bootstrap: chown the whole cloned repo, not just the subfolders
authorAndrew Bartlett <abartlet@samba.org>
Fri, 6 May 2022 01:29:05 +0000 (13:29 +1200)
committerAndrew Bartlett <abartlet@samba.org>
Tue, 10 May 2022 23:05:31 +0000 (23:05 +0000)
Modern git versions have started to notice the possible security issue.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
.gitlab-ci-main.yml
bootstrap/.gitlab-ci.yml
bootstrap/sha1sum.txt

index 1a01435a9255fc201851696e1487ba0206cbce82..bd73e82b9066271c31cd8174ca0ab3b706da2604 100644 (file)
@@ -42,7 +42,7 @@ variables:
   # Set this to the contents of bootstrap/sha1sum.txt
   # which is generated by bootstrap/template.py --render
   #
-  SAMBA_CI_CONTAINER_TAG: 70150480b61ebdec7ec9b4c1214461c88d6de6d6
+  SAMBA_CI_CONTAINER_TAG: 24f32ce7e4d6be357394ec3cf7b9e15b48a20cf1
   #
   # We use the ubuntu1804 image as default as
   # it matches what we have on sn-devel-184.
index 0d2ec1825760379487d5fad0caabac0a535de0a8..57979463aa133f4432d5988893873a4a00c8c828 100644 (file)
@@ -47,7 +47,7 @@ services:
     diff -u bootstrap/sha1sum.txt /tmp/sha1sum-template.txt
     # run smoke test with samba-o3 or samba-fuzz
     docker run --volume $(pwd):${samba_repo_root} --workdir ${samba_repo_root} ${ci_image_name} \
-        /bin/bash -c "sudo chown -R samba:samba ./** && export PKG_CONFIG_PATH=/usr/lib64/compat-gnutls34/pkgconfig:/usr/lib64/compat-nettle32/pkgconfig && script/autobuild.py ${SAMBA_CI_TEST_JOB} --verbose --nocleanup --keeplogs --tail --testbase /tmp/samba-testbase"
+        /bin/bash -c "sudo chown -R samba:samba ${samba_repo_root} && export PKG_CONFIG_PATH=/usr/lib64/compat-gnutls34/pkgconfig:/usr/lib64/compat-nettle32/pkgconfig && script/autobuild.py ${SAMBA_CI_TEST_JOB} --verbose --nocleanup --keeplogs --tail --testbase /tmp/samba-testbase"
     docker tag ${ci_image_name} ${ci_image_path}:${SAMBA_CI_CONTAINER_TAG}
     docker tag ${ci_image_name} ${ci_image_path}:${timestamp_tag}
     # We build all images, but only upload is it's not marked as broken
index e6b93ec32be3af41ea02491dcdcdacaf0bce3b7a..b2f8ce45aee05d4472d2a31f7cbb665e80c9ec96 100644 (file)
@@ -1 +1 @@
-70150480b61ebdec7ec9b4c1214461c88d6de6d6
+24f32ce7e4d6be357394ec3cf7b9e15b48a20cf1