[obs-commits] [openSUSE/obs-build] f0a4c0: Harden copyout of kernel-obs-build files
Branch: refs/heads/master Home: https://github.com/openSUSE/obs-build Commit: f0a4c0520fd7f440cef3fba378151dd0c5dac801 https://github.com/openSUSE/obs-build/commit/f0a4c0520fd7f440cef3fba378151dd... Author: Michael Schroeder <mls@suse.de> Date: 2020-09-21 (Mon, 21 Sep 2020) Changed paths: M build-vm Log Message: ----------- Harden copyout of kernel-obs-build files Commit: f350b46e318e9baa0325927829e3dcc1160f28dc https://github.com/openSUSE/obs-build/commit/f350b46e318e9baa0325927829e3dcc... Author: Michael Schroeder <mls@suse.de> Date: 2020-09-21 (Mon, 21 Sep 2020) Changed paths: M build-pkg-arch M build-pkg-deb M build-pkg-rpm M init_buildsystem Log Message: ----------- Ensure that preinstall cannot modify .build and .init_b_cache We do this by first unpacking into a new directory and then moving the file back into place. We cannot rely on bsdtar here, because we need to use the -P option for Fedora packages which allows installing over symlinks. Compare: https://github.com/openSUSE/obs-build/compare/73d5242d8734...f350b46e318e
participants (1)
-
Michael Schroeder