Commit Briefs
portable: add support for landlock
landlock is a new set of linux APIs that is conceptually similar to unveil(2): the idea is to restrict what a process can do on a specified part of the filesystem. There are some differences in the behaviour: the major one being that the landlock ruleset is inherited across execve(2). This just restricts the libexec helpers by completely revoking ANY filesystem access; after all they are the biggest attack surface. got send/fetch/clone *may* end up spawning ssh(1), so at the moment is not possible to landlock the main process. From Omar Polo.
Release 0.66 (tags/0.66)
Release 0.65 (tags/0.65)
Release 0.64 (tags/0.64)
release: 0.62 (tags/0.62)
Update CHANGELOG and configure.ac for the 0.62 release.
portable: release 0.61 (tags/0.61)
Update configure.ac and CHANGELOG for 0.61
regress: enable tests
Enable the compilation and execution of the tests under regress/
portable: propagate AM_CFLAGS/AM_CPPFLAGS
Allow for warnings via AM_CFLAGS in a common Makefile, and let those values propagate to all other Makefiles. Currently the more useful checks are disabled until upstream changes are made to reduce warnings. While here, also fix the version string to remove quotes.
FreeBSD: tighten UUID check
If UUID libraries are already detected, don't ignore them by then checking pkg-config, etc. Noticed by Christian "naddy" Weisgerber.
portable: add FreeBSD support
This adds the capability to compile got-portable on FreeBSD.
regress: port cmdline tests
This commit introduces the 'make tests' target which will run the cmdline/* tests.
configure: bump version
Follow the same version as got itself.
enable gotadmin
Add gotadmin to configure.ac, etc., so it can be built and installed. OK thomas.adam
ncurses: only look for widechar version
When checking for ncurses, only check against the widechar version of the library, otherwise the code won't work correctly, despite it compiling properly. Helped by Thomas Dickey.
portable: initial Linux compilation
This commit modifies the GoT main branch to be able to compile it under linux.