From patchwork Fri Sep 11 08:03:07 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "MOESSBAUER, Felix" X-Patchwork-Id: 5456 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 11 Sep 2026 10:03:28 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-oa1-f58.google.com (mail-oa1-f58.google.com [209.85.160.58]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 68B83Q30011945 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 11 Sep 2026 10:03:27 +0200 Received: by mail-oa1-f58.google.com with SMTP id 586e51a60fabf-467c2c754f8sf346749fac.3 for ; Fri, 11 Sep 2026 01:03:27 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1789113801; cv=pass; d=google.com; s=arc-20260327; b=NUG7Co0enTdcHa60XMzPGwSkWPNaIjqeUz0RdrCDoVhFd7LfpUHXCSLpt8kS3akOPt s7tUGK8CYAKklTElkoBNuRsbpG1525RqNv/zXGTGaenX4u0naN+XP46p/7Av2wOmIfM8 VGtJsl7/nw7M4aDBguRgI2E6kiHl3RKff/qvRK9/MDuwqxVBIuGbA0IwYMc0yTwCv108 rP8iO6EdAhn9GOpNkKh4AZgEheXH93a8JBl7l5RqxUaF+ueU1oq7fy8QkOb48NaGiuVS +I8yCp94lDA+rwq7mhdk0LKPQR9MYdBbxcphdBHhv/vWeULpkKgapJTyUMC6q2eN4bDH vjvw== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:message-id :date:subject:cc:to:from:dkim-signature; bh=GSYWAYwoLwoRZnn+S9q4CEA+buuZ0J+qonDkQ/cCSNc=; fh=r0oHdZJzFpONzM+JJTAjz1ZGpepaMbsPl/2FtQr04rk=; b=Yirebrx5aLagqSPyi7z1u5+xc8OiZto1B220ziXuM+SOISY+7Thisuemh8HIpR0xHn csBD4FYfYuMGGTb67llh+XA0ctayDMoMmP+D0evM5ZADgr0w45VTYBKir3Tor10ltBqF C3rqpJLSz9sk8TjCCxcpUWBDa5ZqWw0kmbmpSSoEUo+8tkma+ySHR0QqRx6SXHiTLfcV wzu57BWG3qXw/LHLi2bVbeVP0SqfFoofMwIKWxCxi95ZlfYUktJR2+zAAqX5YZEjJN/X OvELjDrIDLQJQzeZri2IyqDnpnx76B2r/fa3a5u3EUs9qOszHM7aNRCO4A5FjMgHoRIx JhGw==; darn=isar-build.org ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=J4zNC3g3; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1789113801; x=1789718601; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:message-id:date:subject:cc:to:from:from:to:cc:subject :date:message-id:reply-to:content-type; bh=GSYWAYwoLwoRZnn+S9q4CEA+buuZ0J+qonDkQ/cCSNc=; b=STLR97xtEPob2YaQevmPngPxjPfuqqrrR7CKT/mA226tPLj250hhX+ZzXW7XIgmJ01 a1aL96HS8h1MExRJwPsoM47W5xDkPmVQjFUQBZh2g2zX8WCFtJPum+1N+kM1BqcdwK8h rI3WWFarn+HX7/EMSeSn4o6/4VcYbgThPSH+ONDEdZYPSpBFZ9hp+JRCEo2gn93NbM5j kt5Eh9TZGuLqGgkkT/AzC0TlzSARCcIZRiAQP8CmkVTgCoqzwZnoVpwze6mZUol0qtP7 AszIeiNRTmgWOdd21+s2Ghwfc9vwFyyzjDCHRF6knP2etiVvP8zN6wezSVvup5Of2PQU gwjA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1789113801; x=1789718601; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:message-id:date:subject:cc:to:from:x-beenthere :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=GSYWAYwoLwoRZnn+S9q4CEA+buuZ0J+qonDkQ/cCSNc=; b=lnAoCNVUsh7IRDHc6PAppanQk6tUWodrVTde6mcVbV5BVfXW3pfakh3loEjzcJazID x87muy88KZttfRnw4QPwUm72nVdAdxAVN48r5GNWsQzPAf4QOpUgoh5pYZLE+T22A/7t 7CYnjhVM3P6P9A5Iat0Z8zBekPAsi4juJfrV3OloR9zdvSJj5qswHLBm02RsT7AoVz1t AesjTCPnakJuG+35lTSGY+RiRZM7eNbdN+b0aBchmUYdOnjxurJjthDgaVqU5kS7O8Pj NaY7ld+REoEEO0V86SKMYlkUwmw64jmzG5uzQ0V7n5IAyPG+XC+KLYbBdimnJAJ/MjBQ Vzhw== X-Forwarded-Encrypted: i=3; AKwUvBzRZK0s99PzyK15HgE4zW4mG0TA8958hgZGlw+8ZtL+dNkbAtTUdCtzdoHSxWmPjN/Ihtxyv9U=@isar-build.org X-Gm-Message-State: AFuF++m71Kk9JIJHuXY+UOxa+Byxpa6g9Rjsb0kyRjCNhdhy40DFoc0T ZLQJKzTVJdnF2IckDzfJ9eOGQxK1A7OLXDchMQTq3OY8LDNnjHhmgW7A X-Received: by 2002:a05:6820:83d9:20b0:6be:7d9:b14 with SMTP id 006d021491bc7-6c0b9276027mr1518677eaf.4.1789113800810; Fri, 11 Sep 2026 01:03:20 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="ATskLdcNs6NDSWohjsiYEH5dSXc+OZcJa3XF89Lh6KJumgy17A==" Received: by 2002:a05:6820:5701:20b0:6b1:46d1:414 with SMTP id 006d021491bc7-6bf47576843ls1201689eaf.0.-pod-prod-06-us; Fri, 11 Sep 2026 01:03:19 -0700 (PDT) X-Received: by 2002:a05:6820:c0d1:20b0:6b7:8396:f3c6 with SMTP id 006d021491bc7-6c0bbce6ba2mr1385550eaf.40.1789113799674; Fri, 11 Sep 2026 01:03:19 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1789113799; cv=pass; d=google.com; s=arc-20260327; b=JACXQK+DabMFV0HYqjj0uNi4UHnmSK3e5dQpb9DtuiP7/6MznxqtrVspp/oB+//J5c H7ocfTmChoJaea/9gK6mObhouhlTF0vXsAzT/7oP8u7mVuXnK3ZSSac9T2mdqtla8fuB DslNXELSzOsDhpenyvXfsipgxmiytEm1RPqeMrf3yEx4Po1fdKJR/c29zovc83T9qH2N hqckk963BowLqbHKsk4y4XRK49YrlC69VkUAj+GkP/Tdk4EnwcFsCiSgMyem2n2BTDSH zMGOPP8tizPfXSkukyG8WdD2OBuGeQrAEVSIvkIYsvqpVJUIe0JgFGouU3jt1LPN2IOm Traw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:message-id:date:subject:cc :to:from:dkim-signature; bh=tAbEboSlShghy33cwjHIHzP/MN3IYMw8KV/gN3v7Sq8=; fh=0t3fXlEYHHP8DeucZfDhXDXAwFWrqesoTp4Dvwtde78=; b=CA6ypv4yZ+nP0PQeQLsf0EKqvtC3UapUYPL4Zb9EAikRNIWl4PQZwY275/l6CjUBZK bUcfxXcC6TYCQxJxcKFqLIYcFYOGHaVNkuwlWviB678D64u3iCSFSDE0RWjijIX49+3n bnTNKY7B3qzS9bj3Y5NbLS00ie/1mC8C7WXMcGMAhJ6PgCJA8Y6Phihryf+4nLRRdz30 /6K57w69KTllZ32hJjeDIsKGGeSGVUwidM/GN3n5DcDptwI60V+G3cD2KGb5NIwX5r4n 7HzWN3iz2bO/c8VHidDuIqe8lDKE6zB0prNrSmoaN8RHDdCPTeJeFtusmCWyMuTlqoVL 1jlQ==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=J4zNC3g3; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from MRWPR03CU001.outbound.protection.outlook.com (mail-francesouthazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c207::3]) by gmr-mx.google.com with ESMTPS id 586e51a60fabf-47dfd7e6b2fsi41893fac.6.2026.09.11.01.03.19 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 11 Sep 2026 01:03:19 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) client-ip=2a01:111:f403:c207::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=TaQnnWqwMfacS1Yzb5tQPXNie9571xQ9YxWM2AbQmBBgyHdfwqWiV6zxY3d2GlGg8uTfvEHYm8iAbC1ECUaBPrgxUC69ZeHbQJrR741fUUg8ys0g7lOxKbyvAFx9igbFz4wUkdkydN+GBS0JSo3o5prrib084xMBl+RH5A7FitqAQk+rzqu6HiZw3buA+7yAK8E/a87CGluAUdgKKJ6sCdDEEYB9bctRM/TZAm1b8S4ZxSuLPrzJHfHszY/fLy2CPYRZYFx5UZ4dY6f1TymgSqeJim1aCZECurz7A3L7ueaCa655ORQTEVE21NN0JsYFz4PLMQVx6RJtg1PkeJhw9g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=tAbEboSlShghy33cwjHIHzP/MN3IYMw8KV/gN3v7Sq8=; b=hE3ZhaKyEk4El5BAYwEI3ojDpikByRs4172oCCKcG6+Xk4CJfm8H8wYtzRCyXMrFjANWiFSItEsB0u88MaG0DKIUDLUH5ADnRyI7vAkayLN332KmcnnYnmbkdGyFJ3/8il4bT9gNHGznfK8038AgzNZiEtwvLQSkvPQjDEurNd46Xkfh8nWXZkUs0XtrHGGE/9dhubZYvCwiMveusoL6CII1rzI5kUKFBl/GQuChC5aLnD2RF86H1Sh8FtLE+Be0r/TkwC9hqi37JZ3wHf7JEMz5qQJVrMOOOLWUP8wdUNa6CuAgSWXIhIodo7r2XEwWW19sD3b4ddtsogtVY1J3fw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by DU2PR10MB7725.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:46d::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.382.15; Fri, 11 Sep 2026 08:03:14 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%6]) with mapi id 15.21.0406.007; Fri, 11 Sep 2026 08:03:14 +0000 X-Patchwork-Original-From: "'Felix Moessbauer' via isar-users" From: "MOESSBAUER, Felix" To: isar-users@googlegroups.com Cc: jan.kiszka@siemens.com, ulrich.teichert@ebs-group.io, Felix Moessbauer , Clara Kowalsky Subject: [PATCH v2 1/1] isar-check-rootless: check parent dirs are world searchable Date: Fri, 11 Sep 2026 10:03:07 +0200 Message-ID: <20260911080307.1189531-1-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.55.0 X-ClientProxiedBy: FR4P281CA0425.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:d1::12) To AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM7PR10MB3956:EE_|DU2PR10MB7725:EE_ X-MS-Office365-Filtering-Correlation-Id: e10e5afe-e45c-4300-a8d2-08df0fdb219e X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|366016|376014|23010399003|10070799003|10067099003|11063799006|56012099006|55112099003|18002099003; X-Microsoft-Antispam-Message-Info: XMOhkBD54k31FLOvvUvHQw5VawWFq4SC/qZglmhJX2jBH4mp6l61FJmF0QbRg4rqHpMycnDeeasSQR3urng5z/B+NjT8+RX7ecepb8XnaI8G6rBu9HpMVdQ9AIUoEpK2NeaC8hczSniOII5BaCo0bW806aAwrSyGSPTZEYtg7w2DyRRO1OwCX8Rz5oIUjMthxQNTyJ5VPu6N2CsJbM7coVE4d9zyoqLEF0YMr3kZD0IMKLY1H3+gvJVZudXnVY9xSO/evKRVZFcUiKgEbGRgw7a+smewZth0zxBooSy7OwN45d7xs49GGwg2jO7rSMVHir0zqvMruZ6GPrl62kqr7ff05OszXVCj4core+IYNQQFZ0sRwdUqhb439Mpgmsbevxahkvk473sGVqiWVMCZB2wPG46IZenRESZvXiupSYH9p7Bo1OL7uXE78tHy5FEW3LQnzUIfboty6eqB1qo079d/m1L3/UlvBZWR5hpocM09T7wP59yFmHUGT1QjK12swTG3QalOBEeTZCJ4fiEzz6qEobRmQy10FI1RDR8Y1zra4JkJlfDxlL9BeXVFis5XZzwtQ2z1U+zST40TVPQ6Asu3LiqMwi98cI54/t1hppl4x5tNEG2rF/sbVazFyzDKZ4r2J/wCOhiP+WpK7Gh/rnxB2C/yVOr/arXlBlPUEo8= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(376014)(23010399003)(10070799003)(10067099003)(11063799006)(56012099006)(55112099003)(18002099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-MS-Exchange-AntiSpam-MessageData-1: 3KczxIIvQ3kmhMubbk67Ot/IOIWan9wAnj0= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: e10e5afe-e45c-4300-a8d2-08df0fdb219e X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 Sep 2026 08:03:14.7332 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: W8XrHb5FCOe9PtiiGRf6Q+9kh8+B0oeqj3+YYxYNSvoCiAheNTYs8j4dbCr5wkaywTr/7Mhn0bwOskVx03MlWR9fC9OyOBRwtmHdbWoaf60= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU2PR10MB7725 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=J4zNC3g3; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= When using mmdebstrap with the unshare backend, all parent directories of the TMPDIR must be world searchable (S_IXOTH). This requirement is documented in the mmdebstrap man page, but when not fulfilled, mmdebstrap fails in colorful ways. To indicate what is wrong, we add a check to the isar-check-rootless script. Reported-by: Clara Kowalsky Signed-off-by: Felix Moessbauer --- Changes since v1: - reworded "executable" to "searchable" as pointed out by Ulrich scripts/isar-check-rootless | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) diff --git a/scripts/isar-check-rootless b/scripts/isar-check-rootless index b5197111..04717410 100755 --- a/scripts/isar-check-rootless +++ b/scripts/isar-check-rootless @@ -20,6 +20,35 @@ fi [ "$verbose" = 0 ] || echo "RUN_PRIVILEGED_CMD: $run_privileged_cmd" >&2 +if ! tmpdir=$( \ + BB_ENV_PASSTHROUGH_ADDITIONS="${BB_ENV_PASSTHROUGH_ADDITIONS} ISAR_ROOTLESS" \ + ISAR_ROOTLESS=1 bitbake-getvar -q --value TMPDIR); then + echo "error: cannot determine TMPDIR from BitBake" >&2 + exit 1 +fi + +[ "$verbose" = 0 ] || echo "TMPDIR: $tmpdir" >&2 + +failed=0 +fail() { + echo "error: $1" >&2 + echo " likely cause: $2" >&2 + failed=1 +} + +# mmdebstrap in unshare mode populates a temporary directory below TMPDIR as a +# subordinate user. That user can only reach it if every ancestor of TMPDIR is +# world-searchable (see mmdebstrap(1), TMPDIR). +dir=$tmpdir +while [ "$dir" != "/" ]; do + if [ -e "$dir" ] && \ + [ -z "$(find "$dir" -maxdepth 0 -perm -0001 2>/dev/null)" ]; then + fail "'$dir' is not world-searchable" \ + "a restrictive parent directory (e.g. with 0700) prevents the unshared user from reaching TMPDIR" + fi + dir=$(dirname "$dir") +done + if ! ${run_privileged_cmd} /bin/sh <<'EOF' failed=0 @@ -48,6 +77,10 @@ if ! ${run_privileged_cmd} /bin/sh <<'EOF' exit "$failed" EOF then + failed=1 +fi + +if [ "$failed" != 0 ]; then echo "error: unprivileged rootless builds are not supported; see the checks above" >&2 exit 1 fi