[SSSD] Config file ownership and cwrap tests

Nikolai Kondrashov Nikolai.Kondrashov at redhat.com
Wed Jan 21 12:19:57 UTC 2015


On 01/21/2015 02:05 PM, Roland Mainz wrote:
>
>
> ----- Original Message -----
>> From: "Nikolai Kondrashov" <Nikolai.Kondrashov at redhat.com>
>> To: "Development of the System Security Services Daemon" <sssd-devel at lists.fedorahosted.org>
>> Sent: Friday, January 16, 2015 1:22:29 PM
>> Subject: Re: [SSSD] Config file ownership and cwrap tests
>>
>> On 01/14/2015 08:09 PM, Lukas Slebodnik wrote:
>>> Using fakeroot is much better solution then adding hack with env variables.
>>>
>>> BTW fakeroot provides a fake root environment by means of LD_PRELOAD.
>>> The only disadvantage of fakeroot is that is not available on all
>>> platforms.
>>> (but there is not problem to prepare COPR repo)
>>>
>>> So basically there is not a big difference between fakeroot and other cwrap
>>> packages.
>>
>> Just an update: it's not all rainbows in the fakeroot land either. It's not
>> wrapping open()/create(). That means that all files sssd creates belong to
>> root under fakeroot (even though it can chown them to anything), which is not
>> compatible with --with-sssd-user.
>>
>> I'm also having some problem starting sssd as root under fakeroot. Something
>> to do with D-BUS sockets probably.
>
> Does Fedora have union mounts (originally from Plan 9, AFAIK Linux calls
> this "unionfs" or "overlayfs") ? If "yes" then some stunts with unionfs and
> |chroot()| should be possible for testing. Let me know if I should dig-out
> the details...

I guess it does, but that would require a real root, which is against our
requirements of running from within a "make check" as a regular user.

Nick



More information about the sssd-devel mailing list