[oe] [meta-qt5][PATCH] qtbase: fix QA warning of host uid leakage

Anders Darander anders at chargestorm.se
Mon Oct 19 06:06:03 UTC 2015


* Martin Jansa <martin.jansa at gmail.com> [151015 21:48]:

> On Thu, Oct 15, 2015 at 08:21:27PM +0200, Anders Darander wrote:
> > Two files in /usr/lib, were own by the uid of the build process.

> > Signed-off-by: Anders Darander <anders at chargestorm.se>
> > ---
> >  recipes-qt/qt5/qtbase_git.bb | 2 ++
> >  1 file changed, 2 insertions(+)

> > diff --git a/recipes-qt/qt5/qtbase_git.bb b/recipes-qt/qt5/qtbase_git.bb
> > index 39d02a9..99ac208 100644
> > --- a/recipes-qt/qt5/qtbase_git.bb
> > +++ b/recipes-qt/qt5/qtbase_git.bb
> > @@ -232,6 +232,8 @@ do_install_append() {
> >          chown -R root:root ${D}/${OE_QMAKE_PATH_QT_FONTS}
> >      fi
> >      cp -a ${B}/lib/libqt* ${D}${libdir}

> Can we use install instead of cp to resolve this issue instead of chmod?

Well, that was my first idea too. Though, to be honest, I never looked
into how many files were covered by the cp command.

At least with my minimal configuration Qt, it's only the two files below
that gets copied. So I'll respin the patch to use install instead.

Do you, or someone else know if there are occasions were more than the
two file belows matches ${B}/lib/libqt*?

Cheers,
Anders

> > +    chown root:root ${D}${libdir}/libqtpcre.prl
> > +    chown root:root ${D}${libdir}/libqtpcre.a
> >      # Remove example.pro file as it is useless
> >      rm -f ${D}${OE_QMAKE_PATH_EXAMPLES}/examples.pro
-- 
Anders Darander
ChargeStorm AB / eStorm AB



More information about the Openembedded-devel mailing list