From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 11 Sep 2026 10:03:28 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-oa1-f57.google.com (mail-oa1-f57.google.com [209.85.160.57]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 68B83QY1011942 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 11 Sep 2026 10:03:27 +0200 Received: by mail-oa1-f57.google.com with SMTP id 586e51a60fabf-467c2c754f8sf346754fac.3 for ; Fri, 11 Sep 2026 01:03:27 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1789113801; cv=pass; d=google.com; s=arc-20260327; b=o8CkgHEZDj9KLAPRkCCXyIaYBeMR13kkkeZCeV82tQDdbbXKkrAavUvRe28qtN2Tqm sL4ICnKGeQOzsAsrbxNTq8452SQWDy/3VpValCmsxUjZ/GmWSAjDXibwf0lcJiuZZmeO 58V8ipT4iN27544LwZ4wy61QdqQqCKbHJdSKic5fI9b3Nl/Hkya9NY7vpnN6wk5rIW9B DNOuCND2mqxJ4f66YtkY9v4t6RcpF72uQ0YphY9FpS6lfDjVl7hAAoMXR3sltiE5UVij uwwKO7sLwoovKcRMrgvW7xo6qPUdp3sUwriTLTe3Jk9anLxb4nuo5ttVVlK8Hb2JcArb jKIA== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:message-id :date:subject:cc:to:from:dkim-signature; bh=GSYWAYwoLwoRZnn+S9q4CEA+buuZ0J+qonDkQ/cCSNc=; fh=KpBu/V5zg+bVFHwZU+ms+vGCPH1wMRwjzOwEacH/Y5A=; b=BmyYhJABqkR7RkahQeuNQWPEDmnxOp2Tn070kkOqq6l8ba1M3qiE9/dYjKC3DI92af ySoZmOsGummEm3nDP5LAzVmnKOhJP+euC9dPeR9JqLEhcyNOlmWVeQiv/fFlkVujQ13G 9wKqyyGfiXvkcoNiF1UsGQpKZ3F/k6skPvjfS8d77KnXUfeOk5KzzvjAWt+bXy9JcOOO RpqqGIJ2sP/gkORWtjqNe2VV/sRaU/u3R3mRQMX/OL1wav3aZXiY3XOcjoxzp7n1AWws hmRllw0BTnzrlG5SJ8yiPRGfMOpamBi1Pm3ByeyXGn0np3BpYevCLtzUNC5cDRawNbzB Ta9g==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=J4zNC3g3; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1789113801; x=1789718601; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:message-id:date:subject:cc:to:from:from:to:cc:subject :date:message-id:reply-to:content-type; bh=GSYWAYwoLwoRZnn+S9q4CEA+buuZ0J+qonDkQ/cCSNc=; b=WkcveN40mIzq5FooPWt2CfEmlNjKRe1TANjMr36jmHkDZbj3D7thiQlzeXAdjmZnHK 7TmJTyJQWJbVRPmhPRHpKkOW1WHhEM0LLOHivwhKs7ROSuAeqqpWZ5hPSZu74pT3InGS obeYxJA9CmRHJ/f0DVtdTHhJj/PJ6HxEktI5zyiCSbCBG9n5iqHB3VsfT4cBN+FXuKIc tDo1Vs1PlbrcBULhzlFqF0g7n5XXDTYK6ITQaSu8zsVQqQkZvIiib8EgSkLgzrPxUSy3 cZc18Nns5SIUclVjCbCRHwC6QaR3bPLG9aQjhFldYhhsdO0n/5Z4P9pQn47CUqsCXxya +UAQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1789113801; x=1789718601; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-type:message-id:date:subject:cc:to:from:x-beenthere :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=GSYWAYwoLwoRZnn+S9q4CEA+buuZ0J+qonDkQ/cCSNc=; b=tOF9GXzHo/Id6TTbeOQQL1ATEH6rNbipdLfWYd1bcBrR/MsEBjmS19kc7q+LGZA2Cn nCY6Xn8WGn0i3AidZ65/cgDwtoOP8m5KX1Xr652dlhaiA6Pks38U1rgFnEVTAA4sGATs +lC8otmQk+ncwaAR0a5zFvYPDBFynfy/+XK02Ac1wx3bOy78jJfsje8/S0BfIuo4me5A QHfKPMIEwTHPC4DJv1XNIMNLykCABQ3Gr89o2fivyolwXNxxHYRBgX65rnjMR/f7HNH1 ZaeA379f5dHyR2AfNJ/0DHlb8j0W6RKCHqvpLVyTKPu2JzI737oEiCt428+Oaq6DpLHF 2WAQ== X-Forwarded-Encrypted: i=3; AKwUvBx2Q52lbQVAhxdHExDJ00mbL0Mbp3bVYnCFwAGXKXbTDixJ96ugg/Ixh06+1CIEzxzCRmG2@ilbers.de X-Gm-Message-State: AFuF++ldMX3yMYRqUAjmAWeElncqV3o7h+r0CeDf8ah3EMMoxSH8LK8I e1OB5Acjy7tsaq47wnAsLDlx1GkV5CF2Bdcjmo7CMB5nNr94+UQ/ku/Y X-Received: by 2002:a05:6820:83d9:20b0:6be:7d9:b14 with SMTP id 006d021491bc7-6c0b9276027mr1518677eaf.4.1789113800810; Fri, 11 Sep 2026 01:03:20 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="ATskLdcNs6NDSWohjsiYEH5dSXc+OZcJa3XF89Lh6KJumgy17A==" Received: by 2002:a05:6820:5701:20b0:6b1:46d1:414 with SMTP id 006d021491bc7-6bf47576843ls1201689eaf.0.-pod-prod-06-us; Fri, 11 Sep 2026 01:03:19 -0700 (PDT) X-Received: by 2002:a05:6820:c0d1:20b0:6b7:8396:f3c6 with SMTP id 006d021491bc7-6c0bbce6ba2mr1385550eaf.40.1789113799674; Fri, 11 Sep 2026 01:03:19 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1789113799; cv=pass; d=google.com; s=arc-20260327; b=JACXQK+DabMFV0HYqjj0uNi4UHnmSK3e5dQpb9DtuiP7/6MznxqtrVspp/oB+//J5c H7ocfTmChoJaea/9gK6mObhouhlTF0vXsAzT/7oP8u7mVuXnK3ZSSac9T2mdqtla8fuB DslNXELSzOsDhpenyvXfsipgxmiytEm1RPqeMrf3yEx4Po1fdKJR/c29zovc83T9qH2N hqckk963BowLqbHKsk4y4XRK49YrlC69VkUAj+GkP/Tdk4EnwcFsCiSgMyem2n2BTDSH zMGOPP8tizPfXSkukyG8WdD2OBuGeQrAEVSIvkIYsvqpVJUIe0JgFGouU3jt1LPN2IOm Traw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:message-id:date:subject:cc :to:from:dkim-signature; bh=tAbEboSlShghy33cwjHIHzP/MN3IYMw8KV/gN3v7Sq8=; fh=0t3fXlEYHHP8DeucZfDhXDXAwFWrqesoTp4Dvwtde78=; b=CA6ypv4yZ+nP0PQeQLsf0EKqvtC3UapUYPL4Zb9EAikRNIWl4PQZwY275/l6CjUBZK bUcfxXcC6TYCQxJxcKFqLIYcFYOGHaVNkuwlWviB678D64u3iCSFSDE0RWjijIX49+3n bnTNKY7B3qzS9bj3Y5NbLS00ie/1mC8C7WXMcGMAhJ6PgCJA8Y6Phihryf+4nLRRdz30 /6K57w69KTllZ32hJjeDIsKGGeSGVUwidM/GN3n5DcDptwI60V+G3cD2KGb5NIwX5r4n 7HzWN3iz2bO/c8VHidDuIqe8lDKE6zB0prNrSmoaN8RHDdCPTeJeFtusmCWyMuTlqoVL 1jlQ==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=J4zNC3g3; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from MRWPR03CU001.outbound.protection.outlook.com (mail-francesouthazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c207::3]) by gmr-mx.google.com with ESMTPS id 586e51a60fabf-47dfd7e6b2fsi41893fac.6.2026.09.11.01.03.19 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 11 Sep 2026 01:03:19 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) client-ip=2a01:111:f403:c207::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=TaQnnWqwMfacS1Yzb5tQPXNie9571xQ9YxWM2AbQmBBgyHdfwqWiV6zxY3d2GlGg8uTfvEHYm8iAbC1ECUaBPrgxUC69ZeHbQJrR741fUUg8ys0g7lOxKbyvAFx9igbFz4wUkdkydN+GBS0JSo3o5prrib084xMBl+RH5A7FitqAQk+rzqu6HiZw3buA+7yAK8E/a87CGluAUdgKKJ6sCdDEEYB9bctRM/TZAm1b8S4ZxSuLPrzJHfHszY/fLy2CPYRZYFx5UZ4dY6f1TymgSqeJim1aCZECurz7A3L7ueaCa655ORQTEVE21NN0JsYFz4PLMQVx6RJtg1PkeJhw9g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=tAbEboSlShghy33cwjHIHzP/MN3IYMw8KV/gN3v7Sq8=; b=hE3ZhaKyEk4El5BAYwEI3ojDpikByRs4172oCCKcG6+Xk4CJfm8H8wYtzRCyXMrFjANWiFSItEsB0u88MaG0DKIUDLUH5ADnRyI7vAkayLN332KmcnnYnmbkdGyFJ3/8il4bT9gNHGznfK8038AgzNZiEtwvLQSkvPQjDEurNd46Xkfh8nWXZkUs0XtrHGGE/9dhubZYvCwiMveusoL6CII1rzI5kUKFBl/GQuChC5aLnD2RF86H1Sh8FtLE+Be0r/TkwC9hqi37JZ3wHf7JEMz5qQJVrMOOOLWUP8wdUNa6CuAgSWXIhIodo7r2XEwWW19sD3b4ddtsogtVY1J3fw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by DU2PR10MB7725.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:46d::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.382.15; Fri, 11 Sep 2026 08:03:14 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%6]) with mapi id 15.21.0406.007; Fri, 11 Sep 2026 08:03:14 +0000 From: "'Felix Moessbauer' via isar-users" To: isar-users@googlegroups.com Cc: jan.kiszka@siemens.com, ulrich.teichert@ebs-group.io, Felix Moessbauer , Clara Kowalsky Subject: [PATCH v2 1/1] isar-check-rootless: check parent dirs are world searchable Date: Fri, 11 Sep 2026 10:03:07 +0200 Message-ID: <20260911080307.1189531-1-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.55.0 Content-Type: text/plain; charset="UTF-8" X-ClientProxiedBy: FR4P281CA0425.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:d1::12) To AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM7PR10MB3956:EE_|DU2PR10MB7725:EE_ X-MS-Office365-Filtering-Correlation-Id: e10e5afe-e45c-4300-a8d2-08df0fdb219e X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|366016|376014|23010399003|10070799003|10067099003|11063799006|56012099006|55112099003|18002099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(376014)(23010399003)(10070799003)(10067099003)(11063799006)(56012099006)(55112099003)(18002099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?eUrUkw528L4CpFlJQ8WUmYf2KCquNpBjNJjqBZ4MVYYZhN9ixuuzq7mv97bl?= =?us-ascii?Q?Mok/A0QXVHE1RQlpJS0Ik1szmfOcq1PrsSRGZ2fBxYag4rsA6tl5Z9CBoKam?= =?us-ascii?Q?OHe1l2DWlvWZm9YKnBkDdm7Bxue2uTjTQEW1Jt1yviFWwF1kWerz+HATXywa?= =?us-ascii?Q?+iCLNToWMZToZIYjDAyBka2dSRNHrfZtFqzEWyZncrrt44QYy2FH90tlS8NZ?= =?us-ascii?Q?Bj5jFHnX+4GpY2VxgbwHrfQt9TQqngryQx61ZyMdsoLEWDMp/7KcYhWmFM6b?= =?us-ascii?Q?O3C29ZT3rxJ61qsMnxoSEsVRdwUpqLZJhB8u30mN8uapz+8nj9GNBAK6aJL1?= =?us-ascii?Q?zoLX3AxQWU8wRtFgCuauzDglkB6b9NlWzA55KGEb5oflxqFkEP4qRrj9g6w8?= =?us-ascii?Q?fwhscRtBQRrqbV6RrIMrxEtSxbFDTq6V482qv3wqPDSJoDK9HYwPA2iOY96V?= =?us-ascii?Q?JmEyx+JV+TH1kINGOT3Pfjt874cVHOsXKf2wqWSKunpx3DuUPnFCPxY3sQs1?= =?us-ascii?Q?ehMUXKk/KWQzQREj8Yn3bIocNCGjzoCYhhCOTULqpL9t4n822YEIYoTxkT+P?= =?us-ascii?Q?HJpRYQzFPc3JmiKpZjNQyuftRnJEoVcYqR6wU0DWI9slQ1c4cKQvesBUROS1?= =?us-ascii?Q?hA6icIueb6lkF9wW7sYw4gFsLAIXVlbsFHmVNUOew3i792pXQKaHELVpSpdM?= =?us-ascii?Q?rx8TrAKQ2opYpIwTuVR0ywoXAGpdZNGA693lA9DEWb4zr+iJUBceIf0rPO6m?= =?us-ascii?Q?odMIBvG5ApZth5ArAhFsRt7S21npQS1grVQr0GDrUsz3it/Xk71XCToeQjAl?= =?us-ascii?Q?KBt2C4r+2Hbu33vsiY2yDGk0baLfb8CXXkDNp0m9lrvxfgL6IEYAtQBABVew?= =?us-ascii?Q?FH9G25J6e8goVpjMi+ezX1w/TVwRMuYQZuOg/SmveEZIij1/DbJ1cd/47kdV?= =?us-ascii?Q?o+EyVgdmSetADouwGEKZMm9SyfFqg70ucWzecN0ggUXb6Ra9ZoIzBmSfMHoJ?= =?us-ascii?Q?GhfRV7F0GQwaJXkGrDsoCI1Ae+FePz9uXRgi6PZJhxd2E4729FMrO4GyDLqM?= =?us-ascii?Q?6mrVkgjWoxIazmYZW9BNurZNuCbG0HEkBlMGnju7Jyj249LwGyeKD6OVtXAZ?= =?us-ascii?Q?i6+yncNp1ROwBDzol0vxcjRwMYEKjMSQLvwPKyFch6wg5/TTTaPVs9QaVegF?= =?us-ascii?Q?F+3LrqNCXLhq7hqtW4ppw4DUzVxsk1WUeEK3E7+tjfVQwyoSEKA1sSLkGC2l?= =?us-ascii?Q?4HPCUi5NxdJW4LE4Nywuw1FU5keJWIs3g5okdjPmzBqQTGqkvZcOT9H9GyU4?= =?us-ascii?Q?YMpY1GLDUZVd8flD44iX5JwERDA2tCNkMb8VkID+ckKzihwilr1/rEOH6jVZ?= =?us-ascii?Q?haSNprbU51vkHow1ruQBXI4GryRPGyaJRyzlZbPb5LjRn9sXHOiexxo0wRGj?= =?us-ascii?Q?8GEAlsg5FXGkKt9pqg91GPdKUfI6KSdNiq3B0jSUWVDQqrVzntyoTpOr9bmp?= =?us-ascii?Q?kHuUwHIuGZh7nVU+wmy2ZsYIm9MZhhzTxcLf85/nvaJqIZJz+5yfMGo8EPet?= =?us-ascii?Q?0iVyyYO7uiRQQglyLRBsTpJJZSEFx73XlK+a3wTNBiZjf10CPYTmxRbeLZcB?= =?us-ascii?Q?FvsnLz521BKT51cLTC2Z4KCMRf04qRncKp/Cc5xub7NhmdE8OY5RuRcTCwkp?= =?us-ascii?Q?5TSbouUtqOPsfMKeo0mccrzhz/wpf0t4zgtaMZjxlnYsw6mfw77RJQKnwE00?= =?us-ascii?Q?SlGDvFZwVDaucUxd/tEcOa3tVvsEA/2PfSNii/B3YEutohflkFm//ikz/eRh?= X-MS-Exchange-AntiSpam-MessageData-1: 3KczxIIvQ3kmhMubbk67Ot/IOIWan9wAnj0= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: e10e5afe-e45c-4300-a8d2-08df0fdb219e X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 Sep 2026 08:03:14.7332 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: W8XrHb5FCOe9PtiiGRf6Q+9kh8+B0oeqj3+YYxYNSvoCiAheNTYs8j4dbCr5wkaywTr/7Mhn0bwOskVx03MlWR9fC9OyOBRwtmHdbWoaf60= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU2PR10MB7725 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=J4zNC3g3; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: XJlp06iWRpAI When using mmdebstrap with the unshare backend, all parent directories of the TMPDIR must be world searchable (S_IXOTH). This requirement is documented in the mmdebstrap man page, but when not fulfilled, mmdebstrap fails in colorful ways. To indicate what is wrong, we add a check to the isar-check-rootless script. Reported-by: Clara Kowalsky Signed-off-by: Felix Moessbauer --- Changes since v1: - reworded "executable" to "searchable" as pointed out by Ulrich scripts/isar-check-rootless | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) diff --git a/scripts/isar-check-rootless b/scripts/isar-check-rootless index b5197111..04717410 100755 --- a/scripts/isar-check-rootless +++ b/scripts/isar-check-rootless @@ -20,6 +20,35 @@ fi [ "$verbose" = 0 ] || echo "RUN_PRIVILEGED_CMD: $run_privileged_cmd" >&2 +if ! tmpdir=$( \ + BB_ENV_PASSTHROUGH_ADDITIONS="${BB_ENV_PASSTHROUGH_ADDITIONS} ISAR_ROOTLESS" \ + ISAR_ROOTLESS=1 bitbake-getvar -q --value TMPDIR); then + echo "error: cannot determine TMPDIR from BitBake" >&2 + exit 1 +fi + +[ "$verbose" = 0 ] || echo "TMPDIR: $tmpdir" >&2 + +failed=0 +fail() { + echo "error: $1" >&2 + echo " likely cause: $2" >&2 + failed=1 +} + +# mmdebstrap in unshare mode populates a temporary directory below TMPDIR as a +# subordinate user. That user can only reach it if every ancestor of TMPDIR is +# world-searchable (see mmdebstrap(1), TMPDIR). +dir=$tmpdir +while [ "$dir" != "/" ]; do + if [ -e "$dir" ] && \ + [ -z "$(find "$dir" -maxdepth 0 -perm -0001 2>/dev/null)" ]; then + fail "'$dir' is not world-searchable" \ + "a restrictive parent directory (e.g. with 0700) prevents the unshared user from reaching TMPDIR" + fi + dir=$(dirname "$dir") +done + if ! ${run_privileged_cmd} /bin/sh <<'EOF' failed=0 @@ -48,6 +77,10 @@ if ! ${run_privileged_cmd} /bin/sh <<'EOF' exit "$failed" EOF then + failed=1 +fi + +if [ "$failed" != 0 ]; then echo "error: unprivileged rootless builds are not supported; see the checks above" >&2 exit 1 fi -- 2.55.0 -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/20260911080307.1189531-1-felix.moessbauer%40siemens.com.