[meta-intel] [PATCH] uefi-comboapp.bbclass: install files under pseudo
Wold, Saul
saul.wold at intel.com
Wed Nov 15 09:35:47 PST 2017
On Wed, 2017-11-15 at 10:36 +0100, Patrick Ohly wrote:
> do_uefiapp_deploy copies files into the /boot directory of the rootfs
> and thus, like do_rootfs, should run under pseudo so that the files
> end up being owned by root.
>
> This did not trigger the uid leak check, perhaps because the task
> runs
> later.
>
> For some (still unknown reason), sometimes the installed files did
> end
> up being owned by root, which tripped up a swupd test because the
> system update randomly included unexpected changes to bootx64.efi or
> rmc.db. With this change, they are owned by root consistently.
>
Patrick,
Thanks, does this require a backport to Rocko/8.0.0 also?
Sau!
> Signed-off-by: Patrick Ohly <patrick.ohly at intel.com>
> ---
> classes/uefi-comboapp.bbclass | 4 ++--
> 1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/classes/uefi-comboapp.bbclass b/classes/uefi-
> comboapp.bbclass
> index 5c3ca8c..4ecc553 100644
> --- a/classes/uefi-comboapp.bbclass
> +++ b/classes/uefi-comboapp.bbclass
> @@ -101,14 +101,14 @@ uefiapp_deploy_at() {
> done
> }
>
> -do_uefiapp_deploy() {
> +fakeroot do_uefiapp_deploy() {
> rm -rf ${IMAGE_ROOTFS}/boot/*
> dest=${IMAGE_ROOTFS}/boot/EFI/BOOT
> mkdir -p $dest
> uefiapp_deploy_at $dest
> }
>
> -do_uefiapp_deploy[depends] += "${PN}:do_uefiapp"
> +do_uefiapp_deploy[depends] += "${PN}:do_uefiapp virtual/fakeroot-
> native:do_populate_sysroot"
>
>
> # This decides when/how we add our tasks to the image
>
> base-commit: 863590f9bc7104fef698ce6b89ec24dfce542df1
> --
> git-series 0.9.1
More information about the meta-intel
mailing list