Commits

Commit:
5d120ea8410ddc2808e476d554ba931dc19d8c50
From:
Omar Polo <op@omarpolo.com>
Date:
use capsicum on FreeBSD Thanks to the design of Got, the libexec helpers don't need any resource (in fact they run under pledge "stdio recvfd" on OpenBSD) and so using cap_enter(2) on FreeBSD is dead-easy. While the main process can't be sandboxed on FreeBSD (needs to exec the helpers), all the tough work is done by these small libexec helpers which is also the biggest attack surface. tested by naddy, ok thomas
diff | patch | tree
Commit:
97799ccd4b67a81f97039305d4fdd66588da9962
From:
Thomas Adam <thomas@xteddy.org>
Date:
portable: add support for landlock landlock is a new set of linux APIs that is conceptually similar to unveil(2): the idea is to restrict what a process can do on a specified part of the filesystem. There are some differences in the behaviour: the major one being that the landlock ruleset is inherited across execve(2). This just restricts the libexec helpers by completely revoking ANY filesystem access; after all they are the biggest attack surface. got send/fetch/clone *may* end up spawning ssh(1), so at the moment is not possible to landlock the main process. From Omar Polo.
diff | patch | tree
Commit:
92a9e85d28a30997176ce0d3c2915e3ea70782c7
From:
Thomas Adam <thomas@xteddy.org>
Date:
portable: add FreeBSD support This adds the capability to compile got-portable on FreeBSD.
diff | patch | tree
Commit:
dd038bc6ec835ad3fd3c0b5303b8af9ad506c8cc
From:
Thomas Adam <thomas@xteddy.org>
Via:
Thomas Adam <thomas.adam@smoothwall.net>
Date:
portable: initial Linux compilation This commit modifies the GoT main branch to be able to compile it under linux.
diff | patch | tree
Commit:
d5c81d448ae4eec21053152e1c82c66eb11ca7a4
From:
Stefan Sperling <stsp@stsp.name>
Date:
verify object ID checksums while loose objects are being accessed
diff | patch | tree
Commit:
12f2167a2e638b44a8d0c2c163448011485067b3
From:
Stefan Sperling <stsp@stsp.name>
Date:
add checksum parameters to got_inflate functions which did not provide them yet
diff | patch | tree
Commit:
08578a35f60be8657db97b705f27a55ab61850c8
From:
Stefan Sperling <stsp@stsp.name>
Date:
make close(2) failure checks consistent; check 'close() == -1' everywhere ok millert, naddy
diff | patch | tree
Commit:
56b63ca4ab1049de6fa2d6910ce22c16e2b42a53
From:
Stefan Sperling <stsp@stsp.name>
Date:
make fclose(3) failure checks consistent; check 'fclose() == EOF' everywhere ok millert, naddy
diff | patch | tree
Commit:
23c57b285fdcf9a8a0a5913ea096232038bf0ac3
From:
Christian Weisgerber <naddy@mips.inka.de>
Date:
Stop including <sys/syslimits.h> directly. POSIX says the limits defined there are available from <limits.h>, which almost all affected source files already included anyway. ok millert stsp
diff | patch | tree
Commit:
81a12da58651e79380d81dea7020bf6af20bb28b
From:
Christian Weisgerber <naddy@mips.inka.de>
Date:
do not rely on <zlib.h> to pull in <unistd.h> ok stsp
diff | patch | tree
Commit:
6fb3a4970337c135644ac0ef619a7e96616e4230
From:
Stefan Sperling <stsp@stsp.name>
Date:
add optional 'consumed' output parameter to got_inflate_to_mem()
diff | patch | tree
Commit:
12ce7a6cb20e62e36b3430f7bbada96069749f8b
From:
Stefan Sperling <stsp@stsp.name>
Date:
include <limits.h> instead of <sys/limits.h>; patch by Thomas Klausner
diff | patch | tree
Commit:
638f9024045bbe2420143f8868dcc484c231c634
From:
Stefan Sperling <stsp@stsp.name>
Date:
rename got_error_prefix_errno() to got_error_from_errno()
diff | patch | tree
Commit:
656b1f76d3a6f52318782284fa83ae47894cbffb
From:
joshua stein <jcs@jcs.org>
Date:
while (1) -> for (;;)
diff | patch | tree
Commit:
230a42bdc60c6136d2a5ce65bf1a2f26d990c096
From:
joshua stein <jcs@jcs.org>
Date:
got_error_from_errno -> got_error_prefix_errno also add got_error_prefix_errno2 and got_error_prefix_errno3 which should hopefully all be merged into a single function with variadic args (but can't alloc mem)
diff | patch | tree
Commit:
3a6ce05aff1497b3b590a07e1dccad289ad84d0f
From:
Stefan Sperling <stsp@stsp.name>
Date:
check for errors from close(2)
diff | patch | tree
Commit:
fb43ecf1500cf7f8b2e22348bd1635edcda97fee
From:
Stefan Sperling <stsp@stsp.name>
Date:
check for errors from fclose()
diff | patch | tree
Commit:
268f7291e63638be363b7bccd95f97a73298d039
From:
Stefan Sperling <stsp@stsp.name>
Date:
eliminate got_object_open() round-trip when opening tags
diff | patch | tree
Commit:
28714985ea3c103b203f5a30baaaf582b4961595
From:
Stefan Sperling <stsp@stsp.name>
Date:
add got-read-tag libexec helper
diff | patch | tree