trezor / trezord-go

:smiling_imp: Trezor Communication Daemon (written in Go)
GNU Lesser General Public License v3.0
241 stars 146 forks source link

Fix linux build for linux hosts #267

Closed igor-hnizdo closed 1 year ago

igor-hnizdo commented 1 year ago

The issue is with new git, and Linux Docker hosts.

It's a mitigation against CVE-2022-24765, as the owner of the outside repo needs to be the same as the current user; and the user inside the docker container is root. (Go is running git to do the version stamping.)

Simple fix is to add a safe directory, as the CVE does not apply to us.