cpt/kiss, branch 1.22.4 [MIRROR] Carbs Packaging Tools https://git.carbslinux.org/cpt/atom?h=1.22.4 2020-05-26T16:58:27+00:00 kiss: bump version 2020-05-26T16:58:27+00:00 merakor cem@ckyln.com 2020-05-26T16:58:27+00:00 urn:sha1:8b0f7d805223ad1dd1b813eb1cfc7dfdb1dfc81d FossilOrigin-Name: 5c110d7b9fcbe3f2873d1526ff530d27d546ced84a9db2fd0ac1d17ae2fa780a kiss: run post-package hook after pkg_tar 2020-05-26T10:02:48+00:00 merakor cem@ckyln.com 2020-05-26T10:02:48+00:00 urn:sha1:f111e9dac688a11bf706ccf124e0531c93566d04 FossilOrigin-Name: 2ac86edf32e1da283c4cd79502e3df04999b8becdb005893549a852ef760cc98 kiss: rename hashcheck to sh256 for compatibility in kiss-bin 2020-05-25T21:43:06+00:00 merakor cem@ckyln.com 2020-05-25T21:43:06+00:00 urn:sha1:e0f67f7c0f203a8d23c3d6d3a0395b667e88198b FossilOrigin-Name: b0d89e23226dd7ba0d2620f74b239c486a84a5d1f20980433106453e14cbabcc kiss: enable the usage of glob characters with kiss-bin 2020-05-25T20:21:13+00:00 merakor cem@ckyln.com 2020-05-25T20:21:13+00:00 urn:sha1:4f4a57bbe614b5f589d34aa864d719e107466141 FossilOrigin-Name: 7d9a317d070b75d1736fca0ee433bd0dbfbcd320c0cd379df68ad615a27c691a kiss: remove non-POSIX printf * field width specifier 2020-05-24T00:11:50+00:00 merakor cem@ckyln.com 2020-05-24T00:11:50+00:00 urn:sha1:18fbe566712997441aeb81a7eaac0dcea569d33e POSIX doesn't specify %*s for the printf command, with the rationale that one can just put the variable there in place, do that. FossilOrigin-Name: be926ff4e02f12bcebbedd725ab8d70d2abc97e96f88f615cff9ad7e1d90fe31 kiss: prevent privilige escalations through user defined hooks 2020-05-18T00:12:29+00:00 merakor cem@ckyln.com 2020-05-18T00:12:29+00:00 urn:sha1:e12c404e13e8bc0eaab4b1aeeb3a6af0cc79dd49 During installation, the script is run as root, but out KISS_HOOK variable stays the same. This is a critical bug since a user can only have permissions to install packages as root, but not for any other privilige escalation. A user can abuse the KISS_HOOK in order to become root, possibly with a `/sbin/login` command on the hook file. This change checks for a fourth argument and overrides the KISS_HOOK to `$KISS_ROOT/etc/kiss-hook` FossilOrigin-Name: 67041b182d9524fcfa8292e7167f249b99851129cda0d7fe9e4fdff8388063b6 kiss: do not abort if kiss-readlink fails 2020-05-15T23:12:28+00:00 merakor cem@ckyln.com 2020-05-15T23:12:28+00:00 urn:sha1:91aaf984c843df030b33c2dc9419dfecc5da95a5 FossilOrigin-Name: c0ece3c29785b6423770c830b1047ba3fcf8ced4b9f4a805daa868067ea3ba9d kiss: bump version 2020-05-15T17:42:38+00:00 merakor cem@ckyln.com 2020-05-15T17:42:38+00:00 urn:sha1:673485f1250b8e1ceef6ea11e94bd3bb1b95ee5a FossilOrigin-Name: 7257fbc081dbd50bf4f17b6365cd88bb1c3572910ca26accb4bd3c629930127c kiss: fix tarball extraction where there are files with spaces 2020-05-15T17:37:19+00:00 merakor cem@ckyln.com 2020-05-15T17:37:19+00:00 urn:sha1:fa1503e37b329602bd8679ba1989c8bc7580373b FossilOrigin-Name: 92e2eb771a2e8bcb3d54b9dd5e53d3a85259658ac0ad5124b62348a8037984a4 kiss: use diff instead of cmp 2020-05-15T10:26:57+00:00 merakor cem@ckyln.com 2020-05-15T10:26:57+00:00 urn:sha1:d88c7c3f97baa5abbb5e7827712c99f10b82c25b FossilOrigin-Name: e93a6358cfa3b9bee848088e152fb8920e5397487553be6054eb9d748f299a61