apt/doc, branch 1.6_beta1Debians commandline package managerhttps://git.kalnischkies.de/apt/atom?h=1.6_beta12018-02-26T12:15:26ZRelease 1.6~beta12018-02-26T12:15:26ZJulian Andres Klodejulian.klode@canonical.com2018-02-26T12:15:26Zurn:sha1:5206249ea92fccf9e812a2d373cbd2f16c623059Merge branch 'pu/not-valid-before' into 'master'2018-02-19T15:06:06ZJulian Andres Klodejak@debian.org2018-02-19T15:06:06Zurn:sha1:928ecff984be22632c27a69e072741e74491292c
Check that Date of Release file is not in the future
See merge request apt-team/apt!3Check that Date of Release file is not in the future2018-02-19T15:05:01ZJulian Andres Klodejulian.klode@canonical.com2018-01-29T15:15:41Zurn:sha1:9e5899cac1a6367e3769af52a724821880e538f6
By restricting the Date field to be in the past, an attacker cannot
just create a repository from the future that would be accepted as
a valid update for a repository.
This check can be disabled by Acquire::Check-Date set to false. This
will also disable Check-Valid-Until and any future date related checking,
if any - the option means: "my computers date cannot be trusted."
Modify the tests to allow repositories to be up to 10 hours in the
future, so we can keep using hours there to simulate time changes.
German manpage translation update2018-02-19T14:57:38ZChris Leickc.leick@vollbio.de2018-02-03T15:53:56Zurn:sha1:cc6bab259025b159f1e7c925f29bf07b2c8501acensure correct file permissions for auxfiles2018-02-19T14:56:09ZDavid Kalnischkiesdavid@kalnischkies.de2018-02-02T18:14:09Zurn:sha1:b3e7a16265e7c6c3b6892b9ec8a787d692ced6e6
The interesting takeaway here is perhaps that 'chmod +w' is effected by
the umask – obvious in hindsight of course. The usual setup helps with
hiding that applying that recursively on all directories (and files)
isn't correct. Ensuring files will not be stored with the wrong
permissions even if in strange umask contexts is trivial in comparison.
Fixing the test also highlighted that it wasn't bulletproof as apt will
automatically fix the permissions of the directories it works with, so
for this test we actually need to introduce a shortcut in the code.
Reported-By: Ubuntu autopkgtest CI
add apt-helper drop-privs command…2018-02-19T14:56:09ZDavid Kalnischkiesdavid@kalnischkies.de2018-01-25T16:14:49Zurn:sha1:887e331abb6ac0a850e5d53de55f43c9ebdee5a2Release 1.6~alpha72018-01-18T14:47:08ZJulian Andres Klodejulian.klode@canonical.com2018-01-18T14:47:08Zurn:sha1:70e68ed87d8ecd011df80f00c6b8ff6316e2b413review and fix the three new apt-transport- manpages2018-01-18T14:26:39ZJustin B Ryejustin.byam.rye@gmail.com2018-01-05T21:35:31Zurn:sha1:b199b7329801efd705c41d93dae4869900a952f1
References: https://lists.debian.org/debian-l10n-english/2018/01/msg00002.html
Introduce inrelease-path option for sources.list2018-01-17T10:52:38ZJulian Andres Klodejulian.klode@canonical.com2018-01-16T15:53:46Zurn:sha1:698f9e3f9877be2aa181d6e40d3dc5c41ea318b7
Allow specifying an alternative path to the InRelease file, so
you can have multiple versions of a repository, for example.
Enabling this option disables fallback to Release and Release.gpg,
so setting it to InRelease can be used to ensure that only that
will be tried.
We add two test cases: One for checking that it works, and another
for checking that the fallback does not happen.
Closes: #886745
simplify translating "lists directory missing" msg2018-01-03T23:15:37ZDavid Kalnischkiesdavid@kalnischkies.de2018-01-03T22:55:33Zurn:sha1:4ba38b9f2611c04a0e23b84a365253e65cad2969
The appended "partial" should not be translated, but some translations
got this wrong and now that there is also "auxfiles" we can just fix
that problem by hiding these untranslatables from the translators.
Gbp-Dch: Ignore