Michael Marineau
bfa49f1871
Merge pull request #1705 from marineam/devpts
...
glibc: Do not check /dev/pts options
2015-12-28 16:21:39 -08:00
Michael Marineau
8411c483a3
glibc: Do not check /dev/pts options
...
The SDK chroot has no control over /dev/pts since it is bind-mounted
from the host system. As far as I can tell there isn't any significant
issue caused by the `tty` group having a different gid on the host
system from the SDK anyway.
2015-12-28 16:20:21 -08:00
Kamil Domański
e91a9e8525
preserve 'System.map' during kernel build
...
allows the proper operation of 'depmod' when building out-of-tree modules
2015-12-23 16:05:43 +01:00
Matthew Garrett
49e4570444
Don't verify write permissions on lower inodes on overlayfs
...
If a user opens a file r/w on overlayfs, and if the underlying inode is
currently still on the lower fs, right now we're verifying whether selinux
policy permits writes to the selinux context on the underlying inode. This
is suboptimal, since we don't want confined processes to be able to write to
these files if they're able to escape from a container and so don't want to
permit this in policy. Have overlayfs pass down an additional flag when
verifying the permission on lower inodes, and mask off the write bits in
the selinux permissions check if that flag is set.
2015-12-22 08:03:58 +00:00
Matthew Garrett
23a4b9d2b1
Fix up selinux policy for overlays
...
MCS is restricting us from performing relabelfrom, and docker uses another
label for the underlying files so we need to permit entrypoint from there.
2015-12-22 07:39:52 +00:00
Alex Crawford
cdcfbf329e
Merge pull request #1702 from crawford/docker
...
app-emulation/docker: remove dirty marker
2015-12-21 14:08:21 -08:00
Alex Crawford
a49030e944
app-emulation/docker: remove dirty marker
2015-12-21 14:04:02 -08:00
Geoff Levand
243822ab2c
dev-db/etcd: Fix unstable build error
...
Define a default value for CROS_WORKON_COMMIT to avoid build
errors when building etcd unstable.
Signed-off-by: Geoff Levand <geoff@infradead.org>
2015-12-18 12:24:53 -08:00
Alex Crawford
c25c23c068
Merge pull request #1699 from crawford/accept_keywords
...
profiles: fix build failures
2015-12-17 13:43:26 -08:00
Alex Crawford
ac406bac2c
profiles: fix package.accept_keywords
...
Broken by 3ad7eb629fbafe4277b0c6ff71bc40f893929399.
2015-12-17 10:07:33 -08:00
Alex Crawford
ecf53d9c33
Revert "profiles/coreos/base/package.accept_keywords: remove unused sys-process/criu dependency dev-libs/protobuf-c-0.15"
...
This reverts commit 038c121d28c358c15136d7792e662390b11fd7b7.
2015-12-17 09:19:22 -08:00
Alex Crawford
2c00091aa6
Merge pull request #1696 from crawford/kernel
...
sys-kernel/coreos-kernel: bump to 4.3.3
2015-12-16 20:27:02 -08:00
Alex Crawford
5e745e2af5
sys-kernel/coreos-kernel: bump to 4.3.3
2015-12-16 20:25:51 -08:00
Michael Marineau
521ca2da44
Merge pull request #1697 from marineam/cciss
...
coreos-init: update to fix resizing on cciss disks
2015-12-16 17:32:33 -08:00
Michael Marineau
5a4ae87e01
coreos-init: update to fix resizing on cciss disks
2015-12-16 17:18:44 -08:00
Michael Marineau
72c011c02f
Merge pull request #1690 from marineam/glibc
...
Glibc 2.21 and simplify locale management in the SDK
2015-12-16 17:16:56 -08:00
Geoff Levand
2f05765193
net-wireless/wireless-tools: Remove unused package
...
Signed-off-by: Geoff Levand <geoff@infradead.org>
2015-12-16 17:16:12 -08:00
Geoff Levand
ba1e180f45
Merge pull request #1677 from glevand/for-merge-tpm
...
Enable arm64 TPM support
2015-12-16 16:59:54 -08:00
Nick Owens
193fd5dd8c
Merge pull request #371 from mischief/eix
...
eix
2015-12-16 14:25:30 -08:00
Nick Owens
e11d1a78bb
Merge pull request #1694 from mischief/cachefiles
...
sys-kernel/coreos-kernel: enable CACHEFILES
2015-12-16 14:25:18 -08:00
Nick Owens
bc8b795d03
Merge pull request #1695 from mischief/package-keywords
...
cleanup package.accept_keywords
2015-12-16 10:40:48 -08:00
Nick Owens
85f175ded1
profiles/coreos/base/package.accept_keywords: remove old net-libs/libpcap-1.1.1-r1
2015-12-15 18:21:27 -08:00
Nick Owens
f88fce89ac
profiles/coreos/base/package.accept_keywords: remove old app-text/xmlto-0.0.24-r1
2015-12-15 18:21:08 -08:00
Nick Owens
3cb04b1698
profiles/coreos/base/package.accept_keywords: remove old app-editors/vim-7.4.712 and app-editors/vim-core-7.4.712
2015-12-15 18:19:48 -08:00
Nick Owens
852d8eceb5
profiles/coreos/base/package.accept_keywords: remove old net-misc/curl-7.41
2015-12-15 18:19:48 -08:00
Nick Owens
d859738b89
profiles/coreos/base/package.accept_keywords: remove old sys-fs/btrfs-progs-3.17.3
2015-12-15 18:19:48 -08:00
Nick Owens
fd009b57d4
profiles/coreos/base/package.accept_keywords: remove old sys-fs/lvm2-2.02.107 and sys-block/thin-provisioning-tools-0.3.2
2015-12-15 18:19:48 -08:00
Nick Owens
c8bec3b94a
profiles/coreos/base/package.accept_keywords: remove old sys-kernel/linux-headers-3.13
2015-12-15 18:19:48 -08:00
Nick Owens
6f039d43d3
profiles/coreos/base/package.accept_keywords: remove old app-admin/sudo-1.8.10_p2
2015-12-15 18:19:48 -08:00
Nick Owens
0fcba1f125
profiles/coreos/base/package.accept_keywords: remove old net-analyzer/nmap-6.40-r1
2015-12-15 18:19:48 -08:00
Nick Owens
22e0aa23dc
profiles/coreos/base/package.accept_keywords: remove old app-admin/eselect-1.4
2015-12-15 18:19:48 -08:00
Nick Owens
561f5092e4
profiles/coreos/base/package.accept_keywords: remove old dev-lang/python-2.7.6
2015-12-15 18:19:48 -08:00
Nick Owens
2c406af5f5
profiles/coreos/base/package.accept_keywords: remove old e2fsprogs
2015-12-15 18:19:48 -08:00
Nick Owens
29f7de4a7f
profiles/coreos/base/package.accept_keywords: remove old dev-util/boost-build-1.52.0-r1
2015-12-15 18:19:48 -08:00
Nick Owens
e417eb5500
profiles/coreos/base/package.accept_keywords: remove unused sys-process/criu dependency dev-libs/protobuf-c-0.15
2015-12-15 18:19:47 -08:00
Nick Owens
76996bbe44
profiles/coreos/base/package.accept_keywords: remove unused dev-libs/opencryptoki-2.4.2
2015-12-15 18:19:47 -08:00
Nick Owens
93955c4c20
profiles/coreos/base/package.accept_keywords: remove unused app-benchmarks/i7z-0.27-r1
2015-12-15 18:19:47 -08:00
Nick Owens
78fbc64ab9
profiles/coreos/base/package.accept_keywords: remove keyword for missing sys-auth/pam_pwdfile
2015-12-15 18:19:47 -08:00
Nick Owens
17e20f6b46
profiles/coreos/base/package.accept_keywords: remove keyword for missing dev-python/pyusb-1.0.0_alpha3
2015-12-15 18:19:47 -08:00
Nick Owens
cc716a5083
profiles/coreos/base/package.accept_keywords: remove unused dev-lang/closure-compiler-bin
2015-12-15 18:19:47 -08:00
Nick Owens
d65cdc5a74
profiles/coreos/base/package.accept_keywords: remove old nss keywords
2015-12-15 18:19:47 -08:00
Nick Owens
d8bad9c0f0
profiles/coreos/base: merge package.keywords with package.accept_keywords
2015-12-15 17:47:26 -08:00
Michael Marineau
db5d937aab
Merge pull request #491 from marineam/bind-root
...
enter_chroot: fix chroot root bind command
2015-12-15 16:44:28 -08:00
Michael Marineau
3fdd2033dc
enter_chroot: fix chroot root bind command
...
Commit 09851b84 didn't do a recursive bind by mistake, so if the host
system has anything mounted under the chroot directory for some reason
the bind would hide those mounts. Recursive ensures existing mounts
remain exposed as they did before.
2015-12-15 16:40:00 -08:00
Michael Marineau
2b43e553e3
Merge pull request #490 from marineam/bind-root
...
enter_chroot: ensure the chroot's root directory is a mount point
2015-12-15 16:34:01 -08:00
Michael Marineau
09851b8460
enter_chroot: ensure the chroot's root directory is a mount point
2015-12-15 16:30:27 -08:00
Nick Owens
3e8f52a32b
sys-kernel/coreos-kernel: enable CACHEFILES
2015-12-15 16:23:38 -08:00
Nick Owens
74834ede81
bump(app-portage/eix): sync with upstream
2015-12-15 14:16:58 -08:00
Nick Owens
cb77a2e44a
bump(app-shells/push): sync with upstream
2015-12-15 14:16:38 -08:00
Michael Marineau
7147ab1746
Merge pull request #489 from marineam/glibc
...
enter_chroot: skip calling locale-gen if it isn't installed
2015-12-15 11:50:28 -08:00
