You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Ariadne Conill
d54d8f5d06
abuild: bwrap: use --new-session to mitigate TIOCSTI escape (CVE-2017-5226)
Bubblewrap has an under-documented option which helps to protect against abuse
of TIOCSTI ioctls against the session PTY to escape the build sandbox, the
--new-session option.
Related: https://github.com/containers/bubblewrap/issues/555
Related: https://github.com/containers/bubblewrap/issues/142
Related: https://news.ycombinator.com/item?id=30825088
Signed-off-by: Ariadne Conill <ariadne@dereferenced.org>
|
2 weeks ago |
|
tests
|
apkgrel: fix usage and invalid options and add test
|
2 months ago |
|
.editorconfig
|
.editorconfig: add Makefile rules
|
3 years ago |
|
.gitattributes
|
gitlab: highlight abuild.in as shell
|
11 months ago |
|
.gitignore
|
tests: pre-generate abuild keys
|
4 months ago |
|
.gitlab-ci.yml
|
ci: add job to run tests
|
1 year ago |
|
APKBUILD.5.scd
|
Convert man pages to scdoc
|
1 year ago |
|
COPYING
|
add license GPL-2.0-only WITH OpenSSL-Exception
|
2 years ago |
|
Makefile
|
==== release 3.10.0 ====
|
4 months ago |
|
abuild-fetch.c
|
abuild: fix typos
|
2 years ago |
|
abuild-gzsplit.c
|
abuild: avoid calculations with void pointers
|
1 year ago |
|
abuild-keygen.in
|
abuild-keygen: use doas instead of sudo
|
9 months ago |
|
abuild-rmtemp.c
|
*: say we are using GPL-2.0-only
|
2 years ago |
|
abuild-sign.in
|
abuild-sign: fix --installed to detect missing keys
|
9 months ago |
|
abuild-sudo.c
|
abuild: avoid calculations with void pointers
|
1 year ago |
|
abuild-tar.c
|
abuild-tar: do not read past corrupt tar header
|
4 months ago |
|
abuild.conf
|
abuild.conf: set release profile optimisations for cargo
|
8 months ago |
|
abuild.in
|
abuild: bwrap: use --new-session to mitigate TIOCSTI escape (CVE-2017-5226)
|
2 weeks ago |
|
abump.in
|
abump: source APKBUILD in subshell
|
5 months ago |
|
apkbuild-cpan.in
|
apkbuild-cpan.in: prevent inserting extra new line before checksum on upgrade
|
2 years ago |
|
apkbuild-gem-resolver.in
|
add .editorconfig and fix code formatting
|
7 years ago |
|
apkbuild-pypi.in
|
apkbuild-pypi.in: remove empty variables
|
2 years ago |
|
apkgrel.in
|
apkgrel: fix usage and invalid options and add test
|
2 months ago |
|
bootchartd
|
replace deprecated `...` syntax with $(...) in shell scripts
|
7 years ago |
|
buildlab.in
|
buildlab: use grep -E instead of egrep
|
6 months ago |
|
checkapk.in
|
*: say we are using GPL-2.0-only
|
2 years ago |
|
config.guess
|
Update config.guess, config.sub, to 2020-11-19
|
2 years ago |
|
config.sub
|
Update config.guess, config.sub, to 2020-11-19
|
2 years ago |
|
functions.sh.in
|
functions.sh.in: Export original CC, CXX, CPPFLAGS, CXXFLAGS, CFLAGS, LDFLAGS in BUILDCC, BUILDCXX, BUILDLD, BUILDCPPFLAGS, BUILDCXXFLAGS, BUILDCFLAGS, BUILDLDFLAGS Default CC to gcc, CXX to g++, LD to ld
|
7 months ago |
|
newapkbuild.1.scd
|
Convert man pages to scdoc
|
1 year ago |
|
newapkbuild.in
|
newapkbuild: allow for underscore version separator
|
3 months ago |
|
sample.APKBUILD
|
sample.APKBUILD: use https for sourceforge download links
|
5 years ago |
|
sample.confd
|
sample: use lowercase in init.d/conf.d sample files
|
13 years ago |
|
sample.initd
|
sample.initd: modernize
|
7 years ago |
|
sample.post-install
|
fix typo in sample for pre and post install
|
3 years ago |
|
sample.pre-install
|
fix typo in sample for pre and post install
|
3 years ago |
