seatd-launch needs SUID to be useful. SUID binaries are a security
risk and this very binary had a vulnerability allowing privilege
escalation (CVE-2021-41387)!

seatd-launch is not necessary for using seatd and libseat, so the
user should have an option to NOT install it on their system.

See e.g. 49943448 for explanation.

This fixes the shebang of git-clang-format and other tools which do not
have a *.py file extension.

Fixes #12975

Apo Apangona authored 3 years ago and Jakub Jirutka committed 3 years ago

openssl 3.0 breaks tls:
$ smtpd -dV -Tall
...
debug: SSL library error: io_dispatch_accept_tls:SSL_accept: error:020000B3:rsa routines::missing private key
debug: SSL library error: io_dispatch_accept_tls:SSL_accept: error:1C880004:Provider routines::RSA lib
debug: SSL library error: io_dispatch_accept_tls:SSL_accept: error:0A080006:SSL routines::EVP lib
smtp: 0x7f5278fff010: IO_ERROR <io:0x7f5279007d90 fd=21 to=300000 fl=R tls=TLSv1.3:TLS_AES_256_GCM_SHA384:256 ib=0 ob=0>
4a4a947d0257ad3a smtp disconnected reason="io-error: error:0A080006:SSL routines::EVP lib"
...

/etc/apk/keys

cp: will not overwrite just-created '/home/buildozer/sysroot-aarch64/
/etc/apk/keys/buildozer-6086211a.rsa.pub' with '/home/buildozer/.
abuild/buildozer-6086211a.rsa.pub'

auth pam_nologin.so is already defined in system-login that is
included from system-local-login.

auth pam_securetty.so is currently not used in Alpine; it would be
added to system-local-login if desirable.