[Rpm-maint] [rpm-software-management/rpm] rpm --verify doesn't respect --root (#882)

Lars Karlitski notifications at github.com
Thu Oct 3 23:22:08 UTC 2019


When running `rpm --verify` with `--root`, rpm uses `passwd` from the host to verify that user and group ownerships match. This gives wrong results, because the host's uid and gid mappings might be different from the target's.

Verifiable with `strace rpm --root $PWD/foo --verify strace`. `/etc/passwd` from the host is read before `chroot` is called.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/882
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20191003/03e4ccce/attachment-0001.html>


More information about the Rpm-maint mailing list