Skip to content
Snippets Groups Projects
  1. Jun 26, 2023
    • alice's avatar
      ==== release 3.11.19 ==== · 873a4b66
      alice authored
      3.11.19
      873a4b66
    • alice's avatar
      checkapk: don't objdump invalid elfs · df318296
      alice authored
      cleans up the output a bit for things that have .so in the name
      df318296
    • alice's avatar
      checkapk: do simple parallel · 535afd95
      alice authored
      this is quite trivial and should be safe
      535afd95
    • alice's avatar
      ==== release 3.11.18 ==== · 5c25099d
      alice authored
      3.11.18
      5c25099d
    • alice's avatar
      checkapk: ignore missing apk error · 9855e304
      alice authored
      prior to the recent reworks, this error handling path was never
      triggered, because the script is ran without pipefail, and it was at
      the end of a | pipe | line | sort, so all it did was be ignored for 'new
      apks', when the old one would fail to fetch and be missing.
      
      since we now do hit this path on fetch failure however, it aborts the
      script when a new subpackage/package is added (since the 'old apk' won't
      exist), and doesn't output a diff. since before we always ignored this,
      ignore the 'old apk' perhaps not existing, which gives the currently
      intended behaviour.
      9855e304
    • alice's avatar
      ==== release 3.11.17 ==== · d451522e
      alice authored
      3.11.17
      d451522e
    • alice's avatar
      checkapk: but actually skip symlinks · 256a249f
      alice authored
      boolean logic gets confusing..
      256a249f
    • alice's avatar
      ==== release 3.11.16 ==== · d51cf9c2
      alice authored
      3.11.16
      d51cf9c2
    • alice's avatar
      checkapk: skip symlinks · fd5ec6b4
      alice authored
      this affected the old version too- duplicate sodiffs on symlinks are useless
      fd5ec6b4
    • alice's avatar
      ==== release 3.11.15 ==== · 64f2b3af
      alice authored
      64f2b3af
    • alice's avatar
      checkapk: also make sure only sofiles objdumped · 9af40121
      alice authored
      9af40121
    • alice's avatar
      ==== release 3.11.14 ==== · 3e5501c9
      alice authored
      3.11.14
      3e5501c9
    • alice's avatar
      checkapk: refactor to show previous soname and decompress once and use unified context · 26118d49
      alice authored
      closes #10070
      
      previously:
      >>> Size difference for gegl: 7480 KiB -> 7956 KiB
      --- filelist-gegl-old	2023-06-26 02:28:40.176085274 +0200
      +++ filelist-gegl	2023-06-26 02:28:40.202085952 +0200
      @@ -47,12 +47,13 @@
       usr/lib/gegl-0.4/tiff-load.so
       usr/lib/gegl-0.4/tiff-save.so
       usr/lib/gegl-0.4/transformops.so
      +usr/lib/gegl-0.4/vector-fill.so
       usr/lib/gegl-0.4/vector-stroke.so
       usr/lib/gegl-0.4/webp-load.so
       usr/lib/gegl-0.4/webp-save.so
       usr/lib/girepository-1.0/
       usr/lib/girepository-1.0/Gegl-0.4.typelib
       usr/lib/libgegl-0.4.so.0
      -usr/lib/libgegl-0.4.so.0.443.1
      +usr/lib/libgegl-0.4.so.0.445.1
       usr/lib/libgegl-npd-0.4.so
       usr/lib/libgegl-sc-0.4.so
      usr/lib/gegl-0.4/vector-fill.so:    SONAME               vector-fill.so
      usr/lib/libgegl-0.4.so.0.445.1:    SONAME               libgegl-0.4.so.0
      
      now:
      >>> Size difference for gegl: 7480 KiB -> 7956 KiB
      --- filelist-gegl-old
      +++ filelist-gegl-new
      @@ -47,12 +47,13 @@
       usr/lib/gegl-0.4/tiff-load.so
       usr/lib/gegl-0.4/tiff-save.so
       usr/lib/gegl-0.4/transformops.so
      +usr/lib/gegl-0.4/vector-fill.so
       usr/lib/gegl-0.4/vector-stroke.so
       usr/lib/gegl-0.4/webp-load.so
       usr/lib/gegl-0.4/webp-save.so
       usr/lib/girepository-1.0/
       usr/lib/girepository-1.0/Gegl-0.4.typelib
       usr/lib/libgegl-0.4.so.0
      -usr/lib/libgegl-0.4.so.0.443.1
      +usr/lib/libgegl-0.4.so.0.445.1
       usr/lib/libgegl-npd-0.4.so
       usr/lib/libgegl-sc-0.4.so
      SODIFF:
      +usr/lib/gegl-0.4/vector-fill.so:    SONAME               vector-fill.so
      -usr/lib/libgegl-0.4.so.0.443.1:    SONAME               libgegl-0.4.so.0
      +usr/lib/libgegl-0.4.so.0.445.1:    SONAME               libgegl-0.4.so.0
      
      it also no longer relies on diffutils default output, utilising diff -U0 for comparison
      
      there is also a slight optimisation wrt apk handling, previously it
      would get decompressed twice for soname diff. now the intermediate is
      stored
      26118d49
  2. Jun 22, 2023
  3. Jun 21, 2023
  4. Jun 15, 2023
  5. Jul 03, 2022
    • Sören Tempel's avatar
      abuild: Scan for binaries with extra setcap(8) capabilities · 4a2a0337
      Sören Tempel authored
      Similar to suid binaries, abuild will now error out if the package
      includes binaries with setcap(8) capabilities but doesn't have `setcap`
      in `$options`. This eases identifying package which ship binaries
      with extra capabilities.
      
      Furthermore, if these binaries are executable by others a warning is
      emitted. This warning could be changed to an error in the future.
      The recommendation is to make such binaries only executable by owner
      and group, thereby requiring the system administrator to explicitly
      add users to a specific group in order to give them accesses to these
      capabilities.
      
      See: tsc#45
      
      Discussion: This change requires abuild to depend on the `libcap`
      package for the `getcap` binary. It does not seem to be possible
      at the moment to use scanelf(1) to identify these binaries.
      4a2a0337
  6. Jun 07, 2023
  7. Jun 04, 2023
  8. Jun 03, 2023
Loading