diff options
| author | Yann E. MORIN <yann.morin.1998@free.fr> | 2015-02-16 18:49:16 +0100 |
|---|---|---|
| committer | Thomas Petazzoni <thomas.petazzoni@free-electrons.com> | 2015-02-19 22:02:59 +0100 |
| commit | 66ee6dc8721ce8746a8352f02f52663b90887c63 (patch) | |
| tree | 825970b10d5d8b935325a624729e46da5ab368d6 | |
| parent | f290046f66b714e9e4670e85e618c72f11745ca2 (diff) | |
| download | buildroot-66ee6dc8721ce8746a8352f02f52663b90887c63.tar.gz buildroot-66ee6dc8721ce8746a8352f02f52663b90887c63.zip | |
fs/tar: only store numeric uid/gid
If a target user is asigned a UID (e.g. 1000) that happens to also exist
on the build machine, tar will happily store the username for that user.
This can be seen by some as potential information disclosure.
Instruct tar to just store the numeric uid/gid.
Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
| -rw-r--r-- | fs/tar/tar.mk | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/fs/tar/tar.mk b/fs/tar/tar.mk index 780827e42f..28219cf052 100644 --- a/fs/tar/tar.mk +++ b/fs/tar/tar.mk @@ -7,7 +7,7 @@ TAR_OPTS := $(call qstrip,$(BR2_TARGET_ROOTFS_TAR_OPTIONS)) define ROOTFS_TAR_CMD - tar -c$(TAR_OPTS)f $@ -C $(TARGET_DIR) . + tar -c$(TAR_OPTS)f $@ --numeric-owner -C $(TARGET_DIR) . endef $(eval $(call ROOTFS_TARGET,tar)) |
