From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Thu, 10 Sep 2026 16:43:50 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-pj1-f55.google.com (mail-pj1-f55.google.com [209.85.216.55]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 68AEhmsK007783 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Thu, 10 Sep 2026 16:43:49 +0200 Received: by mail-pj1-f55.google.com with SMTP id 98e67ed59e1d1-398e1f7d1a5sf5162736a91.0 for ; Thu, 10 Sep 2026 07:43:49 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1789051422; cv=pass; d=google.com; s=arc-20260327; b=Eh/M7PPkic8TCEupXH3kWV3ehuEgkwT+X+2TOLt54SZfxU8j9EXgHXhBz0IgUV3ve1 UVeU653M8gwoCg7DwbExl1SaJJl9ECXwVC7l1ihhllnC3KOl6M5ULIgY6jPjEt54G2Zs /LN55jVPaRX+GR80zWwq0zXi5jY2OIxe9B58ZAUdaW0AWxo/OhfR5/xnnaY22vedg6j/ sXMqk0KS5SUBLjI4Sr3YqDS+gbfFW2gvO6dFyDpY6Chs3v3uGvylGXX5wYeGDTHsmqZO i8urssX7nmkTQC/+46hMZY7pL9ST3zc+Yzc3Vrt6Ctx5g5l4nw10boCtk//EOPiluKmY TKlA== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:message-id :date:subject:cc:to:from:dkim-signature; bh=0IbWSjG49cYVsRAVZxhhW26AMQUE+fgHVEtRAu9UCw4=; fh=9GEp+d4bDYpvGU7+chEtUiwDy+An6o7mYJCcYD5VGck=; b=bGJhFSD5LL6rMGaG6r+n+Q5C3lm1HvLJ1+vzkgtYfM5VdSbfsB5zaEoZD26ZQ5JPHG GamjyNHouFAY0FuSr+i2IBlJQ1QV4dgddpfudOsQLDBwhJ2B6f11AQoQpG7/i+TxTRdb bAvSjjgbwJVUeVkv2ouMUSU/xJS8bJxy7Ethqg5JQBtF68qp6ZgzXMo6L9p/oHZbMMvK 8WCsADniuDfz/lwbIjI2jhUgeBm01W8kcyBo/OTN1dKWbJw51huUsIy2R3X1RqdMv9to cI4E6Pzjd9OLALChBIAGnlV7MlQv5w+5E2kkOGc/veUHBIi772E0kVxSGUL0tPbzlYOc 2NJw==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=PsJmtWnf; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c202::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1789051422; x=1789656222; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:message-id:date:subject:cc:to:from:from:to:cc:subject :date:message-id:reply-to:content-type; bh=0IbWSjG49cYVsRAVZxhhW26AMQUE+fgHVEtRAu9UCw4=; b=rjmSENjK5zjKPu/i7wf3/FPBHlzQEyKbqL1a214BQkuWCqxJtCdvtbGvoUJsztDrtI h41o12h7sS20ttACUXKNIwiBuouOsxhP6xYsye9BfZ+oqlwTst6H5rgCQJtWEeg0tQiK iaDvIZekQ/4AveU/A8lf+inewtRB2LTMj1Rg/hFf4/0FEzUbAskMhvjUC9wLtFxAjzGN nNlILraBNWEK8/H9UwHt7DvtSuxSfpkyRAws+VSUebSHnfgrrfn4dfIZjQiMtNjxfxX4 Yiv1Akm/63Bz89qDDLMcqL0ASOIJTRTRGU4wCsPifowBqDyAOQuddo2tnABuKrLwo8Jj 8vQg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1789051422; x=1789656222; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:message-id:date:subject:cc:to:from:x-beenthere :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=0IbWSjG49cYVsRAVZxhhW26AMQUE+fgHVEtRAu9UCw4=; b=e5IesGAEZhHUMOyMA/HvG7zR5vDb5U4ileORJb1xAGmA1sAJAKT8eyo9Px3ptc6qaI 45w4qUrEqwhNscVrHbSZTKy4KDyLWiUxvYvdWJlPEB5X5oiakn2Y3xdLKG8nwRAoGFOy H7psuehkhGWrA/SXl0vIel0WBQDAwEP/EyvYhqEMuavAnMmAM0X+vX0CA5+swiBMR36m 8NiGD3J0G9ShpkfYmWEoijlToZvCad5AshbPnnbDvf7Cxf26CUG3TrMx0i6UWD/gCuu8 U9VM3bImvOmQlt6PqFZ960lb8hNR3U8amt2lriEbRMq9fPh1roB/xjV44VKkioQvfHMv Y5iQ== X-Forwarded-Encrypted: i=3; AKwUvByh+s1tQUDdaVG/1uzF3H/m4eZNpFMTwDG6XFumBQaxykriCl6SV8Xszz6q2BbX5GuJ9uH4@ilbers.de X-Gm-Message-State: AFuF++kwpHqrtbx14NSrgFFxH8gD5KwuPDnQYNZxqLEtVB8rWEQzyPVy /0VuhagZaoztXI8xq9U86536j6CiMCtW3IsPNgs5M9+Ib6q8gBMPCNfK X-Received: by 2002:a17:90b:580e:b0:398:c3c9:d0ae with SMTP id 98e67ed59e1d1-39b25ee242bmr59424946a91.0.1789051421940; Thu, 10 Sep 2026 07:43:41 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="ATskLdceZgHsNurxeVsu1I/GBGjsCpW5kTRhZVUvQ58fZ2ZMMQ==" Received: by 2002:a17:90b:5903:b0:37c:83ec:163d with SMTP id 98e67ed59e1d1-39d75cef047ls1954914a91.0.-pod-prod-04-us; Thu, 10 Sep 2026 07:43:40 -0700 (PDT) X-Received: by 2002:a17:90a:fc47:b0:398:9c0c:7c72 with SMTP id 98e67ed59e1d1-39b2627fe24mr59417314a91.25.1789051420295; Thu, 10 Sep 2026 07:43:40 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1789051420; cv=pass; d=google.com; s=arc-20260327; b=Z3d4kNjSEJE+HiPdon5KIyETiyah989ZPQAWn+fk2f2/yWTlpyHhkWiY+J3/j53lT7 AqbM7A5tvc9r0GktTEAvwgL2RzSQcTFX/Bq08el1mEX+iSPB95HvTycv0Ch4WP225iy5 //eoAPyyLzJPyo4gm3Yg3CfL90C+rGRtPYopNxjc6IILCeyiD0q4QbJBaMIw3qZ2wQHz +yRVmxnFi/j6FVbDJ3mLSooowbF1eB2Fz842B8Pz86/76ucv8qNs8A4OvZuzZXsy0AnX LUx1VC9FVlo6POphGpgoT6jhTfjvSF+elb9BrCDZRuQm1w6p8GKI0aNMkqkIXdQ5aot7 lXwg== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:message-id:date:subject:cc :to:from:dkim-signature; bh=CuZ5ZP468WchmhHKfe541tJ1atRdYRfQ3DnmhTiFN+A=; fh=mCWA4AbeJIIx/jB2sZk/ItzTiQhicKuLfQNpyfz1pNQ=; b=N23kxcs2A9u67xqEcdHV5DdrHrF0bWxVSCHcIzqFOkswE+oG2nySQ2QXOdbPrTN2eK XPKOEhyesy+Ammyb90my6VgOWa4afEriof0t51s5iLYHs0/KAedTkn9M9UDaV70DUCpK 7G66720OgGKqer7+DXGC3UMiBwQqXaM53dHVGwgSP9dv+5uAcNkJtaEyjcwGz1Jyr6QA zAE9AkHrHVPKjfEgt04wyh3X+hbWPuQukgZDNkzzKQnU81f+OP52dPB0QF7dk+OgLRYG qopVz4IVDWICQBnEEsyzFD0v0aLIKwVRdbpTeDBNsK8767p/ivi/pHfU//N5H4L117Cu Cwtw==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=PsJmtWnf; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c202::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from GVXPR05CU001.outbound.protection.outlook.com (mail-swedencentralazlp170130007.outbound.protection.outlook.com. [2a01:111:f403:c202::7]) by gmr-mx.google.com with ESMTPS id 98e67ed59e1d1-39bae7ef89csi88288a91.1.2026.09.10.07.43.37 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 10 Sep 2026 07:43:40 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c202::7 as permitted sender) client-ip=2a01:111:f403:c202::7; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=WQdHOsP09TAUdI/Bd1lbIEdGYJ8QY4pHSbbO8uZAEHgq9DZlVuNTR8A/HRQ/5FwkouCrO/Fx5BzAU7yVAmsLr9jOpX6Be/E0KdSrcIIdixHRrjLzWRjn/siOlsLYn9c/b79oBaY19hzC9ELRd7uv3XRhJ7HFZicEuClKnKBV0argqosPRu3OjX4bPAMyhfmd/fY97XnRwsXCkQms9Zx/QpS+3Il9FdwGw3twlg+PM2Skrdg2PhQrbS2XzsAGbp1+bVdof+sLJxkITkM0TNrOVkRqfxTAND3rBuocBwiUd5OIsE2zLLVG6sxoF55lGEEKP0aoheI+Dn85zaw+x6ITyA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=CuZ5ZP468WchmhHKfe541tJ1atRdYRfQ3DnmhTiFN+A=; b=rIlsynpssmErKPRPG6OZ1Ud6P+s/58v0Z0fFIhfZMB8fGskHcYIyLHXlUG0TRrQRypRLiihxfq+mbEGWoxY8D3s8en5Ra8ekBGf5NKVmgY4sZvWTZTnsl6JOeMC+2Zg5HjfQ//tw+vaFLteoEP1H9mAwHrDePBMPRAehxybtn8dYbTA2MO6cZgQtCHkdbdqsdNUrdMJ4X+ScFrHn+4Iw+phRokbjuztMYorFQk9nGgqmfWh71ZVbQjiK8ejfQ1WtZLLQagemxWcuV1k0JuBboDsJ7hYUnVFYjgOdGOj/S/G9LLSg9/67OdO1B9ww8pyynp8OoGryy9kdk2OvOzjwEg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by AM0PR10MB3345.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:208:181::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.9; Thu, 10 Sep 2026 14:43:35 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%6]) with mapi id 15.21.0406.007; Thu, 10 Sep 2026 14:43:35 +0000 From: "'Felix Moessbauer' via isar-users" To: isar-users@googlegroups.com Cc: jan.kiszka@siemens.com, Felix Moessbauer , Clara Kowalsky Subject: [PATCH 1/1] isar-check-rootless: check parent dirs are world executable Date: Thu, 10 Sep 2026 16:43:27 +0200 Message-ID: <20260910144327.775731-1-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.55.0 Content-Type: text/plain; charset="UTF-8" X-ClientProxiedBy: FRYP281CA0007.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10::17) To AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM7PR10MB3956:EE_|AM0PR10MB3345:EE_ X-MS-Office365-Filtering-Correlation-Id: 6bc3a17f-778b-41d3-21b5-08df0f49e4a3 X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|366016|10070799003|1800799024|23010399003|376014|10067099003|11063799006|56012099006|18002099003|55112099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(366016)(10070799003)(1800799024)(23010399003)(376014)(10067099003)(11063799006)(56012099006)(18002099003)(55112099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?uYrm0uMegEnl+KGFx+rLIfh01cS+kKKGAnM3r2nCFI4CGN9b+M0fMW3IgARx?= =?us-ascii?Q?fZcWkPUroZ/ivQkvoeZXuhV9TinYZDGw/uAAJOG5OvWhlpBR4CaXd/F6e0/I?= =?us-ascii?Q?DnsTmZ5tEAPj2F/3iUMh/EayyQvFNE8HCFbOw+jQ3QeZIMnOu8QTCsZ53m94?= =?us-ascii?Q?1dIdWPMbOyhx6ipoJieCm78gnR8FunbfMWhVWiF5HiYu0XAEAbwasWToN/2E?= =?us-ascii?Q?8qdd4ALy1Of5ItUGEpBujjWrQ9STxP7NPsFgxN+BTs6ZOAE1fXXxkVHWgIdW?= =?us-ascii?Q?i+HvSfhQuAPVEU/X8d41hqDZ41j6cC6ZVyLYwGU1jGRJDogDDRbPjrHq5/BQ?= =?us-ascii?Q?ADw45M41QaKueQ+xhEAUNZMG7d7k5NTT+D4DogVqHuJgOiHySAVYuctBHy55?= =?us-ascii?Q?OVQz+q99kuJaX6MHMqY3GCwTDgUu2wN8btt0HqMt5EE3LpLpF/mEQKHHnJMj?= =?us-ascii?Q?FId38l6kT8dtRvPjlTiZGiM38bBkSjZgduycxmAr+wgRAqABwyG9IU3uhYR1?= =?us-ascii?Q?0IdAO2yvMHYT74URK95TMGEJFhobsTsU0d9u8K/U6rrZyRoM3hgkZ1HI5eSN?= =?us-ascii?Q?AQsGrgddUowLC7hv8tX+UxPRlLWIbHF602LIz8QcUrO3bOkehTc7uDBE6BpH?= =?us-ascii?Q?EUOlmdAXQIZmp9xw1eZrWpTNhC0DuhnwUzkpFnzFf3sSNQNlL23wq5BYss/b?= =?us-ascii?Q?m+AU7iCC9lXUi7ZTGAJ2jg8uhO2mKb4LuowuAlhYJJEzbzXPqjad0NW5fDh6?= =?us-ascii?Q?+Bdc/GRmB2SqQpVoG4MK4m/ox+o0GUJnRaIrV8g01pYosQwpGXeup3MVi046?= =?us-ascii?Q?YgYT1rCXgi/TjqCbjfotWChlWXSwCC4MeAetyzpQROldJhyH5VCCTlopkQ35?= =?us-ascii?Q?bn1OZpE7pBZMBZannvmmjryDh/nN6ay4CZ2zBQ5yoywRWFO4i5PNhIcijGFo?= =?us-ascii?Q?qhWWhZAeuzX6eXZt8wEyjyTPmZ3K57du775ipiwNeiij3EnE+Re84Y++yq+v?= =?us-ascii?Q?KTt2+lCgxYdQcwE0prbqA3EQ/QyFvNnxzIw3H+ORbpGGJQyoLQRUGdwM9dTg?= =?us-ascii?Q?yYFelfl/sW+tRrFzSyZtDl7PpPY1838Lu8rhBMmDIn84M1wovSeydw5T16IE?= =?us-ascii?Q?Y0D9m7C3eB1OWe8hLtZRCtetg3gjYxXf1n/LljGddsmhzgpTKdiprlJK71b8?= =?us-ascii?Q?NcV13TWKgAaVz6Wt/spZssbRDzennMUotnI21pinjpp58gVqrxPYAghP555d?= =?us-ascii?Q?667d2wNMXFQYuNGQVE9YC+qzL1Hol7e8phnyH2F9iqHT1oYfKoFdQS7XJQs3?= =?us-ascii?Q?ZwxnZf9htLD2S6DFxeJiN55njTsyuu7KTD1y5OyWAlD6OJeNAyaDjswr4YJG?= =?us-ascii?Q?7x//Mc2SpIv0MYXJAwekNyivTF791bnupLQ+8FpM8hk0/FSxOORr0PES66vB?= =?us-ascii?Q?KQmvJg/BcON7NRuNQONrnUuUfB5SgKrznWdLK+8blU7j1Tdj5GxV+bt818nt?= =?us-ascii?Q?2bECR8LpJYdybwUCDkGE9os6kATvknB001teohwa/F5Au6h55fbrpIkVptWg?= =?us-ascii?Q?DIGZ2g0LhTwbYjy+tNWUaOa4oGX/krqTq8iie2CDeZMxR+/UJA3YOLTiJbrb?= =?us-ascii?Q?g6oadz51O39ROq1kIBPDjaopbQXbCfL4GNuKmhDr5DOFyiOPmVFw6CI3PHdt?= =?us-ascii?Q?xR9VG5hETDD1PrONU+CEM4YADJvV6p521vGBh2gW3ychFWEGzkD0WasIE7LC?= =?us-ascii?Q?OBJlQR9VMjmBrrmIyiUMqILtt3bfrXzSeNdWEwLHhsq0l8az5KeNkw/oweIY?= X-MS-Exchange-AntiSpam-MessageData-1: OoNr/G84/f92B7eUm800U2723uevPzDRRX8= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 6bc3a17f-778b-41d3-21b5-08df0f49e4a3 X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Sep 2026 14:43:35.3948 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: n0mx4t+zAWxUNfKywCotiu6Pg/BVbfs7sctl7fuRfwPdLi6jjU8ZDagUwDi/zhyovEkkLpnz/MiXfZQaoiljJabZtNEZw3nyQyBtBKbjsLA= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR10MB3345 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=PsJmtWnf; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c202::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: UDwPQlP3pWXK When using mmdebstrap with the unshare backend, all parent directories of the TMPDIR must be world executable. This requirement is documented in the mmdebstrap man page, but when not fulfilled, mmdebstrap fails in colorful ways. To indicate what is wrong, we add a check to the isar-check-rootless script. Reported-by: Clara Kowalsky Signed-off-by: Felix Moessbauer --- PS: The corresponding kas patch is here: https://groups.google.com/g/kas-devel/c/PZihYBAmlCQ/m/tXkK0P77BAAJ scripts/isar-check-rootless | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) diff --git a/scripts/isar-check-rootless b/scripts/isar-check-rootless index b5197111..de96aac7 100755 --- a/scripts/isar-check-rootless +++ b/scripts/isar-check-rootless @@ -20,6 +20,35 @@ fi [ "$verbose" = 0 ] || echo "RUN_PRIVILEGED_CMD: $run_privileged_cmd" >&2 +if ! tmpdir=$( \ + BB_ENV_PASSTHROUGH_ADDITIONS="${BB_ENV_PASSTHROUGH_ADDITIONS} ISAR_ROOTLESS" \ + ISAR_ROOTLESS=1 bitbake-getvar -q --value TMPDIR); then + echo "error: cannot determine TMPDIR from BitBake" >&2 + exit 1 +fi + +[ "$verbose" = 0 ] || echo "TMPDIR: $tmpdir" >&2 + +failed=0 +fail() { + echo "error: $1" >&2 + echo " likely cause: $2" >&2 + failed=1 +} + +# mmdebstrap in unshare mode populates a temporary directory below TMPDIR as a +# subordinate user. That user can only reach it if every ancestor of TMPDIR is +# world-executable (see mmdebstrap(1), TMPDIR). +dir=$tmpdir +while [ "$dir" != "/" ]; do + if [ -e "$dir" ] && \ + [ -z "$(find "$dir" -maxdepth 0 -perm -0001 2>/dev/null)" ]; then + fail "'$dir' is not world-executable" \ + "a restrictive parent directory (e.g. with 0700) prevents the unshared user from reaching TMPDIR" + fi + dir=$(dirname "$dir") +done + if ! ${run_privileged_cmd} /bin/sh <<'EOF' failed=0 @@ -48,6 +77,10 @@ if ! ${run_privileged_cmd} /bin/sh <<'EOF' exit "$failed" EOF then + failed=1 +fi + +if [ "$failed" != 0 ]; then echo "error: unprivileged rootless builds are not supported; see the checks above" >&2 exit 1 fi -- 2.55.0 -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/20260910144327.775731-1-felix.moessbauer%40siemens.com.