You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-commits@hadoop.apache.org by st...@apache.org on 2022/04/18 18:29:17 UTC
[hadoop] branch branch-3.3 updated: HADOOP-18202. create-release fails fatal: unsafe repository (#4188)
This is an automated email from the ASF dual-hosted git repository.
stevel pushed a commit to branch branch-3.3
in repository https://gitbox.apache.org/repos/asf/hadoop.git
The following commit(s) were added to refs/heads/branch-3.3 by this push:
new 51a532a532e HADOOP-18202. create-release fails fatal: unsafe repository (#4188)
51a532a532e is described below
commit 51a532a532e3bd506b0e0bc6661bd7942685e93e
Author: Steve Loughran <st...@cloudera.com>
AuthorDate: Mon Apr 18 19:24:35 2022 +0100
HADOOP-18202. create-release fails fatal: unsafe repository (#4188)
Since April 2022/CVE-2022-24765, git refuses to work in directories
whose owner != the current user, unless explicitly told to trust it.
This patches the create-release script to trust the /build/source
dir mounted from the hosting OS, whose userid is inevitably different
from that of the account in the container running git.
Contributed by: Steve Loughran, Ayush Saxena and the new git error messages
Change-Id: I855a105e6d0ab533468f9436578c8d4f81b0840b
---
dev-support/bin/create-release | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/dev-support/bin/create-release b/dev-support/bin/create-release
index 39a5d0d3198..36829179630 100755
--- a/dev-support/bin/create-release
+++ b/dev-support/bin/create-release
@@ -535,6 +535,10 @@ function makearelease
big_console_header "Cleaning the Source Tree"
+ # Since CVE-2022-24765 in April 2022, git refuses to work in directories
+ # whose owner != the current user, unless explicitly told to trust it.
+ git config --global --add safe.directory /build/source
+
# git clean to clear any remnants from previous build
run "${GIT}" clean -xdf -e /patchprocess
---------------------------------------------------------------------
To unsubscribe, e-mail: common-commits-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-commits-help@hadoop.apache.org