From: Arnout Vandecappelle <arnout@mind.be>
To: buildroot@busybox.net
Subject: [Buildroot] [PATCH v4 2/9] Makefile: don't depend on current skeleton/overlay permissions
Date: Mon, 13 Jul 2015 13:35:53 +0200 [thread overview]
Message-ID: <55A3A299.4070206@mind.be> (raw)
In-Reply-To: <1416586748-12936-3-git-send-email-guido@vanguardiasur.com.ar>
On 11/21/14 17:19, Guido Mart?nez wrote:
> We use 'rsync -a' to copy the skeleton and overlays, so the target ends
> up with the exact same permissions as on the repo. The problem is we
> don't track these permissions, since Git doesn't allow for that (except
> for the exec bit). This means users with different umasks at the time of
> cloning could end up with different target permissions.
>
> Fix this by using --chmod on rsync calls so we don't depend on the
> current permission set for the skeleton and overlays. We do depend on
> the exec bit, but that's fine since that one is tracked by Git.
>
> Signed-off-by: Guido Mart?nez <guido@vanguardiasur.com.ar>
Acked-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
It may break existings setup that rely on these permissions to be kept, but
since that's anyway not a good idea, let's keep it this way. However, I'll
follow up with a release not that explains the issue.
Regards,
Arnout
> ---
> Makefile | 4 ++--
> 1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/Makefile b/Makefile
> index eeb1412..5880bbb 100644
> --- a/Makefile
> +++ b/Makefile
> @@ -489,7 +489,7 @@ RSYNC_VCS_EXCLUSIONS = \
> $(BUILD_DIR)/.root:
> mkdir -p $(TARGET_DIR)
> rsync -a --ignore-times $(RSYNC_VCS_EXCLUSIONS) \
> - --chmod=Du+w --exclude .empty --exclude '*~' \
> + --chmod=u=rwX,go=rX --exclude .empty --exclude '*~' \
> $(TARGET_SKELETON)/ $(TARGET_DIR)/
> $(INSTALL) -m 0644 support/misc/target-dir-warning.txt $(TARGET_DIR_WARNING_FILE)
> @ln -snf lib $(TARGET_DIR)/$(LIB_SYMLINK)
> @@ -625,7 +625,7 @@ endif
> @$(foreach d, $(call qstrip,$(BR2_ROOTFS_OVERLAY)), \
> $(call MESSAGE,"Copying overlay $(d)"); \
> rsync -a --ignore-times $(RSYNC_VCS_EXCLUSIONS) \
> - --chmod=Du+w --exclude .empty --exclude '*~' \
> + --chmod=u=rwX,go=rX --exclude .empty --exclude '*~' \
> $(d)/ $(TARGET_DIR)$(sep))
>
> @$(foreach s, $(call qstrip,$(BR2_ROOTFS_POST_BUILD_SCRIPT)), \
>
--
Arnout Vandecappelle arnout at mind be
Senior Embedded Software Architect +32-16-286500
Essensium/Mind http://www.mind.be
G.Geenslaan 9, 3001 Leuven, Belgium BE 872 984 063 RPR Leuven
LinkedIn profile: http://www.linkedin.com/in/arnoutvandecappelle
GPG fingerprint: 7493 020B C7E3 8618 8DEC 222C 82EB F404 F9AC 0DDF
next prev parent reply other threads:[~2015-07-13 11:35 UTC|newest]
Thread overview: 26+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-11-21 16:18 [Buildroot] [PATCH v4 0/9] target permissions Guido Martínez
2014-11-21 16:19 ` [Buildroot] [PATCH v4 1/9] Makefile: don't depend on the umask Guido Martínez
2015-07-13 9:35 ` Arnout Vandecappelle
2015-07-13 10:59 ` Thomas Petazzoni
2014-11-21 16:19 ` [Buildroot] [PATCH v4 2/9] Makefile: don't depend on current skeleton/overlay permissions Guido Martínez
2015-07-13 11:35 ` Arnout Vandecappelle [this message]
2015-07-13 11:36 ` [Buildroot] [PATCH] CHANGES: add release note for the permissions Arnout Vandecappelle
2015-07-13 11:39 ` Baruch Siach
2015-07-13 15:03 ` Thomas Petazzoni
2015-07-13 15:02 ` [Buildroot] [PATCH v4 2/9] Makefile: don't depend on current skeleton/overlay permissions Thomas Petazzoni
2014-11-21 16:19 ` [Buildroot] [PATCH v4 3/9] toolchain/helpers.mk: use --chmod on rsync Guido Martínez
2015-07-13 15:07 ` Arnout Vandecappelle
2015-07-13 15:13 ` Thomas Petazzoni
2014-11-21 16:19 ` [Buildroot] [PATCH v4 4/9] pkg-generic.mk: don't depend on external package permissions Guido Martínez
2015-07-13 15:19 ` Thomas Petazzoni
2014-11-21 16:19 ` [Buildroot] [PATCH v4 5/9] package: matchbox-keyboard: use install instead of cp Guido Martínez
2014-11-22 18:47 ` Thomas Petazzoni
2014-11-21 16:19 ` [Buildroot] [PATCH v4 6/9] scripts: mkmakefile: set umask before calling BR's makefile Guido Martínez
2015-07-13 15:20 ` Thomas Petazzoni
2014-11-21 16:19 ` [Buildroot] [PATCH v4 7/9] nitrogen6x: use install instead of cp Guido Martínez
2014-11-21 16:19 ` [Buildroot] [PATCH v4 8/9] boot/grub: " Guido Martínez
2014-11-21 16:19 ` [Buildroot] [PATCH v4 9/9] fs/iso9660: " Guido Martínez
2014-11-22 18:02 ` [Buildroot] [PATCH v4 0/9] target permissions Thomas Petazzoni
2014-11-25 23:01 ` Guido Martínez
2014-11-24 22:17 ` Ezequiel Garcia
2014-12-03 18:07 ` Guido Martínez
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=55A3A299.4070206@mind.be \
--to=arnout@mind.be \
--cc=buildroot@busybox.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox