From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Wed, 18 Feb 2026 15:11:34 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-qv1-f55.google.com (mail-qv1-f55.google.com [209.85.219.55]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 61IEBXak024801 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 18 Feb 2026 15:11:33 +0100 Received: by mail-qv1-f55.google.com with SMTP id 6a1803df08f44-896fae4073fsf67721686d6.2 for ; Wed, 18 Feb 2026 06:11:33 -0800 (PST) ARC-Seal: i=3; a=rsa-sha256; t=1771423887; cv=pass; d=google.com; s=arc-20240605; b=BVlVYkA4r0jKNXOsbI/930SaPWUq8gqmxrOhKmpRow2YfwwhYxw5U/ulJLpTNHiTfB jMxYYsixap6PUXcGV21nlT2FdRvWlub1WtzRawL1KuIKaoiuqpCmH3pBV+fWvxfgi/cq Rt2FnO6tvgbvQ1r6zlKcRkLDPJGW00c44Ud9WuUfy+gcD8bykN2ecXiNf7KCcPRKHAyb oAsQF/mKQysnEcSzjRCIcRJ3ISQf+VlJGYHoM995nH0SDHe3HpC2Yf/YmdLZW66HCVNK OPgcG9zJTpUfswMHNR7xNSVAa12Pw7hi4sQbTUx7YwoF40ZLqzNu6GDNEm/+BNfP/FD5 3DZQ== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:in-reply-to :autocrypt:content-language:from:references:cc:to:subject:user-agent :date:message-id:dkim-signature; bh=pghPWZ8/j4okcbgV4ow0rku0rF01l03LPidy/gICsns=; fh=LUNBbiHiC4e9T2Wz0gl/hJfSAVeRU3eNtL0cb0g/P7E=; b=iH1a7m/UUL21dwMK4y+jvQZMpn0Poq2QL/nAazmxKc0p3vneM0goZzdoP87xm+awJh PQNPtfq/ihU1uw2wpXt8l7J2uM7z8hs/Wok4FrowhYdm5PaS3fkCqJkdg6mPvO4xW8yZ kKWld3ROh9NjXsBppq8DYRYTvwjfjgL2K376vPoErbIWfhZreOjNH+FTibAcyAiq+k/e QpgSStmqP9RGN1e6U9fBxAeKPWPZLIDU/w7K4IiGbcHdVkOahoPsb3S/MBQ/oe1Hknkx 77fKZDabY2G2sBwbvNzhWM33n0Rae895DT/Hmxf9BwpRwWrmbbFZxQA+J+ZW4H5VyvGt VXVA==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=N5sfr5Mm; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f403:c200::5 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1771423887; x=1772028687; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :in-reply-to:autocrypt:content-language:from:references:cc:to :subject:user-agent:date:message-id:from:to:cc:subject:date :message-id:reply-to; bh=pghPWZ8/j4okcbgV4ow0rku0rF01l03LPidy/gICsns=; b=A75jnAyfSGl6rQDHzHAfLwfKk/pAKvgAC3eNhRF2KT+a3jLS6MeXwamYxW20ilawHc DhGhPsitRzpMKbLFGI6U/nhEouhz5xl1lkrzJYo2Vdv2LyajD2+ibpnrxWh62w9afMC6 dVMI6CV2qX0GDcDj4QlyGlIteYdAlhEcfX9+ASPfM5eB8Kvcdp+TvG0b5Hy5zBcuUrua Npl2fMqlaPLJwydRlMiTiFtfr4QbPI+SZ1sy2CJTmEtAIj7aKjhUvSqSKcrDlEUOfxbM BCtIHHaRYKLYUhl+8I6qJ0sFDbl/6qvATedKj4NlH3fKOqBJ5OZqRxfqvYG0ucnAO271 rkyQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1771423887; x=1772028687; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :in-reply-to:autocrypt:content-language:from:references:cc:to :subject:user-agent:date:message-id:x-beenthere:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=pghPWZ8/j4okcbgV4ow0rku0rF01l03LPidy/gICsns=; b=G0+vWsD/IBobOY+l9NTGek0aYxHROCxhCDzJGrxvq9JcxXuPa34TtzffRgRuT7zw1x tpHX4keMRiHSFTOTvjN08cPh/3o0ytU42XhDtSIYiKMS7M09BrEL1Gm3IN3oW7ylh0rw UoTVQ3hgFVnNO6/VoXdWVgVNUhKxA0C73PCWoVr+pRX8cOy121fDSLu2PX+8pV978Z9o E9u+ipqFFpNely4dcSMNzUeHAOYQEsjXoNOnpA0SQ7xs+EswvnVZ44YI+ftVvehYpDre 8u++ZFM0/DLWL4ewr5+g5xkupFxqwcQSSTuWVNWsIY+J0nI1ywxKWefVl5Dty1ukksSS XfgQ== X-Forwarded-Encrypted: i=3; AJvYcCWo/d+hAtyfLV0TIU1fe33LJ3YFoeFT6XHp06wubKi/Seu6NPk3QFdG6nNf4xVpVAHQEHtG@ilbers.de X-Gm-Message-State: AOJu0Yx3cKuBH3e8VfhhIfHl/LmB6qu6PXea6KDuvOFvnXPe8zgi5Kvm JTR+/cW8WiJ0Tz/vK2WLd1ZSoMs8ykYNgveGPtn0eeEQuh2a0CpEHv3b X-Received: by 2002:a05:6214:528f:b0:895:49b2:e25d with SMTP id 6a1803df08f44-899580a367dmr23224556d6.35.1771423887260; Wed, 18 Feb 2026 06:11:27 -0800 (PST) X-BeenThere: isar-users@googlegroups.com; h="AV1CL+GnXJDouFsLf3UNA58eEdRpjUpD8rWuwAZq6oqo2TReQw==" Received: by 2002:a05:6214:cc5:b0:896:f372:8c82 with SMTP id 6a1803df08f44-89729e1e47bls102293146d6.2.-pod-prod-08-us; Wed, 18 Feb 2026 06:11:26 -0800 (PST) X-Forwarded-Encrypted: i=3; AJvYcCXUrsQ5vfn7tXyPAoD+apCJD/C95DkwJhbvTEDQTVLY2YVl+pzVu+dygyemvnigXGAd42Ym78SLefkz@googlegroups.com X-Received: by 2002:a05:6102:3052:b0:5f8:e509:aedf with SMTP id ada2fe7eead31-5fe7fc3fe82mr606658137.17.1771423886127; Wed, 18 Feb 2026 06:11:26 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1771423886; cv=pass; d=google.com; s=arc-20240605; b=BmJZitIFqN+PkUTrmvvC7p/NVpozZn7fUXw/516Yew38bw06VmDAZuop/y/ZVZV0Ac HEnURveZjBHtTwXpfhJGNfaodK6Os8r8CXcou/kiAcxu1Oic5Dqa9mjuImt4cNyhMOhx iBTHEM4OyqIZajCQrnjouWgbjfeShP4qbUOhgSsID6qULSfuWtmMXwlmrsoDb49kp2xd HLuVIh7/USIAVkHzc8s1e20fEdFrL/ombUa4uLMSBJ08gX4RQZVYcnz8OYHBM0FKSdLA n8/PruSfChU0yhm86Ud8U3//7wioQYUDV25KC6TrtAi7K1zqeXl8Pnc5A7e6UDLm4rvc Oobw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:in-reply-to:autocrypt :content-language:from:references:cc:to:subject:user-agent:date :message-id:dkim-signature; bh=2ioh9OzUTAZhvT03O8hCl6XgbPNPX0FvRXHyVQ+yUFM=; fh=OPAseo6bwwFPu0Z/TgqZ37S26U8kSSi3ubVyFPIawCA=; b=UUy43ubJfuLJ1hheSVmezn6buRbstSOa5yc+NDXjpWcfFUoznKLQUKBPG7nvzLng+b jXrJYbCGMNqF4wZB8wsl65K/NckKpNmiiwICQI+gGjEq0g5TNa3uIVWpr2Y88Bl12+Lw hsdPOTM1tZI5VZP32axgTzoGrsWxzxuOXl0xnfcwZIVArkpXSpT7FH/nQDQ2/VXWkljF Ve6KuZdUYkxENZFy24+WDuTkLlrPq2Jhfn5DRt56D9elpeSypekuJViCxeE+R9aZvfKL tjL5/sBXHyf8n4CfU5GX1Snf71mi3cso3Os8LJDeMK9UB9wgUlxEpVqqWzyV07+cSXdN Daxg==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=N5sfr5Mm; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f403:c200::5 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from DUZPR83CU001.outbound.protection.outlook.com (mail-northeuropeazlp170120005.outbound.protection.outlook.com. [2a01:111:f403:c200::5]) by gmr-mx.google.com with ESMTPS id a1e0cc1a2514c-94afd230df6si813256241.3.2026.02.18.06.11.25 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 18 Feb 2026 06:11:26 -0800 (PST) Received-SPF: pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f403:c200::5 as permitted sender) client-ip=2a01:111:f403:c200::5; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=G9v4/xgQwGUdC7mQEw8gJbWuymK6SHPyV0IMPSv15dnUOzDYsdtGKkojYY1NpyqURS3zMLin5yxNWrmMMCpn36PZwgFmsa1OMt0FMF549avxsVbFS3FuLLsKufMoCcFavwXjRD6w19xU4iRseIuBdtmaIbPOWhFHb1z0N4dYpgf2kCizvBFu6V0L43CvHdiClYO3PrbPSiH1OTKREj0pK+lVpqBbUIufLHsDvYLq6m5HWMHdty463H+q13IOxJ4+RRb0w5UUtOS69LK+MybOy4co+2M0cbwPS0idqNy9SrB/5F/Jmq71mpA2HFyqMpt9KSjHg5u+lsWgqjFsKwlQVQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=2ioh9OzUTAZhvT03O8hCl6XgbPNPX0FvRXHyVQ+yUFM=; b=zATMRCx2gisX9HyYyiRI2obNDmAs2P5FGlymLwZsiKeEMC7+rZCho6lfnnvUm9zHIoWvA5oLDvbMWxZZShr8IwXNQvpSS7Vcz2gV+JhhW1v2ZjzvSd+Er0Ei19Lp+NKDr1mi6GSJEbQ4OErPzqSTUSbqvLt2HhZeng97wAjnB0THKghBDy0pnjyQCh5eERZN1MIhRSsarOxavQ1IwGYXqQWU741WL+75+dDvhusVMkuWW/U7EIKAO8INben3R/Vi1rfRjqSHmE3ICRoY4GPVycSsXmNQCiXQ2eKUxjJp58Kn3aPfQmyWMsR1OvHoo0K+U0lalOvf1Ib9tIlqU3VjNw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:588::19) by FRWPR10MB9225.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:d10:17d::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9632.14; Wed, 18 Feb 2026 14:11:24 +0000 Received: from AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM ([fe80::be9f:e8ca:ee9:83e1]) by AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM ([fe80::be9f:e8ca:ee9:83e1%6]) with mapi id 15.20.9632.010; Wed, 18 Feb 2026 14:11:24 +0000 Message-ID: <3b3f160d-f71b-4c2f-bcf6-ef5a2ef48baa@siemens.com> Date: Wed, 18 Feb 2026 15:11:22 +0100 User-Agent: Mozilla Thunderbird Subject: Re: [RFC 04/12] introduce wrappers for privileged execution To: Felix Moessbauer , isar-users@googlegroups.com Cc: quirin.gylstorff@siemens.com References: <20260218115827.3947145-1-felix.moessbauer@siemens.com> <20260218115827.3947145-5-felix.moessbauer@siemens.com> From: "'Jan Kiszka' via isar-users" Content-Language: en-US Autocrypt: addr=jan.kiszka@siemens.com; keydata= xsFNBGZY+hkBEACkdtFD81AUVtTVX+UEiUFs7ZQPQsdFpzVmr6R3D059f+lzr4Mlg6KKAcNZ uNUqthIkgLGWzKugodvkcCK8Wbyw+1vxcl4Lw56WezLsOTfu7oi7Z0vp1XkrLcM0tofTbClW xMA964mgUlBT2m/J/ybZd945D0wU57k/smGzDAxkpJgHBrYE/iJWcu46jkGZaLjK4xcMoBWB I6hW9Njxx3Ek0fpLO3876bszc8KjcHOulKreK+ezyJ01Hvbx85s68XWN6N2ulLGtk7E/sXlb 79hylHy5QuU9mZdsRjjRGJb0H9Buzfuz0XrcwOTMJq7e7fbN0QakjivAXsmXim+s5dlKlZjr L3ILWte4ah7cGgqc06nFb5jOhnGnZwnKJlpuod3pc/BFaFGtVHvyoRgxJ9tmDZnjzMfu8YrA +MVv6muwbHnEAeh/f8e9O+oeouqTBzgcaWTq81IyS56/UD6U5GHet9Pz1MB15nnzVcyZXIoC roIhgCUkcl+5m2Z9G56bkiUcFq0IcACzjcRPWvwA09ZbRHXAK/ao/+vPAIMnU6OTx3ejsbHn oh6VpHD3tucIt+xA4/l3LlkZMt5FZjFdkZUuAVU6kBAwElNBCYcrrLYZBRkSGPGDGYZmXAW/ VkNUVTJkRg6MGIeqZmpeoaV2xaIGHBSTDX8+b0c0hT/Bgzjv8QARAQABzSNKYW4gS2lzemth IDxqYW4ua2lzemthQHNpZW1lbnMuY29tPsLBlAQTAQoAPhYhBABMZH11cs99cr20+2mdhQqf QXvYBQJmWPvXAhsDBQkFo5qABQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJEGmdhQqfQXvY zPAP/jGiVJ2VgPcRWt2P8FbByfrJJAPCsos+SZpncRi7tl9yTEpS+t57h7myEKPdB3L+kxzg K3dt1UhYp4FeIHA3jpJYaFvD7kNZJZ1cU55QXrJI3xu/xfB6VhCs+VAUlt7XhOsOmTQqCpH7 pRcZ5juxZCOxXG2fTQTQo0gfF5+PQwQYUp0NdTbVox5PTx5RK3KfPqmAJsBKdwEaIkuY9FbM 9lGg8XBNzD2R/13cCd4hRrZDtyegrtocpBAruVqOZhsMb/h7Wd0TGoJ/zJr3w3WnDM08c+RA 5LHMbiA29MXq1KxlnsYDfWB8ts3HIJ3ROBvagA20mbOm26ddeFjLdGcBTrzbHbzCReEtN++s gZneKsYiueFDTxXjUOJgp8JDdVPM+++axSMo2js8TwVefTfCYt0oWMEqlQqSqgQwIuzpRO6I ik7HAFq8fssy2cY8Imofbj77uKz0BNZC/1nGG1OI9cU2jHrqsn1i95KaS6fPu4EN6XP/Gi/O 0DxND+HEyzVqhUJkvXUhTsOzgzWAvW9BlkKRiVizKM6PLsVm/XmeapGs4ir/U8OzKI+SM3R8 VMW8eovWgXNUQ9F2vS1dHO8eRn2UqDKBZSo+qCRWLRtsqNzmU4N0zuGqZSaDCvkMwF6kIRkD ZkDjjYQtoftPGchLBTUzeUa2gfOr1T4xSQUHhPL8zsFNBGZY+hkBEADb5quW4M0eaWPIjqY6 aC/vHCmpELmS/HMa5zlA0dWlxCPEjkchN8W4PB+NMOXFEJuKLLFs6+s5/KlNok/kGKg4fITf Vcd+BQd/YRks3qFifckU+kxoXpTc2bksTtLuiPkcyFmjBph/BGms35mvOA0OaEO6fQbauiHa QnYrgUQM+YD4uFoQOLnWTPmBjccoPuiJDafzLxwj4r+JH4fA/4zzDa5OFbfVq3ieYGqiBrtj tBFv5epVvGK1zoQ+Rc+h5+dCWPwC2i3cXTUVf0woepF8mUXFcNhY+Eh8vvh1lxfD35z2CJeY txMcA44Lp06kArpWDjGJddd+OTmUkFWeYtAdaCpj/GItuJcQZkaaTeiHqPPrbvXM361rtvaw XFUzUlvoW1Sb7/SeE/BtWoxkeZOgsqouXPTjlFLapvLu5g9MPNimjkYqukASq/+e8MMKP+EE v3BAFVFGvNE3UlNRh+ppBqBUZiqkzg4q2hfeTjnivgChzXlvfTx9M6BJmuDnYAho4BA6vRh4 Dr7LYTLIwGjguIuuQcP2ENN+l32nidy154zCEp5/Rv4K8SYdVegrQ7rWiULgDz9VQWo2zAjo TgFKg3AE3ujDy4V2VndtkMRYpwwuilCDQ+Bpb5ixfbFyZ4oVGs6F3jhtWN5Uu43FhHSCqUv8 FCzl44AyGulVYU7hTQARAQABwsF8BBgBCgAmFiEEAExkfXVyz31yvbT7aZ2FCp9Be9gFAmZY +hkCGwwFCQWjmoAACgkQaZ2FCp9Be9hN3g/8CdNqlOfBZGCFNZ8Kf4tpRpeN3TGmekGRpohU bBMvHYiWW8SvmCgEuBokS+Lx3pyPJQCYZDXLCq47gsLdnhVcQ2ZKNCrr9yhrj6kHxe1Sqv1S MhxD8dBqW6CFe/mbiK9wEMDIqys7L0Xy/lgCFxZswlBW3eU2Zacdo0fDzLiJm9I0C9iPZzkJ gITjoqsiIi/5c3eCY2s2OENL9VPXiH1GPQfHZ23ouiMf+ojVZ7kycLjz+nFr5A14w/B7uHjz uL6tnA+AtGCredDne66LSK3HD0vC7569sZ/j8kGKjlUtC+zm0j03iPI6gi8YeCn9b4F8sLpB lBdlqo9BB+uqoM6F8zMfIfDsqjB0r/q7WeJaI8NKfFwNOGPuo93N+WUyBi2yYCXMOgBUifm0 T6Hbf3SHQpbA56wcKPWJqAC2iFaxNDowcJij9LtEqOlToCMtDBekDwchRvqrWN1mDXLg+av8 qH4kDzsqKX8zzTzfAWFxrkXA/kFpR3JsMzNmvextkN2kOLCCHkym0zz5Y3vxaYtbXG2wTrqJ 8WpkWIE8STUhQa9AkezgucXN7r6uSrzW8IQXxBInZwFIyBgM0f/fzyNqzThFT15QMrYUqhhW ZffO4PeNJOUYfXdH13A6rbU0y6xE7Okuoa01EqNi9yqyLA8gPgg/DhOpGtK8KokCsdYsTbk= In-Reply-To: <20260218115827.3947145-5-felix.moessbauer@siemens.com> Content-Type: text/plain; charset="UTF-8" X-ClientProxiedBy: FR3P281CA0155.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:a2::16) To AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:588::19) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AS4PR10MB6181:EE_|FRWPR10MB9225:EE_ X-MS-Office365-Filtering-Correlation-Id: ea2f8b87-01d7-4d68-c729-08de6ef79916 X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|366016|376014; X-Microsoft-Antispam-Message-Info: =?utf-8?B?VUtBUk1WemVia0F5OTJadlZCWmZPR2dIR1RaN0tHdmtqWDRpT1hqKzM5aXN0?= =?utf-8?B?WEV1R0R5aVBXQnloRkJBR2YvNVQ5QVhXS0hZRUN4L3JkSktGTGkzRFZseHh6?= =?utf-8?B?aDJnS0U1Mk1HNjh3WWdqL0NDbGZvMUlIbDRnSU1HQ0ZOZCtQYU1sRXM4My80?= =?utf-8?B?MVNZTUNRQ2loQjNaZTFxYlN3V2J4Q1h3enEwQ2szZnlGR3Q5MUw1SjJSUnIx?= =?utf-8?B?TDBISFMvV2dsYWxDaENPY1NTSmdEdlg4cE1qZ2FjcHg5eElHbzEwME9sVEMv?= =?utf-8?B?WFM5R0pRbmY3T1FvdEdxZ0NqdVlFbEtyL3M3L0xYTUovbkVKVUo0QnJPdlRJ?= =?utf-8?B?UWh4d3YrNjRwVTE3NXNqelVGSFkraG1xb2pCYlhwUDg0cFFRcjllTk8yTG9z?= =?utf-8?B?UFNsYndtZU8vck1LeHdZTFUxL1Z5MGtGRmI1WU9KNHFyS0pNY1JuUW9YNXRt?= =?utf-8?B?NkdVWlo4WW9iWW5ycUtFdzNsWW8wWDdxdDVEVGthdTYzREdVRnVnMnowNnVH?= =?utf-8?B?dWF0K1NnRVdyR0JTTHNCb0lEbXo2Q1ZENEpKS2w4QkI3WW1iSks2SXJIb0lw?= =?utf-8?B?UUZpajlSeVN5amRwQnZpRDlTY01WUGd3ZURrTks3ZUMwRmYxcjFRUlprUlVw?= =?utf-8?B?amlqQ2NnendSd3I4OVRaQ21QZmdLTkxtK1FtWDNlWlRhSmlmVEpNMm9JM3ht?= =?utf-8?B?dU9EYnlaQkszc0t0bDRqQjNpOGpoVVZSUEoxRlA4ZlNTbjB0dG5acXF3d1ZW?= =?utf-8?B?Szc0dnpkZWVIbThwRlNjK2cwNnR1U1J3eThzVFNveFhBTHZIOURReklWT2w4?= =?utf-8?B?YkVFa29XdkNnYkJVK3JhTXMyRGdtL283UjB4VU5VTWFuTStDWmd3N0Q5anJ4?= =?utf-8?B?OVlIL2Y0T2Fsamc2UnRJTXdCeEZ3Qlp2NHF4VUhOZ0wyUU9HZXIzbUhNanVE?= =?utf-8?B?bEdQay91VjliMWtoSERUYnZkWnVZbUZyNGFzK3BoL2xpbCtwYVJ4V3JzM1FH?= =?utf-8?B?Y3ROSDJ2cUlRR09yT2w1djJRa0VIM3d1WGtSSzdVbkF2dkx1UGhaYm01ZHVv?= =?utf-8?B?Mi9kZU9rYlJIRUx6TG1JYjFuV2czV2lFNmcrQ2RUclpkRUhWS2p0WjJReHdw?= =?utf-8?B?Y3I5NS9PcUpham5QTTRwaHlWQ2FpRDB2aWc0cmdIeFIxdURqcFEzQTNGTzJp?= =?utf-8?B?Q3d3YlA2TWFYMkZvRG1GL3NOQkQydFZqMU5kOU5UbnQ5cWRrVDdOWTBjVWQ5?= =?utf-8?B?dVpXaWNLOTVMVTFUdURMNnkzc1l1SGNXTWQ5ZXY3MU9Kd3JxVU9sWXlaaVpv?= =?utf-8?B?ZVpxSWxkS3dmSjZONStPbU9SM2ZFdzlOUHA0bExuTlhYYzlzTWZSdUtaZzJG?= =?utf-8?B?ejFKdzVZYWtlRi9aZURlcW9aSGVacjZabTZ6c3gyUFJYTkkwWThQQ3B5M2pF?= =?utf-8?B?dXNuamtaNVNwbzcvWUhCU2xBQ3VIeHhucDNNa1poRVJDU2dpaGdSK3ZDeGlp?= =?utf-8?B?WExON1Z4ek1FOXd4OFdWNmxpSU5DUldCTVBSM0w3dVFqRnNZVFI2VU9mRGFo?= =?utf-8?B?Vi9McXRKNVZiSGN1OU5ZTjBxQmZlUXhCRGpteHI1akJidGgrdmora0MrZTNQ?= =?utf-8?B?dEpXS1NHTlFDOTdmeTUxTitxT1ZONW56Z0RCUG8wbExrSDVLTUV0ZVdaU1Jo?= =?utf-8?B?MmJJVkM0S2RaWmN5QXNZeTZrdnBnMml1RTZwTGZMdFhYRjhERmp3SWI4U29z?= =?utf-8?B?N2VNdzNEOHJ4b2NIQjJLKzZNc2NyaXQxczhyRm9yeWlHRTBvQjlNSzh3TE4z?= =?utf-8?B?NWJFM21Tb29pZWRMNHR3UG5MZFJWdzNUNzdlSXQyRkVlcVRZTE1vakZCM3hI?= =?utf-8?B?Tkp3TS9FUEtyaGgxZ1VDUFpSZi80dDJkcXZRMks3bCtOYXYyR1BPRXppRkh1?= =?utf-8?B?bytTZXEwY3ZnTE9Nd1phdUtFYmQrZEZzZ25qYkc2Q1Qzc1MxSXJ0MjdLYlFX?= =?utf-8?B?OVlmZEdMKytUb283cVk5T0dhZ0EzQ3ZaUi8wb3ZKTUlsRG1WcEVpcEQ0QTR3?= =?utf-8?B?MHBMRmpRRU5UQVVnWWFxTWxKTGJERnR1M01qQUZHZDRUN0xzc3ZPeHhYOTZ0?= =?utf-8?Q?U92Q=3D?= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(376014);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?bUpXaS9iL1RaVmRkK05WcmxsWHIzd0RoYUgrbWtEY2ZYeXVnZCtUNnZPVm1T?= =?utf-8?B?N2VFOVVGRG5HTjcydTQwVlFyRDFqRnpWZ0hRanZRcjdMTWh4dUYydjB2ZEZu?= =?utf-8?B?emlzOEZzbXRUSklJMmhIYlJsb2ZueEFUaTdnTVh6RDZreDJIZkxNUjFOZFBy?= =?utf-8?B?SElmNGJuS0xzSDRGY2N3bS90SUR4VGhRQ2hubzdlYlZ1OXpqL2h1ZEdtbVFv?= =?utf-8?B?U2R2a0xSbE1Nb1loZXBtTVg4dWRvb0JscHBhc1B4L3lFeFMvMHlSTU5YK2NU?= =?utf-8?B?U00xTmt5MXVudkpyZEpnL1pWVGlBMUYwT1c0OWNUNXV2RUJCbXczZEdENTZP?= =?utf-8?B?c2MzRU8wVWRzYUJtOFJpZ0V0MVh6ZEd0TDFLWno0RENHWEZnZHhrclRQd1JZ?= =?utf-8?B?cWlleiszbjgrZWkxaE56MHVMYmJZKzFjRVgvUmhpaVpyS2xITmhkTGozZGEz?= =?utf-8?B?Y0ZiL1UzVTNTK0Q0Nm15eG4ySEQ3a3NmMGtFMXFDY3NnNnE3YU9XYXorVTQ5?= =?utf-8?B?blBpL2tSWFE0U3d5UktNT2ZoQml1QUVkSmd6TzNsa3ZYc21oenpqS05sK3lX?= =?utf-8?B?bzZoZ2JHTU1iUVpWUmRJOHR4OGllNEZkT09tV3E0V0VLUVFSSEgxWXRvc1hH?= =?utf-8?B?NDh1U2xFd0E1TURzMEU3TmZsUGs4THBZbEhrc052NEtkYlB3QkFFWjVEdlpO?= =?utf-8?B?dGVnY0oyZ2xmYTlocm0yaVBHTXRWUVFhWjd3NFVSd0dlK1ZhcGFZZ2UySEd4?= =?utf-8?B?U3Bna0RoZHArTDNOeGFLU3FFVk5mSDRGYW95RkV2Z0x1ZEkrbC8vM015NXc1?= =?utf-8?B?bTJDbkhURkhkOEM5N0pxeXM2N3NBcXdlcWpVK1lkcUhnZjQ3UUhOMHZXamht?= =?utf-8?B?Tk1YTVFhTjFRTWM0QkJLOFpBbXUvN2ZDWi9CWHBqZmc5YW15SkZKZGNmL2xl?= =?utf-8?B?TUxneUxJekdNOTFzSjhjdVc2SnRaV3laWFY5STVRU1FHMUJhU1I3MlhYSWNN?= =?utf-8?B?T080b1hoUjhwVkN4K0Y1T1JTQjhhL2JMNFFqbkZHN0gxcUpJamptVm5STTJ6?= =?utf-8?B?YjFjclN3MXB6SjJNS1RpV3BySW4va2IvRDloelVqRlJDNzJVRzNnYngxeWVj?= =?utf-8?B?cEJidVJoYTR4YjVGNnVrVStOcTF3N1ZzODREYmNlNjBjY0pFUmlnUEhod25M?= =?utf-8?B?K1JlNTJVSlN5YUlGVnBIdExtODl5cjN5cGoyb2Z3c1pQVzZLQTdpandRcmNn?= =?utf-8?B?dTlPR3ZJcEZXNTBjd1hVV25hcyt5bnhKc2h1dGZ0TDB6NXpPM3BZU3hRQ1Fr?= =?utf-8?B?Q1VLbXk2by9hdmhnUXdPZFBlbWtvRlZCeXVrTUJsbFBVZkR1bHIrblJDcGtr?= =?utf-8?B?VU9LbUhPM2dQR0pEaDM0bFJpczl5VDF4cTZhSlhxY21kOEdITzlURlNZSHFW?= =?utf-8?B?OHF2Mm9abzJhbCszKzRWNU8wOUxlMGlXNDRqVENrcFF2cWtFRkFEMVdyN2RO?= =?utf-8?B?OTlQNS9aZ3BQNVhDRmc0bVljNTJzSE1EZjdHNHVmMWd5MlN0ZEhaOWlSMnpB?= =?utf-8?B?TU80S1hVZ0szdkxQdGwzaVEvbTIzUmZkYlRkZm40OUR5TFpYNVJrajFBOHh0?= =?utf-8?B?dmVkaDlZQTd2MDF2bnRUKzFrRkpaZjUzNzVKWTJISDJ4c1lZQWxYaHo3bkZn?= =?utf-8?B?SHBPR29yNjQ4VGFnUWNzSGRYclBHd21QeDNHL1pJeWFKSkF2blB3QllHS1J4?= =?utf-8?B?WTVXSVg1azF0TDFvUnVuT1N3eEhaRDhheCtaZnY3Tzk4eFVJYUJwTHpnMFVy?= =?utf-8?B?dDhsTDRscFZ4WWhueURLcHRvSnIwSlcxd0EvbWV4eG5PMFIxcUlPM3R6YnZl?= =?utf-8?B?TUNXYTk5T3NJWlZvS3VDbytPVW1GV3hpWWd5UnEvcDlLVHRCMk93RFNHMlJ0?= =?utf-8?B?QnpQQjlYK0tvU2psS1QvcHk5SFdKZ0dLU1JyTHpDZWIvRDlPbFBVTTBNditp?= =?utf-8?B?cVkrdWNmRkpLdTl2ZXNxYi9NZjQwd0I1UHE0b2R5d0Z0VDBDZnRnUWcxanNv?= =?utf-8?B?RXRNNVJlL1IzTXZqV2ZPa242YTNPR1JEZXZXK3ZNL2lQaW82NGloYzJ1dUJW?= =?utf-8?B?NHVodldUSVBXcGxtYVRqVmlzWTc5ZDd1V281Zm42R1J5K1M5NXpqQ3VXSTdq?= =?utf-8?B?WDZsaWtyOU0zMkF4MndCS1lkM1Arc2JuMjVvTW5MMFVOdXI2S2JJM3EzMDFx?= =?utf-8?B?RFpxOVZxK0ZNSHpUOTdIdjdVTTBnVjJFSnRYZUpIMlBTa01vUHoybDhTQUpY?= =?utf-8?B?YmhuL1NnNTFIYXFpcWlldlByVk1tQ0RjbUhoSGVNemJxMlV1U2k2Zz09?= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: ea2f8b87-01d7-4d68-c729-08de6ef79916 X-MS-Exchange-CrossTenant-AuthSource: AS4PR10MB6181.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 Feb 2026 14:11:23.9094 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: WpexBGsR+n9mXkiQALKfZqGoMPlnpuBSwgldRus5BO345jt2ME+YHiXmYhFsYeqzvwO9yh2r3WhzRAEQ1qeVKQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: FRWPR10MB9225 X-Original-Sender: jan.kiszka@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=N5sfr5Mm; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of jan.kiszka@siemens.com designates 2a01:111:f403:c200::5 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Jan Kiszka Reply-To: Jan Kiszka Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: F7DIf9R1kYGj On 18.02.26 12:58, 'Felix Moessbauer' via isar-users wrote: > As a preparation to enable rootless builds, we introduce wrappers for > common cases of privileged command execution. The wrappers are defined > in the base class where later on the executor dispatching will be > implemented as well. > > The wrappers are introduced throughout the whole codebase and downstream > layers are also encouraged to use them to increase compatibility with > upcoming API changes. > > Signed-off-by: Felix Moessbauer > --- > RECIPE-API-CHANGELOG.md | 16 ++++ > meta/classes-global/base.bbclass | 30 +++++++ > meta/classes-recipe/deb-dl-dir.bbclass | 4 +- > meta/classes-recipe/dpkg-base.bbclass | 2 +- > meta/classes-recipe/dpkg.bbclass | 2 +- > .../image-account-extension.bbclass | 4 +- > .../image-locales-extension.bbclass | 4 +- > .../image-postproc-extension.bbclass | 30 +++---- > meta/classes-recipe/image.bbclass | 14 +-- > .../imagetypes_container.bbclass | 26 +++--- > meta/classes-recipe/imagetypes_wic.bbclass | 4 +- > meta/classes-recipe/rootfs.bbclass | 88 +++++++++---------- > meta/classes-recipe/sbuild.bbclass | 10 +-- > meta/classes-recipe/sdk.bbclass | 14 +-- > meta/classes/sbom.bbclass | 2 +- > .../isar-mmdebstrap/isar-mmdebstrap.inc | 12 +-- > .../unittests/test_image_account_extension.py | 9 +- > 17 files changed, 157 insertions(+), 114 deletions(-) > > diff --git a/RECIPE-API-CHANGELOG.md b/RECIPE-API-CHANGELOG.md > index 0bad8a44..bc40a403 100644 > --- a/RECIPE-API-CHANGELOG.md > +++ b/RECIPE-API-CHANGELOG.md > @@ -962,3 +962,19 @@ INSTALLER_UNATTENDED_ABORT_ENABLE = "1" > # Optional: set countdown timeout in seconds (default 5) > INSTALLER_UNATTENDED_ABORT_TIMEOUT = "5" > ``` > + > +### Execution of privileged commands > + > +When operations require higher privileges than those available to the build user, > +the following helper functions shall be used: > + > +**run_privileged**: Run a command as root while preserving the environment. > + > +**run_privileged_here**: Execute commands provided via stdin in a root shell. >From their names, these two commands sound to me like they differ in where they are running the commands, not how. But from the description it is the latter. "run_privileged_from_stdin"? > + > +**run_in_chroot**: Run a command within a chroot environment. The first argument > +specifies the rootfs path. > + > +Using these helpers instead of direct `sudo` invocations centralizes platform-specific > +privileged execution logic in `base.bbclass`. Direct use of `sudo` is discouraged > +in downstream layers. Are there sudos left in Isar after this conversion? If not, should we start to catch sudo as invalid afterwards? Jan -- Siemens AG, Foundational Technologies Linux Expert Center -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/3b3f160d-f71b-4c2f-bcf6-ef5a2ef48baa%40siemens.com.