kunkku/abuild, branch cross [no description] https://git-old.alpinelinux.org/user/kunkku/abuild/atom?h=cross 2018-10-19T12:18:13Z abuild: package cross-compilers 2018-10-19T12:18:13Z Kaarle Ritvanen kaarle.ritvanen@datakunkku.fi 2018-10-04T13:53:59Z urn:sha1:c24f1cb9780aa16ccab8c28a6a6b27cf2ba03092 abuild: makedepends_target 2018-10-19T12:18:13Z Kaarle Ritvanen kaarle.ritvanen@datakunkku.fi 2018-10-05T21:43:03Z urn:sha1:16826ee7d60fc3b926964aff0c1a7d7339fbaeed abuild: filter_deps function 2018-10-19T12:18:13Z Kaarle Ritvanen kaarle.ritvanen@datakunkku.fi 2018-10-05T21:42:09Z urn:sha1:152bab8eb855ac20cb4cc7cde88985f6b8574242 abuild: init_root: enable network repos 2018-10-19T12:18:13Z Kaarle Ritvanen kaarle.ritvanen@datakunkku.fi 2018-10-04T20:59:52Z urn:sha1:cf976c90ae418db9e708747bfdd9fd125bb910ee abuild: deps: create missing CBUILDROOT 2018-10-19T12:18:13Z Kaarle Ritvanen kaarle.ritvanen@datakunkku.fi 2018-10-04T18:14:01Z urn:sha1:68b0b11cf688dc90fbd800ac5f9b5c1fdb08119c abuild: init_root function 2018-10-19T12:18:13Z Kaarle Ritvanen kaarle.ritvanen@datakunkku.fi 2018-10-04T18:11:46Z urn:sha1:43d209f0a5081c0d97796e525c1bb663a9dbfe77 abuild: make -v recursive option 2018-10-19T12:18:13Z Kaarle Ritvanen kaarle.ritvanen@datakunkku.fi 2018-10-04T14:58:01Z urn:sha1:7d076b1a38cbd1965bd134f021bd813f5e301b2f abuild: rootbld: pass recursive options 2018-10-19T12:18:13Z Kaarle Ritvanen kaarle.ritvanen@datakunkku.fi 2018-10-04T14:57:01Z urn:sha1:98ac27dcb33e3c5b6f1137d300ca29827b532604 abuild-rmtemp: Do not follow symbolic links 2018-10-11T15:46:45Z Sören Tempel soeren+git@soeren-tempel.net 2018-10-11T14:44:45Z urn:sha1:17cb68e9fb8a1fcb830c0895b3bd9fab91d4b66c Symbolic links might point to files outside of the chroot and thus might delete files outside the chroot. This allows deletion of arbitrary directories on the host from a malicious APKBUILD. Following hard links shouldn't be a problem since hard links (usually) cannot refer to directories and since remove(3) removes the link, not the file it points to it shouldn't cause a problem. I noticed this because alpine-baselayout creates /var/run as a symlink to /run. Therefore causing /run to be deleted on the host when using abuild-rmtemp which in turn causes a bunch of software to no longer function properly (including OpenRC). ==== release 3.3.0_pre1 ==== 2018-10-03T12:58:27Z Natanael Copa ncopa@alpinelinux.org 2018-10-03T12:58:27Z urn:sha1:70f52b9b80e93c3ef676850300ec3a8c4d98cb25