epm icon indicating copy to clipboard operation
epm copied to clipboard

Use fakeroot to build debs unless run as root

Open michaelweghorn opened this issue 6 years ago • 7 comments

As the documentation states, file ownerships and permissions inside Debian packages are incorrect unless epm is run as root or with the fakeroot command.

Use "fakeroot" inside epm to create the Debian packages to ensure that ownerships and permissions are correct without the user having to take care explicitly.

EPM's documentation currently states:

To ensure that all file permissions and ownerships are correct, you must build the distribution as the root user or use the fakeroot software, introducing potential security risks and violating many corporate security policies.

I am not sure what exactly this means. Does it refer to running as root or to running with fakeroot? So far, I've never heard that using fakeroot introduces any security issues. fakeroot's man page itself says:

SECURITY ASPECTS fakeroot is a regular, non-setuid program. It does not enhance a user's privileges, or decrease the system's security.

michaelweghorn avatar Feb 07 '18 08:02 michaelweghorn