Files
flatpak/tests
Simon McVittie 3ba6e122e1 test-run: Allow org.test.Setuid to install, as long as it's not setuid
libostree attempts to strip the setuid and setgid bits from file
permissions in user-mode checkouts, which, if successful, would make
Flatpak's check for setuid ineffective and unnecessary. In versions
older than 2017.7 this was not consistently applied, making commits
2c8e241 and 02a299f necessary to defeat CVE-2017-9780 (see #845).

libostree 2017.7 removes setuid and setgid bits more thoroughly
as a result of fixing https://github.com/ostreedev/ostree/issues/633
in PR https://github.com/ostreedev/ostree/pull/903, which means that
this test fails when linking flatpak 0.8.x to libostree 2017.7.

Signed-off-by: Simon McVittie <smcv@debian.org>
2017-06-28 12:17:43 +02:00
..
2015-08-25 13:16:34 +02:00
2016-02-25 15:27:37 +01:00
2016-06-10 12:59:11 +02:00
2016-02-25 19:03:09 +01:00
2016-06-03 16:04:10 +02:00
2017-01-16 11:51:14 +01:00
2017-04-03 13:43:56 +02:00