVPo7+J6XDdCVA172Ga7uRnLvq4errIp+RziRy3H3i nT7JlJlRwvCES1IQ+wJi+jA3WzatPhK/Lpm9H0JD9XY0pktWmTl98lQm X-Received: by 2002:a17:90b:580e:b0:398:c3c9:d0ae with SMTP id 98e67ed59e1d1-39b25ee242bmr59424946a91.0.1789051421940; Thu, 10 Sep 2026 07:43:41 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="ATskLdceZgHsNurxeVsu1I/GBGjsCpW5kTRhZVUvQ58fZ2ZMMQ==" Received: by 2002:a17:90b:5903:b0:37c:83ec:163d with SMTP id 98e67ed59e1d1-39d75cef047ls1954914a91.0.-pod-prod-04-us; Thu, 10 Sep 2026 07:43:40 -0700 (PDT) X-Received: by 2002:a17:90a:fc47:b0:398:9c0c:7c72 with SMTP id 98e67ed59e1d1-39b2627fe24mr59417314a91.25.1789051420295; Thu, 10 Sep 2026 07:43:40 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1789051420; cv=pass; d=google.com; s=arc-20260327; b=Z3d4kNjSEJE+HiPdon5KIyETiyah989ZPQAWn+fk2f2/yWTlpyHhkWiY+J3/j53lT7 AqbM7A5tvc9r0GktTEAvwgL2RzSQcTFX/Bq08el1mEX+iSPB95HvTycv0Ch4WP225iy5 //eoAPyyLzJPyo4gm3Yg3CfL90C+rGRtPYopNxjc6IILCeyiD0q4QbJBaMIw3qZ2wQHz +yRVmxnFi/j6FVbDJ3mLSooowbF1eB2Fz842B8Pz86/76ucv8qNs8A4OvZuzZXsy0AnX LUx1VC9FVlo6POphGpgoT6jhTfjvSF+elb9BrCDZRuQm1w6p8GKI0aNMkqkIXdQ5aot7 lXwg== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:message-id:date:subject:cc :to:from:dkim-signature; bh=CuZ5ZP468WchmhHKfe541tJ1atRdYRfQ3DnmhTiFN+A=; fh=mCWA4AbeJIIx/jB2sZk/ItzTiQhicKuLfQNpyfz1pNQ=; b=N23kxcs2A9u67xqEcdHV5DdrHrF0bWxVSCHcIzqFOkswE+oG2nySQ2QXOdbPrTN2eK XPKOEhyesy+Ammyb90my6VgOWa4afEriof0t51s5iLYHs0/KAedTkn9M9UDaV70DUCpK 7G66720OgGKqer7+DXGC3UMiBwQqXaM53dHVGwgSP9dv+5uAcNkJtaEyjcwGz1Jyr6QA zAE9AkHrHVPKjfEgt04wyh3X+hbWPuQukgZDNkzzKQnU81f+OP52dPB0QF7dk+OgLRYG qopVz4IVDWICQBnEEsyzFD0v0aLIKwVRdbpTeDBNsK8767p/ivi/pHfU//N5H4L117Cu Cwtw==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=PsJmtWnf; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c202::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from GVXPR05CU001.outbound.protection.outlook.com (mail-swedencentralazlp170130007.outbound.protection.outlook.com. [2a01:111:f403:c202::7]) by gmr-mx.google.com with ESMTPS id 98e67ed59e1d1-39bae7ef89csi88288a91.1.2026.09.10.07.43.37 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 10 Sep 2026 07:43:40 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c202::7 as permitted sender) client-ip=2a01:111:f403:c202::7; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=WQdHOsP09TAUdI/Bd1lbIEdGYJ8QY4pHSbbO8uZAEHgq9DZlVuNTR8A/HRQ/5FwkouCrO/Fx5BzAU7yVAmsLr9jOpX6Be/E0KdSrcIIdixHRrjLzWRjn/siOlsLYn9c/b79oBaY19hzC9ELRd7uv3XRhJ7HFZicEuClKnKBV0argqosPRu3OjX4bPAMyhfmd/fY97XnRwsXCkQms9Zx/QpS+3Il9FdwGw3twlg+PM2Skrdg2PhQrbS2XzsAGbp1+bVdof+sLJxkITkM0TNrOVkRqfxTAND3rBuocBwiUd5OIsE2zLLVG6sxoF55lGEEKP0aoheI+Dn85zaw+x6ITyA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=CuZ5ZP468WchmhHKfe541tJ1atRdYRfQ3DnmhTiFN+A=; b=rIlsynpssmErKPRPG6OZ1Ud6P+s/58v0Z0fFIhfZMB8fGskHcYIyLHXlUG0TRrQRypRLiihxfq+mbEGWoxY8D3s8en5Ra8ekBGf5NKVmgY4sZvWTZTnsl6JOeMC+2Zg5HjfQ//tw+vaFLteoEP1H9mAwHrDePBMPRAehxybtn8dYbTA2MO6cZgQtCHkdbdqsdNUrdMJ4X+ScFrHn+4Iw+phRokbjuztMYorFQk9nGgqmfWh71ZVbQjiK8ejfQ1WtZLLQagemxWcuV1k0JuBboDsJ7hYUnVFYjgOdGOj/S/G9LLSg9/67OdO1B9ww8pyynp8OoGryy9kdk2OvOzjwEg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by AM0PR10MB3345.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:208:181::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.9; Thu, 10 Sep 2026 14:43:35 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%6]) with mapi id 15.21.0406.007; Thu, 10 Sep 2026 14:43:35 +0000 X-Patchwork-Original-From: "'Felix Moessbauer' via isar-users" From: "MOESSBAUER, Felix" To: isar-users@googlegroups.com Cc: jan.kiszka@siemens.com, Felix Moessbauer , Clara Kowalsky Subject: [PATCH 1/1] isar-check-rootless: check parent dirs are world executable Date: Thu, 10 Sep 2026 16:43:27 +0200 Message-ID: <20260910144327.775731-1-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.55.0 X-ClientProxiedBy: FRYP281CA0007.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10::17) To AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM7PR10MB3956:EE_|AM0PR10MB3345:EE_ X-MS-Office365-Filtering-Correlation-Id: 6bc3a17f-778b-41d3-21b5-08df0f49e4a3 X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|366016|10070799003|1800799024|23010399003|376014|10067099003|11063799006|56012099006|18002099003|55112099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(366016)(10070799003)(1800799024)(23010399003)(376014)(10067099003)(11063799006)(56012099006)(18002099003)(55112099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: uYrm0uMegEnl+KGFx+rLIfh01cS+kKKGAnM3r2nCFI4CGN9b+M0fMW3IgARxfZcWkPUroZ/ivQkvoeZXuhV9TinYZDGw/uAAJOG5OvWhlpBR4CaXd/F6e0/IDnsTmZ5tEAPj2F/3iUMh/EayyQvFNE8HCFbOw+jQ3QeZIMnOu8QTCsZ53m941dIdWPMbOyhx6ipoJieCm78gnR8FunbfMWhVWiF5HiYu0XAEAbwasWToN/2E8qdd4ALy1Of5ItUGEpBujjWrQ9STxP7NPsFgxN+BTs6ZOAE1fXXxkVHWgIdWi+HvSfhQuAPVEU/X8d41hqDZ41j6cC6ZVyLYwGU1jGRJDogDDRbPjrHq5/BQADw45M41QaKueQ+xhEAUNZMG7d7k5NTT+D4DogVqHuJgOiHySAVYuctBHy55OVQz+q99kuJaX6MHMqY3GCwTDgUu2wN8btt0HqMt5EE3LpLpF/mEQKHHnJMjFId38l6kT8dtRvPjlTiZGiM38bBkSjZgduycxmAr+wgRAqABwyG9IU3uhYR10IdAO2yvMHYT74URK95TMGEJFhobsTsU0d9u8K/U6rrZyRoM3hgkZ1HI5eSNAQsGrgddUowLC7hv8tX+UxPRlLWIbHF602LIz8QcUrO3bOkehTc7uDBE6BpHEUOlmdAXQIZmp9xw1eZrWpTNhC0DuhnwUzkpFnzFf3sSNQNlL23wq5BYss/bm+AU7iCC9lXUi7ZTGAJ2jg8uhO2mKb4LuowuAlhYJJEzbzXPqjad0NW5fDh6+Bdc/GRmB2SqQpVoG4MK4m/ox+o0GUJnRaIrV8g01pYosQwpGXeup3MVi046YgYT1rCXgi/TjqCbjfotWChlWXSwCC4MeAetyzpQROldJhyH5VCCTlopkQ35bn1OZpE7pBZMBZannvmmjryDh/nN6ay4CZ2zBQ5yoywRWFO4i5PNhIcijGFoqhWWhZAeuzX6eXZt8wEyjyTPmZ3K57du775ipiwNeiij3EnE+Re84Y++yq+vKTt2+lCgxYdQcwE0prbqA3EQ/QyFvNnxzIw3H+ORbpGGJQyoLQRUGdwM9dTgyYFelfl/sW+tRrFzSyZtDl7PpPY1838Lu8rhBMmDIn84M1wovSeydw5T16IEY0D9m7C3eB1OWe8hLtZRCtetg3gjYxXf1n/LljGddsmhzgpTKdiprlJK71b8NcV13TWKgAaVz6Wt/spZssbRDzennMUotnI21pinjpp58gVqrxPYAghP555d667d2wNMXFQYuNGQVE9YC+qzL1Hol7e8phnyH2F9iqHT1oYfKoFdQS7XJQs3ZwxnZf9htLD2S6DFxeJiN55njTsyuu7KTD1y5OyWAlD6OJeNAyaDjswr4YJG7x//Mc2SpIv0MYXJAwekNyivTF791bnupLQ+8FpM8hk0/FSxOORr0PES66vBKQmvJg/BcON7NRuNQONrnUuUfB5SgKrznWdLK+8blU7j1Tdj5GxV+bt818nt2bECR8LpJYdybwUCDkGE9os6kATvknB001teohwa/F5Au6h55fbrpIkVptWgDIGZ2g0LhTwbYjy+tNWUaOa4oGX/krqTq8iie2CDeZMxR+/UJA3YOLTiJbrbg6oadz51O39ROq1kIBPDjaopbQXbCfL4GNuKmhDr5DOFyiOPmVFw6CI3PHdtxR9VG5hETDD1PrONU+CEM4YADJvV6p521vGBh2gW3ychFWEGzkD0WasIE7LCOBJlQR9VMjmBrrmIyiUMqILtt3bfrXzSeNdWEwLHhsq0l8az5KeNkw/oweIY X-MS-Exchange-AntiSpam-MessageData-1: OoNr/G84/f92B7eUm800U2723uevPzDRRX8= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 6bc3a17f-778b-41d3-21b5-08df0f49e4a3 X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Sep 2026 14:43:35.3948 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: n0mx4t+zAWxUNfKywCotiu6Pg/BVbfs7sctl7fuRfwPdLi6jjU8ZDagUwDi/zhyovEkkLpnz/MiXfZQaoiljJabZtNEZw3nyQyBtBKbjsLA= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR10MB3345 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=PsJmtWnf; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c202::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= When using mmdebstrap with the unshare backend, all parent directories of the TMPDIR must be world executable. This requirement is documented in the mmdebstrap man page, but when not fulfilled, mmdebstrap fails in colorful ways. To indicate what is wrong, we add a check to the isar-check-rootless script. Reported-by: Clara Kowalsky Signed-off-by: Felix Moessbauer --- PS: The corresponding kas patch is here: https://groups.google.com/g/kas-devel/c/PZihYBAmlCQ/m/tXkK0P77BAAJ scripts/isar-check-rootless | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) diff --git a/scripts/isar-check-rootless b/scripts/isar-check-rootless index b5197111..de96aac7 100755 --- a/scripts/isar-check-rootless +++ b/scripts/isar-check-rootless @@ -20,6 +20,35 @@ fi [ "$verbose" = 0 ] || echo "RUN_PRIVILEGED_CMD: $run_privileged_cmd" >&2 +if ! tmpdir=$( \ + BB_ENV_PASSTHROUGH_ADDITIONS="${BB_ENV_PASSTHROUGH_ADDITIONS} ISAR_ROOTLESS" \ + ISAR_ROOTLESS=1 bitbake-getvar -q --value TMPDIR); then + echo "error: cannot determine TMPDIR from BitBake" >&2 + exit 1 +fi + +[ "$verbose" = 0 ] || echo "TMPDIR: $tmpdir" >&2 + +failed=0 +fail() { + echo "error: $1" >&2 + echo " likely cause: $2" >&2 + failed=1 +} + +# mmdebstrap in unshare mode populates a temporary directory below TMPDIR as a +# subordinate user. That user can only reach it if every ancestor of TMPDIR is +# world-executable (see mmdebstrap(1), TMPDIR). +dir=$tmpdir +while [ "$dir" != "/" ]; do + if [ -e "$dir" ] && \ + [ -z "$(find "$dir" -maxdepth 0 -perm -0001 2>/dev/null)" ]; then + fail "'$dir' is not world-executable" \ + "a restrictive parent directory (e.g. with 0700) prevents the unshared user from reaching TMPDIR" + fi + dir=$(dirname "$dir") +done + if ! ${run_privileged_cmd} /bin/sh <<'EOF' failed=0 @@ -48,6 +77,10 @@ if ! ${run_privileged_cmd} /bin/sh <<'EOF' exit "$failed" EOF then + failed=1 +fi + +if [ "$failed" != 0 ]; then echo "error: unprivileged rootless builds are not supported; see the checks above" >&2 exit 1 fi