- Arch-projects - lists.archlinux.org

[arch-projects] [namcap] [PATCH] elffiles: also check DF_BIND_NOW when checking FULL RELRO
by Chih-Hsuan Yen 11 Sep '18

11 Sep '18

Looks like DF_BIND_NOW has the same function as DT_BIND_NOW. --- Namcap/rules/elffiles.py | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/Namcap/rules/elffiles.py b/Namcap/rules/elffiles.py index d707a58..b2ce6ec 100644 --- a/Namcap/rules/elffiles.py +++ b/Namcap/rules/elffiles.py @@ -140,11 +140,16 @@ class ELFGnuRelroRule(TarballRule): description = "Check for FULL RELRO in ELF files." def has_bind_now(self, elffile): + DF_BIND_NOW = 8 + for section in elffile.iter_sections(): if not isinstance(section, DynamicSection): continue - if any(tag.entry.d_tag == 'DT_BIND_NOW' for tag in section.iter_tags()): - return True + for tag in section.iter_tags(): + if tag.entry.d_tag == 'DT_BIND_NOW': + return True + if tag.entry.d_tag == 'DT_FLAGS' and tag.entry.d_val & DF_BIND_NOW: + return True return False def analyze(self, pkginfo, tar): -- 2.19.0

1 0

[arch-projects] [devtools] [PATCH v2 0/3] Add man pages
by Jelle van der Waa 09 Sep '18

09 Sep '18

This is v2 of my man page addition effort, I've switched from mandoc to the much easier asciidoc. Another reason to use asciidoc is that pacman/pacman-contrib also use it. So possible contributors might be more familiar with it. Thanks to Luke Shumaker for some more inspiration for the content! Jelle van der Waa (3): doc: Add lddd man page doc: Add checkpkg man page doc: add find-libprovides man page .gitignore | 1 + Makefile | 23 ++++++++++++++++++-- doc/asciidoc.conf | 37 +++++++++++++++++++++++++++++++++ doc/checkpkg.1.asciidoc | 27 ++++++++++++++++++++++++ doc/find-libprovides.1.asciidoc | 24 +++++++++++++++++++++ doc/footer.asciidoc | 28 +++++++++++++++++++++++++ doc/lddd.1.asciidoc | 25 ++++++++++++++++++++++ 7 files changed, 163 insertions(+), 2 deletions(-) create mode 100644 doc/asciidoc.conf create mode 100644 doc/checkpkg.1.asciidoc create mode 100644 doc/find-libprovides.1.asciidoc create mode 100644 doc/footer.asciidoc create mode 100644 doc/lddd.1.asciidoc -- 2.18.0

1 3

[arch-projects] [dbscripts] [GIT] Official repo DB scripts branch master updated. 20180603-3-g0b630e2
by eschwartz＠archlinux.org 09 Sep '18

09 Sep '18

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "Official repo DB scripts". The branch, master has been updated via 0b630e25a3181d5228cbd99c9041a04b6514fc81 (commit) via 57a307d6620d8fbf3bf1c7d01e621022da4f3f29 (commit) from c53352c103e023727ce31e98ca9647bb918a9a5d (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 0b630e25a3181d5228cbd99c9041a04b6514fc81 Author: anthraxx <anthraxx(a)archlinux.org> Date: Mon Sep 3 13:50:16 2018 +0200 fix potential bsdtar stream close error by grep This silences a useless error message that confuses the user. bsdtar doesn't like it when the stream gets closed before it finishes which may be the case when grep found its match on potentially huge archives. Instead of suppressing the whole stderr , we find all matches with grep, then use a second pass with `tail` to find only the last match, which ensures the stream remains open for bsdtar but we may still catch and see useful messages on stderr. This works because tail has the useful property of not closing early. commit 57a307d6620d8fbf3bf1c7d01e621022da4f3f29 Author: anthraxx <anthraxx(a)archlinux.org> Date: Mon Sep 3 22:01:16 2018 +0200 readme: switch to travis-ci.com build status badge The old travis-ci.org is deprecated and this project was migrated. ----------------------------------------------------------------------- Summary of changes: README.md | 2 +- db-functions | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) hooks/post-receive -- Official repo DB scripts

1 0

[arch-projects] [dbscripts] [PATCH 1/2] readme: switch to travis-ci.com build status badge
by anthraxx＠archlinux.org 09 Sep '18

09 Sep '18

From: anthraxx <anthraxx(a)archlinux.org> The old travis-ci.org is deprecated and this project was migrated. --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index c672998..bdd958b 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,4 @@ -# Arch Linux repository management scripts [![Build Status](https://travis-ci.org/archlinux/dbscripts.svg?branch=master)](https… +# Arch Linux repository management scripts [![Build Status](https://travis-ci.com/archlinux/dbscripts.svg?branch=master)](https… ## Configuration * The default configuration can be found in `config`. * An optional `config.local` may override the default configuration. -- 2.18.0

2 6

[arch-projects] [devtools] [PATCH 0/2] [RFC] Add an pages
by Jelle van der Waa 26 Aug '18

26 Aug '18

This patch series intends to be an RFC for adding man pages for every tool provided by devtools. The first man page for lddd is written in mdoc and is lacking a way to reduce duplication of common headers such as BUGS/AUTHORS. Note that the pacman bug motto was re-used, it's up for debate and the same for the bug location. Do we prefer the bugtracker of mailing lists for bug reports? Jelle van der Waa (2): Add lddd manual install man pages Makefile | 5 +++++ doc/lddd.1 | 27 +++++++++++++++++++++++++++ 2 files changed, 32 insertions(+) create mode 100644 doc/lddd.1 -- 2.18.0

3 4

[arch-projects] [dbscripts] [GIT] Official repo DB scripts branch master updated. 20180603-1-gc53352c
by eschwartz＠archlinux.org 26 Aug '18

26 Aug '18

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "Official repo DB scripts". The branch, master has been updated via c53352c103e023727ce31e98ca9647bb918a9a5d (commit) from 08995618eb606523b7d05ac987b1243981290839 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit c53352c103e023727ce31e98ca9647bb918a9a5d Author: Jelle van der Waa <jelle(a)vdwaa.nl> Date: Sun Aug 26 14:52:59 2018 +0200 cron-jobs: remove unused cron jobs Updating the archweb database is now handled by archweb itself and deployed on the server using a systemd unit/service. These scripts are no longer used. Signed-off-by: Jelle van der Waa <jelle(a)vdwaa.nl> ----------------------------------------------------------------------- Summary of changes: README.md | 6 +--- cron-jobs/update-web-db | 78 ------------------------------------------- cron-jobs/update-web-files-db | 1 - 3 files changed, 1 insertion(+), 84 deletions(-) delete mode 100755 cron-jobs/update-web-db delete mode 120000 cron-jobs/update-web-files-db hooks/post-receive -- Official repo DB scripts

1 0

[arch-projects] [dbscripts] [PATCH] cron-jobs: remove unused cron jobs
by Jelle van der Waa 26 Aug '18

26 Aug '18

Updating the archweb database is now handled by archweb itself and deployed on the server using a systemd unit/service. These scripts are no longer used. Signed-off-by: Jelle van der Waa <jelle(a)vdwaa.nl> --- README.md | 6 +-- cron-jobs/update-web-db | 78 ----------------------------------- cron-jobs/update-web-files-db | 1 - 3 files changed, 1 insertion(+), 84 deletions(-) delete mode 100755 cron-jobs/update-web-db delete mode 120000 cron-jobs/update-web-files-db diff --git a/README.md b/README.md index c672998..925cca7 100644 --- a/README.md +++ b/README.md @@ -11,9 +11,7 @@ The executables that you (might) care about are: │ ├── devlist-mailer │ ├── ftpdir-cleanup │ ├── integrity-check - │ ├── sourceballs - │ ├── update-web-db - │ └── update-web-files-db + │ └── sourceballs ├── db-move ├── db-remove ├── db-repo-add @@ -56,8 +54,6 @@ Things that haven't been mentioned yet: - `cron-jobs/devlist-mailer` - `cron-jobs/sourceballs` - - `cron-jobs/update-web-db` - - `cron-jobs/update-web-files-db` ## Testing * Install the `make` and `docker` packages. Start the docker daemon by issuing `systemctl start docker`. * The test suite can now be run with `make test`. diff --git a/cron-jobs/update-web-db b/cron-jobs/update-web-db deleted file mode 100755 index 39ed765..0000000 --- a/cron-jobs/update-web-db +++ /dev/null @@ -1,78 +0,0 @@ -#!/bin/bash - -. "$(dirname "$(readlink -e "$0")")/../config" -. "$(dirname "$(readlink -e "$0")")/../db-functions" - -# setup paths -SPATH="/srv/http/archweb" -ENVPATH="/srv/http/archweb-env/bin/activate" - -# having "more important repos" last should make [core] trickle to the top of -# the updates list each hour rather than being overwhelmed by big [extra] and -# [community] updates -REPOS=('community-testing' 'multilib-testing' 'multilib' 'community' 'extra' 'testing' 'core') -LOGOUT="/tmp/archweb_update.log" - -# figure out what operation to perform -cmd="${0##*/}" -if [[ $cmd != "update-web-db" && $cmd != "update-web-files-db" ]]; then - die "Invalid command name '%s' specified!" "$cmd" -fi - -script_lock - -# run at nice 5. it can churn quite a bit of cpu after all. -renice +5 -p $$ > /dev/null - -echo "%s: Updating DB at %s" "$cmd" "$(date)" >> "${LOGOUT}" - -# source our virtualenv if it exists -if [[ -f "$ENVPATH" ]]; then - . "$ENVPATH" -fi - -case "$cmd" in - update-web-db) - dbfileext="${DBEXT}" - flags="" - ;; - update-web-files-db) - dbfileext="${FILESEXT}" - flags="--filesonly" - ;; -esac - -# Lock the repos and get a copy of the db files to work on -for repo in "${REPOS[@]}"; do - for arch in "${ARCHES[@]}"; do - repo_lock "${repo}" "${arch}" || exit 1 - dbfile="/srv/ftp/${repo}/os/${arch}/${repo}${dbfileext}" - if [[ -f ${dbfile} ]]; then - mkdir -p "${WORKDIR}/${repo}/${arch}" - cp "${dbfile}" "${WORKDIR}/${repo}/${arch}/${repo}${dbfileext}" - fi - repo_unlock "${repo}" "${arch}" - done -done - -# Run reporead on our db copy -pushd "$SPATH" >/dev/null -for repo in "${REPOS[@]}"; do - for arch in "${ARCHES[@]}"; do - dbcopy="${WORKDIR}/${repo}/${arch}/${repo}${dbfileext}" - if [[ -f ${dbcopy} ]]; then - echo "Updating ${repo}-${arch}" >> "${LOGOUT}" - ./manage.py reporead "${flags}" "${arch}" "${dbcopy}" >> "${LOGOUT}" 2>&1 - echo "" >> "${LOGOUT}" - fi - done -done -popd >/dev/null -echo "" >> "${LOGOUT}" - -# rotate the file if it is getting big (> 10M), overwriting any old backup -if [[ $(stat -c%s "${LOGOUT}") -gt 10485760 ]]; then - mv "${LOGOUT}" "${LOGOUT}.old" -fi - -script_unlock diff --git a/cron-jobs/update-web-files-db b/cron-jobs/update-web-files-db deleted file mode 120000 index 0c2c4fa..0000000 --- a/cron-jobs/update-web-files-db +++ /dev/null @@ -1 +0,0 @@ -update-web-db \ No newline at end of file -- 2.18.0

2 1

[arch-projects] [netctl] [GIT] Network control utility based on systemd annotated tag 1.18 created. 1.18
by Jouke Witteveen 07 Aug '18

07 Aug '18

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "Network control utility based on systemd". The annotated tag, 1.18 has been created at 752de745e674cdb66b07a4d36a85188e689d8855 (tag) tagging 9044d45d9d25c585f666e51f47da5559b165c837 (commit) replaces 1.17 tagged by Jouke Witteveen on Tue Aug 7 17:47:51 2018 +0200 - Log ----------------------------------------------------------------- Release 1.18 -----BEGIN PGP SIGNATURE----- iQFKBAABCAA0FiEEbql9KtO+F66lkufaVrYfv4JJLBUFAltpvy0WHGoud2l0dGV2 ZWVuQGdtYWlsLmNvbQAKCRBWth+/gkksFb3bB/4+Xex1tOwXJXinZdX7CB0BZgZ7 R1yQY7GCxh75xmi32bYYjJBF7eRlhxImt55EzUi08dN5Ii58+zbWMQciSgs5QwCa DuJnke6LvHoEDUeZI4wcms6cNXwXGdYOkDX5oxtd7zjQAQoMdjy3BGfxVVYrCcrQ pcxVZsZnmBSxtRIIL1JvYVJxbg2KVUQm3qAXji5idR261JRMlHjxr+x1kX2Xc/mx 5S9XVotctKYjNtFRDsFGIsW+AyI0PO0yz1jiqaKrWN1leGjYxIcsLiJpyuliu+VR oMnfeFQm3nR250mhZehGmUWG4QwwrMkxpn6TDGrforaDOkEjc0o66esQlEvC =TCy6 -----END PGP SIGNATURE----- Jouke Witteveen (6): Use drop-in directories instead of .include statements Centralize profile exposing through the Profile variable Switch to single quotes in contexts where we may want to use '\' PKGBUILD: depend on resolvconf instead of on openresolv PKGBUILD: add post_upgrade messages 1.18 release updates ----------------------------------------------------------------------- hooks/post-receive -- Network control utility based on systemd

1 0

[arch-projects] [netctl] [GIT] Network control utility based on systemd branch master updated. 1.17-6-g9044d45
by Jouke Witteveen 07 Aug '18

07 Aug '18

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "Network control utility based on systemd". The branch, master has been updated via 9044d45d9d25c585f666e51f47da5559b165c837 (commit) via 9e9014e57e72ef321ef959bfbf645b9062cd5d15 (commit) from e9c5de21c2d50c8fd8d1343feecb632bf836eec1 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 9044d45d9d25c585f666e51f47da5559b165c837 Author: Jouke Witteveen <j.witteveen(a)gmail.com> Date: Tue Aug 7 17:47:24 2018 +0200 1.18 release updates commit 9e9014e57e72ef321ef959bfbf645b9062cd5d15 Author: Jouke Witteveen <j.witteveen(a)gmail.com> Date: Sat Aug 4 18:16:30 2018 +0200 PKGBUILD: add post_upgrade messages ----------------------------------------------------------------------- Summary of changes: .gitignore | 1 + Makefile | 9 ++++++--- NEWS | 4 ++++ contrib/PKGBUILD.in | 1 + contrib/netctl.install | 10 ++++++++++ docs/Makefile | 3 ++- 6 files changed, 24 insertions(+), 4 deletions(-) create mode 100644 contrib/netctl.install hooks/post-receive -- Network control utility based on systemd

1 0

[arch-projects] [netctl][PATCH] PKGBUILD: add post_upgrade messages
by Jouke Witteveen 04 Aug '18

04 Aug '18

--- I am still a little hesitant to carry this in the netctl repository. Currently, the repository is more or less distribution agnostic. Makefile | 7 +++++-- contrib/PKGBUILD.in | 1 + contrib/netctl.install | 10 ++++++++++ 3 files changed, 16 insertions(+), 2 deletions(-) create mode 100644 contrib/netctl.install diff --git a/Makefile b/Makefile index 7e6a7c9..003abfc 100644 --- a/Makefile +++ b/Makefile @@ -49,16 +49,19 @@ netctl-$(VERSION).tar.xz: gpg --detach-sign $@ pkgbuild: PKGBUILD -PKGBUILD: netctl-$(VERSION).tar.xz contrib/PKGBUILD.in +PKGBUILD: netctl-$(VERSION).tar.xz contrib/PKGBUILD.in netctl.install sed -e "s|@pkgver@|$(VERSION)|g" \ -e "s|@md5sum@|$(shell md5sum $< | cut -d ' ' -f 1)|" \ -e "s|@md5sum.sig@|$(shell md5sum $<.sig | cut -d ' ' -f 1)|" \ $(lastword $^) > $@ +netctl.install: contrib/netctl.install + cp $< $@ + upload: netctl-$(VERSION).tar.xz scp $< $<.sig sources.archlinux.org:/srv/ftp/other/packages/netctl clean: $(MAKE) -C docs clean - -@rm -vf PKGBUILD *.tar.xz *.tar.xz.sig 2>/dev/null + -@rm -vf netctl-*.tar.xz{,.sig} PKGBUILD netctl.install diff --git a/contrib/PKGBUILD.in b/contrib/PKGBUILD.in index 71b1f5c..b5ce44c 100644 --- a/contrib/PKGBUILD.in +++ b/contrib/PKGBUILD.in @@ -19,6 +19,7 @@ optdepends=('dialog: for the menu based wifi assistant' 'ppp: for PPP connections' 'openvswitch: for Open vSwitch connections' ) +install=netctl.install source=(https://sources.archlinux.org/other/packages/netctl/netctl-${pkgver… arch=('any') md5sums=('@md5sum@' diff --git a/contrib/netctl.install b/contrib/netctl.install new file mode 100644 index 0000000..920ce5e --- /dev/null +++ b/contrib/netctl.install @@ -0,0 +1,10 @@ +post_upgrade() { + if [[ $(vercmp 1.18 "$2") -gt 0 ]]; then + grep -ls '^.include ' /etc/systemd/system/netctl(a)*.service | \ + while read -r unit; do + profile=$(systemd-escape --unescape "${unit:27:-8}") + echo ":: The unit for profile '$profile' uses deprecated features." + echo " Consider running: netctl reenable $(printf '%q' "$profile")" + done + fi +} -- 2.18.0

1 0