September 2024 - Pacman-dev - lists.archlinux.org

[Git][pacman/pacman][master] fix a segfault in sandbox.c if handle->dlcb is null
by Allan McRae (＠allan) 29 Sep '24

29 Sep '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: a2d02938 by Guillaume at 2024-09-28T08:10:46+00:00 fix a segfault in sandbox.c if handle->dlcb is null - - - - - 1 changed file: - lib/libalpm/sandbox.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/a2d029388c7c206f5576456… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/a2d029388c7c206f5576456… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] pactest: drop trailing spaces from README
by Allan McRae (＠allan) 28 Sep '24

28 Sep '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 8a603619 by Jelle van der Waa at 2024-09-28T01:44:17+00:00 pactest: drop trailing spaces from README - - - - - 1 changed file: - test/pacman/README View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/8a60361949ec987b300588c… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/8a60361949ec987b300588c… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] Correctly configure landlock for older ABIs
by Allan McRae (＠allan) 28 Sep '24

28 Sep '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: e80569f5 by Chih-Hsuan Yen at 2024-09-28T00:35:10+00:00 Correctly configure landlock for older ABIs For example, with landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not set in ruleset_attr.handled_access_fs, so it should not be set in path_beneath.allowed_access either. Otherwise, landlock_add_rule fails with -EINVAL, and pacman complains: > error: restricting filesystem access failed because the landlock rule for the temporary download directory could not be added! The change is tested on Debian Bookworm kernel linux-image-6.1.0-25-cloud-amd64 6.1.106-3. - - - - - 1 changed file: - lib/libalpm/sandbox_fs.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/e80569f5dabfb91d073ee47… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/e80569f5dabfb91d073ee47… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] Add double colon for newline after MAKEPKG_LINT_PKGBUILD in makepkg.8.asciidoc
by Allan McRae (＠allan) 28 Sep '24

28 Sep '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 60ec2684 by Rafael Fontenelle at 2024-09-25T15:11:51-03:00 Add double colon for newline after MAKEPKG_LINT_PKGBUILD in makepkg.8.asciidoc - - - - - 1 changed file: - doc/makepkg.8.asciidoc View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/60ec2684584b8a6a9d3be43… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/60ec2684584b8a6a9d3be43… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[PATCH] fix a segfault in sandbox.c if handle->dlcb is null
by Guillaume Benoit 27 Sep '24

27 Sep '24

diff --git a/lib/libalpm/sandbox.c b/lib/libalpm/sandbox.c index 1e96dc00..cdc01dc7 100644 --- a/lib/libalpm/sandbox.c +++ b/lib/libalpm/sandbox.c @@ -235,7 +235,9 @@ bool _alpm_sandbox_process_cb_download(alpm_handle_t *handle, int callback_pipe) ASSERT(read_from_pipe(callback_pipe, filename, filename_size) != -1, FREE(filename); return false); filename[filename_size] = '\0'; - handle->dlcb(handle->dlcb_ctx, filename, type, &cb_data); + if(handle->dlcb) { + handle->dlcb(handle->dlcb_ctx, filename, type, &cb_data); + } FREE(filename); return true; }

2 2

[Git][pacman/pacman][release/7.0.x] libalpm: only chown downloaded files when running as root
by Allan McRae (＠allan) 08 Sep '24

08 Sep '24

Allan McRae pushed to branch release/7.0.x at Pacman / Pacman Commits: 77361331 by Allan McRae at 2024-09-08T12:18:38+10:00 libalpm: only chown downloaded files when running as root Some libaplm utilities sync databases as a non-root user for use in actvities other than system updates. The ability to download as a non-root user was broken as part of the download sandboxing. Applying a minimial fix by preventing the chown of the downloaded file if the user is non-root. A larger change increasing the robustness and error checking of this path is warranted in the future. Signed-off-by: Allan McRae <allan(a)archlinux.org> (cherry picked from commit 7bc5d55b56f41518e0a53eed13d4c523aea848e5) - - - - - 1 changed file: - lib/libalpm/dload.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/77361331ae3864c6ea880e7… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/77361331ae3864c6ea880e7… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] libalpm: only chown downloaded files when running as root
by Allan McRae (＠allan) 08 Sep '24

08 Sep '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 7bc5d55b by Allan McRae at 2024-09-08T11:49:21+10:00 libalpm: only chown downloaded files when running as root Some libaplm utilities sync databases as a non-root user for use in actvities other than system updates. The ability to download as a non-root user was broken as part of the download sandboxing. Applying a minimial fix by preventing the chown of the downloaded file if the user is non-root. A larger change increasing the robustness and error checking of this path is warranted in the future. Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 1 changed file: - lib/libalpm/dload.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/7bc5d55b56f41518e0a53ee… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/7bc5d55b56f41518e0a53ee… You're receiving this email because of your account on gitlab.archlinux.org.

1 0