Re: [PATCH v5 0/5] Debootstrap integration

[Claudius Heine <claudius.heine.ext@siemens.com>]

Hi Baurzhan,

On 04/11/2018 08:28 AM, Baurzhan Ismagulov wrote:
> On Thu, Apr 05, 2018 at 11:16:43AM +0200, Jan Kiszka wrote:
>> I would call this a "safety" concern - building images via Isar is not
>> secure in any way as long as we require root permissions.
> 
> However we call it (directory traversal is commonly classified as a security
> issue as opposed to safety as in health injury), it doesn't mean we should
> easily add more of them just because the existing code already isn't perfect.
> I've raised the issue to understand the implications, consider advantages and
> disadvantages, and possibly determine TODOs if we end up with a trade-off.
> 
> For example, for this specific case, does upstream bitbake and / or OE check
> whether cleandirs are within the build directory?

Please take a look at the 'Centralize root_cleandirs feature' patchset, 
that should address some of those issues you mentioned. Discussion about 
this might be better there as well.

Thanks,
Claudius

-- 
DENX Software Engineering GmbH,      Managing Director: Wolfgang Denk
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany
Phone: (+49)-8142-66989-54 Fax: (+49)-8142-66989-80 Email: ch@denx.de