diff mbox series

[v2,7/9] runqemu-export-rootfs: set PSEUDO_INCLUDE_PATHS for unfsd

Message ID 20260907063720.56742-8-adrian.freihofer@siemens.com
State Under Review
Headers show
Series devtool: ide-sdk: bug fixes, do_install-through-bitbake, NFS deploy prep | expand

Commit Message

AdrianF Sept. 7, 2026, 6:36 a.m. UTC 
From: Adrian Freihofer <adrian.freihofer@siemens.com>

pseudo inverted its path-matching logic some time ago: when set,
PSEUDO_INCLUDE_PATHS acts as an ownership-tracking allowlist, and
anything outside it silently falls through to real chown()/chmod()
instead of being recorded by pseudo. This script never set it, so an
inherited restrictive value could leave files touched by unfsd on
behalf of NFS clients with wrong ownership. Since this script only
ever touches NFS_EXPORT_DIR, setting PSEUDO_INCLUDE_PATHS to it is
enough.

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
---
 scripts/runqemu-export-rootfs | 2 ++
 1 file changed, 2 insertions(+)
diff mbox series

Patch

diff --git a/scripts/runqemu-export-rootfs b/scripts/runqemu-export-rootfs
index 6a8acd0d5a..150513bc50 100755
--- a/scripts/runqemu-export-rootfs
+++ b/scripts/runqemu-export-rootfs
@@ -56,6 +56,8 @@  MOUNTPID=~/.runqemu-sdk/mount$NFS_INSTANCE.pid
 PSEUDO_OPTS="-P $OECORE_NATIVE_SYSROOT/usr"
 PSEUDO_LOCALSTATEDIR="$NFS_EXPORT_DIR/../$(basename $NFS_EXPORT_DIR).pseudo_state"
 export PSEUDO_LOCALSTATEDIR
+PSEUDO_INCLUDE_PATHS="$NFS_EXPORT_DIR"
+export PSEUDO_INCLUDE_PATHS
 
 if [ ! -d "$PSEUDO_LOCALSTATEDIR" ]; then
 	echo "Error: $PSEUDO_LOCALSTATEDIR does not exist."