1
0
Fork 0

(ver4a) Re-enable setuid on FUSE mount binaries.
All checks were successful
/ build-kde (push) Successful in 19m10s
/ build-gnome (push) Successful in 14m37s

This is required for flatpak which depends on FUSE.
This commit is contained in:
ver4a 2025-03-14 16:58:58 +01:00
parent 0dfcb1252a
commit 993ca7315e
2 changed files with 2 additions and 2 deletions

View file

@ -22,7 +22,7 @@ RUN dnf5 -y autoremove
# Remove setuid/setgid binaries # Remove setuid/setgid binaries
# Except for polkit-agent-helper-1, it's currently required for interactive authentication with polkit. # Except for polkit-agent-helper-1, it's currently required for interactive authentication with polkit.
RUN find /usr -mindepth 1 -type f -perm /6000 -regextype posix-extended -not -regex '/usr/lib/polkit-1/polkit-agent-helper-1|/usr/sbin/unix_chkpwd' -exec sh -c 'chmod ug-s '{}' && echo "Removed setuid/setgid bit(s) from {}"' \; RUN find /usr -mindepth 1 -type f -perm /6000 -regextype posix-extended -not -regex '/usr/lib/polkit-1/polkit-agent-helper-1|/usr/sbin/unix_chkpwd|/usr/bin/fusermount|/usr/bin/fusermount3' -exec sh -c 'chmod ug-s '{}' && echo "Removed setuid/setgid bit(s) from {}"' \;
# https://github.com/ostreedev/ostree-rs-ext/issues/159 # https://github.com/ostreedev/ostree-rs-ext/issues/159
RUN ostree container commit RUN ostree container commit

View file

@ -22,7 +22,7 @@ RUN dnf5 -y autoremove
# Remove setuid/setgid binaries # Remove setuid/setgid binaries
# Except for polkit-agent-helper-1, it's currently required for interactive authentication with polkit. # Except for polkit-agent-helper-1, it's currently required for interactive authentication with polkit.
RUN find /usr -mindepth 1 -type f -perm /6000 -regextype posix-extended -not -regex '/usr/lib/polkit-1/polkit-agent-helper-1|/usr/sbin/unix_chkpwd' -exec sh -c 'chmod ug-s '{}' && echo "Removed setuid/setgid bit(s) from {}"' \; RUN find /usr -mindepth 1 -type f -perm /6000 -regextype posix-extended -not -regex '/usr/lib/polkit-1/polkit-agent-helper-1|/usr/sbin/unix_chkpwd|/usr/bin/fusermount|/usr/bin/fusermount3' -exec sh -c 'chmod ug-s '{}' && echo "Removed setuid/setgid bit(s) from {}"' \;
# https://github.com/ostreedev/ostree-rs-ext/issues/159 # https://github.com/ostreedev/ostree-rs-ext/issues/159
RUN ostree container commit RUN ostree container commit