Re: Introducing the hardening-wrapper package (was: Exim4 problems)

[Samuel Thibault]

Svante Signell, le Mon 30 May 2011 23:13:56 +0200, a écrit :
> 2011-05-29 18:18:49 failed to open configuration file
> /build/buildd-exim4_4.76-2-hurd-i386-IUsCPu/exim4-4.76/test/eximtest/exim4.conf:
>  Permission denied (euid=60000 egid=107)
> ...
> 
> Looks like the test file is inside the chroot directory, or
> is /build/buildd/... absolute?

The whole build log is from inside a chroot actually. Even the "Chroot
Build Dir" print itself is from a chroot. That "Chroot Build Dir" is
actually another notion of chroot, which I'm unusure what they wanted to
talk about.

> However, it looks like chroot accepts options for user and group via:
> (if the same chroot command is used at buildds, cannot find out from the
> log file)
> 
> --userspec=USER:GROUP
>      specify user and group (ID or name) to use
> 
> --groups=G_LIST
>      specify supplementary groups as g1,g2,..,gN

sbuild is already supposed to set uid and gid properly (even before
the log starts, that is), and it's indeed correct: 60000.107 is
buildd.sbuild

Samuel