RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 2152001 - buildah: ubi8 sticky bit removed from /tmp
Summary: buildah: ubi8 sticky bit removed from /tmp
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 9
Classification: Red Hat
Component: buildah
Version: 9.2
Hardware: x86_64
OS: Linux
unspecified
high
Target Milestone: rc
: ---
Assignee: Jindrich Novy
QA Contact: Joy Pu
URL:
Whiteboard:
Depends On: 2141452
Blocks: 2138434 2152022 2152023
TreeView+ depends on / blocked
 
Reported: 2022-12-08 20:26 UTC by Tom Sweeney
Modified: 2023-05-09 08:45 UTC (History)
20 users (show)

Fixed In Version: buildah-1.28.2-2.el9
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 2141452
: 2152022 (view as bug list)
Environment:
Last Closed: 2023-05-09 07:39:04 UTC
Type: Bug
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github containers buildah pull 4455 0 None open [release-1.27] copier.Put(): clear up os/syscall mode bit confusion 2022-12-08 21:25:07 UTC
Red Hat Issue Tracker RHELPLAN-141717 0 None None None 2022-12-08 20:38:22 UTC
Red Hat Product Errata RHSA-2023:2253 0 None None None 2023-05-09 07:53:15 UTC

Comment 2 Tom Sweeney 2022-12-08 21:14:56 UTC
https://github.com/containers/buildah/pull/4428 needs to be backported to the release-1.27 branch

Comment 3 Tom Sweeney 2022-12-08 21:28:42 UTC
Setting to post and assigning to @jnovy@jnovy for any further packaging or BZ needs.

Comment 10 Joy Pu 2022-12-29 03:20:25 UTC
Test with buildah-1.28.2-2.el9.x86_64, the flag "t" exist after build, so move this to verified.

[root@ibm-x3650m4-01-vm-02 test]#  buildah bud -t sticky-test .
STEP 1/23: FROM scratch
STEP 2/23: ADD rhel-base-fs-container-8.6-2480.x86_64.tar.gz /
STEP 3/23: ADD tls-ca-bundle.pem /tmp/tls-ca-bundle.pem
STEP 4/23: ADD atomic-reactor-repos/* /etc/yum.repos.d/
STEP 5/23: LABEL maintainer="Red Hat, Inc."
STEP 6/23: LABEL com.redhat.component="ubi8-container"       name="ubi8"       version="8.6"
STEP 7/23: LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"
STEP 8/23: LABEL summary="Provides the latest release of Red Hat Universal Base Image 8."
STEP 9/23: LABEL description="The Universal Base Image is designed and engineered to be the base layer for all of your containerized applications, middleware and utilities. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."
STEP 10/23: LABEL io.k8s.display-name="Red Hat Universal Base Image 8"
STEP 11/23: LABEL io.openshift.expose-services=""
STEP 12/23: LABEL io.openshift.tags="base rhel8"
STEP 13/23: ENV container oci
STEP 14/23: ENV PATH /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
STEP 15/23: CMD ["/bin/bash"]
STEP 16/23: RUN rm -rf /var/log/*
STEP 17/23: RUN mkdir -p /var/log/rhsm
STEP 18/23: LABEL release=1054
STEP 19/23: ADD ubi8-container-8.6-1054.json /root/buildinfo/content_manifests/ubi8-container-8.6-1054.json
STEP 20/23: ADD Dockerfile-ubi8-8.6-1054 /root/buildinfo/Dockerfile-ubi8-8.6-1054
STEP 21/23: LABEL "distribution-scope"="public" "vendor"="Red Hat, Inc." "build-date"="2022-12-19T02:04:53" "architecture"="x86_64" "vcs-type"="git" "vcs-ref"="f1ee6e37554363ec55e0035aba1a693d3627fdeb" "io.k8s.description"="The Universal Base Image is designed and engineered to be the base layer for all of your containerized applications, middleware and utilities. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly." "url"="https://access.redhat.com/containers/#/registry.access.redhat.com/ubi8/images/8.6-1054"
STEP 22/23: RUN rm -f '/etc/yum.repos.d/beaker-AppStream.repo'
STEP 23/23: RUN rm -f /tmp/tls-ca-bundle.pem
COMMIT sticky-test
Getting image source signatures
Copying blob 9d0d989baa4f done  
Copying config bbc9d0b721 done  
Writing manifest to image destination
Storing signatures
--> bbc9d0b721c
Successfully tagged localhost/sticky-test:latest
bbc9d0b721c79883b4c5b999615eab93846803406e09a438adb7ecaef4f90e1b
[root@ibm-x3650m4-01-vm-02 test]# buildah from sticky-test
sticky-test-working-container
[root@ibm-x3650m4-01-vm-02 test]# buildah run sticky-test-working-container ls -ld /tmp/
drwxrwxrwt. 2 root root 58 Dec 29 03:17 /tmp/

Comment 12 errata-xmlrpc 2023-05-09 07:39:04 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: buildah security and bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2023:2253

Comment 13 errata-xmlrpc 2023-05-09 07:53:04 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: buildah security and bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2023:2253


Note You need to log in before you can comment on or make changes to this bug.