]> git.ipfire.org Git - ipfire-3.x.git/log
ipfire-3.x.git
13 months agoperl-FCGI: Fix library permissions
Stefan Schantl [Sun, 19 Mar 2023 09:20:34 +0000 (10:20 +0100)] 
perl-FCGI: Fix library permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agoperl-DBI: Fix library and binary permissions
Stefan Schantl [Sun, 19 Mar 2023 09:17:20 +0000 (10:17 +0100)] 
perl-DBI: Fix library and binary permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agoperl-Digest-SHA1: Enable testsuite
Stefan Schantl [Sun, 19 Mar 2023 09:16:43 +0000 (10:16 +0100)] 
perl-Digest-SHA1: Enable testsuite

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agoperl-Digest-SHA1: Fix library permissions
Stefan Schantl [Sun, 19 Mar 2023 09:16:07 +0000 (10:16 +0100)] 
perl-Digest-SHA1: Fix library permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agoperl-Crypt-OpenSSL-X509: Enable testsuite
Stefan Schantl [Sun, 19 Mar 2023 09:06:18 +0000 (10:06 +0100)] 
perl-Crypt-OpenSSL-X509: Enable testsuite

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agoperl-Crypt-OpenSSL-X509: Fix library permissions
Stefan Schantl [Sun, 19 Mar 2023 09:01:19 +0000 (10:01 +0100)] 
perl-Crypt-OpenSSL-X509: Fix library permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agoperl-Coro: Fix library permissions
Stefan Schantl [Sun, 19 Mar 2023 08:59:31 +0000 (09:59 +0100)] 
perl-Coro: Fix library permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agoperl-BDB: Fix library permissions
Stefan Schantl [Sun, 19 Mar 2023 08:57:44 +0000 (09:57 +0100)] 
perl-BDB: Fix library permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agolibvirt: Fix binary permissions and drop /var/run
Stefan Schantl [Sat, 18 Mar 2023 22:00:19 +0000 (23:00 +0100)] 
libvirt: Fix binary permissions and drop /var/run

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agopciutils: Install header files with correct permissions
Stefan Schantl [Sat, 18 Mar 2023 21:58:22 +0000 (22:58 +0100)] 
pciutils: Install header files with correct permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agobash: Set correct permissions for /root and binaries
Stefan Schantl [Sat, 18 Mar 2023 21:15:52 +0000 (22:15 +0100)] 
bash: Set correct permissions for /root and binaries

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agoopenssh: Fix permissions for sshd-keygen
Stefan Schantl [Sat, 18 Mar 2023 20:45:09 +0000 (21:45 +0100)] 
openssh: Fix permissions for sshd-keygen

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agoopenldap: Do not ship /run/openldap anymore
Stefan Schantl [Sat, 18 Mar 2023 20:35:23 +0000 (21:35 +0100)] 
openldap: Do not ship /run/openldap anymore

This violetes our FHS specs

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agonettle: Fix library permissions
Stefan Schantl [Sat, 18 Mar 2023 20:34:06 +0000 (21:34 +0100)] 
nettle: Fix library permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agonet-snmp: Do not create /var/run anymore
Stefan Schantl [Sat, 18 Mar 2023 20:30:41 +0000 (21:30 +0100)] 
net-snmp: Do not create /var/run anymore

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agonetpbm: Drop unneeded pkgconfig_template file
Stefan Schantl [Sat, 18 Mar 2023 20:24:11 +0000 (21:24 +0100)] 
netpbm: Drop unneeded pkgconfig_template file

Anyway it was located at an invalid place.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agomdadm: Use systemd tmpfile
Stefan Schantl [Sat, 18 Mar 2023 20:21:21 +0000 (21:21 +0100)] 
mdadm: Use systemd tmpfile

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agolvm2: Do not ship /run and it's content
Stefan Schantl [Sat, 18 Mar 2023 20:15:26 +0000 (21:15 +0100)] 
lvm2: Do not ship /run and it's content

This violetes our FHS specs

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agolm-sensors: Proper use compiler and linker flags during build time
Stefan Schantl [Sat, 18 Mar 2023 20:07:19 +0000 (21:07 +0100)] 
lm-sensors: Proper use compiler and linker flags during build time

Those flags are required during build time and not during installation.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agolldpd: Do not create /run/lldpd
Stefan Schantl [Sat, 18 Mar 2023 19:49:10 +0000 (20:49 +0100)] 
lldpd: Do not create /run/lldpd

This violates our FHS specs.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agokea: Drop /var/run
Stefan Schantl [Sat, 18 Mar 2023 19:47:24 +0000 (20:47 +0100)] 
kea: Drop /var/run

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agokrb5: Change /var/kerberos to /var/lib/kerberos
Stefan Schantl [Sat, 18 Mar 2023 19:32:35 +0000 (20:32 +0100)] 
krb5: Change /var/kerberos to /var/lib/kerberos

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agolibdb: Fix binary and header file permissions
Stefan Schantl [Sat, 18 Mar 2023 19:29:58 +0000 (20:29 +0100)] 
libdb: Fix binary and header file permissions

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agoiptraf-ng: Proper use our compiler and linker flags
Stefan Schantl [Sat, 18 Mar 2023 18:52:37 +0000 (19:52 +0100)] 
iptraf-ng: Proper use our compiler and linker flags

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agoiptraf-ng: Do not longer create /var/lock
Stefan Schantl [Sat, 18 Mar 2023 18:47:36 +0000 (19:47 +0100)] 
iptraf-ng: Do not longer create /var/lock

This folder violetes our FHS specs.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agointel-microcode: Set correct permissions for dirs and files
Stefan Schantl [Sat, 18 Mar 2023 18:44:06 +0000 (19:44 +0100)] 
intel-microcode: Set correct permissions for dirs and files

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agogettext: The config.rpath script needs to be executeable
Stefan Schantl [Sat, 18 Mar 2023 16:17:25 +0000 (17:17 +0100)] 
gettext: The config.rpath script needs to be executeable

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agodma: Update to 0.13
Stefan Schantl [Sat, 18 Mar 2023 16:12:51 +0000 (17:12 +0100)] 
dma: Update to 0.13

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agochrpath: Install documentation to the correct place
Stefan Schantl [Sat, 18 Mar 2023 15:58:42 +0000 (16:58 +0100)] 
chrpath: Install documentation to the correct place

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agodhcpcd: Fix permissions of dhcpcd binary
Stefan Schantl [Sat, 18 Mar 2023 15:48:23 +0000 (16:48 +0100)] 
dhcpcd: Fix permissions of dhcpcd binary

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agocyrus-sasl: Use /run instead of /var/run
Stefan Schantl [Sat, 18 Mar 2023 15:35:35 +0000 (16:35 +0100)] 
cyrus-sasl: Use /run instead of /var/run

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agocups: Fix file permissions in /usr/include and drop /var/run
Stefan Schantl [Sat, 18 Mar 2023 15:33:13 +0000 (16:33 +0100)] 
cups: Fix file permissions in /usr/include and drop /var/run

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agosudo: Use systemd tmpfiles mechanism
Stefan Schantl [Sat, 18 Mar 2023 15:05:26 +0000 (16:05 +0100)] 
sudo: Use systemd tmpfiles mechanism

Use the tmpfiles mechanism from systemd to proper
recreate the /run/sudo directory.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agobird: Drop /var/run
Stefan Schantl [Sat, 18 Mar 2023 14:37:20 +0000 (15:37 +0100)] 
bird: Drop /var/run

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agogit: Hook examples should not be executeable
Stefan Schantl [Sat, 18 Mar 2023 14:05:20 +0000 (15:05 +0100)] 
git: Hook examples should not be executeable

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agogettext: Drop unneccessary stuff
Stefan Schantl [Sat, 18 Mar 2023 13:19:01 +0000 (14:19 +0100)] 
gettext: Drop unneccessary stuff

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agosgml-common: Drop HTML documentation
Stefan Schantl [Sat, 18 Mar 2023 09:02:50 +0000 (10:02 +0100)] 
sgml-common: Drop HTML documentation

We do not need this on our systems - anyway it
has been installed in a wrong directory.

Also replaced all hardcoded path values.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agodocbook-xsl: Fix file and directory permissions
Stefan Schantl [Sat, 18 Mar 2023 08:52:40 +0000 (09:52 +0100)] 
docbook-xsl: Fix file and directory permissions

The violated our FHS standards.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agodocbook-utils: Drop HTML documentation
Stefan Schantl [Sat, 18 Mar 2023 08:50:57 +0000 (09:50 +0100)] 
docbook-utils: Drop HTML documentation

We do not need this on our systems - Anyway it has been
installed to a wrong place by default.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agodocbook-dtds: Install files not executeable
Stefan Schantl [Sat, 18 Mar 2023 08:49:50 +0000 (09:49 +0100)] 
docbook-dtds: Install files not executeable

This is not required and vilates our FSH standards.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agoqemu: Drop unused firmware files and /var/run
Stefan Schantl [Fri, 17 Mar 2023 18:41:42 +0000 (19:41 +0100)] 
qemu: Drop unused firmware files and /var/run

* Drop firmware files for platforms we do not support.
* Drop /var/run directory which violetes the FSH.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agoperl: Fix library permissions
Stefan Schantl [Fri, 17 Mar 2023 17:30:32 +0000 (18:30 +0100)] 
perl: Fix library permissions

They did not fit the FSH and our own specs.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agoutil-linux: Do no create /run/uuidd
Stefan Schantl [Fri, 17 Mar 2023 15:08:23 +0000 (16:08 +0100)] 
util-linux: Do no create /run/uuidd

The folder will be created by systemd and violates the FSH.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agosystemd: Do not create /run/log/journal
Stefan Schantl [Fri, 17 Mar 2023 14:56:08 +0000 (15:56 +0100)] 
systemd: Do not create /run/log/journal

This will be done by the corresponding tmpfiles configuration
and violetes the FHS.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agosetup: Do not create /run/motd.d folder
Stefan Schantl [Fri, 17 Mar 2023 14:48:36 +0000 (15:48 +0100)] 
setup: Do not create /run/motd.d folder

This folder will be created from systemd by the corresponding
tmpfiles script and fails our FHS checks.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agodwz: New package
Stefan Schantl [Mon, 20 Mar 2023 19:06:43 +0000 (20:06 +0100)] 
dwz: New package

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agoxxhash: New package
Stefan Schantl [Mon, 20 Mar 2023 19:06:24 +0000 (20:06 +0100)] 
xxhash: New package

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agoglibc: Make this package confirm to FHS/Hardening
Michael Tremer [Tue, 21 Mar 2023 18:13:50 +0000 (18:13 +0000)] 
glibc: Make this package confirm to FHS/Hardening

This patch changes many things about glibc in one go. Sorry.

We move glibc out of /lib so that we no longer install any files where
they should not be according to our FHS.

We also enable SSP-all and ensure that everything is properly hardened.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agoglibc: Disable building NSCD
Michael Tremer [Tue, 21 Mar 2023 18:11:30 +0000 (18:11 +0000)] 
glibc: Disable building NSCD

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agolibvirt: Fix compiling virt-shell-login with GCC 12
Michael Tremer [Mon, 13 Mar 2023 16:25:55 +0000 (16:25 +0000)] 
libvirt: Fix compiling virt-shell-login with GCC 12

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agographviz: Proper harden some binaries
Stefan Schantl [Mon, 13 Mar 2023 15:41:23 +0000 (16:41 +0100)] 
graphviz: Proper harden some binaries

Use some additional compiler flags, to proper
harden them.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agojsoncpp: Disable building object failes
Michael Tremer [Mon, 13 Mar 2023 15:35:33 +0000 (15:35 +0000)] 
jsoncpp: Disable building object failes

We do not need those and they fail the hardening check.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agolibunwind: Update to 1.6.2
Michael Tremer [Mon, 13 Mar 2023 15:16:27 +0000 (15:16 +0000)] 
libunwind: Update to 1.6.2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agokernel: Use our LDFLAGS for gcc plugins
Stefan Schantl [Wed, 15 Mar 2023 16:43:32 +0000 (17:43 +0100)] 
kernel: Use our LDFLAGS for gcc plugins

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agolibdb: Do not strip during build time
Michael Tremer [Sat, 11 Mar 2023 17:04:29 +0000 (17:04 +0000)] 
libdb: Do not strip during build time

We need the debug symbols for our hardening checks and anyway
will strip them later for the debuginfo packages.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agocups: Enable building debug symbols during build time
Michael Tremer [Sat, 11 Mar 2023 16:59:48 +0000 (16:59 +0000)] 
cups: Enable building debug symbols during build time

We need those for our hardening checks and to create the related debuginfo
packages.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agoncurses: Avoid stripping the symbols from binaries
Michael Tremer [Sat, 11 Mar 2023 16:56:01 +0000 (16:56 +0000)] 
ncurses: Avoid stripping the symbols from binaries

Do not strip any symbols from the binaries during build time.
We need those for our hardening checks and will do the stripping for
the debuginfo packages afterwards.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agomc: Proper harden consaver binary
Stefan Schantl [Sat, 11 Mar 2023 11:41:16 +0000 (11:41 +0000)] 
mc: Proper harden consaver binary

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agomc: Patch/Drop python 2 based helper scripts
Stefan Schantl [Sat, 11 Mar 2023 11:39:50 +0000 (11:39 +0000)] 
mc: Patch/Drop python 2 based helper scripts

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agolibnl: Drop package
Stefan Schantl [Fri, 10 Mar 2023 16:50:42 +0000 (16:50 +0000)] 
libnl: Drop package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agoiw: Link agains libnl3
Stefan Schantl [Fri, 10 Mar 2023 16:50:13 +0000 (16:50 +0000)] 
iw: Link agains libnl3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agoiproute2: Does not longer depend on libnl
Stefan Schantl [Fri, 10 Mar 2023 16:49:50 +0000 (16:49 +0000)] 
iproute2: Does not longer depend on libnl

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agolibpcap: Does not longer depend on libnl
Stefan Schantl [Fri, 10 Mar 2023 16:49:26 +0000 (16:49 +0000)] 
libpcap: Does not longer depend on libnl

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agolibvirt: Does not longer depend on libnl
Stefan Schantl [Fri, 10 Mar 2023 16:48:58 +0000 (16:48 +0000)] 
libvirt: Does not longer depend on libnl

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agolibcap: Fix hardening
Stefan Schantl [Fri, 10 Mar 2023 16:34:38 +0000 (16:34 +0000)] 
libcap: Fix hardening

* Add CFLAGS to workaround a compiler bug with
  affects SSP in some cases.

* Add patch to proper use our CFLAGS

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agoe2fsprogs: Fix hardening
Stefan Schantl [Fri, 10 Mar 2023 16:31:59 +0000 (16:31 +0000)] 
e2fsprogs: Fix hardening

Add CFLAGS to workaround a compiler bug with
affects SSP in some cases.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agobzip2: Respect CFLAGS and LDFLAGS
Stefan Schantl [Fri, 10 Mar 2023 16:30:01 +0000 (16:30 +0000)] 
bzip2: Respect CFLAGS and LDFLAGS

Add two patches to proper use our CFLAGS and LDFLAGS.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agoavahi: Compile with -fstack-protector-all
Stefan Schantl [Thu, 9 Mar 2023 13:24:17 +0000 (13:24 +0000)] 
avahi: Compile with -fstack-protector-all

We have to use the configure flag to disable the
stack-protector to avoid overwriting our own stack protector
flags.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agoperl: Force perl to build with -fstack-protector-all
Stefan Schantl [Thu, 9 Mar 2023 12:45:32 +0000 (12:45 +0000)] 
perl: Force perl to build with -fstack-protector-all

Forcing perl to build with -fstack-protector-all and not with
-fstack-protector-strong.

More details could be found here:
https://git.ipfire.org/?p=pakfire.git;a=commit;h=f1153a857affb461de71d0c7e62cbf39de0c802b

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agoperl: Fix broken dependency for perl-core meta package
Stefan Schantl [Thu, 9 Mar 2023 12:43:56 +0000 (12:43 +0000)] 
perl: Fix broken dependency for perl-core meta package

The perl-DynaLoader package has been moved back into main perl
package.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
13 months agokrb5: Proper harden some binaries
Stefan Schantl [Sun, 12 Mar 2023 10:06:17 +0000 (11:06 +0100)] 
krb5: Proper harden some binaries

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agokrb5: Use macro logic to build the package
Stefan Schantl [Sun, 12 Mar 2023 10:05:09 +0000 (11:05 +0100)] 
krb5: Use macro logic to build the package

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agovim: Do not strip binaries during install
Stefan Schantl [Sun, 12 Mar 2023 09:53:20 +0000 (10:53 +0100)] 
vim: Do not strip binaries during install

We need the symbols for our hardening checks. They anyway will be
stripped afterwards and packed into the debuginfo packages.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agonfs-utils: Do not strip binary during installation
Stefan Schantl [Sun, 12 Mar 2023 09:46:45 +0000 (10:46 +0100)] 
nfs-utils: Do not strip binary during installation

We need the symbols for our hardening checks. The files anyway
will be stripped afterwards and those symbols will be packed into
the debuginfo packages.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agoopenldap: Do not strip binaries during install
Stefan Schantl [Sun, 12 Mar 2023 09:28:09 +0000 (10:28 +0100)] 
openldap: Do not strip binaries during install

We need those symbols for our hardening checks. The binaries
anyway will be stripped afterwards and the debug symbols will
be used for the debuginfo packages.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agopth: Drop package
Stefan Schantl [Sun, 12 Mar 2023 09:07:41 +0000 (10:07 +0100)] 
pth: Drop package

This package is very outdated and not longer used
by any of our software.

So it is safe to drop it.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agolibassuan: Does not longer depend on pth-devel
Stefan Schantl [Sun, 12 Mar 2023 09:07:14 +0000 (10:07 +0100)] 
libassuan: Does not longer depend on pth-devel

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agogpgme: Does not longer depend on pth-devel
Stefan Schantl [Sun, 12 Mar 2023 09:06:30 +0000 (10:06 +0100)] 
gpgme: Does not longer depend on pth-devel

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agonetpbm: Fix hardening
Stefan Schantl [Sun, 12 Mar 2023 08:27:06 +0000 (09:27 +0100)] 
netpbm: Fix hardening

* Add some additional CFLAGS to workaround a gcc bug
  with enabled SSP.

* Add patch to proper use our LDFLAGS when linking libnetpbm.

* Disable stripping the binaries during install.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agoopenjade: Use our LDFLAGS when linking the libraries
Stefan Schantl [Sat, 11 Mar 2023 16:43:37 +0000 (17:43 +0100)] 
openjade: Use our LDFLAGS when linking the libraries

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agogawk: Proper build with PIE
Stefan Schantl [Sat, 11 Mar 2023 13:46:58 +0000 (14:46 +0100)] 
gawk: Proper build with PIE

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agogettext: Fix hardening for some binaries.
Stefan Schantl [Sat, 11 Mar 2023 13:29:45 +0000 (14:29 +0100)] 
gettext: Fix hardening for some binaries.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 months agobison: Proper use LDFLAGS to link liby
Stefan Schantl [Sat, 11 Mar 2023 12:53:17 +0000 (13:53 +0100)] 
bison: Proper use LDFLAGS to link liby

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
14 months agoluajit: Ensure this package is being built with SSP
Michael Tremer [Thu, 9 Mar 2023 11:15:15 +0000 (11:15 +0000)] 
luajit: Ensure this package is being built with SSP

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
14 months agoDrop all compat-* packages
Michael Tremer [Thu, 9 Mar 2023 10:02:02 +0000 (10:02 +0000)] 
Drop all compat-* packages

We have been building a fresh bootstrap where all packages have been
rebuilt and linked against the current version of those libraries.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
14 months agoldapvi: Source cannot be downloaded using HTTPS
Michael Tremer [Thu, 9 Mar 2023 10:00:33 +0000 (10:00 +0000)] 
ldapvi: Source cannot be downloaded using HTTPS

The server seems to present an invalid certificate.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
14 months agolldpd: Disable seccomp support on aarch64
Michael Tremer [Wed, 8 Mar 2023 13:55:07 +0000 (13:55 +0000)] 
lldpd: Disable seccomp support on aarch64

lldpd does not support seccomp on aarch64 and aborts with
an corresponding error during compile time when enabled.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
14 months agoopenssl: Update to 3.0.8
Michael Tremer [Wed, 8 Mar 2023 13:54:31 +0000 (13:54 +0000)] 
openssl: Update to 3.0.8

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
14 months agostrace: Fix build on aarch64
Michael Tremer [Wed, 8 Mar 2023 08:44:34 +0000 (08:44 +0000)] 
strace: Fix build on aarch64

strace defaults to enable m32 or mx32, which is not available
on at least aarch64. So change to "check" to determine whicht mode
is available.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
14 months agolibdaemon: Fix build on aarch64
Michael Tremer [Wed, 8 Mar 2023 07:59:20 +0000 (07:59 +0000)] 
libdaemon: Fix build on aarch64

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
14 months agolibatasmart: Fix build for aarch64
Michael Tremer [Wed, 8 Mar 2023 07:55:22 +0000 (07:55 +0000)] 
libatasmart: Fix build for aarch64

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
14 months agopth: Fix build on aarch64
Michael Tremer [Tue, 7 Mar 2023 20:03:42 +0000 (20:03 +0000)] 
pth: Fix build on aarch64

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
14 months agognome-doc-utils: Fix build on aarch64
Michael Tremer [Tue, 7 Mar 2023 19:53:14 +0000 (19:53 +0000)] 
gnome-doc-utils: Fix build on aarch64

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
14 months agoflashrom: Update to 1.3.0
Michael Tremer [Tue, 7 Mar 2023 18:18:12 +0000 (18:18 +0000)] 
flashrom: Update to 1.3.0

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
14 months agodhcping: Drop package
Michael Tremer [Tue, 7 Mar 2023 17:18:50 +0000 (17:18 +0000)] 
dhcping: Drop package

This seems to be unmaintained for about 20 years.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
14 months agoglibc: Optimise for kernel >= 5.10
Michael Tremer [Tue, 7 Mar 2023 16:28:45 +0000 (16:28 +0000)] 
glibc: Optimise for kernel >= 5.10

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
14 months agogdb: Update to 13.1
Michael Tremer [Tue, 7 Mar 2023 16:27:32 +0000 (16:27 +0000)] 
gdb: Update to 13.1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
14 months agoperl-DBI: FTBFS
Stefan Schantl [Mon, 6 Mar 2023 11:55:15 +0000 (11:55 +0000)] 
perl-DBI: FTBFS

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
14 months agoperl-Net-HTTP: New package
Stefan Schantl [Mon, 6 Mar 2023 11:53:57 +0000 (11:53 +0000)] 
perl-Net-HTTP: New package

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
14 months agoplymouth: Fix broken logo symlink
Michael Tremer [Tue, 7 Mar 2023 13:50:33 +0000 (13:50 +0000)] 
plymouth: Fix broken logo symlink

This reverts commit 08445b698be12fc4ee16423b295d677fb89e6728.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>