From patchwork Sun Aug 30 21:48:23 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: AdrianF X-Patchwork-Id: 96844 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 8E1ABC624A5 for ; Sun, 30 Aug 2026 21:49:26 +0000 (UTC) Received: from mta-64-227.siemens.flowmailer.net (mta-64-227.siemens.flowmailer.net [185.136.64.227]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.17271.1788126560348358272 for ; Sun, 30 Aug 2026 14:49:21 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=adrian.freihofer@siemens.com header.s=fm2 header.b=OjkJBrWC; spf=pass (domain: rts-flowmailer.siemens.com, ip: 185.136.64.227, mailfrom: fm-1329275-20260830214917e2e25ee64500020751-df1wib@rts-flowmailer.siemens.com) Received: by mta-64-227.siemens.flowmailer.net with ESMTPSA id 20260830214917e2e25ee64500020751 for ; Sun, 30 Aug 2026 23:49:17 +0200 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm2; d=siemens.com; i=adrian.freihofer@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=1MFyrhowzv77hBhM/3YCJUI/rso4OyTeawAo9wglhOw=; b=OjkJBrWCsTHvvJ41Hp870L+4z7mxBynNGRByxGqkOebjSVku3VoGeSu1e4uSInyJxKZAc8 B18YDt0Zw2Eb5b2aMbMh3e/7RongOMM1WMadQF0gjsCZtNqH3AqG8/bclo61sbt/KG/QHGjo e57XoHvh+KBr7hwgiE/HE3W2o40H4yl4RcYUv9pxm6M35XpH107CG3DvI8gGCfgEQ6E4Y51Z M99mY2oxkxFMVkel+jea6BJKuQ31zhdd/ZMbqQu2zFC2iwxKdkfzN4QJQvEzAUJ84pZu2m1E Ccuo1Y4Kp/3m72MOkh5uWcd8JXJq9FWyGVrrIYANHoO8qG3/ZHoVWehw==; From: AdrianF To: openembedded-core@lists.openembedded.org Cc: Adrian Freihofer Subject: [PATCH v2 01/25] runqemu-extract-sdk: set PSEUDO_INCLUDE_PATHS for the extraction Date: Sun, 30 Aug 2026 23:48:23 +0200 Message-ID: <20260830214912.1346063-2-adrian.freihofer@siemens.com> In-Reply-To: <20260830214912.1346063-1-adrian.freihofer@siemens.com> References: <20260830214912.1346063-1-adrian.freihofer@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-1329275:519-21489:flowmailer List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sun, 30 Aug 2026 21:49:26 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/244716 From: Adrian Freihofer pseudo inverted its path-matching logic some time ago: when set, PSEUDO_INCLUDE_PATHS acts as an ownership-tracking allowlist, and anything outside it silently falls through to real chown()/chmod() instead of being recorded by pseudo. This script never set it, so an inherited restrictive value could leave the extracted rootfs with wrong ownership. Since this script only ever touches SDK_ROOTFS_DIR, setting PSEUDO_INCLUDE_PATHS to it is enough. Signed-off-by: Adrian Freihofer --- scripts/runqemu-extract-sdk | 2 ++ 1 file changed, 2 insertions(+) diff --git a/scripts/runqemu-extract-sdk b/scripts/runqemu-extract-sdk index 528ef76430..db9813e1dc 100755 --- a/scripts/runqemu-extract-sdk +++ b/scripts/runqemu-extract-sdk @@ -85,6 +85,8 @@ mkdir -p "$pseudo_state_dir" touch "$pseudo_state_dir/pseudo.pid" PSEUDO_LOCALSTATEDIR="$pseudo_state_dir" export PSEUDO_LOCALSTATEDIR +PSEUDO_INCLUDE_PATHS="$SDK_ROOTFS_DIR" +export PSEUDO_INCLUDE_PATHS echo "Extracting rootfs tarball using pseudo..." echo "$PSEUDO $PSEUDO_OPTS tar -C \"$SDK_ROOTFS_DIR\" $TAR_OPTS \"$ROOTFS_TARBALL\""