summaryrefslogtreecommitdiffstats
path: root/scripts/README
diff options
context:
space:
mode:
authorPeter Seebach <peter.seebach@windriver.com>2014-05-21 18:12:33 -0500
committerRichard Purdie <richard.purdie@linuxfoundation.org>2014-05-27 16:11:53 +0100
commitc8645caf56228da1bd4f448dbf90066911a1c59d (patch)
treeb341875bbe4b0b57cc0f6a12f75947371b86f971 /scripts/README
parent2b7f8db606804a1abb316fde9104e6e32413e3df (diff)
downloadpoky-c8645caf56228da1bd4f448dbf90066911a1c59d.tar.gz
pseudo: handle fchmodat better, mask out unwanted write bits
It turns out that pseudo's decision not to report errors from the host system's fchmodat() can break GNU tar in a very strange way, resulting in directories being mode 0700 instead of whatever they should have been. Additionally, it turns out that if you make directories in your rootfs mode 777, that results in the local copies being mode 777, which could allow a hypothetical attacker with access to the machine to add files to your rootfs image. We should mask out the 022 bits when making actual mode changes in the rootfs. This patch represents a backport to the 1.5.1 branch of three patches from the 1.6 branch, because it took a couple of tries to get this quite right. (From OE-Core rev: 45371858129bbad8f4cfb874e237374a5ba8db4c) Signed-off-by: Peter Seebach <peter.seebach@windriver.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'scripts/README')
0 files changed, 0 insertions, 0 deletions