From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Thu, 10 Sep 2026 17:17:51 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-ed1-f62.google.com (mail-ed1-f62.google.com [209.85.208.62]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 68AFHoWF008139 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Thu, 10 Sep 2026 17:17:50 +0200 Received: by mail-ed1-f62.google.com with SMTP id 4fb4d7f45d1cf-6a9a1f8ec8bsf1647130a12.0 for ; Thu, 10 Sep 2026 08:17:50 -0700 (PDT) ARC-Seal: i=4; a=rsa-sha256; t=1789053465; cv=pass; d=google.com; s=arc-20260327; b=ikMJSPK7BQh7q8OaFJzJWCzgIcU0eTyPiT7rA7rWcq5If79M+r2b1osT04E2A3L71e 1Hm3NYBf9ls098k0GwfHKInszvsqMqBszQhRG7k/w2gR3PK3eTPP0v9aVPq8jdszPgXv BGwrAAGN3K4vQZW53eVC87p/ZLb15rPVLeM6qQSarOwJxdc1XT96VPN/2RUK+BpHKp7z j3z5u+uQOQvVuxZaqV8dUAidGet0VW4ad0BVauagozM6YHLnZTWzcGNVTMtdbiBVXkx1 Xb+UrJz6pRdXKSxQkegeXhzg0jP45XwSBioiprzu1yN0zzNb5bib6YQ1/hEKe0dJ9zcl 9FtQ== ARC-Message-Signature: i=4; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version :content-transfer-encoding:authentication-results-original :msip_labels:content-language:accept-language:in-reply-to:references :message-id:date:thread-index:thread-topic:subject:cc:to:from :dkim-signature; bh=EDD0T4bPkHaxu2PqsxWWcnCPlkBSadfkUgkfwHirYx8=; fh=t6EKjvwX2/K0l0AK9kwXMZDnrRVHgDeLcagHyLuVb4Y=; b=rJ5+ZfbUm9qCNDSBzhnQM+SDxmeBFWkpD64adD4W3trPHkTbCbp9hPaWJK/9dJJTPg tmpNdxLC/VD4gNygPpZ3sVbiZbcVoE8fGUQqGzPmsF55HoQaD148g2xbPKXl+4KBOB7N iGAjFfoErmEt1/lY648xy42o4s23PAUE0zn08iVpoeZhOTB8SKvTdQRnQG+an1rTS+sI qBhWVEkLB0Xy+UmjaT2BEg4UOXD5KFq9Yjv4vi1OnQlsjzxv3M4/g5l2FoaxcFFSx+Rn 7r/U+PyF5gVMT9wJCM+bkHEO1xFizLq22BAi3+jFGMeoH6roYtDDvOgtv5EbJNJiMcJg bgUw==; darn=ilbers.de ARC-Authentication-Results: i=4; gmr-mx.google.com; dkim=pass header.i=@ebs-group.io header.s=selector1 header.b=MHN9tU30; dkim=pass header.i=@ebs-group.io header.s=selector1 header.b=MHN9tU30; arc=pass (i=2 spf=pass spfdomain=ebs-group.io dkim=pass dkdomain=ebs-group.io dmarc=pass fromdomain=ebs-group.io); spf=pass (google.com: domain of ulrich.teichert@ebs-group.io designates 2a01:111:f403:c201::3 as permitted sender) smtp.mailfrom=ulrich.teichert@ebs-group.io; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=ebs-group.io DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1789053465; x=1789658265; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-transfer-encoding:content-type :authentication-results-original:msip_labels:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:cc:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=EDD0T4bPkHaxu2PqsxWWcnCPlkBSadfkUgkfwHirYx8=; b=fVD+raGefmCv+8vedO7z9k40serkfY3yP2pNGjYf8oBTYuUpXbInOg5J8vu1y42VMO h5UO0bb33KMILVAjhapxone2ht3JUPId0kXljPVreE5UAwmvC7JIq3mSh3v4WMia+pjx 40ecU2ym2ke+Gm6//CcLmn+p2vPhOVedPBynB2q2uh/GKsFO5hSsYtDs7WtcFvJSqWru mzaj4gxf4X+7a3hv2iOnZ2oKKmERpL2EIXRCd3Mp6q8Ul21RretZYMYryv7sOldKXBv5 g94nXKaEY73RqKVT6+fK8o97VF5mlCeYB2LP/cSZxZ5e9pzT43eGyld8glxFM2gFepI1 YlkA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1789053465; x=1789658265; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-transfer-encoding:content-type :authentication-results-original:msip_labels:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:cc:to:from:x-beenthere:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=EDD0T4bPkHaxu2PqsxWWcnCPlkBSadfkUgkfwHirYx8=; b=EcIAf00xCYXYrIT8Yvg1SfRKNaHtZ6oU/s+K6mDXDfVE1LCUYLf23gFQEj7XJSBab1 2UZn+im73J8GynWkoyYuCO3uer/+qFExJJoSuzy/FmU9WgZZsOS/txXZLY4wPvWYbAeL vvVdlg1Ay0Y56RNFyA02pqO4i1L9DIqQKOSrGVi+fGK9sIKdwesYL+Je3adga1pv9le4 z3zPWNhNMljM2Lfkcfx6ouw73uR80JmIrSmxE0IYawyb+0scvucJnzq+dxcf+RpWsxM1 yy6mgqzkwrk9KV4iL1Ce0LLKLzf9sBcolzjVBr6BK+KKS6++rCSPLRPAl96nxN3Kd2G3 rn1g== X-Forwarded-Encrypted: i=4; AKwUvBx6pZudqNnnQZxve5wNtkD7zYItzSf/FtJuoDo6B8beL9Z2aVjhecnTqN+B8N2V4aKlzUt4@ilbers.de X-Gm-Message-State: AFuF++n9KwHGUA3EAwyxfuS1GYG+v4jlYDaoyHvhCmgYvlB7K2wXwuay ZEwtxd3D3feZuukviiLPM+PA4laHgDqofJcjlhCDNsFqoX6lkfdrWswG X-Received: by 2002:a05:6402:4489:b0:6a1:7825:5230 with SMTP id 4fb4d7f45d1cf-6a99c5627admr3420965a12.16.1789053464787; Thu, 10 Sep 2026 08:17:44 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="ATskLdfYZb+UPTmCKu5zIZCdC3nLUwf2FzOrRRvfq32a0olaeA==" Received: by 2002:a05:6402:947:b0:69e:1229:70b2 with SMTP id 4fb4d7f45d1cf-6a9a2e1692fls1529525a12.2.-pod-prod-08-eu; Thu, 10 Sep 2026 08:17:41 -0700 (PDT) X-Received: by 2002:a05:6402:4489:b0:6a1:7825:5230 with SMTP id 4fb4d7f45d1cf-6a99c5627admr3420672a12.16.1789053461311; Thu, 10 Sep 2026 08:17:41 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1789053461; cv=pass; d=google.com; s=arc-20260327; b=khhv4faQjdA/+U3/6xEL60h4Zt+IAb4/YJyqHYUJ9UJrEl3xl5FsWhaaElXYEsYMUq n84gftD5/2MCKJNAfU8bfye/NoOgSU0DOROSkjvjx+OhqoDOFc/+YJSmEN/zJ/lHKYS6 Iz6AzJA9bxVomyfC4ZHUe73Fj7m1QJC0k6J0JvJIdi3mHS7hhhZ4E8QYfbu4Z5h5SLVA 0/1c5RPrvPDZKhVdG4i4HCaZL89M9M+1ogcMTTRmHHbxuYcfS/Y4yE/tsTADCtQQLLSa 4k0jK1OiI4AU4aDHf3JeXq41yJGeSxq99E9/ulMZkFGu50kHPG3BmoqxEGOq2FLUndbJ 6AHA== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding :authentication-results-original:msip_labels:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:cc:to:from:dkim-signature:dkim-signature; bh=xZc6dazEOUHHI7GuPD9xjaCVunbcxJuFG6bSADtRu6o=; fh=pnSC8ZNCRaA9gFY+/SH5szgGEn3+KCHuY8cDKdYYdBo=; b=KJtK68/59v7JPTWnRi74h2brw2FhN+Xx4UI7cJi6iqURmD/rl9AnJTPXckqdLy/nOf IGCB9GIgCek8LPzwPtCWzjHYncVG/1H12TBakr4pfQM/wm6iYGkZldSzCLHcx7XgdjHw uNSGRHiXUV65IUVhiABzfc98dqlub4bOYaqM+I1/XiPTjF7WcgauVYabcq9qbUZwZK2f S4EFre9OQ3APVGUQZHKq4Xc/ynsaD7JJcvNtGXZGCXHSggCTaRVCU5LtFC/n563RoGB4 NnJZOPtqjfzQ2EueyBYvfyExGv8yuw1SHQ4yKyvYltNa8+BGVuwIfmw9KSEBzblCsFEc nJqw==; dara=google.com ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@ebs-group.io header.s=selector1 header.b=MHN9tU30; dkim=pass header.i=@ebs-group.io header.s=selector1 header.b=MHN9tU30; arc=pass (i=2 spf=pass spfdomain=ebs-group.io dkim=pass dkdomain=ebs-group.io dmarc=pass fromdomain=ebs-group.io); spf=pass (google.com: domain of ulrich.teichert@ebs-group.io designates 2a01:111:f403:c201::3 as permitted sender) smtp.mailfrom=ulrich.teichert@ebs-group.io; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=ebs-group.io Received: from AS8PR04CU009.outbound.protection.outlook.com (mail-westeuropeazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c201::3]) by gmr-mx.google.com with ESMTPS id 4fb4d7f45d1cf-6a7e6890207si430944a12.8.2026.09.10.08.17.41 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 10 Sep 2026 08:17:41 -0700 (PDT) Received-SPF: pass (google.com: domain of ulrich.teichert@ebs-group.io designates 2a01:111:f403:c201::3 as permitted sender) client-ip=2a01:111:f403:c201::3; ARC-Seal: i=2; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=pass; b=SwjjYeePQwTFopoeeRPWA84Oo9riovd8mbOm8fcaFJ66PbWeB1BObNNVS9wzbHQ4a9TX9LBzzZMylWPyjWLDFF0yquLeZod7fWUnsmIGGPEYA5t+YMlu/G1V89naqeM5Zk5qmKQZQlrniwAETQ4dZzIBfAk5hYZmmrzzEkEV7lKwlk12FgvocRBR6/rrdVY1gEMKlWf0HGa6JtDqMxJIBVWXYPWkAq4ZuHt1r2cHRRFKJtuVb8oolC+jjkjavgewdv0pSpqBZPrgGcjceBVq5qOtn8yCE7coG+IwJNozi4Wd/b8QTkhMMq2DKP681V0mmygawPMvklq2bMiZnVFSOw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=xZc6dazEOUHHI7GuPD9xjaCVunbcxJuFG6bSADtRu6o=; b=ZzmUQrGuslVdEhUhm5DI30ec2/gZXJkWvaxuYzFwWQToyAMLRWzOxaFFaz0KsDyqwG+WhFWz0D/lB+tx8l29jysToi4lm89PXRUjYhegqEJkSluOpoQpjxuPwk9ouiRUvOrDnFpvEWcG6MdpNLaWRWGnrtirKIGFmXeLU7YEY930HCYf7yRioHYu595R6PGD90tMiT9V6y3SCdllc2SZh73T6H8rOiqtwFtln6EtUkty8vQRgvaNNrS9dmoTA+WmDtjB2VEHvONoUD5k9uf/2aj5Vsg28Z0grafF5oq3D34BuyKfCU9p+0uRo3Vm7Qut3oAR6kyVqc/dZo/RCFt9lg== ARC-Authentication-Results: i=2; mx.microsoft.com 1; spf=pass (sender ip is 94.140.18.226) smtp.rcpttodomain=googlegroups.com smtp.mailfrom=ebs-group.io; dmarc=pass (p=reject sp=reject pct=100) action=none header.from=ebs-group.io; dkim=pass (signature was verified) header.d=ebs-group.io; arc=pass (0 oda=1 ltdi=1 spf=[1,1,smtp.mailfrom=ebs-group.io] dkim=[1,1,header.d=ebs-group.io] dmarc=[1,1,header.from=ebs-group.io]) Received: from PAZP264CA0150.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:1f9::11) by AS4PR08MB8096.eurprd08.prod.outlook.com (2603:10a6:20b:58b::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.7; Thu, 10 Sep 2026 15:17:37 +0000 Received: from ZR1PEPF0000E462.eurprd04.prod.outlook.com (2603:10a6:102:1f9:cafe::4c) by PAZP264CA0150.outlook.office365.com (2603:10a6:102:1f9::11) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.406.8 via Frontend Transport; Thu, 10 Sep 2026 15:17:37 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 94.140.18.226) smtp.mailfrom=ebs-group.io; dkim=pass (signature was verified) header.d=ebs-group.io;dmarc=pass action=none header.from=ebs-group.io; Received-SPF: Pass (protection.outlook.com: domain of ebs-group.io designates 94.140.18.226 as permitted sender) receiver=protection.outlook.com; client-ip=94.140.18.226; helo=mfod-euc1.prod.hydra.sophos.com; pr=C Received: from mfod-euc1.prod.hydra.sophos.com (94.140.18.226) by ZR1PEPF0000E462.mail.protection.outlook.com (10.167.241.52) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.5 via Frontend Transport; Thu, 10 Sep 2026 15:17:37 +0000 Received: from localhost (ip-172-20-1-94.eu-central-1.compute.internal [127.0.0.1]) by mfod-euc1.prod.hydra.sophos.com (Postfix) with ESMTP id 4hghB905TbzCvxH for ; Thu, 10 Sep 2026 15:17:37 +0000 (UTC) X-Sophos-Product-Type: Mailflow X-Sophos-Email-ID: 2cad0a83e0654218aaa2ccd8640dbbd7 Received: from DB3PR0202CU003.outbound.protection.outlook.com (mail-northeuropeazon11020123.outbound.protection.outlook.com [52.101.84.123]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mf-outbound-eu-central-1.prod.hydra.sophos.com (Postfix) with ESMTPS id 4hghB75B00zKm4Y; Thu, 10 Sep 2026 15:17:35 +0000 (UTC) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=u0hPkZ8rbKaPUOrrxR58wjcttaov4lBiRGIOtclVUkKNxD1Cq18Bb670tlqFXOyAamNGxev7ZgojpsN3zOVPss0ugSa5+9CyZvWz4eKZ7VVwTsUxJQlXmkDm/Onpg9whJAsmyOvu4IWGklUTXZGnWOYWweD5jkMX9a2rQQ8cFKL74uKjB5fiz8cw19YCZ2pX4rcZT7BQTcE+OCvH26akmRBkEHbt9tNvQBrTFuQR6X8r+7romoTXgUC1VxK11A7hyOMsawUDjEA5ReUjXUd0Iarr/LUMXWYNiOk832ZCUSGrCCq5+aVI6rU7ZH/zgzBGdjZRJZ/OWOW86lUfbL8NlA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=xZc6dazEOUHHI7GuPD9xjaCVunbcxJuFG6bSADtRu6o=; b=JndshnnL9LzpAlNq/P41rBXuPqL7U6orHMQA7oTRSoYrdUH4mourd8y8RUi6ehf/rO29IxfLaqku6XFHMms11hUvjulThh9p9C79E8SI59Om94y3cC3A0iiSI/ygYbKnn34af6SbmsUtjO30k86buPpGEUYRO+M9KVI5y42GVp1l9sGq0RN86nJIz5f/fNFlBkZYRYD4QLp9H6EepaDXY+eCvF5PXRNSt/9xZOfb/GZZerSxQ3CW6oJnCG4efYaBfZS1d5I/AI78j3Z9rEYFOz8eISS2b2DSBWGEP6Kp5WSotQN1ynaQ60IB05CtncMTtdJO7hm6qUdb3TK4vEfzqw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ebs-group.io; dmarc=pass action=none header.from=ebs-group.io; dkim=pass header.d=ebs-group.io; arc=none Received: from AS4PR08MB7455.eurprd08.prod.outlook.com (2603:10a6:20b:4e6::10) by DU0PR08MB7881.eurprd08.prod.outlook.com (2603:10a6:10:3b3::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.428.4; Thu, 10 Sep 2026 15:17:32 +0000 Received: from AS4PR08MB7455.eurprd08.prod.outlook.com ([fe80::90a4:b608:3222:557a]) by AS4PR08MB7455.eurprd08.prod.outlook.com ([fe80::90a4:b608:3222:557a%3]) with mapi id 15.21.0406.002; Thu, 10 Sep 2026 15:17:32 +0000 From: "'Ulrich Teichert' via isar-users" To: "isar-users@googlegroups.com" , Felix Moessbauer CC: "jan.kiszka@siemens.com" , Clara Kowalsky Subject: Re: [PATCH 1/1] isar-check-rootless: check parent dirs are world executable Thread-Topic: [PATCH 1/1] isar-check-rootless: check parent dirs are world executable Thread-Index: AQHdQTLPnJYS1qr2WUmLEXA4KAsLHbbH6WAN Date: Thu, 10 Sep 2026 15:17:32 +0000 Message-ID: References: <20260910144327.775731-1-felix.moessbauer@siemens.com> In-Reply-To: <20260910144327.775731-1-felix.moessbauer@siemens.com> Accept-Language: en-150, en-GB, en-US Content-Language: aa X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: Authentication-Results-Original: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=ebs-group.io; x-ms-traffictypediagnostic: AS4PR08MB7455:EE_|DU0PR08MB7881:EE_|ZR1PEPF0000E462:EE_|AS4PR08MB8096:EE_ X-MS-Office365-Filtering-Correlation-Id: 6f9e5e58-e3c2-42b0-3024-08df0f4ea5d3 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam-Untrusted: BCL:0;ARA:13230040|23010399003|1800799024|366016|376014|10067099003|4133799003|18002099003|22082099003|56012099006|38070700021; X-Microsoft-Antispam-Message-Info-Original: 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 X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AS4PR08MB7455.eurprd08.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(1800799024)(366016)(376014)(10067099003)(4133799003)(18002099003)(22082099003)(56012099006)(38070700021);DIR:OUT;SFP:1102; Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Exchange-RoutingPolicyChecked: Ai7UrsAQZr6HwA5aKT3RAXY9wxmSxEqStCA3J4Z/LsH06B42p7BjBVr7agVDfE25XJB2f/inEDflamGFaMkjtrqwcdc1pA1oJ+JIkZLIWqtTidhXTaU3XeD7Ld+svNBwfMJsq2vFRTtedagLO0U+YyKDkrUyoZPj9AWcK4qL3YVga/8ESyLP3lF2jNLiMMZdbJkwLsShPGiPtV1M6s9paLdQacPuPf+ox79vlRctlwYmVoI4NmhtwAq+O49t+LBAK2kMvYpsuFfjsH0VIJJtmFDBH+N9l8nvpvYazCseSM0etHUKIyVqVuVhRXWn0tuF7G07wI7Eyh+dG9WdGaH6Eg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU0PR08MB7881 X-Sophos-Email: [eu-central-1] Antispam-Engine: 6.0.3, AntispamData: 2026.9.10.22719 X-Sophos-Mailflow-Processing-Id: e6ab0a2210a14b10a988b648ff214245 X-Lased-Spam: NonSpam X-Lased-Spamprobability: 0.083173 X-Lased-Impersonation: False X-Lased-Hits: ARCAUTH_PASSED 0.000000, BODY_SIZE_3000_3999 0.000000, BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_7000_LESS 0.000000, CTE_QUOTED_PRINTABLE 0.000000, DKIM_ALIGNS 0.000000, DKIM_SIGNATURE 0.000000, HTML_00_01 0.050000, HTML_00_10 0.050000, IN_REP_TO 0.000000, LEGITIMATE_SIGNS 0.000000, MSG_THREAD 0.000000, MSG_THREAD_SOLO 0.000000, MULTIPLE_RCPTS 0.100000, MULTIPLE_REAL_RCPTS 0.000000, NO_FUR_HEADER 0.000000, NO_URI_HTTPS 0.000000, OUTBOUND 0.000000, OUTBOUND_SOPHOS 0.000000, REFERENCES 0.000000, SINGLE_URI_IN_BODY 0.000000, SUSP_DH_NEG 0.000000, TO_NAME_IS_ADDY 0.000000, URI_TOC_SOPHOS_NO_ID 0.000000, URI_WITH_PATH_ONLY 0.000000, __ANY_URI 0.000000, __ARCAUTH_DKIM_PASSED 0.000000, __ARCAUTH_DMARC_PASSED 0.000000, __ARCAUTH_PASSED 0.000000, __ARC_SEAL_MICROSOFT 0.000000, __ARC_SIGNATURE_MICROSOFT 0.000000, __BODY_NO_MAILTO 0.000000, __BOUNCE_CHALLENGE_SUBJ 0.000000, __BOUNCE_NDR_SUBJ_EXEMPT 0.000000, __BULK_NEGATE 0.000000, __CC_NAME 0.000000, __CC_NAME_DIFF_FROM_ACC 0.000000, __CC_REAL_NAMES 0.000000, __CP_URI_IN_BODY 0.000000, __CT 0.000000, __CTE 0.000000, __CTYPE_CHARSET_QUOTED 0.000000, __CT_TEXT_PLAIN 0.000000, __DKIM_ALIGNS_1 0.000000, __DKIM_ALIGNS_2 0.000000, __DQ_NEG_DOMAIN 0.000000, __DQ_NEG_HEUR 0.000000, __DQ_NEG_IP 0.000000, __FORWARDED_MSG 0.000000, __FRAUD_MONEY_CURRENCY 0.000000, __FRAUD_MONEY_CURRENCY_DOLLAR 0.000000, __FROM_DOMAIN_NOT_IN_BODY 0.000000, __FROM_NAME_NOT_IN_BODY 0.000000, __FUR_RDNS_SOPHOS 0.000000, __HAS_CC_HDR 0.000000, __HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REFERENCES 0.000000, __HAS_X_FF_ASR 0.000000, __HAS_X_FF_ASR_CAT 0.000000, __HAS_X_FF_ASR_SFV 0.000000, __IMP_FROM_MY_ORG 0.000000, __INVOICE_MULTILINGUAL 0.000000, __IN_REP_TO 0.000000, __JSON_HAS_SCHEMA_VERSION 0.000000, __JSON_HAS_TENANT_DOMAINS 0.000000, __JSON_HAS_TENANT_ID 0.000000, __JSON_HAS_TENANT_SCHEMA_VERSION 0.000000, __JSON_HAS_TRACKING_ID 0.000000, __LINES_OF_YELLING 0.000000, __MAIL_CHAIN 0.000000, __MIME_BOUND_CHARSET 0.000000, __MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000, __MIME_VERSION 0.000000, __MSGID_32_64_CAPS 0.000000, __MULTIPLE_RCPTS_CC_X2 0.000000, __MULTIPLE_RCPTS_TO_X2 0.000000, __NO_HTML_TAG_RAW 0.000000, __OEM_PRICE 0.000000, __OUTBOUND_SOPHOS_FUR 0.000000, __OUTBOUND_SOPHOS_FUR_IP 0.000000, __OUTBOUND_SOPHOS_FUR_RDNS 0.000000, __PRODUCT_TYPE_MAILFLOW 0.000000, __REFERENCES 0.000000, __SANE_MSGID 0.000000, __SCAN_D_NEG 0.000000, __SCAN_D_NEG2 0.000000, __SCAN_D_NEG_HEUR 0.000000, __SCAN_D_NEG_HEUR2 0.000000, __SINGLE_URI_TEXT 0.000000, __SL_HEAVY 0.000000, __STOCK_CRUFT 0.000000, __STOCK_PHRASE_7 0.000000, __SUBJ_ALPHA_END 0.000000, __SUBJ_ALPHA_NEGATE 0.000000, __SUBJ_REPLY 0.000000, __TO_MALFORMED_2 0.000000, __TO_NAME 0.000000, __TO_NAME_DIFF_FROM_ACC 0.000000, __TO_NO_NAME 0.000000, __TO_REAL_NAMES 0.000000, __URI_IN_BODY 0.000000, __URI_MAILTO 0.000000, __URI_NOT_IMG 0.000000, __URI_NO_PATH 0.000000, __URI_NO_WWW 0.000000, __URI_NS 0.000000, __URI_REDIR 0.000000, __URI_TOC_SOPHOS 0.000000, __X_FF_ASR_SCL_NSP 0.000000, __X_FF_ASR_SFV_NSPM 0.000000 X-Sophos-MH-Mail-Info-Key: NGhnaEI5MDVUYnpDdnhILTE3Mi4yMC4xLjk0 X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: ZR1PEPF0000E462.eurprd04.prod.outlook.com X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id-Prvs: 42d048e9-2b9a-4b8c-bfe6-08df0f4ea2b6 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|35042699022|14060799003|376014|1800799024|36860700016|82310400026|4133799003|10067099003|56012099006|18002099003|22082099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:94.140.18.226;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mfod-euc1.prod.hydra.sophos.com;PTR:mfod-euc1.prod.hydra.sophos.com;CAT:NONE;SFS:(13230040)(23010399003)(35042699022)(14060799003)(376014)(1800799024)(36860700016)(82310400026)(4133799003)(10067099003)(56012099006)(18002099003)(22082099003);DIR:OUT;SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: CY+bkVkGS6/H0DkovYXvSSnLsP5I7OHU3wRZ8LlxUNq156Mipi2HmkVd3exN9toLqACdtZ8ny089Sz8ORStMmw4ViSDvAFTDfb84mPExbmCA9kJN2VSw/vGlsRdWy1li9MXx0fqZ03j8apcfNos3pEkjULIZ+9p/rrRcritwEYfxvhzdSPjpmyEMuwmY9pcKb25+LZHdnNSJaAshlektg2cDPKB5yW1Px0ivPFde4odSZi2880K5xATXTVou+nAcrv7FPoOgf980SdGmzbhUoZUMuo5wb3QEguVNxzyusepXY8iFoqiuaWgdu/XgSbC0iW9ipRTf7BoCXM7CfCBWuAVwsic3HOIv6+4mENo8Z5kXdkgdSqhQy4ka40AYIvTLiW5aBZ7cKo0CKfspFyMURgSZXIMUEQCHAyi++CfhBP+PRwIcf0zzDyq9nTVH1ebW X-OriginatorOrg: ebs-group.io X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Sep 2026 15:17:37.3111 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 6f9e5e58-e3c2-42b0-3024-08df0f4ea5d3 X-MS-Exchange-CrossTenant-Id: 13b9f609-a951-4002-81cb-a1efd8f52deb X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=13b9f609-a951-4002-81cb-a1efd8f52deb;Ip=[94.140.18.226];Helo=[mfod-euc1.prod.hydra.sophos.com] X-MS-Exchange-CrossTenant-AuthSource: ZR1PEPF0000E462.eurprd04.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS4PR08MB8096 X-Original-Sender: ulrich.teichert@ebs-group.io X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@ebs-group.io header.s=selector1 header.b=MHN9tU30; dkim=pass header.i=@ebs-group.io header.s=selector1 header.b=MHN9tU30; arc=pass (i=2 spf=pass spfdomain=ebs-group.io dkim=pass dkdomain=ebs-group.io dmarc=pass fromdomain=ebs-group.io); spf=pass (google.com: domain of ulrich.teichert@ebs-group.io designates 2a01:111:f403:c201::3 as permitted sender) smtp.mailfrom=ulrich.teichert@ebs-group.io; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=ebs-group.io X-Original-From: Ulrich Teichert Reply-To: Ulrich Teichert Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: c8pFXDvHawSc Hi, >From: 'Felix Moessbauer' via isar-users >Sent: Thursday, 10 September 2026 16:43 >To: isar-users@googlegroups.com >Cc: jan.kiszka@siemens.com; Felix Moessbauer; Clara Kowalsky >Subject: [PATCH 1/1] isar-check-rootless: check parent dirs are world exec= utable > >When using mmdebstrap with the unshare backend, all parent directories >of the TMPDIR must be world executable. This requirement is documented you mean that all parent directories need to be world searchab= le, by setting the S_IXOTH access bit, right? >in the mmdebstrap man page, but when not fulfilled, mmdebstrap fails in >colorful ways. > >To indicate what is wrong, we add a check to the isar-check-rootless >script. > >Reported-by: Clara Kowalsky >Signed-off-by: Felix Moessbauer >--- >PS: The corresponding kas patch is here: >https://eu-central-1.protection.sophos.com?d=3Dgoogle.com&u=3DaHR0cHM6Ly9n= cm91cHMuZ29vZ2xlLmNvbS9nL2thcy1kZXZlbC9jL1BaaWhZQkFtbENRL20vdFhrSzBQNzdCQUF= K&p=3Dm&i=3DNjg1ZjQwODk0ZjExMWE2MTRhMzZlYTVh&t=3DMUg3ZnNlRGlyQmVnWm1VODZ4Wm= llMURXeUN6eDB5dFU0LzlNTjJXL3lyaz0=3D&h=3Dbfebb46f6bd343faad9aade498e5e633&s= =3DAVNPUEhUT0NFTkNSWVBUSVbIcQJfcQqDP5O5j04WOwCo19UVlhqc_xWW892xDBS3QPUnhUsR= r8ErpwgATazXqj9NIytE57svt3NJ-oa9ycVY > > scripts/isar-check-rootless | 33 +++++++++++++++++++++++++++++++++ > 1 file changed, 33 insertions(+) > >diff --git a/scripts/isar-check-rootless b/scripts/isar-check-rootless >index b5197111..de96aac7 100755 >--- a/scripts/isar-check-rootless >+++ b/scripts/isar-check-rootless >@@ -20,6 +20,35 @@ fi > > [ "$verbose" =3D 0 ] || echo "RUN_PRIVILEGED_CMD: $run_privileged_cmd" >&= 2 > >+if ! tmpdir=3D$( \ >+ BB_ENV_PASSTHROUGH_ADDITIONS=3D"${BB_ENV_PASSTHROUGH_ADDITIONS} IS= AR_ROOTLESS" \ >+ ISAR_ROOTLESS=3D1 bitbake-getvar -q --value TMPDIR); then >+ echo "error: cannot determine TMPDIR from BitBake" >&2 >+ exit 1 >+fi >+ >+[ "$verbose" =3D 0 ] || echo "TMPDIR: $tmpdir" >&2 >+ >+failed=3D0 >+fail() { >+ echo "error: $1" >&2 >+ echo " likely cause: $2" >&2 >+ failed=3D1 >+} >+ >+# mmdebstrap in unshare mode populates a temporary directory below TMPDIR= as a >+# subordinate user. That user can only reach it if every ancestor of TMPD= IR is >+# world-executable (see mmdebstrap(1), TMPDIR). Same nitpick remark here >+dir=3D$tmpdir >+while [ "$dir" !=3D "/" ]; do >+ if [ -e "$dir" ] && \ >+ [ -z "$(find "$dir" -maxdepth 0 -perm -0001 2>/dev/null)" ]; th= en >+ fail "'$dir' is not world-executable" \ and here >+ "a restrictive parent directory (e.g. with 0700) p= revents the unshared user from reaching TMPDIR" >+ fi >+ dir=3D$(dirname "$dir") >+done >+ > if ! ${run_privileged_cmd} /bin/sh <<'EOF' > failed=3D0 > >@@ -48,6 +77,10 @@ if ! ${run_privileged_cmd} /bin/sh <<'EOF' > exit "$failed" > EOF > then >+ failed=3D1 >+fi >+ >+if [ "$failed" !=3D 0 ]; then > echo "error: unprivileged rootless builds are not supported; see t= he checks above" >&2 > exit 1 > fi >-- >2.55.0 --=20 You received this message because you are subscribed to the Google Groups "= isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/= AS4PR08MB7455B64FA1D9720033122A57C3BF2%40AS4PR08MB7455.eurprd08.prod.outloo= k.com.