summaryrefslogtreecommitdiffstats
path: root/meta/classes
diff options
context:
space:
mode:
authorRichard Purdie <richard.purdie@linuxfoundation.org>2020-06-22 11:57:17 +0100
committerRichard Purdie <richard.purdie@linuxfoundation.org>2020-07-03 20:17:29 +0100
commit4a2370583b5124ed654b41076e2701ce6bf15132 (patch)
tree97f20078851f1b3491e057ac5087d30f851b868c /meta/classes
parent893db513d720e8100b3dff005c392434657e446a (diff)
downloadpoky-4a2370583b5124ed654b41076e2701ce6bf15132.tar.gz
rootfs-postcommands: Improve/fix rootfs_check_host_user_contaminated
Currently if the find command finds /home it stops checking the other files. Tweak the find expression to fix this. Also, from Alex Kiernan <alex.kiernan@gmail.com>, generate output for each contaminated path so it's visible in the main log file. When matches are found, dump the data from the group and passwd files so useful debugging can be done based on the results. (From OE-Core rev: 504f1d158bf7c6ad08fbce755021db2b14565231) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/classes')
-rw-r--r--meta/classes/rootfs-postcommands.bbclass12
1 files changed, 8 insertions, 4 deletions
diff --git a/meta/classes/rootfs-postcommands.bbclass b/meta/classes/rootfs-postcommands.bbclass
index 2f171836fa..c43b9a9823 100644
--- a/meta/classes/rootfs-postcommands.bbclass
+++ b/meta/classes/rootfs-postcommands.bbclass
@@ -308,12 +308,16 @@ rootfs_check_host_user_contaminated () {
308 HOST_USER_UID="$(PSEUDO_UNLOAD=1 id -u)" 308 HOST_USER_UID="$(PSEUDO_UNLOAD=1 id -u)"
309 HOST_USER_GID="$(PSEUDO_UNLOAD=1 id -g)" 309 HOST_USER_GID="$(PSEUDO_UNLOAD=1 id -g)"
310 310
311 find "${IMAGE_ROOTFS}" -wholename "${IMAGE_ROOTFS}/home" -prune \ 311 find "${IMAGE_ROOTFS}" -path "${IMAGE_ROOTFS}/home" -prune -o \
312 -user "$HOST_USER_UID" -o -group "$HOST_USER_GID" >"$contaminated" 312 -user "$HOST_USER_UID" -print -o -group "$HOST_USER_GID" -print >"$contaminated"
313
314 sed -e "s,${IMAGE_ROOTFS},," $contaminated | while read line; do
315 bbwarn "Path in the rootfs is owned by the same user or group as the user running bitbake:" $line `ls -lan ${IMAGE_ROOTFS}/$line`
316 done
313 317
314 if [ -s "$contaminated" ]; then 318 if [ -s "$contaminated" ]; then
315 echo "WARNING: Paths in the rootfs are owned by the same user or group as the user running bitbake. See the logfile for the specific paths." 319 bbwarn "/etc/passwd:" `cat ${IMAGE_ROOTFS}/etc/passwd`
316 cat "$contaminated" | sed "s,^, ," 320 bbwarn "/etc/group:" `cat ${IMAGE_ROOTFS}/etc/group`
317 fi 321 fi
318} 322}
319 323