From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.org/gmane.linux.lib.musl.general/4485 Path: news.gmane.org!not-for-mail From: Christian Wiese Newsgroups: gmane.linux.lib.musl.general Subject: Re: install.sh is wrong with libc.so Date: Wed, 15 Jan 2014 12:35:52 +0100 Message-ID: <20140115123552.39250038@mopad> References: <5905c9fb-9fc8-4cf1-ac29-ed830c8ae5a1@email.android.com> Reply-To: musl@lists.openwall.com NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; boundary="Sig_/IASzjebDuuSxi8iQC55UBtr"; protocol="application/pgp-signature" X-Trace: ger.gmane.org 1389785785 15911 80.91.229.3 (15 Jan 2014 11:36:25 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Wed, 15 Jan 2014 11:36:25 +0000 (UTC) To: musl@lists.openwall.com Original-X-From: musl-return-4489-gllmg-musl=m.gmane.org@lists.openwall.com Wed Jan 15 12:36:31 2014 Return-path: Envelope-to: gllmg-musl@plane.gmane.org Original-Received: from mother.openwall.net ([195.42.179.200]) by plane.gmane.org with smtp (Exim 4.69) (envelope-from ) id 1W3Oll-0001fL-ST for gllmg-musl@plane.gmane.org; Wed, 15 Jan 2014 12:36:25 +0100 Original-Received: (qmail 14113 invoked by uid 550); 15 Jan 2014 11:36:25 -0000 Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: Original-Received: (qmail 14105 invoked from network); 15 Jan 2014 11:36:25 -0000 In-Reply-To: <5905c9fb-9fc8-4cf1-ac29-ed830c8ae5a1@email.android.com> X-Mailer: Claws Mail 3.9.3 (GTK+ 2.24.22; i686-pc-linux-gnu) Xref: news.gmane.org gmane.linux.lib.musl.general:4485 Archived-At: --Sig_/IASzjebDuuSxi8iQC55UBtr Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Hi, On Wed, 15 Jan 2014 16:42:08 +0800 orc wrote: > In case of executable files (which libc.so is), install.sh is wrong > and dangerous. Just for curiosity, what do you mean in particular to be "dangerous"? >=20 > The sequence of commands of install.sh from 0.9.15: >=20 > umask 077 > cat < lib/libc.so > /lib/libc.so.tmp.pid # /lib/libc.so.tmp.pid is > created with mode 600 > mv -f /lib/libc.so.tmp.pid /lib/libc.so > chmod 755 /lib/libc.so # failed with "Permission denied" I just checked the build logs on my own musl based builds that are installing things into a dedicated "sysroot directory" for that build, and the install just works fine. I think what you are doing is calling 'make install' as a non-root user which will obviously fail. What I do not really get is why a normal user should be able to install a '/lib/lbc.so' anyway. That somehow feels more dangerous to me, but maybe I do not get the whole picture here, as you just provided some snippets and you are not telling us how your build process actually looks like. I think the info about how you are building would be quite helpful. Cheers, Chris --=20 PGP Fingerprint: F96B A15F DF25 2B3E 49CB BA16 241B F3E7 52FE AFC6 --Sig_/IASzjebDuuSxi8iQC55UBtr Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (GNU/Linux) iEYEARECAAYFAlLWcpgACgkQJBvz51L+r8Z3OwCeK8/1bIKmIbv2vHgVU2zVdSZY XwsAn091BKj6dyzITYlOVDrDl5v1K2yD =VGa3 -----END PGP SIGNATURE----- --Sig_/IASzjebDuuSxi8iQC55UBtr--