Historically, the MD5 checksums in our LFS files serve as a protection
against broken downloads, or accidentally corrupted source files.
While the sources are nowadays downloaded via HTTPS, it make sense to
beef up integrity protection for them, since transparently intercepting
TLS is believed to be feasible for more powerful actors, and the state
of the public PKI ecosystem is clearly not helping.
Therefore, this patch switches from MD5 to BLAKE2, updating all LFS
files as well as make.sh to deal with this checksum algorithm. BLAKE2 is
notably faster (and more secure) than SHA2, so the performance penalty
introduced by this patch is negligible, if noticeable at all.
In preparation of this patch, the toolchain files currently used have
been supplied with BLAKE2 checksums as well on
https://source.ipfire.org/.
Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremeripfire.org>
- Update from 2.2.53 to 2.3.1
- Updated rootfile
- Changelog
Version 2.3.1
Fix libtool library versioning regression Andreas Gruenbacher
Version 2.3.0
Update po files and German translation Andreas Gruenbacher
getfacl: fix indent in --help output Valentin Vidic
getfacl: Add --one-file-system optionnext Pavel Polacek
Move struct stat into struct walk_tree_args Andreas Gruenbacher
Move list of open directories into struct walk_tree_args Andreas Gruenbacher
Move walk_tree_rec arguments into a separate struct Andreas Gruenbacher
acl_from_mode, acl_copy_int: Fix segfault on allocation failure Tavian Barnes
__acl_create_entry_obj: do not break strict aliasing rules Kamil Dudka
Fix typo in getfacl(1) man page Anthony Sottile
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
- Update acl from 2.2.52 (May 2013) to 2.2.53 (Jun 2018 - latest version)
- Rootfile updated
- No make rules for install-lib or install-dev in new version. Only for install
- Changelog in tarball has 2.2.49 (Nov 2009) as the latest change
- Could not find changelog info anywhere else.
- Following changelog created by extracting from git commits (thanks for idea Peter Mueller)
- include: fix uninstall for `make distcheck` Mike Frysinger
- acl.5 man page: Update link to POSIX.1e draft Andreas Gruenbacher
- test: add regression test Dmitry V. Levin
- Enable large-file support on systems that do not enable it by default Dmitry V. Levin
- libacl: Fix acl_from_text() returning NULL on all input Dmitry V. Levin
- setfacl --restore: Silence valgrind Andreas Gruenbacher
- setfacl: Preserve special mode bits on filesystems without POSIX ACL support Andreas Gruenbacher
- setfacl.1: document the meaning of '-' in perms Kamil Dudka
- setfacl: Allow more than four characters in the perms field Andreas Gruenbacher
- permissions.test: Fix umask Andreas Gruenbacher
- Add additional group names for root-specific tests Andreas Gruenbacher
- libtestlookup: Add missing EXPORT and static declarations Andreas Gruenbacher
- Minor man-page clarifications Andreas Gruenbacher
- Remove ACL_ADD and ACL_DELETE Andreas Gruenbacher
- test: fixups on SELinux machines for root testcases He Zhe
- libacl: Ignore warning in parse_acl_entry() Andreas Gruenbacher
- Cleanup visibility of API functions Yury Usishchev
- Cleanup internal headers usage Yury Usishchev
- Rework config.h usage Yury Usishchev
- walk_tree_rec: Add parentheses to clarify code Andreas Gruenbacher
- __acl_from_xattr: Set errno for invalid tag types Andreas Gruenbacher
- Fix checks for valid permissions in input Corinna Vinschen
- use portable AC_C_BIGENDIAN Mike Frysinger
- quote: escape literal backslashes Jeff Mahoney
- test: Add helper library to fake passwd/group files Jeff Mahoney
- ignore configure.lineno Mike Frysinger
- walk_tree: mark internal variables as static Dmitry V. Levin
- Do not export symbols that are not supposed to be exported Dmitry V. Levin
- getfacl: Fix minor resource leak Andreas Gruenbacher
- setfacl man page: Minor wording improvements Andreas Gruenbacher
- Fix the display block nesting in acl.5 Andreas Gruenbacher
- getfacl: Fix memory leak Andreas Gruenbacher
- fix compilation with latest xattr git Brice De Bruyne
- libacl: acl_set_file: Remove unnecesary racy check Andreas Gruenbacher
- cp.test: Check permissions of the right file Andreas Gruenbacher
- add __acl_ prefixes to internal symbols Mike Frysinger
- mark libmisc funcs as hidden so they are not exported Mike Frysinger
- telldir return value and seekdir second parameters are of type long Cristian Rodríguez
- read_acl_{comments,seq}: switch to next_line Mike Frysinger
- read_acl_{comments,seq}: rename "line" to "lineno" Mike Frysinger
- build: ship a pkgconfig file for libacl Mike Frysinger
- build: make use of an aux-dir to stow away helper scripts Mike Frysinger
- build: drop aclincludedir, use pkgincludedir Mike Frysinger
- po: regenerate files after move Mike Frysinger
- modernize build system Mike Frysinger
- test: make running parallel/out-of-tree safe Mike Frysinger
- move gettext logic into misc.h Mike Frysinger
- punt debian/rpm packaging logic Mike Frysinger
- libacl: fix SIGSEGV of getfacl -e on overly long group name Kamil Dudka
- libacl: Make sure that acl_from_text() always sets errno when it fails Andreas Gruenbacher
- Use autoreconf rather than autoconf to regenerate the files. Fabrice Bauzac
- .gitignore: ignore *~ and config.h.in. Fabrice Bauzac
- Bad markup in acl.5 page Eric S. Raymond
- Makefile: rename configure.in to configure.ac Mike Frysinger
- test: fix insufficient quoting of '\' Kamil Dudka
- setfacl.1: fix typo 'inclu de' -> 'include' John Bradshaw
- Install the libraries to the appropriate directory Brandon Philips
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Most of these files still used old dates and/or domain names for contact
mail addresses. This is now replaced by an up-to-date copyright line.
Just some housekeeping... :-)
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
