From 247fcc2e93c4530c77dd299998acbe946276b2bf Mon Sep 17 00:00:00 2001 From: Jeremi Piotrowski Date: Fri, 30 Aug 2024 09:42:34 +0200 Subject: [PATCH] build_sysext: Add check for invalid file permissions in sysext Signed-off-by: Jeremi Piotrowski --- build_sysext | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/build_sysext b/build_sysext index 7986adb96d..823313ef3d 100755 --- a/build_sysext +++ b/build_sysext @@ -295,6 +295,12 @@ printf '%s\n' "${all_fields[@]}" >"${BUILD_DIR}/install-root/usr/lib/extension-r info "Removing opaque directory markers to always merge all contents" find "${BUILD_DIR}/install-root" -xdev -type d -exec sh -c 'if [ "$(attr -R -q -g overlay.opaque {} 2>/dev/null)" = y ]; then attr -R -r overlay.opaque {}; fi' \; +info "Checking for invalid file ownership" +invalid_files=$(find "${BUILD_DIR}/install-root" -user sdk -or -group sdk) +if [[ -n "${invalid_files}" ]]; then + die "Invalid file ownership: ${invalid_files}" +fi + mksquashfs "${BUILD_DIR}/install-root" "${BUILD_DIR}/${SYSEXTNAME}.raw" \ -noappend -xattrs-exclude '^btrfs.' -comp "${FLAGS_compression}" ${FLAGS_mksquashfs_opts} rm -rf "${BUILD_DIR}"/{fs-root,install-root,workdir}