From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 06 Nov 2026 10:57:57 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-pg1-f186.google.com (mail-pg1-f186.google.com [209.85.215.186]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 6A69vtYV011322 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 6 Nov 2026 10:57:56 +0100 Received: by mail-pg1-f186.google.com with SMTP id 41be03b00d2f7-cd5ca3840c5sf631677a12.2 for ; Fri, 06 Nov 2026 01:57:56 -0800 (PST) ARC-Seal: i=3; a=rsa-sha256; t=1793959070; cv=pass; d=google.com; s=arc-20260327; b=LNhs+gCoUFnOdMnKx9XPVMSdEGlWUEZdgzF/t0OpwJs+FjtVZkgabe5AobcZNx8FRk hOYKHhr3gqkIE6gqB64/qxzWDKoT0n+Iz9SeaAujKYoDZAm1gNPkGYchP5Jr55XIEULI qlhvnRJ4myxsXIgv3rv1wAfVVyYherDYK1QfK2CTTI1rao/ljRPAGmO633B7a/rYD/pj LN2bertayrAqXgdUp6gzyBY7sO+8Ou2DHKJvf4iIil7BDy5j9bUAecx2D6QRo+31THi+ ICPpqLsatrecbWEH+iBOK76hh3rSZHtEn6AUhwZvrfbRtrFV+E2JnALWX+hwIS9b3mwp 08Fw== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:content-id :user-agent:content-language:accept-language:in-reply-to:references :message-id:date:thread-index:thread-topic:subject:cc:to:from :dkim-signature; bh=XB2PwH8NZiUcg3YrfXM4poWRNHlVkdFI8f7lbBJyb/4=; fh=kBsOGoRQwZkniMclg8TSSY4v2TtMt+x9L3U5xhZOhlk=; b=RRJ0hPqm8ijxzeh6kZeHxHgwJ9HWsUlVSX9ylVPn6c3iLWX49m40KItyxSbC+K1vVj TXty4vPsYPyT17fZoYWF0OrlclU5TTyZNMXwUfLrWOZRmLZukP3mqiR1cZjJvRJKZSbc GwpRdM1hn79DUVVD71c9VvDmBHWHufLU847kWYoYna6GeH+fUkyw4PE0HQEldnI3NXbz 6Okjc9JbuJUp96SfX1YYuGMFkFVDtpKk4LBJru2/aHJrriS+GpYzhsBG28BoZX+TM45P P0qZo/CFuZyLbaT5K/hOb7EQNTK3h5Q9ufSlJXFovSI5/HGUGKLN3G+ij2Wmbslwqgva bmlw==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=SKaleFAU; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c20a::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20260707; t=1793959070; x=1794563870; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-id:content-type:user-agent:content-language:accept-language :in-reply-to:references:message-id:date:thread-index:thread-topic :subject:cc:to:from:from:to:cc:subject:date:message-id:reply-to :content-type; bh=XB2PwH8NZiUcg3YrfXM4poWRNHlVkdFI8f7lbBJyb/4=; b=AwSyq3gESvP8ad/b9TZxJZYqiHWntjrEDRFjixvtwJSBADwcxv3xg1rW+1F8drJVKu iD4MrZYz8wcIAHB5CjcqfsxrAlGm5JNurF/9nyqTMzibGoGSuyukTzmlFZE+uChK9AKc Kf3Ygy5iBYJcDhaLHC36dbN2aUaWx4bSBgmOYqJfCZfWFYK8uze2MTeHOlrYUKp8i06Q 6kkJ53gNPs9vOv19npKvxlAm+0yNIGpJnAnbtSIEswAeQOBFLHx2QZcAKgcW1tAChqm3 jfmCs2n6guFhiptI+vWLojCijX/kuElkMVwJWsovME0BEmeVpviiH9o9f6GUL+JKG6JI sHVw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793959070; x=1794563870; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-id:content-type:user-agent:content-language:accept-language :in-reply-to:references:message-id:date:thread-index:thread-topic :subject:cc:to:from:x-beenthere:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to:content-type; bh=XB2PwH8NZiUcg3YrfXM4poWRNHlVkdFI8f7lbBJyb/4=; b=JqcSlWkNgbH5cHB0tOPlHoQQB7QjiCWEgX+MCOUf05cZtA00KrMi2aEkhL9Nsz+bzV 9eijIpTV8FH3krLNsdrsgC/AMhHaInTTosjucPl0bergPXdHGLfODUCCXWdELbvazmDH 0JTCbfHtKZzFYmbgLZUVWCKJrdIJH8PD5l4EeEUvW03fGAyI1TlxLpFwEO+T7nEOpnCx vmc0jZwwIDTZVJ49fhsdg8OPU4em1RzV86yEwLcxKRIpK2Z+WFfIP0SxoqeBiPPDylIs 2wX00UXJOlICLhNvmyNUvu8uo4PBZ8TBWyf+OQOaB1lssB3IyNjcfAT7OcInfOLlQdKk WPIQ== X-Forwarded-Encrypted: i=3; AL+hErEOhrGFtEwFOUl2gyxeS0hCSLtPa2Z/GX68++l7GqDN1ePwgEsjrGV9z3EgES4ilMFYoCUv@ilbers.de X-Gm-Message-State: APuU4Z8GSdyNeM/+oz9OfLh+A7sVg6TDwbshHiNa4cxhF+cbqvW846uz BcWF/6JYgUK1QwtBDZAA4OBkE+uEWGJp7x5iSBXR+G/8JoKIg2xSWlrJ X-Received: by 2002:a17:90a:d88e:b0:3a4:b0f3:6597 with SMTP id 98e67ed59e1d1-3b0db038c59mr2095528a91.0.1793959070151; Fri, 06 Nov 2026 01:57:50 -0800 (PST) X-BeenThere: isar-users@googlegroups.com; h="ATskLdfweSwGoXKDJ+54O+XAm1asArXP0mLQrDyzLXBCxgMEHw==" Received: by 2002:a17:90b:3811:b0:3ad:6c5f:feaa with SMTP id 98e67ed59e1d1-3b0d9863498ls1114322a91.0.-pod-prod-03-us; Fri, 06 Nov 2026 01:57:49 -0800 (PST) X-Forwarded-Encrypted: i=3; AL+hErHzHgMma0FcQxG2neCwlK+mqiLE7y3cvnCYEDCzyaSbWpDPnlA8vhwI0kx6ssLYinv4pR3cFBoPLhxQ@googlegroups.com X-Received: by 2002:a17:90b:3e4d:b0:3ac:8fff:5a1b with SMTP id 98e67ed59e1d1-3b0db6dca3fmr2137612a91.34.1793959068925; Fri, 06 Nov 2026 01:57:48 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1793959068; cv=pass; d=google.com; s=arc-20260327; b=Yxr4uwngnO/EENmhxEVBA7Ok+XFrzd4kZJaO1BOQvFIJ5WwaV6YvaQZDxYGljQXA2U Chqe8F4wFfaa2f9BH9bN8x0B8wVXs9dZfqMDbWb2/oIRk++m16TSDGUW9UQ190YqT+xJ GDlPD6umROMjSjDGQ/WfWVAajTZIor0oBAxx7moB/PBR+YVs7OIaKpqQotGKq4LgyKQa 5ok9zf6CvLk9H2WNKz4NfS+7VXTwrvJmOAcCxCXlDRvpbsqwXQMeXMiyp93kZdeBic8g 86RS/5DbSZeh9PFUuZDK20/VrLcRwxXF3eUSbh0VzAFK0dvFqS9785lMdT6hestx9hYh 9u8g== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:content-id:user-agent :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:cc:to:from:dkim-signature; bh=T6VmM7xeQ7QTR7mAjwfl+yycaZgI/RGjIYjNxMq1oCE=; fh=Xg4p59C21gxpco+NOYpYCPx67h86/VbT0ixQWj4jfGY=; b=Anf3QwKEOJC1KZHvyOk+1wtMDSVxz1eoaBAhnQE1lxWLDXq4EQ5cdMLDenjZ24BQdm k95KqGJazHdgONaKPY+wQo7oqgbxVG2AM+WlBkCk0RHbwEYv9Jb9tgzAXtixDNcmDv7S VQ3DEqTNPDakA8E7w/2A8u0vb3vwdQUPix+pijttokZy5jOZB5J+9X47dcyzxtwVy2sG CHrgUa6EdO0LN9i3Zv4reiNCdD3yE9BzzaPckkro3HIjbgCyY9NwuYT5PCI1b/nhBhPA RYTR2b38nejPhfGmyu6UUqsuHJcFr4WMgPlZx8ElU2ZDfA9CTFxugtaL+OnQKqdPemwn Z8LA==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=SKaleFAU; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c20a::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from PA4PR04CU001.outbound.protection.outlook.com (mail-francecentralazlp170130007.outbound.protection.outlook.com. [2a01:111:f403:c20a::7]) by gmr-mx.google.com with ESMTPS id 41be03b00d2f7-cdb7091ae25si30042a12.14.2026.11.06.01.57.48 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 06 Nov 2026 01:57:48 -0800 (PST) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c20a::7 as permitted sender) client-ip=2a01:111:f403:c20a::7; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=ud84pMrZonWOCyBk5UHF66/w9gNYIYYSOuHILzzFlLsOJm3pV4NJQyY4I+ksYn3d/0olOorNHMKCZInOwrIg4aUKpY6ocC5CLFyv+VjDwAlycW45XPW6O/FlgB+ObNQxWWJk1z9XxTFTkw7g8vj2kdVCnAnsTj7ESOhy7z3TFpSLsJMiIIKMYao6NuGinOEneKa4vh6RhQrAnk+nNx7FqCZJM/K/miNigadMRb4DfkO5bRlkxYxmhZ9YvjOPaJq+saOy5QIc1Woc9V3dXbkvzjYViuwkDTs59r+k/fb17Bhmqhpem9EhgztT/zPHmtp+h4PY5xu2yGkPDBbIpdJ9ig== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=T6VmM7xeQ7QTR7mAjwfl+yycaZgI/RGjIYjNxMq1oCE=; b=JT9ywfoiQb7yxnq/K7Lv/aXkRUabFKfe11EWRaD6ffYTKsyBh0Xfs1hDtnNFCCplZwaeDmm1qj6hekU8dWI3FcogNW8bnx2xImrjDzqMgMde3iFdh+ygC6Nzw64zvRppeyO94DPSC31VWWyuj9GyanIVYhXCjuQzMLUaEw91FHbdO31tss2AakB2HgmLFTGQ/DGQ94blnQmaV3Ob5gtM2ZgTaPJ7lrEsHKi8Ivty+jN+VZlGy9C0w0nZpng8xPCzEXk9130nm6yTklslVmt+iRyTSGfzaQwmJRshSZgtbaOZjVuSYVfHy2V/F22dXYzLtJCAraT9Z2ZXhEGSNwpFJA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by VI0PR10MB9796.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:800:31c::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.615.4; Fri, 6 Nov 2026 09:57:46 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%3]) with mapi id 15.21.0615.003; Fri, 6 Nov 2026 09:57:46 +0000 From: "'Moessbauer, Felix' via isar-users" To: "wzh@ilbers.de" CC: "Kowalsky, Clara" , "isar-users@googlegroups.com" Subject: Re: [RFC 1/1] test-container: block sudo usage on rootless Thread-Topic: [RFC 1/1] test-container: block sudo usage on rootless Thread-Index: AQHdYWKC0P+XPRZC6U6bAv2T/PLoH7cg58WA Date: Fri, 6 Nov 2026 09:57:46 +0000 Message-ID: <9d5951d1d2a3c41267a5c6700f17397786966f10.camel@siemens.com> References: <20261021134540.331832-1-felix.moessbauer@siemens.com> In-Reply-To: <20261021134540.331832-1-felix.moessbauer@siemens.com> Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.56.2-10+b1 x-ms-publictraffictype: Email x-ms-traffictypediagnostic: AM7PR10MB3956:EE_|VI0PR10MB9796:EE_ x-ms-office365-filtering-correlation-id: 9287f48e-e4e0-419f-2ce6-08df3bec687f x-ms-exchange-atpmessageproperties: SA x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|366016|23010399003|376014|22082099003|18002099003|6133799003|10067099003|55112099003|38070700021|11063799006|56012099006|261026121527099003|261026140227099003|261102130727099003|261102123227099003|261028144727099003|261021121427099003|261021123027099003|261022105027099003|261009223027099003; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(23010399003)(376014)(22082099003)(18002099003)(6133799003)(10067099003)(55112099003)(38070700021)(11063799006)(56012099006)(261026121527099003)(261026140227099003)(261102130727099003)(261102123227099003)(261028144727099003)(261021121427099003)(261021123027099003)(261022105027099003)(261009223027099003);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?QWF1ek1URjdBOE56UUQ0Ym1Ob0piVTR2aEI2ZGV1RkhMZmtoYnRId0tHb1VK?= =?utf-8?B?TVA0V1lCRVNwQTZhVWhDcndIZElpSlZXMVVraDdqanViVVRNRlBqaS9OK296?= =?utf-8?B?RjFHMjJmdFl3TkpaSUVoVHMySzhYV0E5aVRqUjkzRUl4b0ZBamtTVTJuWGJ5?= =?utf-8?B?MzhReDE2UVJmQ3FzWWFXVmYvVHhIRlJMNW44MzNPY1FPbEltQldKTkkwZHpz?= =?utf-8?B?Q2NiZmxCNloxY085UHU5R1RUdXVPMFFrWS9NYW51Wkw1bmUzME5CM0Q4LzFL?= =?utf-8?B?d294SzA3blEwbWxjK2JlY1o4a2RQR2h5SzNjaUVrZ0hiYzRzd3ZwYUJ4Qmdq?= =?utf-8?B?ek9tNkRjR3ZTaUVFejFhMU1oQzVQa1pncGpGQ2RBNlA2dWdWNWdDN3JaekRY?= =?utf-8?B?VGxmVUxZTEJUc1RDdmYrWDdaUHhiOTZIU01UM2c3eXZ4cDFIeS9Hcnh1b09B?= =?utf-8?B?aWNqd0JZekhlRXN1Y01Kd2twUXVPeVBGTUpJZnZqa1ZzVWIzRzNkM1ZhK0l6?= =?utf-8?B?a3FXNFRWaUZTOTAzNjBDeUZhNUd2M3dYOVMyMW9KL1g1RWpTV01MVjgzZC9k?= =?utf-8?B?aUNkN2R2MkRLdzhUQjgvRlpKWjhyWkdGL3pRbU5IVFZqbVQvNHBDV25EdnRQ?= =?utf-8?B?eXVheFZWQ1Qwd0twSEYrMVhNMFRIZHk4WFhxVWc4MkNjQjNGanRxR0xuVGQ4?= =?utf-8?B?eG42WUJnYkIrd1dRM0hNSVhYMkVKdkhtSnEybWJPRkxjYUVGcU1yY0FnYzRn?= =?utf-8?B?YlhEbGxUSm9LZXdOd2luUDNoVFczWU9naERNV1phd0tZd1grVDA5Qi9nVVEv?= =?utf-8?B?WXZSSi9MTTJLOGk2eXIvUHVwd3V5RTVvaHhHZFBzeTlSWGRpSExMQitDK0ho?= =?utf-8?B?Q1VGMUt6WGxuK0d4RG0vd1NqRXN2eE52UTE4dzVZYUJRK3pZWnBqWHdHMDdh?= =?utf-8?B?S3JuWVFUTnMyd2V0NkdNL3dGTkRKbjFiUVdUNUI1UzFKQ3JqeUZYdXY2SXow?= =?utf-8?B?SFN0NE5WckxwZE9wb2VtWFAzN0ZzSGNKVHErV2FXeGtSVEQxV3pydFlDd3l1?= =?utf-8?B?by9JakQ0cGp0U3RiOXdYd1BGWmIvVitGZmZ3M3VtQ200V1kwWGNScVBFSVpN?= =?utf-8?B?VmVGYitIelJFSk4xTVpuTUc4MmlURy9WNDFMMjJrbWJSWmZoZUxDOUkxR3dU?= =?utf-8?B?ZURQdHpKTytwaHA4MzczNGV4Vlg1NWZ2R3ZQUUhpL1U2RTA2Zk5lWGcvR1No?= =?utf-8?B?RUtpbXNtalZhWExmU0tBUW5ta1BLLzFRWC9ITjJ2OFV1Ty90OGFoZHk5bHY3?= =?utf-8?B?WGo4UXJnZlpveVhRemthd0NNN3MvWG5LeEliR3FKUU9tVytmcmxrcDQvbHdS?= =?utf-8?B?LzJDSW94S2gvUzR4TmNuekZHOGNPUEV3cXVucW9kczMwVTZNYjgvV05WNDRY?= =?utf-8?B?QzYzV1E0RkIvYVVSNDVabnBLaFVsK21sUjdYQlVxcEZQMkNPbEFxZ1JzU2ht?= =?utf-8?B?YitwK0FzVXFEM01lQWpaN293YXV6cHRIM1pYdGkrNW0zaTVRRXljZHRzL0c1?= =?utf-8?B?cTBYa2h4Nlorc1ZGczU0OHI0a2ZFd1hZVUNoNGdZR0c4QVM3b2pFMDM4eFox?= =?utf-8?B?cjA1aHY2VW9YZ2pMWTE0M284bkFGTDIwbFZZZFJOYUNGeHYrM0pRdWh0WjFl?= =?utf-8?B?MmpncVlhVXg2OTNrMkVpUnZKVVBDdmFSZnBQSS90WjdyVXkxWlhxZEFhWkRE?= =?utf-8?B?ZVFWeUlKOUlxWFA3d2JJQS95Uk01WmZLd2tPNDBYb2dmeWRmTHJtWWtnYlEx?= =?utf-8?B?RjNBM0xkK3NySEZiS3lyOVFkdEJsZnpSaGZ2YkhrUzhYY0s0bnVvazBUcGpJ?= =?utf-8?B?WFpQVkEzR1FCNDByc3doOUtFZmd1Yjd2UVZtVW9LeXlKTVNRcjhNQWZpS2Zu?= =?utf-8?B?cEZkREovZzdzaWc2bmNhcDQ0aGhxMEVWaFlDZUVVdWdkazFGZFhaR0kyaXV4?= =?utf-8?B?SGc4RjVkR2lPM2xOVnNodjNJWS9iYVhJSEZwUldFVnp3RW1HTDNuL0U4L1hP?= =?utf-8?B?VGx3SHp0TkJSRUF6OTg2ZERpaEJ3cWZZYmlsb3pYQ3J5L0ZhQ0hBbUdpWHFN?= =?utf-8?B?RzZLMkNQWHJ6UXJSaG9PZ0xVd2hOcHBDVzFqZTZ5bGxjdzZGbllWd2RoZmpQ?= =?utf-8?B?VDB1aWJlV05xZ2dsemVPNmRCSGVMQzduR1Nyb3huc1VhazlhcGlmUStZZ09q?= =?utf-8?B?MUVzYnBUcnlKTlROSmxJeVNnaGlwaDd5b000M2VKcysxcUJmeGpWOSs4SWVX?= =?utf-8?B?YVViSElhK0t4Z2xwaFo1L2FkQnA2S2lBclBEMFRzcWp4NmJQc09idz09?= Content-Type: text/plain; charset="UTF-8" Content-ID: MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: 9287f48e-e4e0-419f-2ce6-08df3bec687f X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Nov 2026 09:57:46.0866 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: NDg10v+416gTPOqPe+DILEBr7g7cqgSWvGOxhCrEW01UU4egv0T1JscnBJ8j+drKw3s37ExeL1ebdfWdrTOyMebNbei7DigL0COn4ZMLDEA= X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI0PR10MB9796 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=SKaleFAU; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c20a::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: "Moessbauer, Felix" Reply-To: "Moessbauer, Felix" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: nUvvz6wZ3DwR On Wed, 2026-10-21 at 15:45 +0200, Felix Moessbauer wrote: > In rootless mode, no sudo calls must be made. However, the kas-container > ships passwordless sudo which also works in the container. To catch the > cases where sudo is called in rootless mode, we replace it in the > container entrypoint of the test container with a stub that emits a > meaningfull error message along with a non zero exit code. Hi, IMHO this can be merged. If needed, I can re-send as PATCH instead of RFC. Just let me know. Felix > > Signed-off-by: Felix Moessbauer > --- > A similar approach could be implemented in the gitlab CI executor > as well. > > Felix > > testsuite/dockerdata/test-container-entrypoint | 17 ++++++++++++++++- > 1 file changed, 16 insertions(+), 1 deletion(-) > > diff --git a/testsuite/dockerdata/test-container-entrypoint b/testsuite/dockerdata/test-container-entrypoint > index d263760d..ba824760 100755 > --- a/testsuite/dockerdata/test-container-entrypoint > +++ b/testsuite/dockerdata/test-container-entrypoint > @@ -65,14 +65,16 @@ case "$args" in > ;; > esac > > +block_sudo=0 > case "$args" in > *"-p rootless=1"*) > + block_sudo=1 > ;; > *) > clean_rootless_files=0 > ;; > esac > -export clean_rootless_files > +export clean_rootless_files block_sudo > > mkdir /isar > > @@ -109,6 +111,19 @@ mkdir -p ${base_dir}/overlay/work > sudo mount -t overlay overlay -o lowerdir=/repo,upperdir=${base_dir}/overlay/upper,workdir=${base_dir}/overlay/work /isar > sudo mount -o bind ${base_dir} /isar/build > > +if [ "${block_sudo}" = 1 ]; then > + blocker=$(mktemp) > + cat < "${blocker}" > +#!/bin/sh > +echo "ERROR: sudo is blocked in rootless test runs: sudo \$*" >&2 > +exit 1 > +EOF > + sudo install -m 755 -o root -g root "${blocker}" /usr/bin/sudo.blocked > + rm -f "${blocker}" > + # rename, as the running sudo binary cannot be overwritten in place > + sudo mv -f /usr/bin/sudo.blocked /usr/bin/sudo > +fi > + > mkdir -p "${HOME}"/.config/avocado > cat < "${HOME}"/.config/avocado/avocado.conf > [datadir.paths] > -- > 2.55.0 -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/9d5951d1d2a3c41267a5c6700f17397786966f10.camel%40siemens.com.