From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6540161972509343744 X-Received: by 10.46.25.6 with SMTP id p6mr1045227lje.11.1522919805325; Thu, 05 Apr 2018 02:16:45 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com Received: by 10.46.136.151 with SMTP id k23ls570628lji.1.gmail; Thu, 05 Apr 2018 02:16:44 -0700 (PDT) X-Google-Smtp-Source: AIpwx4/6JjxhaTs1B6HVjOZA2ZziGPV21K1mz1gmTrC3/Nz2naK/kPWQQlbnFr0T8zIIigzd+pEf X-Received: by 10.46.157.215 with SMTP id x23mr977397ljj.35.1522919804662; Thu, 05 Apr 2018 02:16:44 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1522919804; cv=none; d=google.com; s=arc-20160816; b=qfevm9YJQXKST7VTPMqRu+0KWYuU9kwSfm6MUmvqAPrC/cAgT76i+fD9uvpzFKBJt9 +mdF3U2fkMYFPrmNwTd69jsNoWBdha6rldeBJluj7fgK2RlRkdxwpabiwikmIuUqggwZ xVFaDeUHMAaXHE95r8umzLGJie/50P5b3PbWuxtXb7MtuZO1qSHN4Svh8PCIbVbgJsk8 +hoGT0jSeA9KEAyW97zJApYqm1k8IvjmyxrIoUueOgpEbpmDJO7LKAExYioTymptZf/N BShN2cNXuAmZTTfxsQGcP2sibYLdFFe5ONX1B3nEqvCZppd0G8a65yWgjMG9JH5kQq1a ZkkA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:content-language:in-reply-to:mime-version :user-agent:date:message-id:openpgp:from:references:to:subject :arc-authentication-results; bh=teVp+cPwpST522Kjyh+/o7crVignqGFHnaCM/H6pHao=; b=IgyWmj9/5psAcb7V3H2IRcgKavPu1GdeQZL7NlnEsFpw6JMwZ6ANvF9+lYN/nAR2zG Fe9MxLbSnBTUeWSQCAVolggRotw/zAVKP0C3k4lFJEat0bw393m5mYuW/bD3S9kKM/3w cuigi29hGF2yGP/ZgHS7UTuFCS/n2XWCbkR2E773JWwYwwsODv5Pu/PXF4pmmFjee9aE 0aOAU8KCt6teR2K7CtYL3pWe2veS6l4kVtpADPfJpuCAcIw+cRk2Z9J4uUzyMBKPxRaS 3T+vgQVlMOj6q6I/lfn/olvQXCwCsnv7sAFs3Gd0ns8Kf1kMrQqLL2b9VVZYyccVt6D8 tDCg== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of jan.kiszka@siemens.com designates 192.35.17.2 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com Return-Path: Received: from thoth.sbs.de (thoth.sbs.de. [192.35.17.2]) by gmr-mx.google.com with ESMTPS id d22si147095ljg.4.2018.04.05.02.16.44 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 05 Apr 2018 02:16:44 -0700 (PDT) Received-SPF: pass (google.com: domain of jan.kiszka@siemens.com designates 192.35.17.2 as permitted sender) client-ip=192.35.17.2; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of jan.kiszka@siemens.com designates 192.35.17.2 as permitted sender) smtp.mailfrom=jan.kiszka@siemens.com Received: from mail3.siemens.de (mail3.siemens.de [139.25.208.14]) by thoth.sbs.de (8.15.2/8.15.2) with ESMTPS id w359Ghiv029475 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK) for ; Thu, 5 Apr 2018 11:16:44 +0200 Received: from [167.87.31.205] ([167.87.31.205]) by mail3.siemens.de (8.15.2/8.15.2) with ESMTP id w359Ghtw026700; Thu, 5 Apr 2018 11:16:43 +0200 Subject: Re: [PATCH v5 0/5] Debootstrap integration To: "[ext] Claudius Heine" , isar-users@googlegroups.com References: <20180403100802.30710-1-claudius.heine.ext@siemens.com> <20180404203434.GC3164@yssyq.radix50.net> From: Jan Kiszka Openpgp: preference=signencrypt Message-ID: Date: Thu, 5 Apr 2018 11:16:43 +0200 User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); de; rv:1.8.1.12) Gecko/20080226 SUSE/2.0.0.12-1.1 Thunderbird/2.0.0.12 Mnenhy/0.7.5.666 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit X-TUID: tdbenu5HW9sD On 2018-04-05 10:03, [ext] Claudius Heine wrote: >> >> If I understand the code correctly, there is also a security issue: > > Not sure if security is really a concern for isar yet. But I get your > point that we should prevent possible accidents. :) I would call this a "safety" concern - building images via Isar is not secure in any way as long as we require root permissions. Jan