From nobody Sat Feb 7 15:10:28 2026 Delivered-To: importer@patchew.org Received-SPF: pass (zohomail.com: domain of redhat.com designates 170.10.133.124 as permitted sender) client-ip=170.10.133.124; envelope-from=libvir-list-bounces@redhat.com; helo=us-smtp-delivery-124.mimecast.com; Authentication-Results: mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of redhat.com designates 170.10.133.124 as permitted sender) smtp.mailfrom=libvir-list-bounces@redhat.com; dmarc=pass(p=none dis=none) header.from=redhat.com ARC-Seal: i=1; a=rsa-sha256; t=1654667992; cv=none; d=zohomail.com; s=zohoarc; b=hW5UWOfmsmhDTRSY1Lv18/V/Je9tLGdH9scFIzSsTxLC465/w4c1sz8/2hVSeA9MEulxqnehn/jZoqSDuWkJOjk67ZIgiFTjYsrn0gL0Y7jzyT4cOIyOAoZQWPam4nqnHfW1sYDk88RbSstKecCnPiW2gIxYj4WnBu3RPJYrg+Q= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1654667992; h=Content-Type:Content-Transfer-Encoding:Cc:Date:From:In-Reply-To:List-Subscribe:List-Post:List-Id:List-Archive:List-Help:List-Unsubscribe:MIME-Version:Message-ID:References:Sender:Subject:To; bh=Cy4g96L94M/HauwnKT98pavUbebdSdXTwOOnZKupLGQ=; b=IqoSS/3SPtfza3MOODUrmbUGxsjWVxtC+9CDNFNQdzX9jIqH9V8AuQxxzANdy43kQVf3gmmO3D7c4zrkkX2b1prfeIz90wsdL4gA+dO4YZ/Btrz1yr1A5/UHufwf64So2nz7twOiQIDK6BFoFBdxWlD/6QkNGnffsP1MQgEW2aA= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of redhat.com designates 170.10.133.124 as permitted sender) smtp.mailfrom=libvir-list-bounces@redhat.com; dmarc=pass header.from= (p=none dis=none) Return-Path: Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) by mx.zohomail.com with SMTPS id 1654667992825979.1619947752147; Tue, 7 Jun 2022 22:59:52 -0700 (PDT) Received: from mimecast-mx02.redhat.com (mimecast-mx02.redhat.com [66.187.233.88]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id us-mta-60-DkqWUFTeNReb7PQtwXo99A-1; Wed, 08 Jun 2022 01:59:44 -0400 Received: from smtp.corp.redhat.com (int-mx10.intmail.prod.int.rdu2.redhat.com [10.11.54.10]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id A83E585A580; Wed, 8 Jun 2022 05:59:42 +0000 (UTC) Received: from mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com (unknown [10.30.29.100]) by smtp.corp.redhat.com (Postfix) with ESMTP id C9EF9492C3B; Wed, 8 Jun 2022 05:59:41 +0000 (UTC) Received: from mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com (localhost [IPv6:::1]) by mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com (Postfix) with ESMTP id 426201947B93; Wed, 8 Jun 2022 05:59:41 +0000 (UTC) Received: from smtp.corp.redhat.com (int-mx04.intmail.prod.int.rdu2.redhat.com [10.11.54.4]) by mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com (Postfix) with ESMTP id D8A7B1947042 for ; Wed, 8 Jun 2022 05:59:39 +0000 (UTC) Received: by smtp.corp.redhat.com (Postfix) id C3FB720296A5; Wed, 8 Jun 2022 05:59:39 +0000 (UTC) Received: from nautilus.home.lan (unknown [10.40.192.115]) by smtp.corp.redhat.com (Postfix) with ESMTP id 43B572026D64; Wed, 8 Jun 2022 05:59:39 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1654667991; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post; bh=Cy4g96L94M/HauwnKT98pavUbebdSdXTwOOnZKupLGQ=; b=JvJaffSV3mBPKfVcNYKL0rN7RRD2FJO0tLDmXmO4yQ/BM54NpUa9UEk2q/qgvBKhT11m3r dmk/tq0I6JbleK04U0D2oSKrdSpwS1oR1eHqO9+PBX+BFrV6JSP7oXuzRLwywGLg2PAFAU 0eyrtgZLwk/UdOd+ELvJJ3bAAp5vXIU= X-MC-Unique: DkqWUFTeNReb7PQtwXo99A-1 X-Original-To: libvir-list@listman.corp.redhat.com From: Erik Skultety To: libvir-list@redhat.com Subject: [libvirt PATCH 1/2] ci: integration: SELinux relabel the QEMU we installed from git Date: Wed, 8 Jun 2022 07:59:36 +0200 Message-Id: <5d940b859ba4cd793220a4064b46f5b9545d4c8a.1654667975.git.eskultet@redhat.com> In-Reply-To: References: MIME-Version: 1.0 X-Scanned-By: MIMEDefang 2.78 on 10.11.54.4 X-BeenThere: libvir-list@redhat.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Development discussions about the libvirt library & tools List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: eskultet@redhat.com Errors-To: libvir-list-bounces@redhat.com Sender: "libvir-list" X-Scanned-By: MIMEDefang 2.85 on 10.11.54.10 Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=CUSA124A263 smtp.mailfrom=libvir-list-bounces@redhat.com X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Transfer-Encoding: quoted-printable X-ZohoMail-DKIM: pass (identity @redhat.com) X-ZM-MESSAGEID: 1654667994605100001 Content-Type: text/plain; charset="utf-8"; x-default="true" Signed-off-by: Erik Skultety Reviewed-by: Andrea Bolognani --- ci/integration-template.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/ci/integration-template.yml b/ci/integration-template.yml index e2ccebd1f6..a04c72acbf 100644 --- a/ci/integration-template.yml +++ b/ci/integration-template.yml @@ -98,3 +98,4 @@ - !reference [.integration_tests, before_script] - cd "$SCRATCH_DIR" - *qemu-build-template + - sudo restorecon -R /usr --=20 2.36.1 From nobody Sat Feb 7 15:10:28 2026 Delivered-To: importer@patchew.org Received-SPF: pass (zohomail.com: domain of redhat.com designates 170.10.133.124 as permitted sender) client-ip=170.10.133.124; envelope-from=libvir-list-bounces@redhat.com; helo=us-smtp-delivery-124.mimecast.com; Authentication-Results: mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of redhat.com designates 170.10.133.124 as permitted sender) smtp.mailfrom=libvir-list-bounces@redhat.com; dmarc=pass(p=none dis=none) header.from=redhat.com ARC-Seal: i=1; a=rsa-sha256; t=1654667990; cv=none; d=zohomail.com; s=zohoarc; b=DeRx+5/8jGFBpnzM+Ah5JzkW5rSlv4R4OaW4PpFwAmf4Y/iBLt1DV9ymBc9jy1NR3Iiaz+TRUHfNgjhcR/FPBSjYL/GpXzyVmRRLja1pw+C76YfsCwdGj33s0kN1zAuZ94o8lDMCPfkeJeOwlJMRFQSi2ZNsE4neGS9X9Ytcs38= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1654667990; h=Content-Type:Content-Transfer-Encoding:Cc:Date:From:In-Reply-To:List-Subscribe:List-Post:List-Id:List-Archive:List-Help:List-Unsubscribe:MIME-Version:Message-ID:References:Sender:Subject:To; bh=WWgifMMuHxlzKvDKLmVKUQ9dS/HfQgDSomMeq7KMoVI=; b=F8EvZwJa34HA3TQ3A5G6KdkxnufslwcqLGvcl6IZ8LwN8E+w4n/0xu23oOQxb+1G30COqSVXIBPLIUMHVijRNdCRRTI0jZy6QEMI1cR/8XbtItySwgn04kzxXtRRCROxt9QeHRvdEZNKmPWwfS9Joag9rB+FF4HuGXZ987rP/Qg= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of redhat.com designates 170.10.133.124 as permitted sender) smtp.mailfrom=libvir-list-bounces@redhat.com; dmarc=pass header.from= (p=none dis=none) Return-Path: Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) by mx.zohomail.com with SMTPS id 1654667989806826.3121265795936; Tue, 7 Jun 2022 22:59:49 -0700 (PDT) Received: from mimecast-mx02.redhat.com (mx3-rdu2.redhat.com [66.187.233.73]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id us-mta-64-8vij3ac3PRmF8dQdGwxy4w-1; Wed, 08 Jun 2022 01:59:44 -0400 Received: from smtp.corp.redhat.com (int-mx03.intmail.prod.int.rdu2.redhat.com [10.11.54.3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id 0DBE129DD990; Wed, 8 Jun 2022 05:59:43 +0000 (UTC) Received: from mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com (unknown [10.30.29.100]) by smtp.corp.redhat.com (Postfix) with ESMTP id EDE401121314; Wed, 8 Jun 2022 05:59:42 +0000 (UTC) Received: from mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com (localhost [IPv6:::1]) by mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com (Postfix) with ESMTP id B7D57194704C; Wed, 8 Jun 2022 05:59:42 +0000 (UTC) Received: from smtp.corp.redhat.com (int-mx04.intmail.prod.int.rdu2.redhat.com [10.11.54.4]) by mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com (Postfix) with ESMTP id B06F11947B9E for ; Wed, 8 Jun 2022 05:59:40 +0000 (UTC) Received: by smtp.corp.redhat.com (Postfix) id 8E45D20296A6; Wed, 8 Jun 2022 05:59:40 +0000 (UTC) Received: from nautilus.home.lan (unknown [10.40.192.115]) by smtp.corp.redhat.com (Postfix) with ESMTP id 0DE2F2026D64; Wed, 8 Jun 2022 05:59:39 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1654667987; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post; bh=WWgifMMuHxlzKvDKLmVKUQ9dS/HfQgDSomMeq7KMoVI=; b=ii6xeTt9UV7LHOsNQfkJq/dgPj8hMShYDez+HOt1uwzH2V/F4rPybJ1tKCJirfEgf2V8z7 MtbrBR3CxEscijbWsdP4GjPTl2z53D4N3UpFjoepIHMfCMFcB5nH4i5Eiuszmf1tJZdcn3 Md7CFeOqAonHKc7qmHdkwvc3HY8pNtk= X-MC-Unique: 8vij3ac3PRmF8dQdGwxy4w-1 X-Original-To: libvir-list@listman.corp.redhat.com From: Erik Skultety To: libvir-list@redhat.com Subject: [libvirt PATCH 2/2] ci: integration: Set 'safe.directory' when installing QEMU from git Date: Wed, 8 Jun 2022 07:59:37 +0200 Message-Id: <4539a92e92c9c0cb7e718b51f4f337ab9798d3e7.1654667975.git.eskultet@redhat.com> In-Reply-To: References: MIME-Version: 1.0 X-Scanned-By: MIMEDefang 2.78 on 10.11.54.4 X-BeenThere: libvir-list@redhat.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Development discussions about the libvirt library & tools List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: eskultet@redhat.com Errors-To: libvir-list-bounces@redhat.com Sender: "libvir-list" X-Scanned-By: MIMEDefang 2.78 on 10.11.54.3 Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=CUSA124A263 smtp.mailfrom=libvir-list-bounces@redhat.com X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Transfer-Encoding: quoted-printable X-ZohoMail-DKIM: pass (identity @redhat.com) X-ZM-MESSAGEID: 1654667990572100003 Content-Type: text/plain; charset="utf-8"; x-default="true" Since a fix for CVE-2022-24765 was released every git command is now checked against the context repo in which it's supposed to run resulting in a fatal error if the repo is owned by other user than the one running the git command. This means that in order to be able to do 'sudo make install', we have to set the 'safe.directory' for the root user. This is because QEMU runs 'git submodule update' automatically on 'make install'. Signed-off-by: Erik Skultety --- ci/integration-template.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/ci/integration-template.yml b/ci/integration-template.yml index a04c72acbf..a1fecbb78d 100644 --- a/ci/integration-template.yml +++ b/ci/integration-template.yml @@ -16,6 +16,11 @@ then make -j"$JOBS" check-build; fi + + # we need the following since the fix for CVE-2022-24765 now causes a fa= tal + # error if a user issues a git command from within a directory owned by = some + # other user + - sudo git config --global --add safe.directory "$SCRATCH_DIR/qemu" - sudo make install =20 =20 --=20 2.36.1