RepoMirrors/abuild
1
0
Fork 0
mirror of https://gitlab.alpinelinux.org/alpine/abuild.git synced 2025-03-01 18:00:30 +00:00
Code Issues Projects Releases Wiki Activity
Alpine build tools
1,105 Commits 5 Branches 179 Tags 8.4 MiB
Shell 64.9%
Perl 19%
C 9.8%
Ruby 4.2%
Makefile 2.1%
17cb68e9fb
Go to file
Sören Tempel 17cb68e9fb abuild-rmtemp: Do not follow symbolic links 
Symbolic links might point to files outside of the chroot and
thus might delete files outside the chroot. This allows deletion
of arbitrary directories on the host from a malicious APKBUILD.

Following hard links shouldn't be a problem since hard links (usually)
cannot refer to directories and since remove(3) removes the link, not
the file it points to it shouldn't cause a problem.

I noticed this because alpine-baselayout creates /var/run as a symlink
to /run. Therefore causing /run to be deleted on the host when using
abuild-rmtemp which in turn causes a bunch of software to no longer
function properly (including OpenRC).
2018-10-11 17:46:45 +02:00
.devbuildrc
.editorconfig add .editorconfig and fix code formatting 2016-08-20 16:16:37 +02:00
.gitignore git: ignore abuild-rmtemp executable 2017-09-19 12:02:57 +00:00
abuild-fetch.c move logic of curl's http range error to abuild-fetch 2018-10-03 09:23:16 +00:00
abuild-gzsplit.c abuild-gzsplit: new tool to split .apk to it's base components 2017-01-10 14:16:16 +02:00
abuild-keygen.in replace deprecated ... syntax with $(...) in shell scripts 2016-08-23 00:09:07 +02:00
abuild-rmtemp.c abuild-rmtemp: Do not follow symbolic links 2018-10-11 17:46:45 +02:00
abuild-sign.in abuild: call tar portably 2017-06-23 11:27:41 +03:00
abuild-sudo.c abuild-sudo: prevent forging of user name 2017-07-20 15:14:43 +03:00
abuild-tar.c abuild-tar: improve portability 2016-05-20 10:19:08 +02:00
abuild.conf abuild: build in chroot 2017-06-27 14:52:50 +03:00
abuild.in abuild: run build actions via runpart 2018-10-03 12:46:18 +00:00
abump.in replace deprecated ... syntax with $(...) in shell scripts 2016-08-23 00:09:07 +02:00
apkbuild-cpan.in apkbuild-cpan: separate './Build test' to check step 2017-07-11 15:05:10 +03:00
apkbuild-gem-resolver.in add .editorconfig and fix code formatting 2016-08-20 16:16:37 +02:00
apkbuild-pypi.in apkbuild-pypi.in: modernize 2017-09-19 11:59:18 +00:00
APKBUILD.5 abuild: do not run check in fakeroot by default 2018-10-03 12:37:08 +00:00
apkgrel.in replace deprecated ... syntax with $(...) in shell scripts 2016-08-23 00:09:07 +02:00
bootchartd replace deprecated ... syntax with $(...) in shell scripts 2016-08-23 00:09:07 +02:00
buildlab.in buildlab: replace echos in usage with heredoc 2016-08-23 00:09:07 +02:00
checkapk.in checkapk: remove temporary dir on SIGINT and exit 2018-10-03 10:52:13 +00:00
config.guess abuild: add update_config_guess 2016-08-12 15:26:06 +02:00
config.sub abuild: add update_config_guess 2016-08-12 15:26:06 +02:00
functions.sh.in abuild: add triplet definitions for mips architectures 2017-12-11 09:04:46 +02:00
Makefile ==== release 3.3.0_pre1 ==== 2018-10-03 12:58:27 +00:00
newapkbuild.1 newapkbuild.1: fix mdoc style 2018-10-03 08:24:18 +00:00
newapkbuild.in newapkbuild: fix checksums to be last in ABPKUILD 2018-10-03 10:50:25 +00:00
sample.APKBUILD sample.APKBUILD: use https for sourceforge download links 2018-09-24 21:43:49 +02:00
sample.confd sample: use lowercase in init.d/conf.d sample files 2009-12-30 08:55:33 +00:00
sample.initd sample.initd: modernize 2016-06-13 12:34:05 +00:00
sample.post-install abuild: fixes for new install scripts 2009-03-06 17:51:53 +00:00
sample.pre-install abuild: fixes for new install scripts 2009-03-06 17:51:53 +00:00