Menu
▾
▴
devil-linux-commit — Mailing list for CVS commit messages.
You can subscribe to this list here.
| 2003 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
(202) |
Nov
(201) |
Dec
(280) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2004 |
Jan
(493) |
Feb
(106) |
Mar
(215) |
Apr
(163) |
May
(79) |
Jun
(193) |
Jul
(47) |
Aug
(71) |
Sep
(127) |
Oct
(41) |
Nov
(49) |
Dec
(120) |
| 2005 |
Jan
(147) |
Feb
(45) |
Mar
(26) |
Apr
(71) |
May
(52) |
Jun
(28) |
Jul
(92) |
Aug
(50) |
Sep
(35) |
Oct
(193) |
Nov
(106) |
Dec
(52) |
| 2006 |
Jan
(51) |
Feb
(38) |
Mar
(33) |
Apr
(79) |
May
(107) |
Jun
(67) |
Jul
(21) |
Aug
(65) |
Sep
(44) |
Oct
(87) |
Nov
(12) |
Dec
(56) |
| 2007 |
Jan
(48) |
Feb
(58) |
Mar
(63) |
Apr
(31) |
May
(25) |
Jun
(20) |
Jul
(72) |
Aug
(54) |
Sep
(30) |
Oct
(76) |
Nov
(74) |
Dec
(25) |
| 2008 |
Jan
(39) |
Feb
(39) |
Mar
(62) |
Apr
(64) |
May
(59) |
Jun
(31) |
Jul
(25) |
Aug
(25) |
Sep
(17) |
Oct
(24) |
Nov
|
Dec
(1) |
| 2009 |
Jan
(60) |
Feb
(39) |
Mar
(16) |
Apr
(30) |
May
(52) |
Jun
(35) |
Jul
(15) |
Aug
(15) |
Sep
(21) |
Oct
(32) |
Nov
(39) |
Dec
(52) |
| 2010 |
Jan
(42) |
Feb
(40) |
Mar
(23) |
Apr
(20) |
May
(27) |
Jun
(10) |
Jul
(30) |
Aug
(30) |
Sep
(66) |
Oct
(12) |
Nov
(35) |
Dec
(60) |
| 2011 |
Jan
(16) |
Feb
(1) |
Mar
(3) |
Apr
(28) |
May
(21) |
Jun
|
Jul
(12) |
Aug
(6) |
Sep
(10) |
Oct
(14) |
Nov
(40) |
Dec
(60) |
| 2012 |
Jan
(23) |
Feb
(17) |
Mar
(24) |
Apr
(18) |
May
(13) |
Jun
(1) |
Jul
|
Aug
(5) |
Sep
|
Oct
(5) |
Nov
(5) |
Dec
(15) |
| 2013 |
Jan
(2) |
Feb
(5) |
Mar
(1) |
Apr
(2) |
May
(2) |
Jun
(3) |
Jul
|
Aug
(3) |
Sep
(5) |
Oct
(3) |
Nov
(1) |
Dec
(1) |
| 2014 |
Jan
(3) |
Feb
(5) |
Mar
(8) |
Apr
(3) |
May
(1) |
Jun
(1) |
Jul
(2) |
Aug
|
Sep
(4) |
Oct
(10) |
Nov
|
Dec
(9) |
| 2015 |
Jan
(18) |
Feb
(17) |
Mar
(5) |
Apr
(2) |
May
|
Jun
(5) |
Jul
(1) |
Aug
(2) |
Sep
(1) |
Oct
(24) |
Nov
(20) |
Dec
(41) |
| 2016 |
Jan
(9) |
Feb
(3) |
Mar
(2) |
Apr
(7) |
May
(8) |
Jun
(1) |
Jul
(6) |
Aug
(5) |
Sep
(2) |
Oct
(6) |
Nov
(1) |
Dec
(6) |
| 2017 |
Jan
(6) |
Feb
(1) |
Mar
|
Apr
(4) |
May
(1) |
Jun
(1) |
Jul
(2) |
Aug
(2) |
Sep
|
Oct
|
Nov
|
Dec
|
|
From: <smi...@us...> - 2003-12-25 00:46:43
|
Update of /cvsroot/devil-linux/build
In directory sc8-pr-cvs1:/tmp/cvs-serv20063
Modified Files:
Tag: rel-1-0-patches
CHANGES
Log Message:
- stunnel didn't get copied onto the CD
Index: CHANGES
===================================================================
RCS file: /cvsroot/devil-linux/build/CHANGES,v
retrieving revision 1.510.2.43
retrieving revision 1.510.2.44
diff -u -d -r1.510.2.43 -r1.510.2.44
--- CHANGES 23 Dec 2003 17:17:39 -0000 1.510.2.43
+++ CHANGES 25 Dec 2003 00:46:40 -0000 1.510.2.44
@@ -23,6 +23,7 @@
#
1.0.4
+- stunnel missing on the CD
- upgrade-config now correctly handles symlinks
1.0.3
|
|
From: <smi...@us...> - 2003-12-25 00:46:43
|
Update of /cvsroot/devil-linux/build/scripts
In directory sc8-pr-cvs1:/tmp/cvs-serv20063/scripts
Modified Files:
Tag: rel-1-0-patches
stunnel
Log Message:
- stunnel didn't get copied onto the CD
Index: stunnel
===================================================================
RCS file: /cvsroot/devil-linux/build/scripts/stunnel,v
retrieving revision 1.7
retrieving revision 1.7.2.1
diff -u -d -r1.7 -r1.7.2.1
--- stunnel 22 Jul 2003 19:45:11 -0000 1.7
+++ stunnel 25 Dec 2003 00:46:40 -0000 1.7.2.1
@@ -5,6 +5,18 @@
#
# http://www.devil-linux.org
+# you need the next line, otherwise script won't be executed !!!
+# DL-build-system v3
+
+### BEGIN INIT INFO
+# Provides: stunnel
+# Required-Start: $basebuildtools $libs
+# Required-Stop:
+# Default-Start: 1 2
+# Default-Stop:
+# Description: description
+### END INIT INFO
+
# get the directoryname of the script
MYDIR=${0%/*}
@@ -27,10 +39,9 @@
install )
if [ "$CONFIG_STUNNEL" = "y" ]; then
- mkdir -p $CDDIR/usr/sbin
- mkdir -p $CDDIR/usr/lib
- cp -p stunnel $CDDIR/usr/sbin
- cp -p stunnel.so $CDDIR/usr/lib
+ mkdir -p $CDDIR/usr/sbin || exit 1
+ mkdir -p $CDDIR/usr/lib || exit 1
+ cp -p src/stunnel $CDDIR/usr/sbin/ || exit 1
copy_man
fi
;;
|
|
From: <smi...@us...> - 2003-12-24 23:14:40
|
Update of /cvsroot/devil-linux/build/scripts/configuration In directory sc8-pr-cvs1:/tmp/cvs-serv8517/scripts/configuration Modified Files: devildoc.config gcc.config grsecurity.config linux.config prepare.config Log Message: - added -pie support to gcc (not used yet) - update binutils to v2.14.90.0.7 - updated stack smashing protector to v3.3-7 - reorganized menuconfig a bit Index: devildoc.config =================================================================== RCS file: /cvsroot/devil-linux/build/scripts/configuration/devildoc.config,v retrieving revision 1.2 retrieving revision 1.3 diff -u -d -r1.2 -r1.3 --- devildoc.config 2 Oct 2003 15:58:26 -0000 1.2 +++ devildoc.config 24 Dec 2003 23:14:37 -0000 1.3 @@ -5,5 +5,5 @@ # # http://www.devil-linux.org -menu_add "Build Configuration" bool "Devil-Linux Documentation on CD" CONFIG_DEVIL_DOC_ISO -menu_add "Build Configuration" bool "Man pages and program documentation on CD" CONFIG_DEVIL_MAN_ISO +menu_add "Build Configuration|Documentation and man-pages" bool "Devil-Linux Documentation on CD" CONFIG_DEVIL_DOC_ISO +menu_add "Build Configuration|Documentation and man-pages" bool "Man pages and program documentation on CD" CONFIG_DEVIL_MAN_ISO Index: gcc.config =================================================================== RCS file: /cvsroot/devil-linux/build/scripts/configuration/gcc.config,v retrieving revision 1.3 retrieving revision 1.4 diff -u -d -r1.3 -r1.4 --- gcc.config 2 Oct 2003 15:58:26 -0000 1.3 +++ gcc.config 24 Dec 2003 23:14:37 -0000 1.4 @@ -5,4 +5,5 @@ # http://www.devil-linux.org menu_add "System|Programming" bool "GCC3" CONFIG_GCC3 -menu_add "Build Configuration" bool "GCC Stack Smashing Protector" CONFIG_GCC_STACK_PROTECTOR +menu_add "Build Configuration|Security" bool "GCC Stack Smashing Protector" CONFIG_GCC_STACK_PROTECTOR +menu_add "Build Configuration|Security" bool "GCC enable Position Independent Executables" CONFIG_GCC_PIE Index: grsecurity.config =================================================================== RCS file: /cvsroot/devil-linux/build/scripts/configuration/grsecurity.config,v retrieving revision 1.2 retrieving revision 1.3 diff -u -d -r1.2 -r1.3 --- grsecurity.config 2 Oct 2003 15:58:26 -0000 1.2 +++ grsecurity.config 24 Dec 2003 23:14:37 -0000 1.3 @@ -5,4 +5,4 @@ # # http://www.devil-linux.org -[ "$CONFIG_XFS" = "y" ] || menu_add "Build Configuration" bool "GRSecurity Patch (enhances system security and will break XFS)" CONFIG_GRSECURITY +[ "$CONFIG_XFS" = "y" ] || menu_add "Build Configuration|Security" bool "GRSecurity Patch (enhances system security and will break XFS)" CONFIG_GRSECURITY Index: linux.config =================================================================== RCS file: /cvsroot/devil-linux/build/scripts/configuration/linux.config,v retrieving revision 1.8 retrieving revision 1.9 diff -u -d -r1.8 -r1.9 --- linux.config 17 Dec 2003 14:55:47 -0000 1.8 +++ linux.config 24 Dec 2003 23:14:37 -0000 1.9 @@ -6,6 +6,6 @@ # http://www.devil-linux.org test -z "$CONFIG_LINUX_NR_CPUS" && CONFIG_LINUX_NR_CPUS=4 -menu_add "Build Configuration" bool "Symmetric multi-processing support" CONFIG_LINUX_SMP -menu_add "Build Configuration" list "Maximum number of CPUs" CONFIG_LINUX_NR_CPUS 2 4 8 16 32 +menu_add "Build Configuration|Processor and Memory" bool "Symmetric multi-processing support" CONFIG_LINUX_SMP +menu_add "Build Configuration|Processor and Memory" list "Maximum number of CPUs" CONFIG_LINUX_NR_CPUS 2 4 8 16 32 menu_add "System|Hardware Support" bool "Update Philips USB Webcam Kernel Driver (pwc) EXPERIMENTAL" CONFIG_LINUX_UPDATE_PWC Index: prepare.config =================================================================== RCS file: /cvsroot/devil-linux/build/scripts/configuration/prepare.config,v retrieving revision 1.6 retrieving revision 1.7 diff -u -d -r1.6 -r1.7 --- prepare.config 20 Dec 2003 03:36:42 -0000 1.6 +++ prepare.config 24 Dec 2003 23:14:37 -0000 1.7 @@ -9,9 +9,9 @@ test -z "$CONFIG_CPU" && CONFIG_CPU=486 menu_add "Build Configuration" bool "Compressed ISO (ZISOFS)" CONFIG_ZISOFS -menu_add "Build Configuration" list "Kernel CPU" CONFIG_KERNEL_CPU 486 586 686 VIAC3_2 -menu_add "Build Configuration" list "GCC CPU" CONFIG_CPU 486 586 686 -menu_add "Build Configuration" bool "Highmem Support" CONFIG_HIGHMEM +menu_add "Build Configuration|Processor and Memory" list "Kernel CPU" CONFIG_KERNEL_CPU 486 586 686 VIAC3_2 +menu_add "Build Configuration|Processor and Memory" list "GCC CPU" CONFIG_CPU 486 586 686 +menu_add "Build Configuration|Processor and Memory" bool "Highmem Support" CONFIG_HIGHMEM test -z "$CONFIG_PMAKE" && CONFIG_PMAKE=1 menu_add "Build Configuration" list "Parallel Build Jobs" CONFIG_PMAKE 1 2 3 4 5 6 7 8 9 10 |
|
From: <smi...@us...> - 2003-12-24 23:14:40
|
Update of /cvsroot/devil-linux/build/scripts/configuration/help In directory sc8-pr-cvs1:/tmp/cvs-serv8517/scripts/configuration/help Modified Files: gcc.help Log Message: - added -pie support to gcc (not used yet) - update binutils to v2.14.90.0.7 - updated stack smashing protector to v3.3-7 - reorganized menuconfig a bit Index: gcc.help =================================================================== RCS file: /cvsroot/devil-linux/build/scripts/configuration/help/gcc.help,v retrieving revision 1.1 retrieving revision 1.2 diff -u -d -r1.1 -r1.2 --- gcc.help 16 May 2003 00:07:26 -0000 1.1 +++ gcc.help 24 Dec 2003 23:14:37 -0000 1.2 @@ -1,2 +1,11 @@ CONFIG_GCC3 The gcc package contains the GNU Compiler Collection. + +CONFIG_GCC_PIE + PIE is a gcc-3.4 back port to enable Position Independent Executables, + which takes advantage of Pax. + Pax is a kernel patch (part of GRSecurity) which adds obscurity and + lessens the vulnerability of attacks. + +CONFIG_GCC_STACK_PROTECTOR + This is a C and C++ security extension for GCC. |
|
From: <smi...@us...> - 2003-12-24 23:14:40
|
Update of /cvsroot/devil-linux/build In directory sc8-pr-cvs1:/tmp/cvs-serv8517 Modified Files: CHANGES Log Message: - added -pie support to gcc (not used yet) - update binutils to v2.14.90.0.7 - updated stack smashing protector to v3.3-7 - reorganized menuconfig a bit Index: CHANGES =================================================================== RCS file: /cvsroot/devil-linux/build/CHANGES,v retrieving revision 1.605 retrieving revision 1.606 diff -u -d -r1.605 -r1.606 --- CHANGES 24 Dec 2003 19:37:11 -0000 1.605 +++ CHANGES 24 Dec 2003 23:14:36 -0000 1.606 @@ -23,6 +23,9 @@ # 1.1.1 +- added -pie support to gcc (not used yet) +- update binutils to v2.14.90.0.7 +- updated stack smashing protector to v3.3-7 - added libsafe v2.0-16 - postfix jail script now empties the lib and etc directories before creating the jail - upgrade-config now correctly handles symlinks |
|
From: <smi...@us...> - 2003-12-24 23:14:40
|
Update of /cvsroot/devil-linux/build/scripts In directory sc8-pr-cvs1:/tmp/cvs-serv8517/scripts Modified Files: gcc Log Message: - added -pie support to gcc (not used yet) - update binutils to v2.14.90.0.7 - updated stack smashing protector to v3.3-7 - reorganized menuconfig a bit Index: gcc =================================================================== RCS file: /cvsroot/devil-linux/build/scripts/gcc,v retrieving revision 1.11 retrieving revision 1.12 diff -u -d -r1.11 -r1.12 --- gcc 4 Nov 2003 01:55:04 -0000 1.11 +++ gcc 24 Dec 2003 23:14:36 -0000 1.12 @@ -37,6 +37,13 @@ touch ./.done_patch_protector fi fi + if [ "$CONFIG_GCC_PIE" = "y" ]; then + if [ ! -e ./.done_patch_pie ]; then + bzcat $DL_DIR/src/gcc-3.3.2-pie-1.diff.bz2 | patch -p1 || exit 1 + touch ./.done_patch_pie + fi + fi + if [ ! -f gcc-patches.done ]; then bzcat $DL_DIR/src/gcc-3*patch.bz2 | patch -p1 || exit 1 touch gcc-patches.done |
|
From: <smi...@us...> - 2003-12-24 23:07:34
|
Update of /cvsroot/devil-linux/build/scripts In directory sc8-pr-cvs1:/tmp/cvs-serv7660/scripts Modified Files: settings Log Message: add support for compilation with "-pie" Index: settings =================================================================== RCS file: /cvsroot/devil-linux/build/scripts/settings,v retrieving revision 1.37 retrieving revision 1.38 diff -u -d -r1.37 -r1.38 --- settings 7 Oct 2003 23:22:03 -0000 1.37 +++ settings 24 Dec 2003 23:07:30 -0000 1.38 @@ -24,6 +24,9 @@ KERNELVERSION=$(grep UTS_RELEASE $WORKDIR/linux-2.*/include/linux/version.h 2> /dev/null | sed 's/\"//g' | cut -d " " -f 3) SRCDIR=$DL_DIR/src +PIE="" +test "$CONFIG_GCC_PIE" = "y" && PIE="-pie" + # get current version if [ "$DL_IS_OFFICIAL_RELEASE" = "y" ]; then DL_VERSION="$(cat $SCRCONFIG/VERSION)" |
|
From: <smi...@us...> - 2003-12-24 20:11:43
|
Update of /cvsroot/devil-linux/build/docs/documentation
In directory sc8-pr-cvs1:/tmp/cvs-serv31212/docs/documentation
Modified Files:
documentation.xml
Log Message:
added information about grsecurities rlimit_core error message
Index: documentation.xml
===================================================================
RCS file: /cvsroot/devil-linux/build/docs/documentation/documentation.xml,v
retrieving revision 1.51
retrieving revision 1.52
diff -u -d -r1.51 -r1.52
--- documentation.xml 26 Nov 2003 17:11:08 -0000 1.51
+++ documentation.xml 24 Dec 2003 20:11:40 -0000 1.52
@@ -670,6 +670,11 @@
<para>When you unpack the Devil-Linux tarball, you find the file <command>install-on-usb</command> which does everything for you. </para>
<para>If you intend to boot from other devices, this script should be you starting point. You probably don't even need to modify it. But please be aware, that we currently only support CD-ROM and USB boot.</para>
</sect2>
+ <sect2>
+ <title>Program XYZ crashed with the a grsec: attempted resource over step... RLIMIT_CORE</title>
+ <para>In most cases this just means that there's a problem in the configuration file for program XYZ and it coredumps because of this.</para>
+ <para><command>Squid</command> for example has a problem when you don't set the value <command>visible_hostname</command>.</para>
+ </sect2>
</sect1>
</chapter>
<chapter>
|
|
From: <smi...@us...> - 2003-12-24 19:43:50
|
Update of /cvsroot/devil-linux/build/scripts
In directory sc8-pr-cvs1:/tmp/cvs-serv27174/scripts
Modified Files:
util-linux
Log Message:
some cleanup
Index: util-linux
===================================================================
RCS file: /cvsroot/devil-linux/build/scripts/util-linux,v
retrieving revision 1.14
retrieving revision 1.15
diff -u -d -r1.14 -r1.15
--- util-linux 2 Dec 2003 16:13:41 -0000 1.14
+++ util-linux 24 Dec 2003 19:43:46 -0000 1.15
@@ -26,14 +26,9 @@
case $1 in
build )
- bzip2 -d $SRCDIR/util-linux-2.12.diff.bz2 2> /dev/null
- patch -p1 < $SRCDIR/util-linux-2.12.diff
+ bzcat $SRCDIR/util-linux-2.12.diff.bz2 | patch -p1 || exit 1
./configure || exit 1
replace_str defines.h "#define ENABLE_NLS" ""
- #make $PMAKE HAVE_SLN=yes ADD_RAW=yes DISABLE_NLS=yes -C lib || exit 1
- #make $PMAKE HAVE_SLN=yes ADD_RAW=yes DISABLE_NLS=yes -C mount LDFLAGS="-s -static" mount || exit 1
- #cp mount/mount mount/mount-static || exit 1
- #make -C mount clean || exit 1
make $PMAKE HAVE_SLN=yes ADD_RAW=yes DISABLE_NLS=yes || exit 1
strip_debug
;;
@@ -47,7 +42,6 @@
cp -dpR $WORKDIR/tmp/etc $ETCDIR/ || exit 1
rm -rf $WORKDIR/tmp/etc || exit 1
cp -dpR $WORKDIR/tmp/* $CDDIR/ || exit 1
- #cp -dpR mount/mount-static $INITRDDIR/sbin/mount || exit 1
rm -rf $WORKDIR/tmp || exit 1
;;
|
|
From: <smi...@us...> - 2003-12-24 19:38:57
|
Update of /cvsroot/devil-linux/build/scripts In directory sc8-pr-cvs1:/tmp/cvs-serv26505/scripts Added Files: libsafe Log Message: initial checkin --- NEW FILE: libsafe --- #!/bin/bash # $Source: /cvsroot/devil-linux/build/scripts/libsafe,v $ # $Revision: 1.1 $ # $Date: 2003/12/24 19:38:54 $ # # http://www.devil-linux.org # you need the next line, otherwise script won't be executed !!! # DL-build-system v3 ### BEGIN INIT INFO # Provides: libsafe # Required-Start: $basebuildtools $libs # Required-Stop: # Default-Start: 1 2 # Default-Stop: # Description: description ### END INIT INFO # get the directoryname of the script MYDIR=${0%/*} # source functions and config source $MYDIR/settings source $MYDIR/functions case $1 in build ) if [ "$CONFIG_LIBSAFE" = "y" ]; then make all || exit 1 strip_debug fi ;; install ) if [ "$CONFIG_LIBSAFE" = "y" ]; then copy_files_links src/libsafe.so $CDDIR/lib/ || exit 1 pushd $CDDIR/lib/ > /dev/null || exit 1 ln -sf libsafe.so.2.* libsafe.so.2 || exit 1 popd > /dev/null || exit 1 touch $ETCDIR/etc/libsafe.exclude || exit 1 echo "/lib/libsafe.so.2" > $ETCDIR/etc/ld.so.preload || exit 1 chown 0.0 $ETCDIR/etc/ld.so.preload || exit 1 chmod 644 $ETCDIR/etc/ld.so.preload || exit 1 fi ;; * ) echo "ERROR ($0)" echo "please add parameter so I know what to do" exit 1 ;; esac |
|
From: <smi...@us...> - 2003-12-24 19:37:14
|
Update of /cvsroot/devil-linux/build/scripts/configuration/help In directory sc8-pr-cvs1:/tmp/cvs-serv26215/scripts/configuration/help Added Files: libsafe.help Log Message: initial checkin of libsafe --- NEW FILE: libsafe.help --- CONFIG_LIBSAFE Libsafe is a library which defends against buffer overflow and format string attacks. It works by putting a wrapper around dangerous functions that contain any buffer overflows within the current stack frame, so that the return address can not be changed. |
|
From: <smi...@us...> - 2003-12-24 19:37:14
|
Update of /cvsroot/devil-linux/build/scripts/configuration In directory sc8-pr-cvs1:/tmp/cvs-serv26215/scripts/configuration Added Files: libsafe.config Log Message: initial checkin of libsafe --- NEW FILE: libsafe.config --- #!/bin/bash # $Source: /cvsroot/devil-linux/build/scripts/configuration/libsafe.config,v $ # $Revision: 1.1 $ # $Date: 2003/12/24 19:37:11 $ # # http://www.devil-linux.org menu_add "Build Configuration|Security" bool "LibSafe" CONFIG_LIBSAFE |
|
From: <smi...@us...> - 2003-12-24 19:37:14
|
Update of /cvsroot/devil-linux/build In directory sc8-pr-cvs1:/tmp/cvs-serv26215 Modified Files: CHANGES Log Message: initial checkin of libsafe Index: CHANGES =================================================================== RCS file: /cvsroot/devil-linux/build/CHANGES,v retrieving revision 1.604 retrieving revision 1.605 diff -u -d -r1.604 -r1.605 --- CHANGES 24 Dec 2003 01:18:33 -0000 1.604 +++ CHANGES 24 Dec 2003 19:37:11 -0000 1.605 @@ -23,6 +23,7 @@ # 1.1.1 +- added libsafe v2.0-16 - postfix jail script now empties the lib and etc directories before creating the jail - upgrade-config now correctly handles symlinks - save-config now uses devices from devfs (more dynamic) |
|
From: <smi...@us...> - 2003-12-24 01:18:38
|
Update of /cvsroot/devil-linux/build/config/etc/init.d
In directory sc8-pr-cvs1:/tmp/cvs-serv32474/config/etc/init.d
Modified Files:
jail
Log Message:
- postfix jail script now empties the lib and etc directories before
creating the jail
- start snort after mysqld
Index: jail
===================================================================
RCS file: /cvsroot/devil-linux/build/config/etc/init.d/jail,v
retrieving revision 1.23
retrieving revision 1.24
diff -u -d -r1.23 -r1.24
--- jail 23 Dec 2003 16:05:33 -0000 1.23
+++ jail 24 Dec 2003 01:18:33 -0000 1.24
@@ -82,7 +82,7 @@
{
FILES=$1
[ -d "$FILES" ] && FILES=$FILES/*
-
+
for FILE in $(ls -d $FILES)
do
if [ -d "$FILE" ]; then
@@ -173,6 +173,9 @@
CAP )
[ -z "$JCAPS" ] && CAPS="--cap"
CAPS=$CAPS" "$PARAM
+ ;;
+ DELETE )
+ rm -rf $JAILDIR$PARAM
;;
USER )
USER="--user "$PARAM
|
|
From: <smi...@us...> - 2003-12-24 01:18:38
|
Update of /cvsroot/devil-linux/build/config/etc/sysconfig/jail In directory sc8-pr-cvs1:/tmp/cvs-serv32474/config/etc/sysconfig/jail Modified Files: POSTFIX Log Message: - postfix jail script now empties the lib and etc directories before creating the jail - start snort after mysqld Index: POSTFIX =================================================================== RCS file: /cvsroot/devil-linux/build/config/etc/sysconfig/jail/POSTFIX,v retrieving revision 1.4 retrieving revision 1.5 diff -u -d -r1.4 -r1.5 --- POSTFIX 23 Dec 2003 14:57:01 -0000 1.4 +++ POSTFIX 24 Dec 2003 01:18:33 -0000 1.5 @@ -27,6 +27,10 @@ # define this, if the package should not be unpacked into the jail root directory PACKAGEDIR / +# delete the following directories/files, before doing anything +DELETE /etc/* +DELETE /lib/* + # devices to create # parameter: devicename type major minor user.group rights DEV null c 1 3 0.0 0666 @@ -46,6 +50,9 @@ COPY /usr/bin/cmp COPY /etc/passwd COPY /etc/group +COPY /etc/shadow +COPY /etc/gshadow + # set Linux capabilities #CAP CAP_NET_BIND_SERVICE |
|
From: <smi...@us...> - 2003-12-24 01:18:38
|
Update of /cvsroot/devil-linux/build/scripts/scripts In directory sc8-pr-cvs1:/tmp/cvs-serv32474/scripts/scripts Modified Files: snort Log Message: - postfix jail script now empties the lib and etc directories before creating the jail - start snort after mysqld Index: snort =================================================================== RCS file: /cvsroot/devil-linux/build/scripts/scripts/snort,v retrieving revision 1.6 retrieving revision 1.7 diff -u -d -r1.6 -r1.7 --- snort 23 Dec 2003 03:25:02 -0000 1.6 +++ snort 24 Dec 2003 01:18:33 -0000 1.7 @@ -9,8 +9,8 @@ ### BEGIN INIT INFO # Provides: snort -# Required-Start: $network $syslog -# Required-Stop: $network $syslog +# Required-Start: $network $syslog mysqld +# Required-Stop: $network $syslog mysqld # Default-Start: 3 5 # Default-Stop: 0 1 6 # Description: starts the snort ids system |
|
From: <smi...@us...> - 2003-12-24 01:18:36
|
Update of /cvsroot/devil-linux/build In directory sc8-pr-cvs1:/tmp/cvs-serv32474 Modified Files: CHANGES Log Message: - postfix jail script now empties the lib and etc directories before creating the jail - start snort after mysqld Index: CHANGES =================================================================== RCS file: /cvsroot/devil-linux/build/CHANGES,v retrieving revision 1.603 retrieving revision 1.604 diff -u -d -r1.603 -r1.604 --- CHANGES 23 Dec 2003 17:12:50 -0000 1.603 +++ CHANGES 24 Dec 2003 01:18:33 -0000 1.604 @@ -23,6 +23,7 @@ # 1.1.1 +- postfix jail script now empties the lib and etc directories before creating the jail - upgrade-config now correctly handles symlinks - save-config now uses devices from devfs (more dynamic) - better handling of subdirectories & links in jail script (fl) |
|
From: <smi...@us...> - 2003-12-23 17:17:42
|
Update of /cvsroot/devil-linux/build/scripts/scripts
In directory sc8-pr-cvs1:/tmp/cvs-serv15161/scripts/scripts
Modified Files:
Tag: rel-1-0-patches
upgrade-config
Log Message:
- increased version number
- upgrade-config now correctly handles symlinks
Index: upgrade-config
===================================================================
RCS file: /cvsroot/devil-linux/build/scripts/scripts/upgrade-config,v
retrieving revision 1.6.2.1
retrieving revision 1.6.2.2
diff -u -d -r1.6.2.1 -r1.6.2.2
--- upgrade-config 5 Nov 2003 15:57:44 -0000 1.6.2.1
+++ upgrade-config 23 Dec 2003 17:17:39 -0000 1.6.2.2
@@ -104,6 +104,7 @@
[ $f = "etc/sysconfig/config.old" ] && continue
[ $f = "etc/sysconfig/upgrade.log" ] && continue
[ $f = "etc/sysconfig/software" ] && continue
+ [ $f = "etc/modules/modules.dep" ] && continue
[ $f = "etc/mtab" ] && continue
[ $f = "etc/.pwd.lock" ] && continue
cmp -s $f newconfig/$f || echo $f \"\" off \"$f\" >> $TMPD
@@ -162,24 +163,37 @@
fi
done
else
- # OK button pressed
- echo >> $LOGF
- echo "************************************************************" >> $LOGF
- date >> $LOGF
- echo >> $LOGF
- echo "Files saved from old config:" >> $LOGF
- echo "----------------------------" >> $LOGF
- echo >> $LOGF
- for f in $(cat $RESULT)
- do
- eval p=$f
- d="$(dirname newconfig/$p)"
- [ ! -d $d ] && mkdir -p $d
- # echo cp -af $p newconfig/$p
- echo "keeping file: $p" | tee -a $LOGF
- cp -af $p newconfig/$p
- done
- break
+ # OK button pressed
+ echo >> $LOGF
+ echo "************************************************************" >> $LOGF
+ date >> $LOGF
+ echo >> $LOGF
+ echo "Files saved from old config:" >> $LOGF
+ echo "----------------------------" >> $LOGF
+ echo >> $LOGF
+ for f in $(cat $RESULT)
+ do
+ eval p=$f
+ d="$(dirname newconfig/$p)"
+ [ ! -d $d ] && mkdir -p $d
+ # echo cp -af $p newconfig/$p
+ echo "keeping file: $p" | tee -a $LOGF
+ cp -af $p newconfig/$p
+ done
+
+ echo >> $LOGF
+ echo "Symlinks preserved from old config:" >> $LOGF
+ echo "-----------------------------------" >> $LOGF
+ echo >> $LOGF
+ for f in $(find /etc/ -type l | grep -v "init.d/rc")
+ do
+ d="$(dirname newconfig/$p)"
+ [ ! -d $d ] && mkdir -p $d
+ echo "preserving link: $f" | tee -a $LOGF
+ cp -dpf $f newconfig/$f
+ done
+
+ break
fi
else
# Cancel button pressed
|
|
From: <smi...@us...> - 2003-12-23 17:17:42
|
Update of /cvsroot/devil-linux/build/scripts/config
In directory sc8-pr-cvs1:/tmp/cvs-serv15161/scripts/config
Modified Files:
Tag: rel-1-0-patches
VERSION
Log Message:
- increased version number
- upgrade-config now correctly handles symlinks
Index: VERSION
===================================================================
RCS file: /cvsroot/devil-linux/build/scripts/config/VERSION,v
retrieving revision 1.9.2.7
retrieving revision 1.9.2.8
diff -u -d -r1.9.2.7 -r1.9.2.8
--- VERSION 26 Nov 2003 02:16:27 -0000 1.9.2.7
+++ VERSION 23 Dec 2003 17:17:39 -0000 1.9.2.8
@@ -1 +1 @@
-1.0.3
+1.0.4
|
|
From: <smi...@us...> - 2003-12-23 17:17:42
|
Update of /cvsroot/devil-linux/build
In directory sc8-pr-cvs1:/tmp/cvs-serv15161
Modified Files:
Tag: rel-1-0-patches
CHANGES
Log Message:
- increased version number
- upgrade-config now correctly handles symlinks
Index: CHANGES
===================================================================
RCS file: /cvsroot/devil-linux/build/CHANGES,v
retrieving revision 1.510.2.42
retrieving revision 1.510.2.43
diff -u -d -r1.510.2.42 -r1.510.2.43
--- CHANGES 20 Dec 2003 18:59:39 -0000 1.510.2.42
+++ CHANGES 23 Dec 2003 17:17:39 -0000 1.510.2.43
@@ -22,6 +22,9 @@
#
#
+1.0.4
+- upgrade-config now correctly handles symlinks
+
1.0.3
- jail script now works fine with subdirectories
- updated zlib to v1.2.1
|
|
From: <smi...@us...> - 2003-12-23 17:12:53
|
Update of /cvsroot/devil-linux/build/scripts/scripts In directory sc8-pr-cvs1:/tmp/cvs-serv14450/scripts/scripts Modified Files: upgrade-config Log Message: upgrade-config now correctly handles symlinks Index: upgrade-config =================================================================== RCS file: /cvsroot/devil-linux/build/scripts/scripts/upgrade-config,v retrieving revision 1.7 retrieving revision 1.8 diff -u -d -r1.7 -r1.8 --- upgrade-config 18 Dec 2003 02:38:21 -0000 1.7 +++ upgrade-config 23 Dec 2003 17:12:50 -0000 1.8 @@ -8,7 +8,7 @@ # http://www.devil-linux.org # # Written by: Bruce Smith <dev...@re...> - + TMPC=/shm/var/tmp/upd-config.$$ TMPD=/shm/var/tmp/upd-etc.$$ TMPF=/shm/var/tmp/upd-tmp.$$ @@ -163,24 +163,37 @@ fi done else - # OK button pressed - echo >> $LOGF - echo "************************************************************" >> $LOGF - date >> $LOGF - echo >> $LOGF - echo "Files saved from old config:" >> $LOGF - echo "----------------------------" >> $LOGF - echo >> $LOGF - for f in $(cat $RESULT) - do - eval p=$f - d="$(dirname newconfig/$p)" - [ ! -d $d ] && mkdir -p $d - # echo cp -af $p newconfig/$p - echo "keeping file: $p" | tee -a $LOGF - cp -af $p newconfig/$p - done - break + # OK button pressed + echo >> $LOGF + echo "************************************************************" >> $LOGF + date >> $LOGF + echo >> $LOGF + echo "Files saved from old config:" >> $LOGF + echo "----------------------------" >> $LOGF + echo >> $LOGF + for f in $(cat $RESULT) + do + eval p=$f + d="$(dirname newconfig/$p)" + [ ! -d $d ] && mkdir -p $d + # echo cp -af $p newconfig/$p + echo "keeping file: $p" | tee -a $LOGF + cp -af $p newconfig/$p + done + + echo >> $LOGF + echo "Symlinks preserved from old config:" >> $LOGF + echo "-----------------------------------" >> $LOGF + echo >> $LOGF + for f in $(find /etc/ -type l | grep -v "init.d/rc") + do + d="$(dirname newconfig/$p)" + [ ! -d $d ] && mkdir -p $d + echo "preserving link: $f" | tee -a $LOGF + cp -dpf $f newconfig/$f + done + + break fi else # Cancel button pressed |
|
From: <smi...@us...> - 2003-12-23 17:12:53
|
Update of /cvsroot/devil-linux/build In directory sc8-pr-cvs1:/tmp/cvs-serv14450 Modified Files: CHANGES Log Message: upgrade-config now correctly handles symlinks Index: CHANGES =================================================================== RCS file: /cvsroot/devil-linux/build/CHANGES,v retrieving revision 1.602 retrieving revision 1.603 diff -u -d -r1.602 -r1.603 --- CHANGES 23 Dec 2003 16:05:32 -0000 1.602 +++ CHANGES 23 Dec 2003 17:12:50 -0000 1.603 @@ -23,6 +23,7 @@ # 1.1.1 +- upgrade-config now correctly handles symlinks - save-config now uses devices from devfs (more dynamic) - better handling of subdirectories & links in jail script (fl) - initrd script now uses devfs for finding the floppy drives (this was broken in older kernels) |
|
From: <smi...@us...> - 2003-12-23 16:05:36
|
Update of /cvsroot/devil-linux/build/scripts/scripts In directory sc8-pr-cvs1:/tmp/cvs-serv2081/scripts/scripts Modified Files: save-config Log Message: - save-config now uses devices from devfs (more dynamic) - better handling of subdirectories & links in jail script (fl) - initrd script now uses devfs for finding the floppy drives (this was broken in older kernels) - initrd script now searches scsi partitions first for etc.tar.bz2 Index: save-config =================================================================== RCS file: /cvsroot/devil-linux/build/scripts/scripts/save-config,v retrieving revision 1.23 retrieving revision 1.24 diff -u -d -r1.23 -r1.24 --- save-config 18 Sep 2003 19:01:27 -0000 1.23 +++ save-config 23 Dec 2003 16:05:33 -0000 1.24 @@ -18,39 +18,63 @@ QUIET="yes" fi -CONFIG_SRC_LIST="/dev/sda1 /dev/sdb1 /dev/sdc1 /dev/sdd1 /dev/sde1 /dev/sdf1 /dev/sdg1 /dev/fd0" +# generate the device list we need to search for the configuration information +PARTITIONS_IDE=`find /dev/ide/ -name "part*" 2> /dev/null` +PARTITIONS_SCSI=`find /dev/scsi/ -name "part*" 2> /dev/null` +FLOPPIES=`find /dev/floppy/ -name "?" 2> /dev/null` +CONFIG_SRC_LIST="$PARTITIONS_SCSI $PARTITIONS_IDE $FLOPPIES" + CONFIG_MOUNT=/var/adm/mount -DL_CONFIG_SOURCE="/dev/fd0" +DL_CONFIG_SOURCE="" mkdir -p $CONFIG_MOUNT || exit 1 -# check usb devices -for USB_DEV in $(allAttachedScsiUsb) +$GREEN +echo -e "searching for configuration media" +$NORMAL + +until [ -e $CONFIG_MOUNT/etc.tar.bz2 ] ; do - CFG_SRC=$(scsiDevFromScsiUsb $USB_DEV) - if mount -t auto $CFG_SRC $CONFIG_MOUNT >/dev/null 2>&1 ; then + for CFG_SRC in $CONFIG_SRC_LIST + do + echo -e "Checking $CFG_SRC" + if mount -n -t auto $CFG_SRC $CONFIG_MOUNT >/dev/null 2>&1 ; then - if [ -e $CONFIG_MOUNT/etc.tar.bz2 ] ; then - $SUCCESS - echo "Found configuration on $CFG_SRC" - $NORMAL - DL_CONFIG_SOURCE=$CFG_SRC - continue 2 - else - beep; - umount $CONFIG_MOUNT # in case user swaps floppy when we are accepting input - $SUCCESS - echo -e "\n*** Found empty media $CFG_SRC . ***\n" - $NORMAL - echo -n "Should I copy default configuration to it?" - if ask_yes_no ; then - mount -t auto $CFG_SRC $CONFIG_MOUNT >/dev/null 2>&1 - cp -i /cdrom/config/etc.tar.bz2 $CONFIG_MOUNT/ + if [ -e $CONFIG_MOUNT/etc.tar.bz2 ] ; then + $SUCCESS + echo -e "Found configuration on $CFG_SRC" + $NORMAL DL_CONFIG_SOURCE=$CFG_SRC - continue 2 + if [ -z "$QUIET" ]; then + echo -n "Do you want to use this device?" + if ask_yes_no ; then + continue 2 + else + umount $CONFIG_MOUNT + fi + fi + else + beep; + umount $CONFIG_MOUNT + $SUCCESS + echo -e "\n*** Found empty media $CFG_SRC . ***\n" + $NORMAL + echo -n "Should I copy default configuration to it?" + if ask_yes_no ; then + mount -t auto $CFG_SRC $CONFIG_MOUNT >/dev/null 2>&1 + cp -i /cdrom/config/etc.tar.bz2 $CONFIG_MOUNT/ + DL_CONFIG_SOURCE=$CFG_SRC + continue 2 + fi fi fi - fi + done + beep; sleep 1; beep; sleep 1; beep; + $ERROR + echo -e "Please insert Configuration Media and press 'ENTER'" + $NORMAL + read ANS + echo done umount $CONFIG_MOUNT &> /dev/null @@ -79,7 +103,7 @@ ( cd / ; tar -djf $CONFIG_MOUNT/etc.tar.bz2 etc ) umount $CONFIG_MOUNT - + $FAILURE echo "press the 'anykey' to save the configuration or CTRL+C to quit" $NORMAL |
|
From: <smi...@us...> - 2003-12-23 16:05:36
|
Update of /cvsroot/devil-linux/build/config/etc/initrd In directory sc8-pr-cvs1:/tmp/cvs-serv2081/config/etc/initrd Modified Files: linuxrc Log Message: - save-config now uses devices from devfs (more dynamic) - better handling of subdirectories & links in jail script (fl) - initrd script now uses devfs for finding the floppy drives (this was broken in older kernels) - initrd script now searches scsi partitions first for etc.tar.bz2 Index: linuxrc =================================================================== RCS file: /cvsroot/devil-linux/build/config/etc/initrd/linuxrc,v retrieving revision 1.51 retrieving revision 1.52 diff -u -d -r1.51 -r1.52 --- linuxrc 23 Dec 2003 15:11:38 -0000 1.51 +++ linuxrc 23 Dec 2003 16:05:33 -0000 1.52 @@ -60,10 +60,6 @@ # mount proc mount -n -t proc none /proc -# create the floppy drives, somehow devfs doesn't do it in initrd -mknod /dev/fd0 b 2 0 -mknod /dev/fd1 b 2 1 - # mount shared memory filesystem with a limit of 40GB (for now) echo "Mounting SHM FS on /shm" mount -n -t shm shmfs /shm |
|
From: <smi...@us...> - 2003-12-23 16:05:36
|
Update of /cvsroot/devil-linux/build/config/etc/init.d
In directory sc8-pr-cvs1:/tmp/cvs-serv2081/config/etc/init.d
Modified Files:
functions jail
Log Message:
- save-config now uses devices from devfs (more dynamic)
- better handling of subdirectories & links in jail script (fl)
- initrd script now uses devfs for finding the floppy drives (this was
broken in older kernels)
- initrd script now searches scsi partitions first for etc.tar.bz2
Index: functions
===================================================================
RCS file: /cvsroot/devil-linux/build/config/etc/init.d/functions,v
retrieving revision 1.10
retrieving revision 1.11
diff -u -d -r1.10 -r1.11
--- functions 20 Aug 2003 19:15:35 -0000 1.10
+++ functions 23 Dec 2003 16:05:33 -0000 1.11
@@ -23,8 +23,11 @@
NORMAL="echo -en \\033[0;39m"
SUCCESS="echo -en \\033[1;32m"
+GREEN=$SUCCESS
WARNING="echo -en \\033[1;33m"
+YELLOW=$WARNING
FAILURE="echo -en \\033[1;31m"
+RED=$FAILURE
print_error_msg()
{
Index: jail
===================================================================
RCS file: /cvsroot/devil-linux/build/config/etc/init.d/jail,v
retrieving revision 1.22
retrieving revision 1.23
diff -u -d -r1.22 -r1.23
--- jail 20 Dec 2003 01:10:30 -0000 1.22
+++ jail 23 Dec 2003 16:05:33 -0000 1.23
@@ -74,7 +74,7 @@
ls -l $1 | cut -d ">" -f 2 | cut -c 2-
}
-# copies the files given in $1 to $2
+# copies the files given in $1 to $JAILDIR
# preserve attributes
# if file is a link follow this and copy all necessary links/files
#
@@ -82,17 +82,25 @@
{
FILES=$1
[ -d "$FILES" ] && FILES=$FILES/*
+
for FILE in $(ls -d $FILES)
do
- TARGETDIR=${FILE%/*}
- FILE=$FILE
- mkdir -p $JAILDIR$TARGETDIR
- cp -dfpR $FILE $JAILDIR$TARGETDIR
- if [ -L "$FILE" ]; then
- LINK=$(read_link $FILE)
- LINKDIR=${LINK%/*}
- [ "$LINKDIR" = "$LINK" ] && LINK=$TARGETDIR/$LINK
- copy_files_links $LINK
+ if [ -d "$FILE" ]; then
+ # a subdirectory found
+ copy_files_links $FILE
+ else
+ # a file or symlink found
+ TARGETDIR=${FILE%/*}
+ FILE=$FILE
+ mkdir -p $JAILDIR/$TARGETDIR
+ chown -f --reference=$TARGETDIR $JAILDIR/$TARGETDIR
+ cp -dfpR $FILE $JAILDIR/$TARGETDIR
+ if [ -L "$FILE" ]; then
+ LINK=$(read_link $FILE)
+ LINKDIR=${LINK%/*}
+ [ "$LINKDIR" = "$LINK" ] && LINK=$TARGETDIR/$LINK
+ copy_files_links $LINK
+ fi
fi
done
}
|
2 messages has been excluded from this view by a project administrator.
