summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* DropPrivs: Do not use an invalid return check for setgroups()Julian Andres Klode2014-09-241-1/+1
| | | | | | setgroups() returns 0 on success Git-Dch: ignore
* Use _apt as our unprivileged user nameJulian Andres Klode2014-09-242-3/+3
| | | | | | | Some people want to standardize on it, and BSDs do it too, so let's do the same. Reported-by: Paul Wise <pabs@debian.org>
* DropPriv: Really call seteuid and not setuid, and add more checksJulian Andres Klode2014-09-241-11/+35
| | | | The only thing we are missing is non-portable saved ids support.
* Drop Privileges to "Debian-apt" in most acquire methodsMichael Vogt2014-09-248-2/+55
| | | | | | | | | Add a new "Debian-apt" user that owns the /var/lib/apt/lists and /var/cache/apt/archive directories. The methods http, https, ftp, gpgv, gzip switch to this user when they start. Thanks to Julian and "ioerror" and tors "switch_id()" code.
* fix testsMichael Vogt2014-09-233-4/+5
|
* Merge branch 'debian/sid' into debian/experimentalMichael Vogt2014-09-2386-51848/+55776
|\ | | | | | | | | | | | | | | | | Conflicts: apt-pkg/acquire-item.cc apt-pkg/acquire-item.h apt-pkg/cachefilter.h configure.ac debian/changelog
| * Ensure that iTFRewritePackageOrder is "MD5sum" to match apt-ftparchiveMichael Vogt2014-09-211-1/+1
| | | | | | | | | | | | | | The iTFRewritePackageOrder is used in indexcopy to copy and normalize cdrom Packages files. This change will ensure that there is no "normalization" that changes MD5sum -> MD5Sum which alters the hash of the Packages file on disk (oh the irony).
| * Fix regression for cdrom: sources from latest security updateMichael Vogt2014-09-211-0/+6
| | | | | | | | | | | | | | | | | | | | Skip a reverify for cdrom: sources. The reverify step is actually harmful here because the apt-cdrom add code uses the indexcopy.cc which will "normalize" the Packages file from the cdrom when it writes it to the local disk. This leads to changing the "MD5sum" field (notice the lower case "s") on the cdrom Packages file to a "MD5Sum" field on the local file in /var/lib/apt/lists. Which of course alters the hash and makes apt fail to reverify the file.
| * relax grep to support newer curl output formatDavid Kalnischkies2014-09-201-1/+6
| | | | | | | | Git-Dch: Ignore
| * disable timestamps in the footer of docs by doxygenJérémy Bobbio2014-09-191-1/+1
| | | | | | | | | | The default being 'yes', but this spoils the effort of reproducible builds for no real gain. (https://wiki.debian.org/ReproducibleBuilds)
| * German program translation updateHolger Wansing2014-09-191-10/+13
| | | | | | | | Closes: 762223
| * Fix regression when copy: is used for a relative pathMichael Vogt2014-09-192-6/+8
| | | | | | | | | | | | | | | | | | When we do a ReverifyAfterIMS() we use the copy: method to verify the hashes again. If the user uses -o Dir=./something/relative this fails because we use the URI class in copy.cc that strips away the leading relative part. By not using URI this is fixed. Closes: #762160
| * test/integration/test-apt-update-file: improve testMichael Vogt2014-09-192-0/+17
| |
| * ./pre-release pre-exportMichael Vogt2014-09-183-3/+3
| |
| * releasing package apt version 1.0.9.1Michael Vogt2014-09-171-0/+6
| |
| * Merge remote-tracking branch 'vnwildman/debian/sid' into debian/sidMichael Vogt2014-09-171-5/+5
| |\
| | * l10n: vi.po (636t): Update program translationTrần Ngọc Quân2014-09-131-5/+5
| | | | | | | | | | | | Signed-off-by: Trần Ngọc Quân <vnwildman@gmail.com>
| * | improve test for commit daff4aMichael Vogt2014-09-172-2/+10
| | |
| * | Fix regression for file:/// uris from CVE-2014-0487Michael Vogt2014-09-172-12/+33
| | | | | | | | | | | | | | | | | | | | | | | | Do not run ReverifyAfterIMS() for local file URIs as this will causes apt to mess around in the file:/// uri space. This is wrong in itself, but it will also cause a incorrect verification failure when the archive and the lists directory are on different partitions as rename().
| * | prepare 1.0.9.1Michael Vogt2014-09-161-0/+15
| | |
| * | merge previous uploadMichael Vogt2014-09-161-0/+9
| | |
| * | SECURITY UPDATE for CVE-2014-{0488,0487,0489}Michael Vogt2014-09-167-30/+217
| | | | | | | | | | | | | | | | | | incorrect invalidating of unauthenticated data (CVE-2014-0488) incorect verification of 304 reply (CVE-2014-0487) incorrect verification of Acquire::Gzip indexes (CVE-2014-0489)
| * | add a 'coverage' command to generate reportsDavid Kalnischkies2014-09-141-4/+51
| | | | | | | | | | | | | | | | | | | | | | | | | | | Builds, runs and generates everything needed to have a coverage report at the end for apt. The report isn't perfect as most childs apt forks do not have a regular exit and so data is never written for them, which results in e.g. most methods to have zero coverage reported. Git-Dch: Ignore
| * | Turkish program translation updateMert Dirik2014-09-141-8/+8
| | | | | | | | | | | | Closes: 761394
| * | Updated German documentation translationChris Leick2014-09-141-117/+7
| |/
| * Allow override of Proxy-Auto-Detect by the users configurationMichael Vogt2014-09-121-0/+4
| | | | | | | | | | | | | | Only run the Proxy-Auto-Detect code if there is not already a host specific configuration. Closes: 759264
| * prepare 1.0.8Michael Vogt2014-09-0948-51371/+54855
| |
| * debian/gbp.conf: use export-dirMichael Vogt2014-09-091-0/+2
| |
| * don't call pager in non-terminals for changelogDavid Kalnischkies2014-09-093-22/+45
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Most pagers are nice and default to running non-interactively if they aren't connected to a terminal and we relied on that. On ci.debian.net the configured pager is printing a header out of nowhere though, so if we are printing to a non-terminal we call "cat" instead. In the rework we also "remove" the dependency on sensible-utils in sofar as we call some alternatives if calling the utils fail. This seems to be the last problem preventing a "PASS" status on ci.debian.net, so we close the associated bugreport. Closes: 755040
| * rework PTY magic to fix stair-stepping on kfreebsdDavid Kalnischkies2014-09-082-53/+107
| | | | | | | | | | | | | | | | | | | | | | | | A pty slave we have got from openpty can only be used for one dpkg child, if we give it to a second child on kfreebsd setting TIOCSCTTY fails causing the output to be stair-stepped from now on. By switching the code to creating a master and opening a new slave in the child for each child we can fix this glitch, so that at least the master remains stable. Closes: 759684
| * fix progress report for upgrade and reinstallDavid Kalnischkies2014-09-082-38/+57
| | | | | | | | | | | | | | | | | | | | | | APT treats upgrades like installs and dpkg is very similar in this, but prints still a slightly different processing message indicating that it is really an upgrade which we hadn't parsed so far, but this wasn't really visible as we quickly moved on to a 'known' state. More problematic was the reinstall case as apt hadn't recognized this for the package name detection, so that reinstalls had no progress since we introduced MultiArch.
| * fix and non-silent fail dpkg-overwrite error testDavid Kalnischkies2014-09-071-1/+6
| | | | | | | | | | | | | | | | Commit cbcdd3ee9d86379d1b3a44e41ae8b17dc23111d0 removes the space at the end of the debfile name dpkg send to us and we previously had included in the pmerror message we printed on the statusfd. Git-Dch: Ignore
| * strip everything spacey in APT::String::StripDavid Kalnischkies2014-09-072-6/+33
| | | | | | | | Git-Dch: Ignore
| * detect terminal output with 'test -t' in testsDavid Kalnischkies2014-09-072-2/+2
| | | | | | | | | | | | | | | | Instead of trying to inspect /proc and the fds inside we use "test -t 1" instead as this is available and working on kfreebsd as well – not that something breaks if we wouldn't, but we like color. Git-Dch: Ignore
| * do use an 'unknown' arch-specification in testDavid Kalnischkies2014-09-071-4/+4
| | | | | | | | | | | | | | | | Using 'kfreebsd' here makes the test fail on a kfreebsd system (obviously), so we just use something totally madeup in the hope that this is less like to conflict in the future. Git-Dch: Ignore
| * make GetLocalitySortedVersionSet more genericDavid Kalnischkies2014-09-075-57/+64
| | | | | | | | | | | | | | | | | | No reason in and of by itself at the moment, but prepares for the goal of having 'apt search' and 'apt-cache search' using the same code now that they at least support the same stuff. The 'apt' code is just a multitude slower at the moment… Git-Dch: Ignore
| * implement --full in apt searchDavid Kalnischkies2014-09-075-40/+73
| |
| * use a format string in ListSingleVersionDavid Kalnischkies2014-09-071-72/+75
| | | | | | | | | | | | | | | | The method already deals with a format string, but had an else path doing a hardcoded format as well. This is changed now to use the same code for both - the format in the second case is still fixed though. Git-Dch: Ignore
| * skip version if we already have this package as search-resultDavid Kalnischkies2014-09-071-5/+11
| | | | | | | | Git-Dch: Ignore
| * support regular expressions in 'apt search'David Kalnischkies2014-09-074-20/+64
| | | | | | | | | | apt-cache search supported this since ever and in the code for apt was a fixme indicating this should be added here as well, so here we go.
| * Improve Debug::Acquire::http debug outputMichael Vogt2014-09-052-4/+5
| | | | | | | | | | Prefix all answers with the URL that the answer is for. This helps when debugging and pipeline is enabled.
* | Merge branch 'debian/sid' into debian/experimentalMichael Vogt2014-09-05109-88812/+90494
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: apt-pkg/acquire-item.cc configure.ac debian/changelog doc/apt-verbatim.ent doc/po/apt-doc.pot doc/po/de.po doc/po/es.po doc/po/fr.po doc/po/it.po doc/po/ja.po doc/po/pt.po po/ar.po po/ast.po po/bg.po po/bs.po po/ca.po po/cs.po po/cy.po po/da.po po/de.po po/dz.po po/el.po po/es.po po/eu.po po/fi.po po/fr.po po/gl.po po/hu.po po/it.po po/ja.po po/km.po po/ko.po po/ku.po po/lt.po po/mr.po po/nb.po po/ne.po po/nl.po po/nn.po po/pl.po po/pt.po po/pt_BR.po po/ro.po po/ru.po po/sk.po po/sl.po po/sv.po po/th.po po/tl.po po/tr.po po/uk.po po/vi.po po/zh_CN.po po/zh_TW.po test/integration/test-ubuntu-bug-346386-apt-get-update-paywall
| * Ensure we have a Policy in CacheFile.BuildDepCache()Michael Vogt2014-09-053-8/+5
| | | | | | | | | | | | This partly reverts d059cc2 and fixes bug #753297 in a more general way by ensuring that CacheFile.BuildDepCache() builds a pkgPolicy if there isn't one already.
| * Fix incorrect upgradable listing in "apt list" (thanks to Michael Musenbrock)Michael Vogt2014-09-053-2/+42
| | | | | | | | | | | | | | | | | | | | The "apt list" command was using only the pkgDepCache but not the pkgPolicy to figure out if a package is upgradable. This lead to incorrect display of upgradable package when the user used the policy to pin-down packages. Thanks to Michael Musenbrock for the initial patch. Closes: #753297
| * test/integration/test-ubuntu-bug-346386-apt-get-update-paywall: use ↵Michael Vogt2014-09-031-7/+5
| | | | | | | | downloadfile()
| * Run autopkgtest tests with "env -i" to avoid pollution from the host envMichael Vogt2014-09-031-1/+3
| | | | | | | | Closes: #759655
| * Make Packages & Sources generation optional, during Generate callDimitri John Ledkov2014-09-031-33/+66
| | | | | | | | | | | | | | | | refactor a bit, extract code out of Generate() into DoGenerate{PackagesAndSources,Contents}, add new APT::FTPArchive::ContentsOnly option to allow skipping the generation of Package/Source files (if they are generated e.g. by some db outside of apt-ftparchives control)
| * Use heap to allocate PatternMatch to avoid potential stack overflowMichael Vogt2014-09-021-2/+3
| | | | | | | | | | | | | | | | | | | | | | When apt-cache search with many args (> 130) is given the allocation of PatternMatch on the stack may fail resulting in a segmentation fault. By using the heap the max size is much bigger and we also get a bad_alloc expection instead of a segfault (which we can catch *if* this ever becomes a pratical problem). No test for the crash as its not reproducable with the MALLOC_ settings in framework. Closes: 759612
| * * apt-pkg/deb/dpkgpm.cc:Michael Vogt2014-09-021-6/+7
| | | | | | | | | | | | | | - update string matching for dpkg I/O errors. (LP: #1363257) - properly parse the dpkg status line so that package name is properly set and an apport report is created. Thanks to Anders Kaseorg for the patch. (LP: #1353171)
| * Add testcase for apt list --all-versionsMichael Vogt2014-09-021-1/+3
| | | | | | | | Dch-Ignore: true
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2024-11-05 10:47:16 +0000