[meta-intel] [PATCH] uefi-comboapp.bbclass: install files under pseudo

Wold, Saul saul.wold at intel.com
Wed Nov 15 09:35:47 PST 2017


On Wed, 2017-11-15 at 10:36 +0100, Patrick Ohly wrote:
> do_uefiapp_deploy copies files into the /boot directory of the rootfs
> and thus, like do_rootfs, should run under pseudo so that the files
> end up being owned by root.
> 
> This did not trigger the uid leak check, perhaps because the task
> runs
> later.
> 
> For some (still unknown reason), sometimes the installed files did
> end
> up being owned by root, which tripped up a swupd test because the
> system update randomly included unexpected changes to bootx64.efi or
> rmc.db. With this change, they are owned by root consistently.
> 
Patrick, 

Thanks, does this require a backport to Rocko/8.0.0 also?

Sau!

> Signed-off-by: Patrick Ohly <patrick.ohly at intel.com>
> ---
>  classes/uefi-comboapp.bbclass | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
> 
> diff --git a/classes/uefi-comboapp.bbclass b/classes/uefi-
> comboapp.bbclass
> index 5c3ca8c..4ecc553 100644
> --- a/classes/uefi-comboapp.bbclass
> +++ b/classes/uefi-comboapp.bbclass
> @@ -101,14 +101,14 @@ uefiapp_deploy_at() {
>      done
>  }
>  
> -do_uefiapp_deploy() {
> +fakeroot do_uefiapp_deploy() {
>      rm -rf ${IMAGE_ROOTFS}/boot/*
>      dest=${IMAGE_ROOTFS}/boot/EFI/BOOT
>      mkdir -p $dest
>      uefiapp_deploy_at $dest
>  }
>  
> -do_uefiapp_deploy[depends] += "${PN}:do_uefiapp"
> +do_uefiapp_deploy[depends] += "${PN}:do_uefiapp virtual/fakeroot-
> native:do_populate_sysroot"
>  
>  
>  # This decides when/how we add our tasks to the image
> 
> base-commit: 863590f9bc7104fef698ce6b89ec24dfce542df1
> -- 
> git-series 0.9.1


More information about the meta-intel mailing list