fix(package): prepare capability-free RPM root #181
Loading…
Reference in a new issue
No description provided.
Delete branch "fix/rpm-writable-usrbin-v4"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
AlmaLinux ships /usr/bin as mode 0555. The isolated package-test pod drops CAP_DAC_OVERRIDE, so RPM cannot add payload files there. Make only the disposable tester root owner-writable during image construction and keep the runtime pod capability-free.