projects / buildroot.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f290046) | patch
fs/tar: only store numeric uid/gid
authorYann E. MORIN <yann.morin.1998@free.fr>
Mon, 16 Feb 2015 17:49:16 +0000 (18:49 +0100)
committerThomas Petazzoni <thomas.petazzoni@free-electrons.com>
Thu, 19 Feb 2015 21:02:59 +0000 (22:02 +0100)
commit66ee6dc8721ce8746a8352f02f52663b90887c63
tree825970b10d5d8b935325a624729e46da5ab368d6tree
parentf290046f66b714e9e4670e85e618c72f11745ca2commit | diff
fs/tar: only store numeric uid/gid

If a target user is asigned a UID (e.g. 1000) that happens to also exist
on the build machine, tar will happily store the username for that user.

This can be seen by some as potential information disclosure.

Instruct tar to just store the numeric uid/gid.

Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
fs/tar/tar.mk diff | blob | history