[Bug 288409] dma(8) mail configuration permissions are too liberal

From: <bugzilla-noreply_at_freebsd.org>
Date: Wed, 30 Jul 2025 11:14:43 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=288409

--- Comment #5 from Dag-Erling Smørgrav <des@FreeBSD.org> ---
The first line is a red herring, it's just the last line from `make
installworld` which is called from vm_install_base() shortly before
vm_emulation_setup() tries to run newliases.

(you'll find this in release/scripts/mk-vmimage.sh and
release/tools/vmimage.subr)

I assume you're cross-building from amd64, so what vm_emulation_setup()
actually runs is

    chroot /usr/obj/.../something /qemu newaliases

Presumably /qemu drops privileges on startup and lacks the necessary logic to
apply the dma binary's setgid bit.  That's an issue that needs to be fixed in
qemu -user-static and / or vmimage.subr, not here.

-- 
You are receiving this mail because:
You are on the CC list for the bug.