- Pacman-dev - lists.archlinux.org

[Git][pacman/pacman][master] Correctly configure landlock for older ABIs
by Allan McRae (＠allan) 28 Sep '24

28 Sep '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: e80569f5 by Chih-Hsuan Yen at 2024-09-28T00:35:10+00:00 Correctly configure landlock for older ABIs For example, with landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not set in ruleset_attr.handled_access_fs, so it should not be set in path_beneath.allowed_access either. Otherwise, landlock_add_rule fails with -EINVAL, and pacman complains: > error: restricting filesystem access failed because the landlock rule for the temporary download directory could not be added! The change is tested on Debian Bookworm kernel linux-image-6.1.0-25-cloud-amd64 6.1.106-3. - - - - - 1 changed file: - lib/libalpm/sandbox_fs.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/e80569f5dabfb91d073ee47… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/e80569f5dabfb91d073ee47… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] Add double colon for newline after MAKEPKG_LINT_PKGBUILD in makepkg.8.asciidoc
by Allan McRae (＠allan) 28 Sep '24

28 Sep '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 60ec2684 by Rafael Fontenelle at 2024-09-25T15:11:51-03:00 Add double colon for newline after MAKEPKG_LINT_PKGBUILD in makepkg.8.asciidoc - - - - - 1 changed file: - doc/makepkg.8.asciidoc View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/60ec2684584b8a6a9d3be43… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/60ec2684584b8a6a9d3be43… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[PATCH] fix a segfault in sandbox.c if handle->dlcb is null
by Guillaume Benoit 27 Sep '24

27 Sep '24

diff --git a/lib/libalpm/sandbox.c b/lib/libalpm/sandbox.c index 1e96dc00..cdc01dc7 100644 --- a/lib/libalpm/sandbox.c +++ b/lib/libalpm/sandbox.c @@ -235,7 +235,9 @@ bool _alpm_sandbox_process_cb_download(alpm_handle_t *handle, int callback_pipe) ASSERT(read_from_pipe(callback_pipe, filename, filename_size) != -1, FREE(filename); return false); filename[filename_size] = '\0'; - handle->dlcb(handle->dlcb_ctx, filename, type, &cb_data); + if(handle->dlcb) { + handle->dlcb(handle->dlcb_ctx, filename, type, &cb_data); + } FREE(filename); return true; }

2 2

[Git][pacman/pacman][release/7.0.x] libalpm: only chown downloaded files when running as root
by Allan McRae (＠allan) 08 Sep '24

08 Sep '24

Allan McRae pushed to branch release/7.0.x at Pacman / Pacman Commits: 77361331 by Allan McRae at 2024-09-08T12:18:38+10:00 libalpm: only chown downloaded files when running as root Some libaplm utilities sync databases as a non-root user for use in actvities other than system updates. The ability to download as a non-root user was broken as part of the download sandboxing. Applying a minimial fix by preventing the chown of the downloaded file if the user is non-root. A larger change increasing the robustness and error checking of this path is warranted in the future. Signed-off-by: Allan McRae <allan(a)archlinux.org> (cherry picked from commit 7bc5d55b56f41518e0a53eed13d4c523aea848e5) - - - - - 1 changed file: - lib/libalpm/dload.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/77361331ae3864c6ea880e7… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/77361331ae3864c6ea880e7… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] libalpm: only chown downloaded files when running as root
by Allan McRae (＠allan) 08 Sep '24

08 Sep '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 7bc5d55b by Allan McRae at 2024-09-08T11:49:21+10:00 libalpm: only chown downloaded files when running as root Some libaplm utilities sync databases as a non-root user for use in actvities other than system updates. The ability to download as a non-root user was broken as part of the download sandboxing. Applying a minimial fix by preventing the chown of the downloaded file if the user is non-root. A larger change increasing the robustness and error checking of this path is warranted in the future. Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 1 changed file: - lib/libalpm/dload.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/7bc5d55b56f41518e0a53ee… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/7bc5d55b56f41518e0a53ee… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][release/7.0.x] pacman/util.c: fix segfault when replace in strreplace is NULL
by Allan McRae (＠allan) 18 Aug '24

18 Aug '24

Allan McRae pushed to branch release/7.0.x at Pacman / Pacman Commits: 6270dd81 by KaranveerB at 2024-08-18T22:42:54+10:00 pacman/util.c: fix segfault when replace in strreplace is NULL (cherry picked from commit 4c1820493860d57ba9b98760762e947a4367e34b) - - - - - 1 changed file: - src/pacman/util.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/6270dd81a3c216072f3c3a4… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/6270dd81a3c216072f3c3a4… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] 2 commits: pacman/util.c: fix segfault when replace in strreplace is NULL
by Allan McRae (＠allan) 18 Aug '24

18 Aug '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: 4c182049 by KaranveerB at 2024-08-03T16:29:11-07:00 pacman/util.c: fix segfault when replace in strreplace is NULL - - - - - 6ba5c20e by KaranveerB at 2024-08-03T16:29:26-07:00 pactest: add test for empty replacements strings - - - - - 3 changed files: - src/pacman/util.c - test/pacman/meson.build - + test/pacman/tests/remove-print-empty-replacements.py View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/cf473bcfbd275044250fa6… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/cf473bcfbd275044250fa6… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman] Pushed new branch release/7.0.x
by Allan McRae (＠allan) 02 Aug '24

02 Aug '24

Allan McRae pushed new branch release/7.0.x at Pacman / Pacman -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/tree/release/7.0.x You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] 2 commits: Restrict syscalls for the download process whenever possible
by Allan McRae (＠allan) 02 Aug '24

02 Aug '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: f142df92 by Remi Gacogne at 2024-08-02T00:39:45+00:00 Restrict syscalls for the download process whenever possible Signed-off-by: Remi Gacogne <rgacogne(a)archlinux.org> - - - - - cf473bcf by Remi Gacogne at 2024-08-02T00:39:45+00:00 Ensure that the download process cannot get new privileges Signed-off-by: Remi Gacogne <rgacogne(a)archlinux.org> - - - - - 8 changed files: - lib/libalpm/alpm.h - lib/libalpm/dload.c - lib/libalpm/meson.build - lib/libalpm/sandbox.c - + lib/libalpm/sandbox_syscalls.c - + lib/libalpm/sandbox_syscalls.h - meson.build - src/pacman/conf.c View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/c3aa1bc12367a8c29ddac3… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/compare/c3aa1bc12367a8c29ddac3… You're receiving this email because of your account on gitlab.archlinux.org.

1 0

[Git][pacman/pacman][master] Fix typo in git source handling
by Allan McRae (＠allan) 16 Jul '24

16 Jul '24

Allan McRae pushed to branch master at Pacman / Pacman Commits: c3aa1bc1 by Allan McRae at 2024-07-16T18:51:03+10:00 Fix typo in git source handling Fixes #171 Signed-off-by: Allan McRae <allan(a)archlinux.org> - - - - - 1 changed file: - scripts/libmakepkg/source/git.sh.in View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/c3aa1bc12367a8c29ddac31… -- View it on GitLab: https://gitlab.archlinux.org/pacman/pacman/-/commit/c3aa1bc12367a8c29ddac31… You're receiving this email because of your account on gitlab.archlinux.org.

1 0