https://bugzilla.novell.com/show_bug.cgi?id=805732
https://bugzilla.novell.com/show_bug.cgi?id=805732#c20
--- Comment #20 from Marcus Schaefer 2013-03-12 11:48:53 UTC ---
what the grub postscript does here is really bad, it expects that the install
happens on the target system and does some checks on /boot and the filesystem
there. Installs of this package in a chroot environment could then have a bad
impact on the host system. when kiwi builds an image it has to provide access
to dev nodes, proc, sys and other kernel specific information. Every package
which does assumptions in that area could cause a failure. That's also the
reason why e.g Studio builds images only within a contained environment, the
containment VM.
The risk to damage,lock down the host system does not exist there but of course
a bad package still can have an influence on the contained system driving the
image build
imho the code in the grub postinstall could also have bad effects on simple
package building processes. I would say if you put grub into BuildRequires
and build some package with osc you could see the same problem when osc
installs the grub package to build up the chroot for building a package
just my 2cents
--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.