From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6540161972509343744 X-Received: by 10.223.201.13 with SMTP id m13mr269327wrh.24.1523430255891; Wed, 11 Apr 2018 00:04:15 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com Received: by 10.28.93.130 with SMTP id r124ls173776wmb.0.gmail; Wed, 11 Apr 2018 00:04:15 -0700 (PDT) X-Google-Smtp-Source: AIpwx49l4M2ctRzqIDudJi6AmfSIEC/uNbNTOLuSSy9wtzmvQeNfjwxpPRiAKduGEHPiksC9yqIp X-Received: by 10.28.45.208 with SMTP id t199mr212948wmt.4.1523430255448; Wed, 11 Apr 2018 00:04:15 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1523430255; cv=none; d=google.com; s=arc-20160816; b=IAJAeJXRbcvELvK3NUnWC1JDx54fUAvZKpabFPSfSU29CFc7oDS0AyCFUmLZ0ImQG3 WQN5kx1KZTQ807Xuo4KsA6wfMQylCE/ugwRwtnSEIgzkIis6vP5pJtGR9GAzFtcuGBy0 kSNEyG/z3i1NfZFAx84L5mCsRYII1M+4e38DFvfEx3ztyYp+aPMsaxRUizjsJ34J9iNV 9DvXMLHLeWu2OLYvbeJSyor0l3ljwWoZQseyHV/kD/jMqGuucxjFAdjYVfYSympnzpa4 IZU+RnOeSVjzBQ6pJxYgaIsQ7GeaMX2SgsBOh7TWzpmLR6SpIj7E2e8peeD5P1ogzQjk H2Vg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:content-language:in-reply-to:mime-version :user-agent:date:message-id:from:references:to:subject :arc-authentication-results; bh=AfYmfUoCaZRxxpSSBZMKRycq39GQyYlq++t+3HBeclo=; b=zd1IIk3udtsiXte0xOpikYDBNOhpucvFFScz2vgIUniwfDX40IqAihR/UDXGc5ra0s MQ/AvR8wyWKtbEcP93PFK1+bcphhzh+ZtoyGlWABWRdmhMJ7FOLTwx+L4wZEpDgUMlAd MOZx9HRqd9T9BNJvlLl8tmk9s8+oc1gJd2QsLU0A4gZN59KhvSMpt4Ddd91tl2GX3pDJ QAhL9Y2bXOZdj//A3hxP0wTmHLtUSpT5FLMuZh/18WT2oZx4kPaQSXSCOF/uJPZjsPuM ILGsatySNfDgGOvb2j7LZ48W53owGzyrFpV6EgNyDUHVMkLgGAMd6dntjkVmjotFO7Ny q1lA== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of claudius.heine.ext@siemens.com designates 194.138.37.40 as permitted sender) smtp.mailfrom=claudius.heine.ext@siemens.com Return-Path: Received: from gecko.sbs.de (gecko.sbs.de. [194.138.37.40]) by gmr-mx.google.com with ESMTPS id u27si25251wrf.1.2018.04.11.00.04.15 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 11 Apr 2018 00:04:15 -0700 (PDT) Received-SPF: pass (google.com: domain of claudius.heine.ext@siemens.com designates 194.138.37.40 as permitted sender) client-ip=194.138.37.40; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of claudius.heine.ext@siemens.com designates 194.138.37.40 as permitted sender) smtp.mailfrom=claudius.heine.ext@siemens.com Received: from mail2.sbs.de (mail2.sbs.de [192.129.41.66]) by gecko.sbs.de (8.15.2/8.15.2) with ESMTPS id w3B74FQQ018114 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK) for ; Wed, 11 Apr 2018 09:04:15 +0200 Received: from [139.25.69.226] (linux-ses-ext02.ppmd.siemens.net [139.25.69.226]) by mail2.sbs.de (8.15.2/8.15.2) with ESMTP id w3B74Ea2019019 for ; Wed, 11 Apr 2018 09:04:14 +0200 Subject: Re: [PATCH v5 0/5] Debootstrap integration To: isar-users@googlegroups.com References: <20180403100802.30710-1-claudius.heine.ext@siemens.com> <20180404203434.GC3164@yssyq.radix50.net> <20180411062833.GD4762@yssyq.radix50.net> From: Claudius Heine Message-ID: Date: Wed, 11 Apr 2018 09:04:14 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 In-Reply-To: <20180411062833.GD4762@yssyq.radix50.net> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-TUID: SrKDc7arEKOh Hi Baurzhan, On 04/11/2018 08:28 AM, Baurzhan Ismagulov wrote: > On Thu, Apr 05, 2018 at 11:16:43AM +0200, Jan Kiszka wrote: >> I would call this a "safety" concern - building images via Isar is not >> secure in any way as long as we require root permissions. > > However we call it (directory traversal is commonly classified as a security > issue as opposed to safety as in health injury), it doesn't mean we should > easily add more of them just because the existing code already isn't perfect. > I've raised the issue to understand the implications, consider advantages and > disadvantages, and possibly determine TODOs if we end up with a trade-off. > > For example, for this specific case, does upstream bitbake and / or OE check > whether cleandirs are within the build directory? Please take a look at the 'Centralize root_cleandirs feature' patchset, that should address some of those issues you mentioned. Discussion about this might be better there as well. Thanks, Claudius -- DENX Software Engineering GmbH, Managing Director: Wolfgang Denk HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany Phone: (+49)-8142-66989-54 Fax: (+49)-8142-66989-80 Email: ch@denx.de