<feed xmlns='http://www.w3.org/2005/Atom'>
<title>apt/debian/apt.postinst, branch 2.7.9</title>
<subtitle>Debians commandline package manager</subtitle>
<id>https://git.kalnischkies.de/apt/atom?h=2.7.9</id>
<link rel='self' href='https://git.kalnischkies.de/apt/atom?h=2.7.9'/>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/'/>
<updated>2022-09-23T21:00:57Z</updated>
<entry>
<title>since base-passwd 3.6.1 the _apt user is in the default /etc/passwd</title>
<updated>2022-09-23T21:00:57Z</updated>
<author>
<name>Johannes Schauer Marin Rodrigues</name>
<email>josch@debian.org</email>
</author>
<published>2022-09-18T12:26:55Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=f6954267f5df0a8a7f8c3f97033f121297d869a5'/>
<id>urn:sha1:f6954267f5df0a8a7f8c3f97033f121297d869a5</id>
<content type='text'>
 - so do not call adduser if the _apt user already exists
 - make adduser dependency optional if base-passwd &gt;= 3.6.1
 - do not call adduser if $DPKG_ROOT is non-empty as adduser doesn't
   support working on a custom root directory
</content>
</entry>
<entry>
<title>Only protect two kernels, not last installed one</title>
<updated>2022-04-07T11:19:52Z</updated>
<author>
<name>Julian Andres Klode</name>
<email>julian.klode@canonical.com</email>
</author>
<published>2022-04-06T11:51:08Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=824651ded0bcf8603e9b508860b8fe5a68fc53ff'/>
<id>urn:sha1:824651ded0bcf8603e9b508860b8fe5a68fc53ff</id>
<content type='text'>
The kernel autoremoval algorithm was written to accomodate
for Ubuntu's boot partition sizing, which was written to
accomodate 3 kernels - 2 installed ones + a new one being
unpacked.

It seems that when the algorithm was designed, it was overlooked
that it actually kept 3 kernels.

LP: #1968154
</content>
</entry>
<entry>
<title>Remove ancient versions support from apts postinst</title>
<updated>2020-11-05T08:40:50Z</updated>
<author>
<name>David Kalnischkies</name>
<email>david@kalnischkies.de</email>
</author>
<published>2020-11-04T23:37:22Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=938889b20268ec92be1bff67750f7adf03f52c1b'/>
<id>urn:sha1:938889b20268ec92be1bff67750f7adf03f52c1b</id>
<content type='text'>
The versions "needing" these fixes are at least five years old, so in an
effort to save massive amounts of runtime and disk space (on aggregate at
least) we can drop these lines.

Reported-By: lintian maintainer-script-supports-ancient-package-version
</content>
</entry>
<entry>
<title>Replace whitelist/blacklist with allowlist/denylist</title>
<updated>2020-08-04T10:12:11Z</updated>
<author>
<name>Julian Andres Klode</name>
<email>julian.klode@canonical.com</email>
</author>
<published>2020-07-14T14:34:20Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=7d8bb855487d6821b0cd6bf5d2270ed8fda3d1a3'/>
<id>urn:sha1:7d8bb855487d6821b0cd6bf5d2270ed8fda3d1a3</id>
<content type='text'>
</content>
</entry>
<entry>
<title>fix various typos reported by spellintian</title>
<updated>2017-01-19T14:59:38Z</updated>
<author>
<name>David Kalnischkies</name>
<email>david@kalnischkies.de</email>
</author>
<published>2017-01-19T14:14:19Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=93cff633a830e222693fc0f3d78e6e534d1126ee'/>
<id>urn:sha1:93cff633a830e222693fc0f3d78e6e534d1126ee</id>
<content type='text'>
Most of them in (old) code comments. The two instances of user visible
string changes the po files of the manpages are fixed up as well.

Gbp-Dch: Ignore
Reported-By: spellintian
</content>
</entry>
<entry>
<title>postinst: Correctly pass --home instead of -home, and fixup old user</title>
<updated>2015-08-20T12:54:03Z</updated>
<author>
<name>Julian Andres Klode</name>
<email>jak@debian.org</email>
</author>
<published>2015-08-20T12:47:32Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=269b7c0cd89e9508c0051d6ac2c3632540a31daa'/>
<id>urn:sha1:269b7c0cd89e9508c0051d6ac2c3632540a31daa</id>
<content type='text'>
Thanks: Niels Thykier for reporting this on IRC
</content>
</entry>
<entry>
<title>Ensure /etc/apt/auth.conf has _apt:root owner</title>
<updated>2014-10-21T15:19:45Z</updated>
<author>
<name>Michael Vogt</name>
<email>mvo@debian.org</email>
</author>
<published>2014-10-21T15:19:45Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=1924b1e513b0619c177565d17475ea3747983f4f'/>
<id>urn:sha1:1924b1e513b0619c177565d17475ea3747983f4f</id>
<content type='text'>
Ensure in SetupAPTPartialDirectory() that the /etc/apt/auth.conf file
can be read by the priv sep apt methods.
</content>
</entry>
<entry>
<title>debian/apt.postinst: chown _apt:root /etc/apt/auth.conf</title>
<updated>2014-10-21T14:54:03Z</updated>
<author>
<name>Michael Vogt</name>
<email>mvo@debian.org</email>
</author>
<published>2014-10-21T14:54:03Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=cbb1005a0a2e026e4a7361b0ff86888af192ee85'/>
<id>urn:sha1:cbb1005a0a2e026e4a7361b0ff86888af192ee85</id>
<content type='text'>
If the methods drop privileges we need to ensure that
/etc/apt/apt.conf is still readable by the _apt user.
</content>
</entry>
<entry>
<title>Merge remote-tracking branch 'upstream/debian/experimental' into feature/acq-trans</title>
<updated>2014-10-07T14:38:03Z</updated>
<author>
<name>Michael Vogt</name>
<email>mvo@ubuntu.com</email>
</author>
<published>2014-10-07T14:38:03Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=4d0818cc39f7c0d44ecdfcdf9701058f81caa492'/>
<id>urn:sha1:4d0818cc39f7c0d44ecdfcdf9701058f81caa492</id>
<content type='text'>
Conflicts:
	apt-pkg/acquire-item.cc
</content>
</entry>
<entry>
<title>use _apt:root only for partial directories</title>
<updated>2014-10-06T23:59:49Z</updated>
<author>
<name>David Kalnischkies</name>
<email>david@kalnischkies.de</email>
</author>
<published>2014-10-06T12:29:53Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=5684f71fa0f6c1b765aa53e22ca3b024c578b9c9'/>
<id>urn:sha1:5684f71fa0f6c1b765aa53e22ca3b024c578b9c9</id>
<content type='text'>
Using a different user for calling methods is intended to protect us
from methods running amok (via remotely exploited bugs) by limiting what
can be done by them. By using root:root for the final directories and
just have the files in partial writeable by the methods we enhance this
in sofar as a method can't modify already verified data in its parent
directory anymore.

As a side effect, this also clears most of the problems you could have
if the final directories are shared without user-sharing or if these
directories disappear as they are now again root owned and only the
partial directories contain _apt owned files (usually none if apt isn't
running) and the directory itself is autocreated with the right
permissions.
</content>
</entry>
</feed>
