]> git.ipfire.org Git - ipfire-3.x.git/log
ipfire-3.x.git
18 months agoglibc: Fix RUNPATH in gconv libraries
Stefan Schantl [Tue, 21 Mar 2023 18:49:23 +0000 (19:49 +0100)] 
glibc: Fix RUNPATH in gconv libraries

Those libraries uses a special RUNPATH called $ORIGIN which we
do not support in IPFire. So changing this to the directory where
the are installed.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
18 months agochrpath: Drop package
Stefan Schantl [Tue, 21 Mar 2023 19:42:41 +0000 (20:42 +0100)] 
chrpath: Drop package

This package has seen no updates for a long time and has been
replaced by the similar and better supported patchelf.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agogettext: Switch to patchelf to remove the RPATH
Stefan Schantl [Tue, 21 Mar 2023 19:41:37 +0000 (20:41 +0100)] 
gettext: Switch to patchelf to remove the RPATH

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agolibldb: Switch to patchelf to remove the RPATH
Stefan Schantl [Tue, 21 Mar 2023 19:33:36 +0000 (20:33 +0100)] 
libldb: Switch to patchelf to remove the RPATH

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agolibdb: Switch to patchelf to remove the RPATH
Stefan Schantl [Tue, 21 Mar 2023 19:23:41 +0000 (20:23 +0100)] 
libdb: Switch to patchelf to remove the RPATH

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agonet-snmp: Switch to patchelf to remove the RPATH
Stefan Schantl [Tue, 21 Mar 2023 19:17:46 +0000 (20:17 +0100)] 
net-snmp: Switch to patchelf to remove the RPATH

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agotcpdump: Switch to patchelf to remove the RPATH
Stefan Schantl [Tue, 21 Mar 2023 19:09:35 +0000 (20:09 +0100)] 
tcpdump: Switch to patchelf to remove the RPATH

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agopatchelf: New package
Stefan Schantl [Tue, 21 Mar 2023 18:07:43 +0000 (19:07 +0100)] 
patchelf: New package

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agofilesystem: Make filesystem structure FHS compliant
Stefan Schantl [Mon, 20 Mar 2023 17:47:48 +0000 (18:47 +0100)] 
filesystem: Make filesystem structure FHS compliant

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
18 months agokernel: Proper build the helper binaries with our C and LDFLAGS
Stefan Schantl [Tue, 21 Mar 2023 10:20:16 +0000 (11:20 +0100)] 
kernel: Proper build the helper binaries with our C and LDFLAGS

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoliboping: Re-enable setting capabilities
Stefan Schantl [Mon, 20 Mar 2023 11:41:11 +0000 (12:41 +0100)] 
liboping: Re-enable setting capabilities

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoiputils: Re-enable setting capabilities
Stefan Schantl [Mon, 20 Mar 2023 11:40:19 +0000 (12:40 +0100)] 
iputils: Re-enable setting capabilities

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoutil-linux: Re-enable setting capabilities
Stefan Schantl [Mon, 20 Mar 2023 11:39:16 +0000 (12:39 +0100)] 
util-linux: Re-enable setting capabilities

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agonfs-utils: mount.nfs - Use capabilities instead of suid bit
Stefan Schantl [Mon, 20 Mar 2023 11:35:52 +0000 (12:35 +0100)] 
nfs-utils: mount.nfs - Use capabilities instead of suid bit

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoshadow-utils: Use capabilites and remove more unused binaries
Stefan Schantl [Mon, 20 Mar 2023 11:04:14 +0000 (12:04 +0100)] 
shadow-utils: Use capabilites and remove more unused binaries

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agounbound: Use /run instead of /var/run
Stefan Schantl [Mon, 20 Mar 2023 11:01:37 +0000 (12:01 +0100)] 
unbound: Use /run instead of /var/run

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoscreen: Make screen FHS compliant
Stefan Schantl [Mon, 20 Mar 2023 10:43:42 +0000 (11:43 +0100)] 
screen: Make screen FHS compliant

* Explicit use pam.
* Change socket dir to /run and add tmpfiles file.
* Only ship a simple screen binary without version
  fragments
* Remove SUID bit from binary

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agosudo: Fix library permissions
Stefan Schantl [Mon, 20 Mar 2023 10:31:49 +0000 (11:31 +0100)] 
sudo: Fix library permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agonetwork: Add patch to fix logdir
Stefan Schantl [Sun, 19 Mar 2023 15:02:04 +0000 (16:02 +0100)] 
network: Add patch to fix logdir

Add upstream patch to proper set the location
to the logdir.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoopenssh: Change privsep directory to /var/lib/sshd
Stefan Schantl [Sun, 19 Mar 2023 14:49:00 +0000 (15:49 +0100)] 
openssh: Change privsep directory to /var/lib/sshd

The old one /var/empty/sshd violated our FHS

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agosamba: Drop /var/run
Stefan Schantl [Sun, 19 Mar 2023 14:48:19 +0000 (15:48 +0100)] 
samba: Drop /var/run

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agounbound: Do not create /var/run
Stefan Schantl [Sun, 19 Mar 2023 14:19:41 +0000 (15:19 +0100)] 
unbound: Do not create /var/run

This violates our FHS specs.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agotcl: Fix library permissions
Stefan Schantl [Sun, 19 Mar 2023 14:13:54 +0000 (15:13 +0100)] 
tcl: Fix library permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agosssd: Use /var/lib/sss and drop /var/run
Stefan Schantl [Sun, 19 Mar 2023 14:01:44 +0000 (15:01 +0100)] 
sssd: Use /var/lib/sss and drop /var/run

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agosquid: Drop /var/run
Stefan Schantl [Sun, 19 Mar 2023 13:39:26 +0000 (14:39 +0100)] 
squid: Drop /var/run

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agosnort: Set correct permissions of helper script
Stefan Schantl [Sun, 19 Mar 2023 11:07:16 +0000 (12:07 +0100)] 
snort: Set correct permissions of helper script

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agospectre-meltdown-checker: Install binary with correct permissions
Stefan Schantl [Sun, 19 Mar 2023 10:43:19 +0000 (11:43 +0100)] 
spectre-meltdown-checker: Install binary with correct permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agopython3-pygobject3: Fix header file permissions
Stefan Schantl [Sun, 19 Mar 2023 10:36:03 +0000 (11:36 +0100)] 
python3-pygobject3: Fix header file permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agopython3-cairo: Fix header permissions
Stefan Schantl [Sun, 19 Mar 2023 10:26:55 +0000 (11:26 +0100)] 
python3-cairo: Fix header permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoppp: Fix binary permissions and drop deprecated dirs in /var
Stefan Schantl [Sun, 19 Mar 2023 10:25:03 +0000 (11:25 +0100)] 
ppp: Fix binary permissions and drop deprecated dirs in /var

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoplymouth: Drop /var/run
Stefan Schantl [Sun, 19 Mar 2023 10:16:49 +0000 (11:16 +0100)] 
plymouth: Drop /var/run

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoperl-WWW-Curl: Fix library permissions
Stefan Schantl [Sun, 19 Mar 2023 10:09:57 +0000 (11:09 +0100)] 
perl-WWW-Curl: Fix library permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoperl-WWW-Curl: Enable testsuite
Stefan Schantl [Sun, 19 Mar 2023 10:09:24 +0000 (11:09 +0100)] 
perl-WWW-Curl: Enable testsuite

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoperl-XML-Parser: Fix library permissions
Stefan Schantl [Sun, 19 Mar 2023 10:07:39 +0000 (11:07 +0100)] 
perl-XML-Parser: Fix library permissions

* Also enable the testsuite
* Drop old fragment from QA

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoperl-XML-Parser: Set correct perl dependencies
Stefan Schantl [Sun, 19 Mar 2023 10:06:31 +0000 (11:06 +0100)] 
perl-XML-Parser: Set correct perl dependencies

Do not longer use perl-core/perl-devel as build
dependencies.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoperl-TermReadkey: Enable testsuite
Stefan Schantl [Sun, 19 Mar 2023 09:53:45 +0000 (10:53 +0100)] 
perl-TermReadkey: Enable testsuite

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoperl-TermReadkey: Fix library permissions
Stefan Schantl [Sun, 19 Mar 2023 09:53:08 +0000 (10:53 +0100)] 
perl-TermReadkey: Fix library permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoperl-SGMLSpm: Drop unneccessary perl script
Stefan Schantl [Sun, 19 Mar 2023 09:47:48 +0000 (10:47 +0100)] 
perl-SGMLSpm: Drop unneccessary perl script

We do not need this and it violates our FHS specs.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoperl-Parse-Yapp: Fix library and binary permissions
Stefan Schantl [Sun, 19 Mar 2023 09:37:25 +0000 (10:37 +0100)] 
perl-Parse-Yapp: Fix library and binary permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoperl-Net-SSLeay: Fix library permissions
Stefan Schantl [Sun, 19 Mar 2023 09:32:49 +0000 (10:32 +0100)] 
perl-Net-SSLeay: Fix library permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoperl-libintl-perl: Fix library permissions
Stefan Schantl [Sun, 19 Mar 2023 09:31:06 +0000 (10:31 +0100)] 
perl-libintl-perl: Fix library permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoperl-IO-AIO: Fix library permissions
Stefan Schantl [Sun, 19 Mar 2023 09:29:11 +0000 (10:29 +0100)] 
perl-IO-AIO: Fix library permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoperl-HTML-Tagset: Add proper perl build dependencies
Stefan Schantl [Sun, 19 Mar 2023 09:26:38 +0000 (10:26 +0100)] 
perl-HTML-Tagset: Add proper perl build dependencies

Do not longer depend on perl-core or perl-devel.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoperl-HTML-Parser: Fix library permissions
Stefan Schantl [Sun, 19 Mar 2023 09:24:07 +0000 (10:24 +0100)] 
perl-HTML-Parser: Fix library permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoperl-GSSAPI: Fix library permissions
Stefan Schantl [Sun, 19 Mar 2023 09:22:25 +0000 (10:22 +0100)] 
perl-GSSAPI: Fix library permissions

* Also enable the testsuite

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoperl-FCGI: Fix library permissions
Stefan Schantl [Sun, 19 Mar 2023 09:20:34 +0000 (10:20 +0100)] 
perl-FCGI: Fix library permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoperl-DBI: Fix library and binary permissions
Stefan Schantl [Sun, 19 Mar 2023 09:17:20 +0000 (10:17 +0100)] 
perl-DBI: Fix library and binary permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoperl-Digest-SHA1: Enable testsuite
Stefan Schantl [Sun, 19 Mar 2023 09:16:43 +0000 (10:16 +0100)] 
perl-Digest-SHA1: Enable testsuite

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoperl-Digest-SHA1: Fix library permissions
Stefan Schantl [Sun, 19 Mar 2023 09:16:07 +0000 (10:16 +0100)] 
perl-Digest-SHA1: Fix library permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoperl-Crypt-OpenSSL-X509: Enable testsuite
Stefan Schantl [Sun, 19 Mar 2023 09:06:18 +0000 (10:06 +0100)] 
perl-Crypt-OpenSSL-X509: Enable testsuite

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoperl-Crypt-OpenSSL-X509: Fix library permissions
Stefan Schantl [Sun, 19 Mar 2023 09:01:19 +0000 (10:01 +0100)] 
perl-Crypt-OpenSSL-X509: Fix library permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoperl-Coro: Fix library permissions
Stefan Schantl [Sun, 19 Mar 2023 08:59:31 +0000 (09:59 +0100)] 
perl-Coro: Fix library permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoperl-BDB: Fix library permissions
Stefan Schantl [Sun, 19 Mar 2023 08:57:44 +0000 (09:57 +0100)] 
perl-BDB: Fix library permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agolibvirt: Fix binary permissions and drop /var/run
Stefan Schantl [Sat, 18 Mar 2023 22:00:19 +0000 (23:00 +0100)] 
libvirt: Fix binary permissions and drop /var/run

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agopciutils: Install header files with correct permissions
Stefan Schantl [Sat, 18 Mar 2023 21:58:22 +0000 (22:58 +0100)] 
pciutils: Install header files with correct permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agobash: Set correct permissions for /root and binaries
Stefan Schantl [Sat, 18 Mar 2023 21:15:52 +0000 (22:15 +0100)] 
bash: Set correct permissions for /root and binaries

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoopenssh: Fix permissions for sshd-keygen
Stefan Schantl [Sat, 18 Mar 2023 20:45:09 +0000 (21:45 +0100)] 
openssh: Fix permissions for sshd-keygen

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoopenldap: Do not ship /run/openldap anymore
Stefan Schantl [Sat, 18 Mar 2023 20:35:23 +0000 (21:35 +0100)] 
openldap: Do not ship /run/openldap anymore

This violetes our FHS specs

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agonettle: Fix library permissions
Stefan Schantl [Sat, 18 Mar 2023 20:34:06 +0000 (21:34 +0100)] 
nettle: Fix library permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agonet-snmp: Do not create /var/run anymore
Stefan Schantl [Sat, 18 Mar 2023 20:30:41 +0000 (21:30 +0100)] 
net-snmp: Do not create /var/run anymore

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agonetpbm: Drop unneeded pkgconfig_template file
Stefan Schantl [Sat, 18 Mar 2023 20:24:11 +0000 (21:24 +0100)] 
netpbm: Drop unneeded pkgconfig_template file

Anyway it was located at an invalid place.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agomdadm: Use systemd tmpfile
Stefan Schantl [Sat, 18 Mar 2023 20:21:21 +0000 (21:21 +0100)] 
mdadm: Use systemd tmpfile

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agolvm2: Do not ship /run and it's content
Stefan Schantl [Sat, 18 Mar 2023 20:15:26 +0000 (21:15 +0100)] 
lvm2: Do not ship /run and it's content

This violetes our FHS specs

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agolm-sensors: Proper use compiler and linker flags during build time
Stefan Schantl [Sat, 18 Mar 2023 20:07:19 +0000 (21:07 +0100)] 
lm-sensors: Proper use compiler and linker flags during build time

Those flags are required during build time and not during installation.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agolldpd: Do not create /run/lldpd
Stefan Schantl [Sat, 18 Mar 2023 19:49:10 +0000 (20:49 +0100)] 
lldpd: Do not create /run/lldpd

This violates our FHS specs.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agokea: Drop /var/run
Stefan Schantl [Sat, 18 Mar 2023 19:47:24 +0000 (20:47 +0100)] 
kea: Drop /var/run

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agokrb5: Change /var/kerberos to /var/lib/kerberos
Stefan Schantl [Sat, 18 Mar 2023 19:32:35 +0000 (20:32 +0100)] 
krb5: Change /var/kerberos to /var/lib/kerberos

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agolibdb: Fix binary and header file permissions
Stefan Schantl [Sat, 18 Mar 2023 19:29:58 +0000 (20:29 +0100)] 
libdb: Fix binary and header file permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoiptraf-ng: Proper use our compiler and linker flags
Stefan Schantl [Sat, 18 Mar 2023 18:52:37 +0000 (19:52 +0100)] 
iptraf-ng: Proper use our compiler and linker flags

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoiptraf-ng: Do not longer create /var/lock
Stefan Schantl [Sat, 18 Mar 2023 18:47:36 +0000 (19:47 +0100)] 
iptraf-ng: Do not longer create /var/lock

This folder violetes our FHS specs.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agointel-microcode: Set correct permissions for dirs and files
Stefan Schantl [Sat, 18 Mar 2023 18:44:06 +0000 (19:44 +0100)] 
intel-microcode: Set correct permissions for dirs and files

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agogettext: The config.rpath script needs to be executeable
Stefan Schantl [Sat, 18 Mar 2023 16:17:25 +0000 (17:17 +0100)] 
gettext: The config.rpath script needs to be executeable

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agodma: Update to 0.13
Stefan Schantl [Sat, 18 Mar 2023 16:12:51 +0000 (17:12 +0100)] 
dma: Update to 0.13

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agochrpath: Install documentation to the correct place
Stefan Schantl [Sat, 18 Mar 2023 15:58:42 +0000 (16:58 +0100)] 
chrpath: Install documentation to the correct place

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agodhcpcd: Fix permissions of dhcpcd binary
Stefan Schantl [Sat, 18 Mar 2023 15:48:23 +0000 (16:48 +0100)] 
dhcpcd: Fix permissions of dhcpcd binary

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agocyrus-sasl: Use /run instead of /var/run
Stefan Schantl [Sat, 18 Mar 2023 15:35:35 +0000 (16:35 +0100)] 
cyrus-sasl: Use /run instead of /var/run

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agocups: Fix file permissions in /usr/include and drop /var/run
Stefan Schantl [Sat, 18 Mar 2023 15:33:13 +0000 (16:33 +0100)] 
cups: Fix file permissions in /usr/include and drop /var/run

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agosudo: Use systemd tmpfiles mechanism
Stefan Schantl [Sat, 18 Mar 2023 15:05:26 +0000 (16:05 +0100)] 
sudo: Use systemd tmpfiles mechanism

Use the tmpfiles mechanism from systemd to proper
recreate the /run/sudo directory.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agobird: Drop /var/run
Stefan Schantl [Sat, 18 Mar 2023 14:37:20 +0000 (15:37 +0100)] 
bird: Drop /var/run

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agogit: Hook examples should not be executeable
Stefan Schantl [Sat, 18 Mar 2023 14:05:20 +0000 (15:05 +0100)] 
git: Hook examples should not be executeable

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agogettext: Drop unneccessary stuff
Stefan Schantl [Sat, 18 Mar 2023 13:19:01 +0000 (14:19 +0100)] 
gettext: Drop unneccessary stuff

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agosgml-common: Drop HTML documentation
Stefan Schantl [Sat, 18 Mar 2023 09:02:50 +0000 (10:02 +0100)] 
sgml-common: Drop HTML documentation

We do not need this on our systems - anyway it
has been installed in a wrong directory.

Also replaced all hardcoded path values.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agodocbook-xsl: Fix file and directory permissions
Stefan Schantl [Sat, 18 Mar 2023 08:52:40 +0000 (09:52 +0100)] 
docbook-xsl: Fix file and directory permissions

The violated our FHS standards.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agodocbook-utils: Drop HTML documentation
Stefan Schantl [Sat, 18 Mar 2023 08:50:57 +0000 (09:50 +0100)] 
docbook-utils: Drop HTML documentation

We do not need this on our systems - Anyway it has been
installed to a wrong place by default.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agodocbook-dtds: Install files not executeable
Stefan Schantl [Sat, 18 Mar 2023 08:49:50 +0000 (09:49 +0100)] 
docbook-dtds: Install files not executeable

This is not required and vilates our FSH standards.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoqemu: Drop unused firmware files and /var/run
Stefan Schantl [Fri, 17 Mar 2023 18:41:42 +0000 (19:41 +0100)] 
qemu: Drop unused firmware files and /var/run

* Drop firmware files for platforms we do not support.
* Drop /var/run directory which violetes the FSH.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoperl: Fix library permissions
Stefan Schantl [Fri, 17 Mar 2023 17:30:32 +0000 (18:30 +0100)] 
perl: Fix library permissions

They did not fit the FSH and our own specs.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agoutil-linux: Do no create /run/uuidd
Stefan Schantl [Fri, 17 Mar 2023 15:08:23 +0000 (16:08 +0100)] 
util-linux: Do no create /run/uuidd

The folder will be created by systemd and violates the FSH.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agosystemd: Do not create /run/log/journal
Stefan Schantl [Fri, 17 Mar 2023 14:56:08 +0000 (15:56 +0100)] 
systemd: Do not create /run/log/journal

This will be done by the corresponding tmpfiles configuration
and violetes the FHS.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agosetup: Do not create /run/motd.d folder
Stefan Schantl [Fri, 17 Mar 2023 14:48:36 +0000 (15:48 +0100)] 
setup: Do not create /run/motd.d folder

This folder will be created from systemd by the corresponding
tmpfiles script and fails our FHS checks.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
18 months agodwz: New package
Stefan Schantl [Mon, 20 Mar 2023 19:06:43 +0000 (20:06 +0100)] 
dwz: New package

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
18 months agoxxhash: New package
Stefan Schantl [Mon, 20 Mar 2023 19:06:24 +0000 (20:06 +0100)] 
xxhash: New package

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
18 months agoglibc: Make this package confirm to FHS/Hardening
Michael Tremer [Tue, 21 Mar 2023 18:13:50 +0000 (18:13 +0000)] 
glibc: Make this package confirm to FHS/Hardening

This patch changes many things about glibc in one go. Sorry.

We move glibc out of /lib so that we no longer install any files where
they should not be according to our FHS.

We also enable SSP-all and ensure that everything is properly hardened.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
18 months agoglibc: Disable building NSCD
Michael Tremer [Tue, 21 Mar 2023 18:11:30 +0000 (18:11 +0000)] 
glibc: Disable building NSCD

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
18 months agolibvirt: Fix compiling virt-shell-login with GCC 12
Michael Tremer [Mon, 13 Mar 2023 16:25:55 +0000 (16:25 +0000)] 
libvirt: Fix compiling virt-shell-login with GCC 12

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
18 months agographviz: Proper harden some binaries
Stefan Schantl [Mon, 13 Mar 2023 15:41:23 +0000 (16:41 +0100)] 
graphviz: Proper harden some binaries

Use some additional compiler flags, to proper
harden them.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
18 months agojsoncpp: Disable building object failes
Michael Tremer [Mon, 13 Mar 2023 15:35:33 +0000 (15:35 +0000)] 
jsoncpp: Disable building object failes

We do not need those and they fail the hardening check.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
18 months agolibunwind: Update to 1.6.2
Michael Tremer [Mon, 13 Mar 2023 15:16:27 +0000 (15:16 +0000)] 
libunwind: Update to 1.6.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
18 months agokernel: Use our LDFLAGS for gcc plugins
Stefan Schantl [Wed, 15 Mar 2023 16:43:32 +0000 (17:43 +0100)] 
kernel: Use our LDFLAGS for gcc plugins

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
18 months agolibdb: Do not strip during build time
Michael Tremer [Sat, 11 Mar 2023 17:04:29 +0000 (17:04 +0000)] 
libdb: Do not strip during build time

We need the debug symbols for our hardening checks and anyway
will strip them later for the debuginfo packages.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>