ver4a/ostree-native-containers
1
0
Fork 0
Code Activity Actions

(ver4a) Re-enable setuid on FUSE mount binaries.
All checks were successful
/ build-kde (push) Successful in 19m10s
Details
/ build-gnome (push) Successful in 14m37s
Details

Browse source 
This is required for flatpak which depends on FUSE.
This commit is contained in:
ver4a 2025-03-14 16:58:58 +01:00
parent 0dfcb1252a
commit 993ca7315e
2 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
Dockerfile.kde-nvidia-ver4a
View file

@ -22,7 +22,7 @@ RUN dnf5 -y autoremove
# Remove setuid/setgid binaries
# Except for polkit-agent-helper-1, it's currently required for interactive authentication with polkit.
RUN find /usr -mindepth 1 -type f -perm /6000 -regextype posix-extended -not -regex '/usr/lib/polkit-1/polkit-agent-helper-1|/usr/sbin/unix_chkpwd' -exec sh -c 'chmod ug-s '{}' && echo "Removed setuid/setgid bit(s) from {}"' \;
RUN find /usr -mindepth 1 -type f -perm /6000 -regextype posix-extended -not -regex '/usr/lib/polkit-1/polkit-agent-helper-1|/usr/sbin/unix_chkpwd|/usr/bin/fusermount|/usr/bin/fusermount3' -exec sh -c 'chmod ug-s '{}' && echo "Removed setuid/setgid bit(s) from {}"' \;
# https://github.com/ostreedev/ostree-rs-ext/issues/159
RUN ostree container commit

2
Dockerfile.kde-ver4a
View file

@ -22,7 +22,7 @@ RUN dnf5 -y autoremove
# Remove setuid/setgid binaries
# Except for polkit-agent-helper-1, it's currently required for interactive authentication with polkit.
RUN find /usr -mindepth 1 -type f -perm /6000 -regextype posix-extended -not -regex '/usr/lib/polkit-1/polkit-agent-helper-1|/usr/sbin/unix_chkpwd' -exec sh -c 'chmod ug-s '{}' && echo "Removed setuid/setgid bit(s) from {}"' \;
RUN find /usr -mindepth 1 -type f -perm /6000 -regextype posix-extended -not -regex '/usr/lib/polkit-1/polkit-agent-helper-1|/usr/sbin/unix_chkpwd|/usr/bin/fusermount|/usr/bin/fusermount3' -exec sh -c 'chmod ug-s '{}' && echo "Removed setuid/setgid bit(s) from {}"' \;
# https://github.com/ostreedev/ostree-rs-ext/issues/159
RUN ostree container commit