[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#845715: Required targets must not write outside of the source package tree



Hello,

On Sun 11 Nov 2018 at 09:10PM +0100, Bill Allombert wrote:

> Package support for TMPDIR can be introduced as a general requirement,
> outside of the build process.

Okay.

> Maybe the proposal could be rewritten in a way that does not need to
> cover the detail of temporaries files.
>
> How about:
>
> +Required targets must not attempt to write outside of the unpacked
> +source package tree.  There are two exceptions.  Firstly, the binary
> +targets may write the binary packages to the parent directory of the
> +unpacked source package tree.  Secondly, required targets may write to
> +/tmp, /var/tmp and to the directory specified by the ``TMPDIR`` environment
> + variable, but must not depend on the content of either.
> +
> +This restriction is intended to prevent source package builds creating
> +and depending on state outside of themselves, thus affecting multiple
> +independent rebuilds.  In particular, the required targets must not
> +attempt to write into ``HOME``.

Thank you for this text.  I'd be happy to second it, since it solves the
problem I was trying to solve with my patch, but ideally I'd like to
hear from those others who seconded the older patch to see if they are
happy to drop the TMPDIR parts.

-- 
Sean Whitton

Attachment: signature.asc
Description: PGP signature


Reply to: