[google/syzkaller] 991b4a: pkg/aflow: execute git revert with sandboxing in c...

[Aleksandr Nogikh]

Branch: refs/heads/gh-readonly-queue/master/pr-7541-6a0c72dc19b6aed338462dcb11d299092801d530
Home: https://github.com/google/syzkaller
Commit: 991b4a336166ba0cdcdb564caa190d082d85d727
https://github.com/google/syzkaller/commit/991b4a336166ba0cdcdb564caa190d082d85d727
Author: Aleksandr Nogikh <nog...@google.com>
Date: 2026-06-29 (Mon, 29 Jun 2026)

Changed paths:
M pkg/aflow/action/kernel/checkout.go

Log Message:
-----------
pkg/aflow: execute git revert with sandboxing in checkout

Currently, the `git revert` command used to remove the bogus clang-tools
commit executes as root via `osutil.RunCmd`. This creates root-owned object
directories in the global, sandboxed linux checkout. If a later sandboxed
operation (like `git fetch`) downloads an object that maps to the same
prefix directory, it fails with "insufficient permission".

Fix this by using `runSandboxedGit` for the revert, ensuring all created
objects are correctly owned by the syzkaller user.



To unsubscribe from these emails, change your notification settings at https://github.com/google/syzkaller/settings/notifications

[Aleksandr Nogikh]

Branch: refs/heads/master