247 Commits

Author SHA1 Message Date
J0WI
d8f9f150c4 rebuild against main/libtls-standalone 2.9.1 2019-04-26 06:24:25 +00:00
Sören Tempel
536c560789 main/busybox: upgrade to 1.30.1 2019-02-16 10:59:17 +01:00
Sören Tempel
397f0cd902 main/busybox: upgrade to 1.30.0
Notable changes:

* The sysklogd -Z option has been removed in favor of -t option
  which has been added by upstream.
* Our own nologin.c applet has been replaced by an upstream
  nologin shell applet.
* New bc applet.

OK ncopa@

Fixes #9279
Fixes #7818
2019-02-15 23:23:00 +01:00
Leonardo Arena
89c648d65d Revert "main/busybox: add program to get hw-provided clocksource on s390x"
This reverts commit 2979bb1d34e0253297e4fab4069848c638fa1aac.
2019-02-06 08:22:04 +00:00
Tuan Hoang
2979bb1d34 main/busybox: add program to get hw-provided clocksource on s390x
References:
qemu/include/qemu/timer.h
qemu/include/hw/s390x/tod.h

Thanks to David Hildenbrand.
2019-02-06 07:47:39 +00:00
Leonardo Arena
cf43a77522 main/busybox: security fixes (CVE-2018-20679, CVE-2019-5747) 2019-01-24 07:44:28 +00:00
Sören Tempel
e83d4f9c00 main/busybox: use the same network options in both config files
The busyboxconfig-extras configuration file didn't enable a few network
options which are enabled in the busyboxconfig configuration file. Most
importantly, support for IPv6 was disabled. The other options don't seem
as important to me but I enabled them for consistency anyhow.

Fixes #9590
2019-01-15 19:56:14 +01:00
Sören Tempel
4e26bd32d5 main/busybox: use /sbin/nologin as default shell for system accounts 2019-01-15 17:07:27 +00:00
Sören Tempel
4a3258e65e main/busybox: fix creation of invalid shell entry by adduser
Fixes #5083
Fixes #6742
2019-01-12 11:44:45 +00:00
Natanael Copa
6e465f74c5 main/busybox: backport cp --reflink support
fixes #9334
2019-01-10 14:57:24 +00:00
Kaarle Ritvanen
7e42b77506 main/busybox: ip: print dadfailed flag
fixes dad.if-up getting stuck
2018-12-31 19:50:15 +02:00
Kaarle Ritvanen
211a6eb912 main/busybox: do not hang on DAD failure 2018-12-06 16:58:44 +02:00
Natanael Copa
c81a09bff1 main/busybox: fix ssl_client's install_if
should be installed if libssl1.1 is installed, not libressl-libssl.
2018-11-21 10:05:47 +00:00
Natanael Copa
a04744a85b main/busybox: rebuild against libtls-standalone
build against libtls-standalone and openssl 1.1
2018-11-07 16:46:12 +00:00
Henrik Riomar
565a79f18d main/busybox: don't write to stdout in logrotate script
Without this change a mail with the following body is sent on rotation:

	* Stopping busybox acpid ... [ ok ]
	* Starting busybox acpid ... [ ok ]

The quiet flag seems to have been accidentally removed in commit
040774a6b048d76975702dc47d0fec40c192fc26 before that it was present.
2018-11-03 11:08:50 +01:00
J0WI
d2bfb22c8e main: (Bulk change) Update source urls to https using HTTPS Everywhere 2018-10-06 17:10:04 +00:00
Sören Tempel
bb3bc00f30 main/busybox: upgrade to 1.29.3
* Remove all patches already applied upstream
	* 0001-ash-add-support-for-command_not_found_handle-hook-fu.patch
	* 0001-cat-fix-cat-e-and-cat-v-erroneously-numbering-1st-li.patch
	* 0001-wget-emit-a-message-that-certificate-verification-is.patch
	* 0015-ash-introduce-a-config-option-to-search-current-dire.patch
	* 0016-top-handle-much-larger-VSZ-values.patch
	* 0017-ifupdown-do-not-fail-if-interface-disappears-during-.patch
* Rename config option for command_not_found hook
	* upstream patch adding this hook slightly differs from our
	  downstream patch in this regard
* Rebase some patches manually:
	* external_ssl_client.patch
	* 0006-ping-make-ping-work-without-root-privileges.patch
	* 0007-fbsplash-support-image-and-bar-alignment-and-positio.patch
* Add support for `-e` to our ssl_client
	* See https://git.busybox.net/busybox/commit/?id=403f2999f94937ba3f37db6d093832f636815bb9
* Update the configuration file
* Regenerate all patches using `git format-patch --no-numbered --no-signature`
  to reduce the diff for future upgrades.
2018-09-27 10:29:07 +00:00
Timo Teräs
f87f8c6613 main/busybox: fix fbsplash console switching
Fixes #9215

This was broken in commit dc6cfb7cebc64cdb which just removed
opt_complementary (due to that being removed in bb). Add proper
getopt flag to get correct behaviour.
2018-08-09 22:07:10 +03:00
Timo Teräs
a0e3ae1279 main/busybox, scripts/bootstrap: fix bootstrap
busybox now requires ssl on the target host. Fix busybox dependency
and adjust bootstrap build order accordingly.
2018-08-02 08:18:55 +00:00
Natanael Copa
9e52fe232d main/busybox: fix deinstall script for busybox-extras
ref #9037
2018-07-17 15:18:13 +00:00
Natanael Copa
af000ceb42 main/busybox: upgrade to 1.28.4 2018-05-30 10:44:48 +00:00
Natanael Copa
1d0560a9b6 main/busybox: properly fix wget https support
fix busybox wget https support by using an external ssl_client helper
for https.

Disable the use of external openssl. This was fixed to check
certificates as a temporary solution. openssl can not produce any useful
error messages on certificate errors. It is big. So we simply disable
its use.

For dynamic busybox we disable the internal ssl_client and the internal
(broken) tls code, and build our own ssl_client which properly verifies
the certificates.

For the static busybox we enable the internal ssl_client and tls code,
but we only allow its use with --no-check-certificates. This is so we
still can fetch things from https in an emergency situation.

We auto-install ssl_client if both libssl and busybox are installed. This
is to keep backwards compatibility.
2018-05-30 10:44:48 +00:00
Jakub Jirutka
30badc5ba2 main/busybox: wget: verify certificate when openssl helper is used 2018-05-28 00:07:36 +02:00
Jakub Jirutka
a93da0e814 main/busybox: wget: print warning when internal TLS code is used 2018-05-28 00:07:36 +02:00
Natanael Copa
698b73ddca main/busybox: upgrade to busybox 1.28.3 2018-05-14 19:15:11 +00:00
Natanael Copa
746474c9de main/busybox: backport fix for cat -e and cat -v 2018-05-14 19:10:43 +00:00
Euan Harris
1723be1db5 main/busybox: Backport nsenter option parser fixes
* Rename --network to --net, to match util-linux and the help text
* -t, -S and -G should take mandatory integer options, but are defined
  as simple flags, causing problems such as:

    https://github.com/linuxkit/linuxkit/issues/567
    https://github.com/gliderlabs/docker-alpine/issues/359
    https://github.com/kontena/pharos-cluster/pull/81

These patches have been accepted upstream by Busybox.

Signed-off-by: Euan Harris <euan.harris@docker.com>
2018-05-14 19:07:04 +00:00
Natanael Copa
9492e48fbc main/busybox: remove sed fix
apparently it makes ifupdown segfault
2018-04-02 10:32:45 +00:00
Natanael Copa
215c53d3b9 main/busybox: backport fixes for grep and sed 2018-04-02 11:15:44 +02:00
Natanael Copa
913d071589 main/busybox: fix cpio symlinks
ref #8751
2018-03-30 12:12:11 +00:00
Sören Tempel
3b58f3b6dc main/busybox: upgrade to 1.28.2 2018-03-28 12:50:14 +02:00
Kaarle Ritvanen
ff1427811e main/busybox: ifdown: do not fail if iface disappears 2018-03-23 15:53:20 +02:00
Sören Tempel
dc6cfb7ceb main/busybox: upgrade to 1.28.1 2018-03-11 14:27:25 +01:00
William Pitcock
fae8e63b4d main/busybox: make "source" work like bash again by searching current directory for scripts
See http://lists.busybox.net/pipermail/busybox/2018-January/086146.html for rationale.
2018-01-29 15:46:44 +00:00
Jakub Jirutka
63f5e7d295 [various]: unify names of licenses according to SPDX
This commit updates $license variable in all APKBUILDs to comply with
short names specified by SPDX version 3.0 [1] where possible. It was
done using find-and-replace method on substrings inside $license
variables.

Only license names were updated, not "expressions" specifying relation
between the licenses (e.g. "X and Y", "X or Y", "X and (Y or Z)") or
exceptions (e.g. "X with exceptions").

Many licenses have a version or multiple variants, e.g. MPL-2.0,
BSD-2-Clause, BSD-3-Clause. However, $license in many aports do not
contain license version or variant. Since there's no way how to infer
this information just from abuild, it were left without the variant
suffix or version, i.e. non SPDX compliant.

GNU licenses (AGPL, GFDL, GPL, LGPL) are especially complicated. They
exist in two variants: -only (formerly e.g. GPL-2.0) and -or-later
(formerly e.g. GPL-2.0+). We did not systematically noted distinguish
between these variants, so GPL-2.0, GPL2, GPLv2 etc. may mean
GPL-2.0-only or GPL-2.0-or-later. Thus GNU licenses without "+" (e.g.
GPL2+) were left without the variant suffix, i.e. non SPDX compliant.

Note: This commit just fixes format of the license names, no
verification has been done if the specified license information is
actually correct!

[1]: https://spdx.org/licenses/
2017-12-30 21:05:50 +01:00
Natanael Copa
653a44f930 main/busybox: backport fix for add-shell
ref #8209
2017-12-12 11:38:01 +01:00
Natanael Copa
0c1064dd88 main/busybox: fix patch for fsck 2017-11-28 16:16:03 +00:00
Natanael Copa
b56febe89a main/busybox: fix fsck to resolve UUID/LABEL specs in fstab 2017-11-28 12:29:00 +00:00
Natanael Copa
f36afe370e main/busybox: add secfixes comment 2017-11-22 12:49:36 +00:00
Christine Dodrill
ac414d2b63 main/busybox: include patch for CVE-2017-16544, CVE-2017-15873, CVE-2017-15874
I have created an automated tool at https://github.com/Xe/cve-2017-16544 that
will test busybox's ash implementation for CVE-2017-16544.

[1]: https://www.twistlock.com/2017/11/20/cve-2017-16544-busybox-autocompletion-vulnerability/

CVE-2017-15873 and CVE-2017-15874 are fixed by their upstream patches.

fixes #8187
2017-11-22 12:46:33 +00:00
Sören Tempel
f5af0f8b82 main/busybox: move udhpcd to -extras 2017-10-27 21:26:59 +02:00
William Pitcock
610a62d332 main/busybox: rerun abuild checksum 2017-10-20 05:56:18 +00:00
William Pitcock
dcad9af52a main/busybox: ash: add support for bash-style command_not_found_handle hook function
This implements support for the command_not_found_handle hook function, which is
useful for allowing package managers to suggest packages which could provide the
command.

Unlike bash, however, we ignore exit codes from the hook function and always return
the correct POSIX error code (EX_NOTFOUND).
2017-10-20 05:55:51 +00:00
William Pitcock
910821d7d6 main/busybox: bump CONFIG_BUSYBOX_EDITING_HISTORY to 8192 2017-10-19 17:55:21 +00:00
William Pitcock
325510d175 main/busybox: upgrade to 1.27.2 2017-10-19 16:21:45 +00:00
William Pitcock
45162db804 main/busybox: upgrade to 1.27.1, add provides=/bin/sh 2017-08-05 22:01:32 +00:00
Marian Buschsieweke
829a46e579 main/busybox: Fixed segfault in microcom
microcom does not check if required parameter "TTY" is present. Thus,
bb_basename() is called with a NULL pointer, if microcom is started without
any parameter. This in turn calls strlen() on this NULL pointer, resulting
in a segfault. The supplied patch adds a check for the missing TTY parameter
and prints usage when it is missing.
2017-08-03 10:45:26 +00:00
Natanael Copa
ec9189e2b7 main/busybox: fix regression in unzip on s390x
introduced with 1.27 release
2017-07-25 20:54:53 +02:00
William Pitcock
d6c4d7452f main/busybox: actually rebuild this with the overflow patch 2017-07-19 03:05:06 +00:00
William Pitcock
6cd63892c8 main/pkgconf: upgrade to 1.3.8 2017-07-16 23:22:41 +00:00