Skip to content

GitLab

apk-tools
apk-tools
Open
Opened by Jakub Skrzypnik@skrzyp

APK is executing scripts inside /var/cache, and it prevents normal operation

Hello,

I was trying complex ZFS pools, so I added the /var/cache as separate ZFS volume.
As security mesaure, I’ve disabled execution on it, to reduce attack surface.

And it broke APK:

ERROR:  packagename }}-{{packageversion : script exited with error 1

From some debugging I’ve figured out that APK executes post/pre-install scripts inside /var/cache directly after unpacking .apk files.

PROPOSED SOLUTION: Move the unpacking and processing phase into /tmp, remove files after processing

(from redmine: issue id 6591, created on 2016-12-27)