Commits
- Commit:
17431c138a938066f1f24d60a05fcbc2934b2dfc
- From:
- Omar Polo <op@omarpolo.com>
- Via:
- Thomas Adam <thomas@xteddy.org>
- Date:
improve error message due to malformed `author' in got.conf
tweak and ok stsp@
- Commit:
84bf00a657aa272bf25d00785cfc8302c60e2fca
- From:
- Stefan Sperling <stsp@stsp.name>
- Via:
- Thomas Adam <thomas@xteddy.org>
- Date:
improve 'got add' error message if file does not exist; reported by Timo Myyrä
ok tracey
- Commit:
9b31ed6506b8e65348a504355903c213b90125d4
- From:
- Stefan Sperling <stsp@stsp.name>
- Via:
- Thomas Adam <thomas@xteddy.org>
- Date:
fix loose object file header parser for zero-length headers
ok millert tracey
- Commit:
67af9f37413a2529ee144aa57def023a428dd996
- From:
- Stefan Sperling <stsp@stsp.name>
- Via:
- Thomas Adam <thomas@xteddy.org>
- Date:
fix double-free and double-close issues in error paths of got_packidx_open()
- Commit:
a75b210eed1d491d23b0cfef8ac3a51607bf2c19
- From:
- Omar Polo <op@omarpolo.com>
- Date:
dropping unused includes
- Commit:
9cefc4c1a6b51bc17dbf315d7b79a1da8a8dc846
- From:
- Omar Polo <op@omarpolo.com>
- Date:
fix landlock usage: handled_access_fs must list all actions
The ruleset's handled_access_fs has to list all the defined actions
because otherwise missing ones are implicitly permitted. Thus, the
previous version ended up allowing "almost everything" except reading
files.
Original diff from Mickaël Salaün, thanks!
ok thomas
- Commit:
5e997b01390a9de2b9cefa7c44375da470e447c6
- From:
- Omar Polo <op@omarpolo.com>
- Date:
s/ENOTSUP/EOPNOTSUPP/
linux defines these errors to the same values, but the landlock doc uses
`EOPNOTSUPP' consistently. Spotted initially by brynet@ and reminded by
Mickaël Salaün, thanks!
ok thomas
- Commit:
97799ccd4b67a81f97039305d4fdd66588da9962
- From:
- Thomas Adam <thomas@xteddy.org>
- Date:
portable: add support for landlock
landlock is a new set of linux APIs that is conceptually similar to
unveil(2): the idea is to restrict what a process can do on a
specified part of the filesystem. There are some differences in the
behaviour: the major one being that the landlock ruleset is inherited
across execve(2).
This just restricts the libexec helpers by completely revoking ANY
filesystem access; after all they are the biggest attack surface. got
send/fetch/clone *may* end up spawning ssh(1), so at the moment is not
possible to landlock the main process.
From Omar Polo.
- Commit:
1f480907e29bc783454427371277ef33a25658e4
- From:
- Stefan Sperling <stsp@stsp.name>
- Via:
- Thomas Adam <thomas@xteddy.org>
- Date:
fix 'got status' reporting all directories on NFS mounts as unversioned
Problem found and fix tested by Ted Bullock.
ok millert, naddy
- Commit:
519c75832f7df1033ba72fb957277e10005566e2
- From:
- Stefan Sperling <stsp@stsp.name>
- Via:
- Thomas Adam <thomas@xteddy.org>
- Date:
fix wrong imsg name in errors raised by got_privsep_send_tree_req()
- Commit:
772802ae5813022f7267db730607c9d1f75949a2
- From:
- Stefan Sperling <stsp@stsp.name>
- Via:
- Thomas Adam <thomas@xteddy.org>
- Date:
remove unnecessary local variable from got_privsep_get_imsg_obj()
- Commit:
d5a18aced0bb9a9cb91f83832693160ea4eec898
- From:
- Stefan Sperling <stsp@stsp.name>
- Via:
- Thomas Adam <thomas@xteddy.org>
- Date:
make 'got rm' report an "unexpected status" error for unversioned files
ok millert@
- Commit:
d64cc78a320df6e371662d50eba6332a7be001c6
- From:
- Stefan Sperling <stsp@stsp.name>
- Via:
- Thomas Adam <thomas@xteddy.org>
- Date:
make 'got rm' behave like rm(1) for paths found missing on disk
ok millert@
- Commit:
0526966e98179aa1a337b127376b21dbcb94b8a2
- From:
- Tracey Emery <tracey@traceyemery.net>
- Via:
- Thomas Adam <thomas@xteddy.org>
- Date:
style
- Commit:
81135670fc76779b87dcb39825501abb68f4a547
- From:
- Tracey Emery <tracey@traceyemery.net>
- Via:
- Thomas Adam <thomas@xteddy.org>
- Date:
unbreak gotweb index when pack files are missing
- Commit:
ce0bbcfd76f150d6b4253f7ac8817db59aad88ac
- From:
- Stefan Sperling <stsp@stsp.name>
- Via:
- Thomas Adam <thomas@xteddy.org>
- Date:
remove non-reachable 'return NULL' statement from report_single_file_status()
- Commit:
2183bbf63dd94765e293607b7dd98e3254cbbf60
- From:
- Stefan Sperling <stsp@stsp.name>
- Via:
- Thomas Adam <thomas@xteddy.org>
- Date:
show rebase and histedit backups in tog ref view
ok naddy
- Commit:
e8f02263080ea8f6ff76ae63d06d6de4c4212c55
- From:
- Stefan Sperling <stsp@stsp.name>
- Via:
- Thomas Adam <thomas@xteddy.org>
- Date:
compress delta data from delta_cache directly into pack file
- Commit:
d94c35b08cef6492ef7d1ea2f34c2b3ca94d5975
- From:
- Stefan Sperling <stsp@stsp.name>
- Via:
- Thomas Adam <thomas@xteddy.org>
- Date:
add missing error check in got_inflate_to_mem_mmap()
- Commit:
89425ac3087993a34063c921014369e3320d36a6
- From:
- Thomas Adam <thomas@xteddy.org>
- Date:
Release 0.66
- Commit:
053ccfc118036a493a587cbbe43b12c330d0011f
- From:
- Stefan Sperling <stsp@stsp.name>
- Via:
- Thomas Adam <thomas@xteddy.org>
- Date:
add -t option to 'got branch' synopsis in got.1 man page
- Commit:
1def799764ad19672fdea5c90b59cb8012a02377
- From:
- Stefan Sperling <stsp@stsp.name>
- Via:
- Thomas Adam <thomas@xteddy.org>
- Date:
bump version number
- Commit:
d3b6e44e1ad8eb2ed8383de1b8560e62e7c21860
- From:
- Stefan Sperling <stsp@stsp.name>
- Via:
- Thomas Adam <thomas@xteddy.org>
- Date:
CHANGES for 0.66
- Commit:
b490237f809cf7593cfa7de0bbb48050e27993a6
- From:
- Stefan Sperling <stsp@stsp.name>
- Via:
- Thomas Adam <thomas@xteddy.org>
- Date:
fix file corruption regression in 'got checkout' caused by commit db696021
got-read-pack must rewind its files temporary files before reusing them.
Problem reported by naddy
ok tracey naddy
- Commit:
1944573a096bbe0d2b80dd1644f01383b9353af5
- From:
- Stefan Sperling <stsp@stsp.name>
- Via:
- Thomas Adam <thomas@xteddy.org>
- Date:
add missing checks for reads beyond the mapped memory area of a pack file