This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree".

The branch, next has been updated via 7827c5fb9acca4bf7f1681cd0ecd107febc1e7ea (commit) via 1091a629ead233e3b2fee06b099dad3f738d1d92 (commit) via 65c6336aa321ccf004545efe346b57e4dfed875d (commit) from 260d9e7dd8bcc1b1f8969535d18a314a1ad0c49c (commit)

Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below.

- Log ----------------------------------------------------------------- commit 7827c5fb9acca4bf7f1681cd0ecd107febc1e7ea Author: Peter Müller peter.mueller@ipfire.org Date: Thu Mar 31 09:22:40 2022 +0000

Core Update 167: Delete dropped firmware files as well

Signed-off-by: Peter Müller peter.mueller@ipfire.org

commit 1091a629ead233e3b2fee06b099dad3f738d1d92 Author: Peter Müller peter.mueller@ipfire.org Date: Thu Mar 31 09:20:50 2022 +0000

Core Update 167: Add new Pakfire key after extracting the files

Signed-off-by: Peter Müller peter.mueller@ipfire.org

commit 65c6336aa321ccf004545efe346b57e4dfed875d Author: Peter Müller peter.mueller@ipfire.org Date: Thu Mar 31 07:24:25 2022 +0000

Tor: Pick up upstream patch for fixing sandbox with glibc >= 2.34

Fixes: #12807

Signed-off-by: Peter Müller peter.mueller@ipfire.org

-----------------------------------------------------------------------

Summary of changes: config/rootfiles/core/167/update.sh | 10 +++++++--- lfs/tor | 5 ++++- src/patches/Tor-Sandbox-permit-the-clone3-system-call.patch | 13 +++++++++++++ 3 files changed, 24 insertions(+), 4 deletions(-) create mode 100644 src/patches/Tor-Sandbox-permit-the-clone3-system-call.patch

Difference in files: diff --git a/config/rootfiles/core/167/update.sh b/config/rootfiles/core/167/update.sh index 9e79f278a..2c96b445c 100644 --- a/config/rootfiles/core/167/update.sh +++ b/config/rootfiles/core/167/update.sh @@ -70,8 +70,12 @@ rm -rvf \ /lib/firmware/isci/README \ /lib/firmware/LICENCE.* \ /lib/firmware/Makefile \ + /lib/firmware/mellanox/ \ + /lib/firmware/mrvl/prestera/ \ /lib/firmware/qca/NOTICE.txt \ /lib/firmware/qcom/NOTICE.txt \ + /lib/firmware/qcom/sdm845/ \ + /lib/firmware/qcom/sm8250 \ /lib/firmware/README \ /lib/firmware/WHENCE \ /lib/kbd/keymaps/i386/qwerty/fi-latin1.map.gz \ @@ -308,9 +312,6 @@ rm -rvf \ # Delete old 2007 Pakfire key from GPG keyring GNUPGHOME="/opt/pakfire/etc/.gnupg" gpg --batch --yes --delete-keys 179740DC4D8C47DC63C099C74BDE364C64D96617

-# Add new 2022 Pakfire key to GPG keyring -GNUPGHOME="/opt/pakfire/etc/.gnupg" gpg --import /opt/pakfire/pakfire-2022.key - # Stop services /etc/init.d/ipsec stop

@@ -320,6 +321,9 @@ extract_files # update linker config ldconfig

+# Add new 2022 Pakfire key to GPG keyring +GNUPGHOME="/opt/pakfire/etc/.gnupg" gpg --import /opt/pakfire/pakfire-2022.key + # Update Language cache /usr/local/bin/update-lang-cache

diff --git a/lfs/tor b/lfs/tor index 2eb2adcb1..d732bc66e 100644 --- a/lfs/tor +++ b/lfs/tor @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tor -PAK_VER = 67 +PAK_VER = 68

DEPS = libseccomp

@@ -89,6 +89,9 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) --with-tor-user=tor \ --with-tor-group=tor

+ # https://bugzilla.ipfire.org/show_bug.cgi?id=12807 + cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/Tor-Sandbox-permit-the-clone3-system-call.patch + cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install

diff --git a/src/patches/Tor-Sandbox-permit-the-clone3-system-call.patch b/src/patches/Tor-Sandbox-permit-the-clone3-system-call.patch new file mode 100644 index 000000000..e8c6957f2 --- /dev/null +++ b/src/patches/Tor-Sandbox-permit-the-clone3-system-call.patch @@ -0,0 +1,13 @@ +diff -Naur tor-0.4.6.10.orig/src/lib/sandbox/sandbox.c tor-0.4.6.10/src/lib/sandbox/sandbox.c +--- tor-0.4.6.10.orig/src/lib/sandbox/sandbox.c 2022-03-31 07:17:55.966217291 +0000 ++++ tor-0.4.6.10/src/lib/sandbox/sandbox.c 2022-03-31 07:19:23.730134367 +0000 +@@ -151,6 +151,9 @@ + SCMP_SYS(clock_gettime), + SCMP_SYS(close), + SCMP_SYS(clone), ++#ifdef __NR_clone3 ++ SCMP_SYS(clone3), ++#endif + SCMP_SYS(dup), + SCMP_SYS(epoll_create), + SCMP_SYS(epoll_wait),

hooks/post-receive -- IPFire 2.x development tree