containers / containers/toolbox

/dev/shm is currently mounted with noexec

Open
#1,607 0 comments 0 reactions 0 assignees View on GitHub
1. Bug
Dominant language
Go
Stars
3.5k
Forks
262
Avg merge
3d 1h
Merged PRs (30d)
1

Description

`/dev/shm` is currently mounted with noexec, there one can not for example run `configure` scripts inside `/dev/shm` when building code off-tree.

```
fedora-toolbox-41 [pbrezina /dev/shm/authselect]$ ~/workspace/authselect/configure --enable-silent-rules --prefix=/dev/shm/authselect-install
checking for gcc... gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables...
checking whether we are cross compiling... configure: error: in '/dev/shm/authselect':
configure: error: cannot run C compiled programs.
If you meant to cross compile, use '--host'.
See 'config.log' for more details
```

```
$ mount | grep shm
tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev,seclabel,inode64)
tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev,noexec,seclabel,inode64)
tmpfs on /run/host/dev/shm type tmpfs (rw,nosuid,nodev,seclabel,inode64)
```

The workaround can be to use `/run/host/dev/shm`, but I think toolbox should allow exec bits on `/dev/shm` as well, given its development purpose.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.