Hi,

I just read chapter 8.3.1 which states:

        It is important to note that the files in the kernel source
        directory are not owned by root. Whenever a package is unpacked
        as user root (like we did inside chroot), the files have the
        user and group IDs of whatever they were on the packager's
        computer.

But the kernel sources are tar'ed world-writable, and the default
behaviour of GNU tar is to preserve both the owner *and* permissions
when running as root. This is a pretty serious flaw if people aren't
aware of it, so I think it needs to be mentioned.

Thanks for a great, distro-neutral book! :-)

-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-dev
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page

Reply via email to