Skip to content

Conversation

StaticRocket
Copy link

linuxserver.io


  • I have read the contributing guideline and understand that I have made the correct modifications

Description:

The lsiown command explicitly avoids touching symlinks, allowing root owned symlinks to bleed into PUID/PGID controlled areas.

Use the chown arguments when using rsync to copy files to /data and /config to prevent creating symlinks with root permissions.

Benefits of this PR and context:

Prevents creating symlinks as root, which the fpm or host user will not be able to remove/replace as needed.

How Has This Been Tested?

I used the modified commands to remove existing invalid symlinks from my deployment.

Source / References:

N/A

@LinuxServer-CI
Copy link
Collaborator

I am a bot, here are the test results for this PR:
https://ci-tests.linuxserver.io/lspipepr/nextcloud/31.0.8-pkg-e00e87e2-dev-b8d8aaa7d5559b13dcf10ac6e49ecd5c46ade9e1-pr-517/index.html
https://ci-tests.linuxserver.io/lspipepr/nextcloud/31.0.8-pkg-e00e87e2-dev-b8d8aaa7d5559b13dcf10ac6e49ecd5c46ade9e1-pr-517/shellcheck-result.xml

Tag Passed
amd64-31.0.8-pkg-e00e87e2-dev-b8d8aaa7d5559b13dcf10ac6e49ecd5c46ade9e1-pr-517
arm64v8-31.0.8-pkg-e00e87e2-dev-b8d8aaa7d5559b13dcf10ac6e49ecd5c46ade9e1-pr-517

@LinuxServer-CI
Copy link
Collaborator

I am a bot, here are the test results for this PR:
https://ci-tests.linuxserver.io/lspipepr/nextcloud/31.0.8-pkg-e00e87e2-dev-41cf5401daef2f49fa168d8beb6fee5bfcb43f87-pr-517/index.html
https://ci-tests.linuxserver.io/lspipepr/nextcloud/31.0.8-pkg-e00e87e2-dev-41cf5401daef2f49fa168d8beb6fee5bfcb43f87-pr-517/shellcheck-result.xml

Tag Passed
amd64-31.0.8-pkg-e00e87e2-dev-41cf5401daef2f49fa168d8beb6fee5bfcb43f87-pr-517
arm64v8-31.0.8-pkg-e00e87e2-dev-41cf5401daef2f49fa168d8beb6fee5bfcb43f87-pr-517

@LinuxServer-CI
Copy link
Collaborator

I am a bot, here are the test results for this PR:
https://ci-tests.linuxserver.io/lspipepr/nextcloud/31.0.8-pkg-811a9d38-dev-da30b701a42e97128015baf0dedb702360edca77-pr-517/index.html
https://ci-tests.linuxserver.io/lspipepr/nextcloud/31.0.8-pkg-811a9d38-dev-da30b701a42e97128015baf0dedb702360edca77-pr-517/shellcheck-result.xml

Tag Passed
amd64-31.0.8-pkg-811a9d38-dev-da30b701a42e97128015baf0dedb702360edca77-pr-517
arm64v8-31.0.8-pkg-811a9d38-dev-da30b701a42e97128015baf0dedb702360edca77-pr-517

@LinuxServer-CI
Copy link
Collaborator

This pull request has been automatically marked as stale because it has not had recent activity. This might be due to missing feedback from OP. It will be closed if no further activity occurs. Thank you for your contributions.

The lsiown command explicitly avoids touching symlinks, allowing root
owned symlinks to bleed into PUID/PGID controlled areas.

Use the chown arguments when using rsync to copy files to /data and
/config to prevent creating symlinks with root permissions.

Signed-off-by: Randolph Sapp <[email protected]>
@LinuxServer-CI
Copy link
Collaborator

I am a bot, here are the test results for this PR:
https://ci-tests.linuxserver.io/lspipepr/nextcloud/32.0.0-pkg-645dfd66-dev-f850beb81e6e39dcd5957254dc8130c183d94ce8-pr-517/index.html
https://ci-tests.linuxserver.io/lspipepr/nextcloud/32.0.0-pkg-645dfd66-dev-f850beb81e6e39dcd5957254dc8130c183d94ce8-pr-517/shellcheck-result.xml

Tag Passed
amd64-32.0.0-pkg-645dfd66-dev-f850beb81e6e39dcd5957254dc8130c183d94ce8-pr-517
arm64v8-32.0.0-pkg-645dfd66-dev-f850beb81e6e39dcd5957254dc8130c183d94ce8-pr-517

@StaticRocket
Copy link
Author

Forgive the ping, but @thespad is there any feedback regarding this?

@StaticRocket
Copy link
Author

I've found that this is a requirement to silence log messages like the following:

Could not create folder "/appdata_ocvftq2tj7sk/appstore/app-discover-cache/68dcc361-18dd", folder exists but unable to get cache entry

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Development

Successfully merging this pull request may close these issues.

2 participants