From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Thu, 10 Sep 2026 17:58:39 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-pl1-f186.google.com (mail-pl1-f186.google.com [209.85.214.186]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 68AFwXT0008340 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Thu, 10 Sep 2026 17:58:34 +0200 Received: by mail-pl1-f186.google.com with SMTP id d9443c01a7336-2cc73f47bdcsf93996395ad.3 for ; Thu, 10 Sep 2026 08:58:34 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1789055908; cv=pass; d=google.com; s=arc-20260327; b=ElIKVY88xf5UyHvT5kD2G8VV/8fc3o2Oha7fev0UOpuo4b4GL1uydcU7/D7wsUPJjE ISbEDT3+6x2s27kiM6HmNo2jx5lcl89IfkQ+9X5gA5A3WvecbzCBrF07/sT506ayYB21 +2a3upfCcdvurvw0etLpgQ1u+FnidPqZENFwFAD2pwg5UoYGrfAb0BCB8DMPRiFc7K/e a4Dp/Lc/0VZZX+jIhMF/WdD78g05lqIxma7pGkpJq+L5hL6KAxEWy0j2PM6rUGJWJIHH uNbB487opNVpOkRC4gW2jICYR4Tpqzb09uRUuRbRC+MtDcA/MkEMl8AdOLCEodZpNRVo Gb/w== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version :content-transfer-encoding:content-id:user-agent:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:cc:to:from:dkim-signature; bh=ENWLXT8klHwy5XdoJl3b3Q2sm1G1EzShbv7FkGvzJwY=; fh=1CMwPUVENA1/FjLUA4mmAHuV//8C80SyOatmAJTEGG8=; b=i2LCH+FOY0tBDERaRylaEocI5mWv6Pzq3nrNh9+Qc1OlrZeG88EHelM2l8MI7zJnv8 Mn8KH2FQXB3anvj3lNN26PBUo0tHj13Db7UY4YZNsEWS0fOndFI0tUOOrEmaRbikNaIM 5uISXXh5R7+sl8lgNwwYtlfWGhH6xl0KahtGiPlhE9a98Lf3sw2D23aQluo1owlWJFGF Z0Jc0asGfPcD4VyCCC9/JeTLZqSTDvV7T2DDR/QZ3sYxQ7z+oeFWk+kM4ynXZ+Yjd2PI cfgYbDu4zSzfNjuf016RflHtFqrxgKhDP4DzflYKfAIPDK2YEc9nmWjkg9XfKikQyd+Z v1rQ==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=s74FHwrs; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c20f::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1789055908; x=1789660708; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-transfer-encoding:content-id:content-type:user-agent :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:cc:to:from:from:to:cc :subject:date:message-id:reply-to:content-type; bh=ENWLXT8klHwy5XdoJl3b3Q2sm1G1EzShbv7FkGvzJwY=; b=dJOG/YY2FqEVv0nvO/9ZH3r5oHMXVf+iQgFj0BHScHyL1wTAltPhnR+48zuh5gF/4o UB4uyJIW1RUqm1dLd3/kMRv1q5o/2RR3Cz+CPwLiu0XRzOd0V+ZsoTUTFkItG5EM4gyc 9sf19UEQ7Kr8aMtAEay0AYraW+DjIrEcVMJIO9nvRx6MpAjuyo1WIuW0y8ucgjC7GJVk I3c5eYbGbLGlDoJfyTLk1ODKGocNJCIRuuCOx7myzhj+J+4/XGEHHFxsm1IOLiaN8waZ jTmYxN+Z8XH0cdIPmAYAxOLJgfIvJMynUwht5ytYNm2Qh/Mf9j0Hu0CbZsgrmDy/a/IM Lubg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1789055908; x=1789660708; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-transfer-encoding:content-id:content-type:user-agent :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:cc:to:from:x-beenthere :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=ENWLXT8klHwy5XdoJl3b3Q2sm1G1EzShbv7FkGvzJwY=; b=Rn6E4mMkEWDqw5D8tMvyAQsBZunLST2NIurjH2xyTqYo8IUE2auazY2c/U5UM+5Wdt 05Zycys+ja37W44aAwGtHWllHsv/tZ+2OcSOFnUz4JDVScp4Yk52rxOi2nXDfp1PB9yq Ev7wXMN3r7rapQVE2Oz5wZQmqzBCsdU67UMBmMILrP4olr1efCCrkd1UblTZ1dUf7EF2 7FWWGvG7PhPWi0XwvWanRD5MM1ZClwpQUMnWmJ/czPKQqUmhfRTodnGPONjqw9p9jV/S WVMDiFrqFhcV8cbMLBGqAUJTGraykrgFteLkrOq2pfeyb6uSvIYIpDDMHsphBW0k4rL4 n0TA== X-Forwarded-Encrypted: i=3; AKwUvBxqM7btDTJPMMHlMvIDz+XzI68GYLytg1EdMdd3EgsZFc7rGxE/heiQGvVG1gHHAbPk/IMu@ilbers.de X-Gm-Message-State: AFuF++lVV7P4R7KioXqEZQ7w6L8WXFJ1xgdUlhm8BeSgLGCiRCwhoaeC LYvOZcMQTAA+ywsAhWd9pLo6Chtn7w8iZDzPZS542flO47IL4zjqCyS/ X-Received: by 2002:a17:903:11c5:b0:2d8:d4d3:da4e with SMTP id d9443c01a7336-2dd2a455122mr398165ad.18.1789055907701; Thu, 10 Sep 2026 08:58:27 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="ATskLdeNN1BX2TRc0KggRW8kMzQHbB1ACUGLtI62sC4ci3NxWA==" Received: by 2002:a17:903:324c:b0:2d9:4ed3:b182 with SMTP id d9443c01a7336-2dd0dbd6885ls21563835ad.0.-pod-prod-02-us; Thu, 10 Sep 2026 08:58:25 -0700 (PDT) X-Forwarded-Encrypted: i=3; AKwUvBw1CcbYeKDApRZo2jjEFF27zbSTbSctFQxkrPTxLfygRXt3PiRo6jcMzyvQWCrPNeF5WZPaEFe0aSu4@googlegroups.com X-Received: by 2002:a17:902:f60e:b0:2d9:33d4:a910 with SMTP id d9443c01a7336-2dd2a1d526amr1520365ad.4.1789055905246; Thu, 10 Sep 2026 08:58:25 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1789055905; cv=pass; d=google.com; s=arc-20260327; b=csKfUl79tyZxj1haLF0LtA3q6XYqwr7ZPSPDlfz5ArWBsbNJnfal3Z4TOiIjwyaMF2 WiY5Y5K997BXVR2gTlBZ+iUxAOBNFkQ0OWdaqnHpgkIiANUffW8xSrwkKHAaevN29aLG AXNXT+aOz+5MxT6di6W7UF9NZ3+1p9zL7wB3KhNyd4m1nXSroMyzvX6vAMmbSAsL9+zO XKmCIoto8gljxQAnuGhGMkYv+OtcCWVWwW1oYg9S5jl5DdxmCOnP1P+qdypYLkv/pZ7e 1i0Ct9M9XIp38Xlr7+4tDPOPDwkDmrRPr0T5jEVnE7ySKUTiFkxMUo2dkxzqOsWxeI9d UoFQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:content-id:user-agent :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:cc:to:from:dkim-signature; bh=F9eknBNjbrFPqx8mvPLdqaCzkDz6lLm3vhTML6KkkF8=; fh=5/QEz7LrUQdo0QI6+M7kksTatP1fdPsROCP+ZCqNj4o=; b=RcrVtvpWZNgQsy+TGY9+1exBWJB4FZxdJEAz14Eg+Z6LEGg0TU7+h+qnxF/tqe0Fvn yhJW8poYYTUIA2TayHq8Ebz5m3mXGCXpjnlgFne/g7zHfVae3IaBz3uNupkQBlJT7gRV l161KZA2RtEYvhC93CWEYX5VB4wkcd5ewhsEGfqCC5J5UvJZf4ZBnLF/0jPJZS+XRk4l JW+fWS7qUFooG7OUbCjtIw+Lmfp2r5vgpMpDR7TDVVxF8AG3UF3LBVu/pUmIUSOOCw9P t64Cs/7e3FZfRvkPo0HFHIAmIVTdgqIdGH9m1F3Znor6kX4zC8dQOF0etZ5T0r5z85jf Wl+Q==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=s74FHwrs; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c20f::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from OSPPR02CU001.outbound.protection.outlook.com (mail-norwayeastazlp170130007.outbound.protection.outlook.com. [2a01:111:f403:c20f::7]) by gmr-mx.google.com with ESMTPS id d9443c01a7336-2db1491e5e9si6941065ad.5.2026.09.10.08.58.24 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 10 Sep 2026 08:58:25 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c20f::7 as permitted sender) client-ip=2a01:111:f403:c20f::7; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=IxfWT48nZaOnhaVDXdcOtUx/INNAWKxGjh31L3nmYGI8EsF671iy/695BTjJi15kmNh+LfU6lG2jlpMR/P6MNuLrLK9h7Lo7qYJabmQlDAJ5bjoDuuEMnPBq0pHJl6vjnuCaDrcy+RZvQ3Fr26oDYkVVSEw8NbmWrZiN1ps49T1t9JWgUuGckVnmY3pZgCHjg/YqeCAaqXOJE3EkDBA1kz7cV7sqV480RdLlBTCoqFybmtsLCfSvStlq69E7ZVYBjGjOaQPzsQBir5iUhAcILJlFcB503zF/Kf0aKxQz/mzsPsnI0RNmCJzPZck8mHi2bA6D6/ssC2kGWQfbdTfAWQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=F9eknBNjbrFPqx8mvPLdqaCzkDz6lLm3vhTML6KkkF8=; b=wR/pTndOW5BJ6Gur8LLXTwsT0CDhF1TpO4nXd/jW/Fa+p8jVfV4YMdVOrHninfm0s2dy/RawzspiQZUuL58dOruyQlNWDVKHItlrtH/VeuRRGd9vquh9fR9nRehb9WxUgDekdgXBjC7HUdxc35dgVEEg2T/V620nT/U92uI07ax2XlLFR00CmS1ijcPbpTXVSMLiP4xDgzQsVIMvXiEe7V+mpBgz8VAdFJBKJX48CWCRckzzizW7YPIVGGCmA1LIOaH8bPtW6ZrJWR0LqDYDqX8n1vIZQjyfIXtS80ka17mq7Fjfn6B3oJaH5HSTjQEk3288nGgTRyhe5ruPkxQVIg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by PAVPR10MB7403.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:102:31f::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.9; Thu, 10 Sep 2026 15:58:21 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%6]) with mapi id 15.21.0406.007; Thu, 10 Sep 2026 15:58:21 +0000 From: "'MOESSBAUER, Felix' via isar-users" To: Ulrich Teichert , "isar-users@googlegroups.com" CC: "Kiszka, Jan" , "Kowalsky, Clara" Subject: Re: [PATCH 1/1] isar-check-rootless: check parent dirs are world executable Thread-Topic: [PATCH 1/1] isar-check-rootless: check parent dirs are world executable Thread-Index: AQHdQTLCICiSS2gjekqQLlvQMRdeK7bH7JoAgAALaIA= Date: Thu, 10 Sep 2026 15:58:21 +0000 Message-ID: References: <20260910144327.775731-1-felix.moessbauer@siemens.com> In-Reply-To: Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.56.2-10 x-ms-publictraffictype: Email x-ms-traffictypediagnostic: AM7PR10MB3956:EE_|PAVPR10MB7403:EE_ x-ms-office365-filtering-correlation-id: 26ab8a5b-0318-4d73-cbae-08df0f5456ce x-ms-exchange-atpmessageproperties: SA x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|376014|23010399003|366016|10067099003|4133799003|55112099003|18002099003|22082099003|56012099006|4143699003|11063799006|38070700021; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(376014)(23010399003)(366016)(10067099003)(4133799003)(55112099003)(18002099003)(22082099003)(56012099006)(4143699003)(11063799006)(38070700021);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?RGFkK3F2c05uUFZTVUlEa3R3NmdKTGlSMjExS0NicVRZYjZ2V0ExQ3VHbG9G?= =?utf-8?B?YTYyNXh2d0wxUjBiaEFkVTZjYm01czRsQXlqNHBZL25CSndrbS9WZi8yc3Iw?= =?utf-8?B?MXRGU2VEWEZjQUVVSmNESzlaMndxS3JjMkdOKyt2MDNUKzFzdHhOdG9teW1E?= =?utf-8?B?NTMxbThhdGJFVk1vZlNmdElDWnBBQjJ1cW5oOWRpVm13V0kyZ3N0Qyt6bnZE?= =?utf-8?B?STRraGR2MjBJc1hOMi8vc0lhakxYcEh6WlgyNEIvOGdlRUx0dk5JTFRFeXh6?= =?utf-8?B?S0JoRTcyVk9jVitFRkc4dVMrNlp1QndER3dRQlRFNmlIWm9KYWk3bUFEVzZK?= =?utf-8?B?b1R1NjRiRkJoRzg4dEhCYlJEQUNna0JrNStBNklqTjN1YWQrc09uLzNnS3k3?= =?utf-8?B?N2ZXUHNSck43SURlRU4rSGNybHBRVTV2eENlbW00cVlxbUtpVTRFelg3MnAw?= =?utf-8?B?Y1JWODFMYVh0WlpDclRkNmljb3R5a0s5LzR2UStUdkdYOEZ6YVhxdFhFSk00?= =?utf-8?B?QjV6U0RnaWdVRmp4QlE0MEsrQzV4SjZPWHNRaUwyS2RFL0xPZmtXVGZFNGxP?= =?utf-8?B?ZGNSUWkzcUw4enZJU1NBbFJtcXdVdTZNQ09MZndoU3FtR0phNHJHQ2MvcmEy?= =?utf-8?B?R3RVMDNIcHA5Q2FBL2ZjcTZjdUw3ZHltc25ZVTA2djI5Qnc4R2tad2VBeTAv?= =?utf-8?B?alRidFZ0Qi9VVU9FNkhIMU9xM3F3RG8vamR6ZW5hb0F3MjlxQjRSa0JFa0g5?= =?utf-8?B?K3VmY3c5R1pJWEU4QWNFZzVSMWJjODBWWHA1WFVnb29tcGVOU1NMdWZCSDFx?= =?utf-8?B?a1k4RGdpUzNISTRzT2VmQjVPYW43U2dxR0dZSE56RENFdVhMOGg5QTNFM2tL?= =?utf-8?B?eTR6Tk5sQ1A2UGlYK0NvSEZ0ckpxaUNKbTZsbHE1UFQ2SytFOGdwU1RSNDFW?= =?utf-8?B?U3lLN2VJdmphMnVyWFpCaFpndFFYQk9zSVQ5T2JmQnlFQzVoazlhYS9aYjNx?= =?utf-8?B?aXBQZW1qRlZaUFUyWU9OZno2dDdtZ0ZlS1RzdndVZUFpY2NFWi9TTGRMOUFJ?= =?utf-8?B?UTBuWUhRNzhuV3FYRUtuYVNucTQ3SDh0L1RtQnVRKzRMcUJYL2JvSm5aUXVx?= =?utf-8?B?Q2hQOXlpM3U1TXptSS9PVEJCRGpTSzVUWFJ0UE1FNkZXK2t0c3JxTlZhekdz?= =?utf-8?B?OFN1OUE0T29YNkM3NDE5WTVFUGRmYnJxeUVwQThlMXc2MEptNHdLR0F0TGdS?= =?utf-8?B?OU1JWjNuSjJ0cEtCL2E4bkNDWkw1MWZsQ2JnWHY2V2dOaGp6b1MvMDQ3WVF1?= =?utf-8?B?Rzd5NC90azgwcEtxMHpib0VrT1Z4ZlY2NU1yMVdWcjBRbmEyMjFyZGI3dW1N?= =?utf-8?B?UjZCVGlmYm1SM29zL2dodHAyTEFSM1p3YXBqK1RpS2RKU21kMFF0K0h3Y3Jn?= =?utf-8?B?dzhGS3FNRWF3dHZJcnVDakk4Rmlab1hTRHpJYjRtNVgzOW44Ung2Mm1FYmt2?= =?utf-8?B?bjFIZzVDTVE0YW5uNk9rZ2VsVmJMQm1EMHA0cGNBR1p2VHV2V0RJRzlhTFVR?= =?utf-8?B?amdSOTJVN0k2ektFcU43dWs0dWFQV3RGZmx2UjhFMUVJeDRheW5mL2RrdTIx?= =?utf-8?B?RUloV2dyUks2UXJjUFhGVkxJOThPZSsxUnk5MzRFSnNOSUVMbitDaUMrbGox?= =?utf-8?B?WStveC9adStMRGlqWUdGcUlMNFpsZkw5NVlMOVZMZVJjNlZqMWRod2tCa1BE?= =?utf-8?B?M2loN21WaW9Pem9DMys2NU9VTGRuRkpvMHJsNS9hZEw4K0g5bUNwL0VOR0lL?= =?utf-8?B?N29rRU1ZajhuQXN0N2dxZGRBNlF4QTJHaHc5U08wM0xiYUFVbnlQYllYQmIw?= =?utf-8?B?bkZoUHB1T0EzYzV1MlZmOXE5bGViRHgvdmJ3eERBdWJhZTJ4UDExbFhVY0Zj?= =?utf-8?B?c2w0ZThzbEtTb0JQeDFhWHR2VzMxYU1yUGRYT1VQTW9PUHREeDFVaG9HSnpy?= =?utf-8?B?MkZDTDNJdjc2NnhQcVl6V2VNUExGekxhNzh0dVBLMERyaFlvVDg2TUNEWTZD?= =?utf-8?B?b1Radmo3Z28xMU9HM0dkT3htNEFhN201eldBUmRPSVdyR0lPT3ZOUHdwZm5s?= =?utf-8?B?RGZmMk1jUEZmcC9QYjcxOHRsWEVZSXNxRUpPN0FOU0tQeFdwV1BTSXhuS0Zq?= =?utf-8?B?dFgxeWJ4cWlETDExSkVIY3NTUGNYSUtnWGlIdGp0UEQrY1dzOVZEMVZEOERs?= =?utf-8?B?Y1lwVTk4TkJsM2tLT1JnRDRFV1RvTmY5ZDRlR1hsTHZQWStmL3FRb3NmYlYz?= =?utf-8?B?cWRTR1VRR0JrL3lDZXphQkgyUy9lbDhqTTJFY2JrbEx5aCtGMmU0dz09?= Content-Type: text/plain; charset="UTF-8" Content-ID: <802FCA206215DE40921115AB4C0C8776@EURPRD10.PROD.OUTLOOK.COM> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: 26ab8a5b-0318-4d73-cbae-08df0f5456ce X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Sep 2026 15:58:21.7380 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: sLdvma/TcIeqv4lu4lTf0odIPwDkesTAtjr0KxPvLG2Of/yLY9ZDgvleTFiSQJ74Fsl/XPItpvqnltnVQ3nbhpFIC6pCkYMVwf5/wgJ2o2M= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PAVPR10MB7403 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=s74FHwrs; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c20f::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: "MOESSBAUER, Felix" Reply-To: "MOESSBAUER, Felix" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: r26djoQSuwY2 On Thu, 2026-09-10 at 15:17 +0000, Ulrich Teichert wrote: > Hi, >=20 > > From: 'Felix Moessbauer' via isar-users > > Sent: Thursday, 10 September 2026 16:43 > > To: isar-users@googlegroups.com > > Cc: jan.kiszka@siemens.com; Felix Moessbauer; Clara Kowalsky > > Subject: [PATCH 1/1] isar-check-rootless: check parent dirs are world e= xecutable > >=20 > > When using mmdebstrap with the unshare backend, all parent directories > > of the TMPDIR must be world executable. This requirement is documented >=20 > you mean that all parent directories need to be world search= able, > by setting the S_IXOTH access bit, right? Hi, thanks for the review. Yes, that's right. However, then we diverge from the terminology that is used by mmdebstrap, which is: If you set "TMPDIR" in unshare mode, then the unshared user must be able to access the directory. This means that the directory itself must be world-writable and all its ancestors must be at least world- executable. >=20 > > in the mmdebstrap man page, but when not fulfilled, mmdebstrap fails in > > colorful ways. > >=20 > > To indicate what is wrong, we add a check to the isar-check-rootless > > script. > >=20 > > Reported-by: Clara Kowalsky > > Signed-off-by: Felix Moessbauer > > --- > > PS: The corresponding kas patch is here: > > https://eu-central-1.protection.sophos.com?d=3Dgoogle.com&u=3DaHR0cHM6L= y9ncm91cHMuZ29vZ2xlLmNvbS9nL2thcy1kZXZlbC9jL1BaaWhZQkFtbENRL20vdFhrSzBQNzdC= QUFK&p=3Dm&i=3DNjg1ZjQwODk0ZjExMWE2MTRhMzZlYTVh&t=3DMUg3ZnNlRGlyQmVnWm1VODZ= 4WmllMURXeUN6eDB5dFU0LzlNTjJXL3lyaz0=3D&h=3Dbfebb46f6bd343faad9aade498e5e63= 3&s=3DAVNPUEhUT0NFTkNSWVBUSVbIcQJfcQqDP5O5j04WOwCo19UVlhqc_xWW892xDBS3QPUnh= UsRr8ErpwgATazXqj9NIytE57svt3NJ-oa9ycVY > >=20 > > scripts/isar-check-rootless | 33 +++++++++++++++++++++++++++++++++ > > 1 file changed, 33 insertions(+) > >=20 > > diff --git a/scripts/isar-check-rootless b/scripts/isar-check-rootless > > index b5197111..de96aac7 100755 > > --- a/scripts/isar-check-rootless > > +++ b/scripts/isar-check-rootless > > @@ -20,6 +20,35 @@ fi > >=20 > > [ "$verbose" =3D 0 ] || echo "RUN_PRIVILEGED_CMD: $run_privileged_cmd" = >&2 > >=20 > > +if ! tmpdir=3D$( \ > > + BB_ENV_PASSTHROUGH_ADDITIONS=3D"${BB_ENV_PASSTHROUGH_ADDITIONS}= ISAR_ROOTLESS" \ > > + ISAR_ROOTLESS=3D1 bitbake-getvar -q --value TMPDIR); then > > + echo "error: cannot determine TMPDIR from BitBake" >&2 > > + exit 1 > > +fi > > + > > +[ "$verbose" =3D 0 ] || echo "TMPDIR: $tmpdir" >&2 > > + > > +failed=3D0 > > +fail() { > > + echo "error: $1" >&2 > > + echo " likely cause: $2" >&2 > > + failed=3D1 > > +} > > + > > +# mmdebstrap in unshare mode populates a temporary directory below TMP= DIR as a > > +# subordinate user. That user can only reach it if every ancestor of T= MPDIR is > > +# world-executable (see mmdebstrap(1), TMPDIR). >=20 > Same nitpick remark here >=20 > > +dir=3D$tmpdir > > +while [ "$dir" !=3D "/" ]; do > > + if [ -e "$dir" ] && \ > > + [ -z "$(find "$dir" -maxdepth 0 -perm -0001 2>/dev/null)" ];= then > > + fail "'$dir' is not world-executable" \ >=20 > and here If there are no objections, I would just change to "searchable" instead of executable, despite the mmdebstrap manpage explicitly states executable. Still, test reports if that actually works on other machines would be great :) Felix >=20 > > + "a restrictive parent directory (e.g. with 0700= ) prevents the unshared user from reaching TMPDIR" > > + fi > > + dir=3D$(dirname "$dir") > > +done > > + > > if ! ${run_privileged_cmd} /bin/sh <<'EOF' > > failed=3D0 > >=20 > > @@ -48,6 +77,10 @@ if ! ${run_privileged_cmd} /bin/sh <<'EOF' > > exit "$failed" > > EOF > > then > > + failed=3D1 > > +fi > > + > > +if [ "$failed" !=3D 0 ]; then > > echo "error: unprivileged rootless builds are not supported; see= the checks above" >&2 > > exit 1 > > fi > > -- > > 2.55.0 --=20 You received this message because you are subscribed to the Google Groups "= isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/= d359972024ec1136965773f4948adf13a3d1ec94.camel%40siemens.com.