MahnoKropotkinvich/redox
1
0
Fork 0
mirror of https://gitlab.redox-os.org/redox-os/redox.git synced 2026-11-05 04:06:38 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

Compare commits

base: MahnoKropotkinvich:40544cdbae600b6aac283b4a18f8947e2b44b3d6
Branches Tags
MahnoKropotkinvich:master
MahnoKropotkinvich:llm-policy
MahnoKropotkinvich:useful-aliases
MahnoKropotkinvich:orbital-envivars
MahnoKropotkinvich:adopt-upstream-certificate-of-origin
MahnoKropotkinvich:install-jre-headless
MahnoKropotkinvich:install-git-lfs
MahnoKropotkinvich:redox-tests-ci
MahnoKropotkinvich:add-redox-target
MahnoKropotkinvich:add-mold-package
MahnoKropotkinvich:add-dev-user
MahnoKropotkinvich:enable-ffmpeg
MahnoKropotkinvich:binary-variant
MahnoKropotkinvich:remove-coreutils
MahnoKropotkinvich:enable-libretro
MahnoKropotkinvich:call-for-testing
MahnoKropotkinvich:single-core
MahnoKropotkinvich:cookbook-gui-fix
MahnoKropotkinvich:update-script
MahnoKropotkinvich:0.4.1
MahnoKropotkinvich:0.9.0
MahnoKropotkinvich:0.8.0
MahnoKropotkinvich:0.7.0
MahnoKropotkinvich:0.6.0
MahnoKropotkinvich:0.5.0
MahnoKropotkinvich:0.4.1
MahnoKropotkinvich:0.3.5
MahnoKropotkinvich:0.3.4
MahnoKropotkinvich:0.3.3
MahnoKropotkinvich:0.3.2
MahnoKropotkinvich:0.3.1
MahnoKropotkinvich:0.3.0
MahnoKropotkinvich:0.2.0
MahnoKropotkinvich:0.1.5
MahnoKropotkinvich:0.1.4
MahnoKropotkinvich:0.1.3
MahnoKropotkinvich:0.1.2
MahnoKropotkinvich:0.1.1
MahnoKropotkinvich:0.1.0
MahnoKropotkinvich:0.0.9
MahnoKropotkinvich:0.0.8
MahnoKropotkinvich:0.0.7
MahnoKropotkinvich:0.0.6
MahnoKropotkinvich:0.0.5
MahnoKropotkinvich:0.0.4
MahnoKropotkinvich:0.0.3
MahnoKropotkinvich:0.0.2
MahnoKropotkinvich:0.0.1
...
compare: MahnoKropotkinvich:70a3f9e16ed71461b6a3f58220b61576172329b0
Branches Tags
MahnoKropotkinvich:master
MahnoKropotkinvich:llm-policy
MahnoKropotkinvich:useful-aliases
MahnoKropotkinvich:orbital-envivars
MahnoKropotkinvich:adopt-upstream-certificate-of-origin
MahnoKropotkinvich:install-jre-headless
MahnoKropotkinvich:install-git-lfs
MahnoKropotkinvich:redox-tests-ci
MahnoKropotkinvich:add-redox-target
MahnoKropotkinvich:add-mold-package
MahnoKropotkinvich:add-dev-user
MahnoKropotkinvich:enable-ffmpeg
MahnoKropotkinvich:binary-variant
MahnoKropotkinvich:remove-coreutils
MahnoKropotkinvich:enable-libretro
MahnoKropotkinvich:call-for-testing
MahnoKropotkinvich:single-core
MahnoKropotkinvich:cookbook-gui-fix
MahnoKropotkinvich:update-script
MahnoKropotkinvich:0.4.1
MahnoKropotkinvich:0.9.0
MahnoKropotkinvich:0.8.0
MahnoKropotkinvich:0.7.0
MahnoKropotkinvich:0.6.0
MahnoKropotkinvich:0.5.0
MahnoKropotkinvich:0.4.1
MahnoKropotkinvich:0.3.5
MahnoKropotkinvich:0.3.4
MahnoKropotkinvich:0.3.3
MahnoKropotkinvich:0.3.2
MahnoKropotkinvich:0.3.1
MahnoKropotkinvich:0.3.0
MahnoKropotkinvich:0.2.0
MahnoKropotkinvich:0.1.5
MahnoKropotkinvich:0.1.4
MahnoKropotkinvich:0.1.3
MahnoKropotkinvich:0.1.2
MahnoKropotkinvich:0.1.1
MahnoKropotkinvich:0.1.0
MahnoKropotkinvich:0.0.9
MahnoKropotkinvich:0.0.8
MahnoKropotkinvich:0.0.7
MahnoKropotkinvich:0.0.6
MahnoKropotkinvich:0.0.5
MahnoKropotkinvich:0.0.4
MahnoKropotkinvich:0.0.3
MahnoKropotkinvich:0.0.2
MahnoKropotkinvich:0.0.1

2 Commits
40544cdbae ... 70a3f9e16e

Author SHA1 Message Date
Jeremy Soller
70a3f9e16e Merge branch 'umask_022' into 'master' 
Set umask to 022 while building disk images

See merge request redox-os/redox!2411
 2026-10-28 20:05:25 -06:00
bjorn3
2f62f6d876 Set umask to 022 while building disk images 
This matches the default umask that would actually be used at runtime.
It ensures only the owner has write permissions to system files and
directories rather than owner and group. The Arti tor implementation
checks that /home is not writable for anyone other than the owner.
 2026-10-28 20:52:50 +01:00
1 changed files with 3 additions and 3 deletions
Show Stats Expand all files Collapse all files

6
mk/disk.mk
View File

@ -13,7 +13,7 @@ else
FILESYSTEM_SIZE=$(shell $(INSTALLER) --filesystem-size -c $(FILESYSTEM_CONFIG)); \
fi && \
truncate -s "$$FILESYSTEM_SIZE"m $@.partial
umask 002 && $(INSTALLER) $(INSTALLER_OPTS) -c $(FILESYSTEM_CONFIG) $@.partial
umask 022 && $(INSTALLER) $(INSTALLER_OPTS) -c $(FILESYSTEM_CONFIG) $@.partial
mv $@.partial $@
endif
@ -29,7 +29,7 @@ else
FILESYSTEM_SIZE=$(shell $(INSTALLER) --filesystem-size -c $(FILESYSTEM_CONFIG)); \
fi && \
truncate -s "$$FILESYSTEM_SIZE"m $@.partial
umask 002 && $(INSTALLER) $(INSTALLER_OPTS) -c $(FILESYSTEM_CONFIG) --write-bootloader="$(BUILD)/bootloader-live.efi" --live $@.partial
umask 022 && $(INSTALLER) $(INSTALLER_OPTS) -c $(FILESYSTEM_CONFIG) --write-bootloader="$(BUILD)/bootloader-live.efi" --live $@.partial
mv $@.partial $@
cp redox.ipxe $(BUILD)/redox.ipxe
endif
@ -52,7 +52,7 @@ else
$(REDOXFS) $@.partial $(MOUNT_DIR)
sleep 1
pgrep redoxfs
umask 002 && $(INSTALLER) $(INSTALLER_OPTS) -c $(FILESYSTEM_CONFIG) $(MOUNT_DIR)
umask 022 && $(INSTALLER) $(INSTALLER_OPTS) -c $(FILESYSTEM_CONFIG) $(MOUNT_DIR)
sync
-$(FUMOUNT) $(MOUNT_DIR) || true
rm -rf $(MOUNT_DIR)