Re: [PATCH 0/1] pseudo 1.7.5 [jethro][fido]

[Mark Hatle <mark.hatle@windriver.com>]

On 2/9/16 3:52 PM, Andreas Müller wrote:
> On Tue, Feb 9, 2016 at 9:11 PM, Mark Hatle <mark.hatle@windriver.com> wrote:
>> Once the corresponding tarball is available, this should likely be
>> backported/merged to Jethro and Fido as well.
>>
>> Everything remains compatible, but it does fix a subtle race condition that can
>> lead to files under pseudo control inheriting their host system permissions.
> Are user IDs affected? If yes there would be a chance to reduce loads
> of host contamination warnings..

There are two pieces to this issue.

The first is the most common place people will see it.  Running a buildhistory,
the wrong file attributes are displayed.  These include xattr, owner, group and
permissions.  Note, in THIS case they are most likely correct in the package,
only buildhistory sees the wrong values.

The second is a lot less likely from what we saw, but IS possible, and we have
seen a few of these in real situations.  The problem occurs during a do_install
or other place and the wrong file attributes (see above) are inherited from the
environment.  In modern systems this, in my experience, always manifests itself
with a QA warning -- rebuilding the package the problem goes away.

Both of the above cases are believed to be fixed with the new version.

--Mark

> Andreas
>