Commits

Commit:
5d120ea8410ddc2808e476d554ba931dc19d8c50
From:
Omar Polo <op@omarpolo.com>
Date:
use capsicum on FreeBSD Thanks to the design of Got, the libexec helpers don't need any resource (in fact they run under pledge "stdio recvfd" on OpenBSD) and so using cap_enter(2) on FreeBSD is dead-easy. While the main process can't be sandboxed on FreeBSD (needs to exec the helpers), all the tough work is done by these small libexec helpers which is also the biggest attack surface. tested by naddy, ok thomas
diff | patch | tree
Commit:
e9f1a409ccc66a6fb79a3022695ca78ad26972ea
From:
Stefan Sperling <stsp@stsp.name>
Via:
Thomas Adam <thomas@xteddy.org>
Date:
imsg_add() frees its msg argument on error; avoid double-free in error paths
diff | patch | tree
Commit:
97799ccd4b67a81f97039305d4fdd66588da9962
From:
Thomas Adam <thomas@xteddy.org>
Date:
portable: add support for landlock landlock is a new set of linux APIs that is conceptually similar to unveil(2): the idea is to restrict what a process can do on a specified part of the filesystem. There are some differences in the behaviour: the major one being that the landlock ruleset is inherited across execve(2). This just restricts the libexec helpers by completely revoking ANY filesystem access; after all they are the biggest attack surface. got send/fetch/clone *may* end up spawning ssh(1), so at the moment is not possible to landlock the main process. From Omar Polo.
diff | patch | tree
Commit:
49d691e8618234a8b0f8d05a1df882c31603644e
From:
Stefan Sperling <stsp@stsp.name>
Via:
Thomas Adam <thomas.adam@smoothwall.net>
Date:
mark some function parameters as 'const', as they should be; patch by Omar Polo
diff | patch | tree
Commit:
92a9e85d28a30997176ce0d3c2915e3ea70782c7
From:
Thomas Adam <thomas@xteddy.org>
Date:
portable: add FreeBSD support This adds the capability to compile got-portable on FreeBSD.
diff | patch | tree
Commit:
dd038bc6ec835ad3fd3c0b5303b8af9ad506c8cc
From:
Thomas Adam <thomas@xteddy.org>
Via:
Thomas Adam <thomas.adam@smoothwall.net>
Date:
portable: initial Linux compilation This commit modifies the GoT main branch to be able to compile it under linux.
diff | patch | tree
Commit:
6480c871c8f9ffdce90c10e7a7313e1187de019a
From:
Stefan Sperling <stsp@stsp.name>
Date:
provide separate send {} and fetch {} configuration blocks in got.conf Feature requested by naddy. ok naddy, who also suggested some tweaks that will arrive shortly
diff | patch | tree
Commit:
08578a35f60be8657db97b705f27a55ab61850c8
From:
Stefan Sperling <stsp@stsp.name>
Date:
make close(2) failure checks consistent; check 'close() == -1' everywhere ok millert, naddy
diff | patch | tree
Commit:
20b7abb3fa8e5b46bacd07df9f85cfd7edc5a4c9
From:
Stefan Sperling <stsp@stsp.name>
Date:
detect unknown repository format extensions (such as sha256 format) ok millert
diff | patch | tree
Commit:
6c13dcd2d0d730f9f9fc0fb0c42eb0f409216063
From:
Stefan Sperling <stsp@stsp.name>
Date:
send gitconfig imsg string values the same way as gotconfig ones are sent
diff | patch | tree
Commit:
23c57b285fdcf9a8a0a5913ea096232038bf0ac3
From:
Christian Weisgerber <naddy@mips.inka.de>
Date:
Stop including <sys/syslimits.h> directly. POSIX says the limits defined there are available from <limits.h>, which almost all affected source files already included anyway. ok millert stsp
diff | patch | tree
Commit:
81a12da58651e79380d81dea7020bf6af20bb28b
From:
Christian Weisgerber <naddy@mips.inka.de>
Date:
do not rely on <zlib.h> to pull in <unistd.h> ok stsp
diff | patch | tree
Commit:
e70bf110de343a3c1fc422b6682f56853686772f
From:
Stefan Sperling <stsp@stsp.name>
Date:
move functions from privsep.c to the helpers which use them where possible
diff | patch | tree
Commit:
469dd7264e07bc434adc24b250cd154db9e18d02
From:
Stefan Sperling <stsp@stsp.name>
Date:
add support for repository mirrors to 'got clone' and 'got fetch'
diff | patch | tree
Commit:
9a1cc63fe0022b929860dfe206daf674f83a7d9a
From:
Stefan Sperling <stsp@stsp.name>
Date:
read repository owner name with gitconfig parser instead of a hand-rolled one
diff | patch | tree
Commit:
cd95becd3d0ee4fb578daf570177c3550cb19e08
From:
Stefan Sperling <stsp@stsp.name>
Date:
parse remotes from gitconfig
diff | patch | tree
Commit:
aba9c984d1420b77b23320520e70b27ecc83acf7
From:
Stefan Sperling <stsp@stsp.name>
Date:
obtain repo format version and commit author name/email from .git/config
diff | patch | tree