]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commitdiff
utils: create_cmdline_shebang_wrapper preserve permission and ownership
authorPaulo Neves <ptsneves@gmail.com>
Sun, 3 Jul 2022 11:41:14 +0000 (13:41 +0200)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Mon, 4 Jul 2022 14:15:11 +0000 (15:15 +0100)
The .real command was not given the same permissions and ownership as
the original pre-wrap file and this is now fixed.

A situation where the original pre-wrap file did not have write
permissions would cause a failure in the wrapping is also fixed.

Test update also included.

Signed-off-by: Paulo Neves <ptsneves@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta-selftest/recipes-test/wrapper/cmdline-shebang-wrapper-test.bb
meta/classes/utils.bbclass

index c4126a41fc3ed99609861590482d05ec56a83584..c3d3548d4a70845182c550fbe9cf86bef8ca7bec 100644 (file)
@@ -8,7 +8,10 @@ SRC_URI += "file://test.awk"
 EXCLUDE_FROM_WORLD = "1"
 do_install() {
     install -d ${D}${bindir}
-    install -m 0755 ${WORKDIR}/test.awk ${D}${bindir}/test
+    # was not able to make ownership preservation check
+    install -m 0400 ${WORKDIR}/test.awk ${D}${bindir}/test
+
+    perm_old="$(stat --format='%a' ${D}${bindir}/test)"
     sed -i -e 's|@AWK_BIN@|${bindir}/awk|g' ${D}${bindir}/test
     create_cmdline_shebang_wrapper ${D}${bindir}/test
     if [ $(${D}${bindir}/test) != "Don't Panic!" ]; then
@@ -16,6 +19,12 @@ do_install() {
     else
         bbnote "Wrapper is good"
     fi
+
+    perm_new="$(stat --format='%a' ${D}${bindir}/test.real)"
+
+    if [ "$perm_new" != "$perm_old" ]; then
+        bbfatal "Wrapper permissions for ${D}${bindir}/test.real not preserved. Found $perm_new but expected $perm_old"
+    fi
 }
 
 BBCLASSEXTEND = "native"
index b58c22771f02f13849e79d175d6fc7a77e3fbcb1..e6f7f95d801ec8d7839e213efc0f0e5e3a956e1c 100644 (file)
@@ -202,6 +202,9 @@ create_cmdline_shebang_wrapper () {
        argument="$(sed -ne 's/^#! *//p;q' $cmd)"
        # strip the shebang from the real script as we do not want it to be usable anyway
        tail -n +2 $cmd > $cmd.real
+       chown --reference=$cmd $cmd.real
+       chmod --reference=$cmd $cmd.real
+       rm -f $cmd
        cmdname=$(basename $cmd)
        dirname=$(dirname $cmd)
        cmdoptions=$@