Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-10-06 | rename StopAuthentication -> CheckStopAuthentication and make it protected | Michael Vogt | |
2014-10-06 | implement the updated build profile spec | josch | |
2014-10-06 | fix test | Michael Vogt | |
2014-10-06 | rename AuthDone() -> CheckAuthDone() | Michael Vogt | |
2014-10-06 | cleanup pkgAcq*::Failed() | Michael Vogt | |
2014-10-06 | add missing TransactionStageCopy() in pkgAcqDiffIndex::Done() | Michael Vogt | |
2014-10-06 | Rework pkgAcqMeta{Index,Sig,ClearSig}::Done() for readability | Michael Vogt | |
Move common code out but do not use subclassing for ::Done to make it easier to understand what each class is doing when its done | |||
2014-10-06 | fix incorrect docstrings for ↵ | Michael Vogt | |
AcqMetaBase::TransactionStageRemoval/AcqMetaBase::TransactionStageCopy | |||
2014-10-06 | add new "SetActiveSubprocess() | Michael Vogt | |
2014-10-06 | update test | Michael Vogt | |
2014-10-03 | apt-get: Create the temporary downloaded changelog inside tmpdir | Guillem Jover | |
The code is creating a secure temporary directory, but then creates the changelog alongside the tmpdir in the same base directory. This defeats the secure tmpdir creation, making the filename predictable. Inject a '/' between the tmpdir and the changelog filename. | |||
2014-10-03 | Bump library version to libapt-pkg4.14 | Michael Vogt | |
2014-10-03 | really do not download Release if InRelease does not verify | Michael Vogt | |
2014-10-03 | implement MarkAndSweep in cc instead of header | David Kalnischkies | |
Having it in the header exposes some implementation details, namely private methods and will cause problems for us if we ever want to change the actions. Git-Dch: Ignore | |||
2014-10-03 | rename StringType VERSION to VERSIONNUMBER | David Kalnischkies | |
aptitude has a define for VERSION, so to not generate a FTBFS we just rename our enum element to a slightly less generic name. Git-Dch: Ignore | |||
2014-10-02 | releasing package apt version 1.0.9.21.0.9.2 | Michael Vogt | |
2014-10-02 | apt-get: Create the temporary downloaded changelog inside tmpdir | Guillem Jover | |
The code is creating a secure temporary directory, but then creates the changelog alongside the tmpdir in the same base directory. This defeats the secure tmpdir creation, making the filename predictable. Inject a '/' between the tmpdir and the changelog filename. | |||
2014-10-02 | cleanup around pkgAcqMetaSig and improved tests | Michael Vogt | |
2014-10-02 | add a bunch of docstrings etc | Michael Vogt | |
2014-10-02 | ensure world-readability for trusted.gpg in postinst | David Kalnischkies | |
apt-key creates trusted.gpg if it needs it with 644 nowadays, but before it ensured this, it was gpg creating it, which gives it by default 600. Not a problem as long as our gpgv is run as root, but now that we drop privileges we have to ensure that we can also read trusted.gpg files created by earlier apt-key versions. Closes: 647001 | |||
2014-10-02 | fix crash | Michael Vogt | |
2014-10-02 | donkults fixes | Michael Vogt | |
2014-10-02 | Cleanup pkgAcqIndex | Michael Vogt | |
2014-10-01 | refactor and add pkgAcqIndex::ValidateFile() | Michael Vogt | |
2014-10-01 | fix leftover files from Acquire::GzipIndex | Michael Vogt | |
2014-10-01 | hack around test-apt-update-unauth failure | Michael Vogt | |
2014-10-01 | debian/rules: add hardening=+all | Michael Vogt | |
Because of dpkg-buildflags we already get most of the hardening features, +all adds -fPIE and ld -z now Thanks: Simon Ruderich, Markus Waldeck | |||
2014-10-01 | fix test-apt-update-nofallback test | Michael Vogt | |
2014-10-01 | debian/rules: add hardening=+all | Michael Vogt | |
Because of dpkg-buildflags we already get most of the hardening features, +all adds -fPIE and ld -z now Thanks: Simon Ruderich, Markus Waldeck | |||
2014-10-01 | update test/integration/test-releasefile-verification | Michael Vogt | |
2014-10-01 | Use Acquire::Allow{InsecureRepositories,DowngradeToInsecureRepositories} | Michael Vogt | |
The configuration key Acquire::AllowInsecureRepositories controls if apt allows loading of unsigned repositories at all. The configuration Acquire::AllowDowngradeToInsecureRepositories controls if a signed repository can ever become unsigned. This should really never be needed but we provide it to avoid having to mess around in /var/lib/apt/lists if there is a use-case for this (which I can't think of right now). | |||
2014-10-01 | add verify for the .diff/Index download and add FIXME for ↵ | Michael Vogt | |
pkgAcqIndexDiffs/pkgAcqMergeDiffs | |||
2014-10-01 | Turkish program translation update | Mert Dirik | |
Closes: 763379 | |||
2014-09-30 | Merge remote-tracking branch 'donkult/debian/experimental' into ↵ | Michael Vogt | |
debian/experimental | |||
2014-09-30 | adjust version numbers for the planed upload | Michael Vogt | |
2014-09-30 | fix another instance of warning: extra ‘;’ [-Wpedantic] | David Kalnischkies | |
Git-Dch: Ignore | |||
2014-09-30 | support parsing of all hashes for pdiff | David Kalnischkies | |
The fileformat of a pdiff index stores currently only SHA1 hashes. With this change, we look for all other hashes we support as well and take what we get, so that we can work after the release of jessie to get right of SHA1 if we want to. Note that the completely patched file is and was checked against the hashes collected from the Release file, so this transition isn't mission critical. | |||
2014-09-30 | mark private methods as hidden | David Kalnischkies | |
We are the only possible users of private methods, so we are also the only users who can potentially export them via using them in inline methods. The point is: We don't need these symbols exported if we don't do this, so marking them as hidden removes some methods from the API without breaking anything as nobody could have used them. Git-Dch: Ignore | |||
2014-09-29 | cleanup | Michael Vogt | |
2014-09-29 | fix Configuration::FindVector API | David Kalnischkies | |
Git-Dch: Ignore | |||
2014-09-29 | update symbols file | David Kalnischkies | |
2014-09-29 | Merge remote-tracking branch 'debian/debian/experimental' into feature/acq-trans | Michael Vogt | |
2014-09-29 | more test fixes | Michael Vogt | |
2014-09-29 | Test if TMPDIR is a directory in apt-key and if not unset it | Michael Vogt | |
This prevents a failure in mktemp -d - it will blindly trust TMPDIR and not use something else if the dir is not there. | |||
2014-09-29 | fix DestFile ext | Michael Vogt | |
2014-09-29 | test fixes | Michael Vogt | |
2014-09-29 | refactor | Michael Vogt | |
2014-09-29 | Adjust DestFile in ReverifyAfterIMS() to not include compr Extension | Michael Vogt | |
2014-09-29 | Merge remote-tracking branch 'upstream/debian/experimental' into ↵ | Michael Vogt | |
feature/acq-trans Conflicts: apt-pkg/acquire-item.cc apt-pkg/acquire-item.h methods/gpgv.cc | |||
2014-09-29 | Add missing "adduser" dependency (for the new _apt user) | Michael Vogt | |
Closes: #763004 Thanks: Russ Allbery |