[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

xattr support in live-installer?



Hi,

https://launchpad.net/bugs/1302192 reports ping not being setuid root
after installation from squashfs-based media.  I've reproduced this with
the Ubuntu server installer, which uses live-installer to install the
base system (much faster than running debootstrap).  I haven't
explicitly tested Debian live media, but I suspect they'll suffer from
the same problem.

The question is what to do about it.  live-installer uses busybox tar to
shovel files around, and busybox tar doesn't support xattr.  We could do
something with getcap/setcap - indeed getcap supports recursive search
and setcap can read capabilities in bulk from standard input, so this
shouldn't need to be too slow - but we don't have those tools in d-i
right now.

Would it make sense to modify attr to build udebs, then change
live-installer to do a getcap/setcap run after transferring files with
tar?  I think this is probably going to be simpler than adding xattr
support to busybox tar (in GNU tar that depends on a specific archive
format, so I'm guessing it's not exactly trivial).  Even if we did go
for the latter approach instead, we'd probably still need at least a
libattr1-udeb.

Thoughts?

Thanks,

-- 
Colin Watson                                       [cjwatson@debian.org]


Reply to: