summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
| * | | | | | | | | | Merge remote-tracking branch 'debian/debian/experimental' into feature/acq-transMichael Vogt2014-09-232-3/+4
| |\ \ \ \ \ \ \ \ \ \
| * \ \ \ \ \ \ \ \ \ \ Merge remote-tracking branch 'upstream/debian/experimental' into ↵Michael Vogt2014-09-2386-51838/+55715
| |\ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | feature/acq-trans Conflicts: apt-pkg/acquire-item.cc apt-pkg/acquire-item.h methods/copy.cc test/integration/test-hashsum-verification
| * | | | | | | | | | | | fix gcc warningsMichael Vogt2014-09-172-9/+8
| | | | | | | | | | | | |
| * | | | | | | | | | | | use pkgAcqMetaBase as the transactionManagerMichael Vogt2014-09-175-148/+146
| | | | | | | | | | | | |
| * | | | | | | | | | | | add a bunch of dpointersMichael Vogt2014-09-161-0/+30
| | | | | | | | | | | | |
| * | | | | | | | | | | | remove pkgAcqSubIndexMichael Vogt2014-09-162-176/+1
| | | | | | | | | | | | |
| * | | | | | | | | | | | Merge remote-tracking branch 'upstream/debian/experimental' into ↵Michael Vogt2014-09-05109-88813/+90495
| |\ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | feature/acq-trans
| * | | | | | | | | | | | | add shared code into pkgAcqMetaSigBase::GenerateAuthWarning()Michael Vogt2014-08-252-54/+65
| | | | | | | | | | | | | |
| * | | | | | | | | | | | | all tests passMichael Vogt2014-08-243-16/+40
| | | | | | | | | | | | | |
| * | | | | | | | | | | | | make the test-pdiff-usage code work againMichael Vogt2014-08-241-0/+11
| | | | | | | | | | | | | |
| * | | | | | | | | | | | | make compressed-indexes test pass againMichael Vogt2014-08-242-27/+43
| | | | | | | | | | | | | |
| * | | | | | | | | | | | | cleanupMichael Vogt2014-08-241-14/+9
| | | | | | | | | | | | | |
| * | | | | | | | | | | | | really move clearsign check into pkgAcqMetaClearSig::Done()Michael Vogt2014-08-022-7/+16
| | | | | | | | | | | | | |
| * | | | | | | | | | | | | add ims check verifyMichael Vogt2014-08-023-9/+52
| | | | | | | | | | | | | |
| * | | | | | | | | | | | | move clearsign check into pkgAcqMetaClearSig::Failed()Michael Vogt2014-08-021-12/+11
| | | | | | | | | | | | | |
| * | | | | | | | | | | | | make i-m-s work againMichael Vogt2014-08-012-4/+29
| | | | | | | | | | | | | |
| * | | | | | | | | | | | | add gzip test and todoMichael Vogt2014-08-012-2/+14
| | | | | | | | | | | | | |
| * | | | | | | | | | | | | make errors more consistentMichael Vogt2014-08-012-15/+6
| | | | | | | | | | | | | |
| * | | | | | | | | | | | | check hashes of compressed files as wellMichael Vogt2014-08-012-12/+31
| | | | | | | | | | | | | |
| * | | | | | | | | | | | | fix transactionid passingMichael Vogt2014-08-012-2/+1
| | | | | | | | | | | | | |
| * | | | | | | | | | | | | mve MetaKey into pkgAcqBaseIndexMichael Vogt2014-08-013-2/+6
| | | | | | | | | | | | | |
| * | | | | | | | | | | | | fail early (again) on gpg sig failuresMichael Vogt2014-07-313-40/+20
| | | | | | | | | | | | | |
| * | | | | | | | | | | | | ensure InRelease->Release is transactional as wellMichael Vogt2014-07-312-2/+21
| | | | | | | | | | | | | |
| * | | | | | | | | | | | | make test_unauthenticated_to_invalid_inrelease workMichael Vogt2014-07-311-4/+5
| | | | | | | | | | | | | |
| * | | | | | | | | | | | | make test_inreleae_to_release_reverts_all workMichael Vogt2014-07-311-5/+11
| | | | | | | | | | | | | |
| * | | | | | | | | | | | | Rework TransactionID stuffMichael Vogt2014-07-315-78/+305
| | | | | | | | | | | | | |
| * | | | | | | | | | | | | WIP cleanup pkgAcqMetaSigMichael Vogt2014-07-223-83/+42
| | | | | | | | | | | | | |
| * | | | | | | | | | | | | Download Release first, then Release.gpgMichael Vogt2014-07-215-68/+79
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The old way of handling this was that pkgAcqMetaIndex was responsible to check/move both Release and Release.gpg in place. This breaks the assumption of the transaction that each pkgAcquire::Item has a single File that its responsible for.
| * | | | | | | | | | | | | add pkgAcquire::TransactionHasError()Michael Vogt2014-07-214-6/+48
| | | | | | | | | | | | | |
| * | | | | | | | | | | | | WIP transaction based updateMichael Vogt2014-07-184-171/+303
| | | | | | | | | | | | | |
* | | | | | | | | | | | | | set PR_SET_NO_NEW_PRIVS also if run as non-rootDavid Kalnischkies2014-10-071-11/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changing user and co works only as root, but can do some things for methods run as normal user as well to protect them from being able to call setuid binaries like sudo to elevate their privileges. Also uses a cheap trick now to build with old unsupporting kernels.
* | | | | | | | | | | | | | fix foldmarkers in fileutl.ccDavid Kalnischkies2014-10-071-21/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Git-Dch: Ignore
* | | | | | | | | | | | | | Ignore EINVAL from prctl(PR_SET_NO_NEW_PRIVS)Michael Vogt2014-10-071-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Ignore a EINVAL error here as it means that the kernel is too old to understand this option. We should not fail hard in this case but just ignore the error. closes: 764066
* | | | | | | | | | | | | | Rename DropPrivs() to DropPrivileges()Michael Vogt2014-10-075-5/+5
| |_|_|_|_|_|_|/ / / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Git-Dch: ignore
* | | | | | | | | | | | | [l10n] Updated Czech translation of aptMiroslav Kure2014-10-061-16/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Closes: #764055
* | | | | | | | | | | | | apt-get: Create the temporary downloaded changelog inside tmpdirGuillem Jover2014-10-031-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The code is creating a secure temporary directory, but then creates the changelog alongside the tmpdir in the same base directory. This defeats the secure tmpdir creation, making the filename predictable. Inject a '/' between the tmpdir and the changelog filename.
* | | | | | | | | | | | | Bump library version to libapt-pkg4.14Michael Vogt2014-10-034-3/+3
| | | | | | | | | | | | |
* | | | | | | | | | | | | implement MarkAndSweep in cc instead of headerDavid Kalnischkies2014-10-032-13/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Having it in the header exposes some implementation details, namely private methods and will cause problems for us if we ever want to change the actions. Git-Dch: Ignore
* | | | | | | | | | | | | rename StringType VERSION to VERSIONNUMBERDavid Kalnischkies2014-10-033-7/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | aptitude has a define for VERSION, so to not generate a FTBFS we just rename our enum element to a slightly less generic name. Git-Dch: Ignore
* | | | | | | | | | | | | ensure world-readability for trusted.gpg in postinstDavid Kalnischkies2014-10-022-0/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | apt-key creates trusted.gpg if it needs it with 644 nowadays, but before it ensured this, it was gpg creating it, which gives it by default 600. Not a problem as long as our gpgv is run as root, but now that we drop privileges we have to ensure that we can also read trusted.gpg files created by earlier apt-key versions. Closes: 647001
* | | | | | | | | | | | | debian/rules: add hardening=+allMichael Vogt2014-10-011-3/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Because of dpkg-buildflags we already get most of the hardening features, +all adds -fPIE and ld -z now Thanks: Simon Ruderich, Markus Waldeck
* | | | | | | | | | | | | Turkish program translation updateMert Dirik2014-10-011-93/+90
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Closes: 763379
* | | | | | | | | | | | | Merge remote-tracking branch 'donkult/debian/experimental' into ↵Michael Vogt2014-09-3024-365/+717
|\ \ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | debian/experimental
| * | | | | | | | | | | | | fix another instance of warning: extra ‘;’ [-Wpedantic]David Kalnischkies2014-09-301-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Git-Dch: Ignore
| * | | | | | | | | | | | | support parsing of all hashes for pdiffDavid Kalnischkies2014-09-305-159/+328
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The fileformat of a pdiff index stores currently only SHA1 hashes. With this change, we look for all other hashes we support as well and take what we get, so that we can work after the release of jessie to get right of SHA1 if we want to. Note that the completely patched file is and was checked against the hashes collected from the Release file, so this transition isn't mission critical.
| * | | | | | | | | | | | | mark private methods as hiddenDavid Kalnischkies2014-09-3019-112/+88
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We are the only possible users of private methods, so we are also the only users who can potentially export them via using them in inline methods. The point is: We don't need these symbols exported if we don't do this, so marking them as hidden removes some methods from the API without breaking anything as nobody could have used them. Git-Dch: Ignore
| * | | | | | | | | | | | | fix Configuration::FindVector APIDavid Kalnischkies2014-09-293-12/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Git-Dch: Ignore
| * | | | | | | | | | | | | update symbols fileDavid Kalnischkies2014-09-291-81/+298
| | |_|_|_|_|_|/ / / / / / | |/| | | | | | | | | | |
* / | | | | | | | | | | | adjust version numbers for the planed uploadMichael Vogt2014-09-302-2/+2
|/ / / / / / / / / / / /
* | | | | | / / / / / / Test if TMPDIR is a directory in apt-key and if not unset itMichael Vogt2014-09-292-0/+4
| |_|_|_|_|/ / / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This prevents a failure in mktemp -d - it will blindly trust TMPDIR and not use something else if the dir is not there.