Re: [Rpm-maint] [rpm-software-management/rpm] Don't allow installing packages without ARCH or OS (PR #3478)

2024-12-03 Thread Florian Festi
@ffesti commented on this pull request. > @@ -159,9 +159,18 @@ static int addTE(rpmte p, Header h, fnpyKey key, > rpmRelocation * relocs) p->arch = headerGetAsString(h, RPMTAG_ARCH); p->os = headerGetAsString(h, RPMTAG_OS); -/* gpg-pubkey's dont have os or arch (sigh), for other

Re: [Rpm-maint] [rpm-software-management/rpm] Don't allow installing packages without ARCH or OS (PR #3478)

2024-12-03 Thread Florian Festi
@ffesti commented on this pull request. > @@ -227,6 +236,10 @@ static int addTE(rpmte p, Header h, fnpyKey key, > rpmRelocation * relocs) rc = 0; exit: +if (rc) { + rpmlog(RPMLOG_ERR, _("misformed package %s\n"), + p->NEVRA ? p->NEVRA : (p->name ? p->name : "-"));

Re: [Rpm-maint] [rpm-software-management/rpm] Don't allow installing packages without ARCH or OS (PR #3478)

2024-12-03 Thread Panu Matilainen
@pmatilai commented on this pull request. > @@ -159,9 +159,18 @@ static int addTE(rpmte p, Header h, fnpyKey key, > rpmRelocation * relocs) p->arch = headerGetAsString(h, RPMTAG_ARCH); p->os = headerGetAsString(h, RPMTAG_OS); -/* gpg-pubkey's dont have os or arch (sigh), for oth

Re: [Rpm-maint] [rpm-software-management/rpm] Only configure git user if needed (PR #3472)

2024-12-03 Thread Jan Staněk
@pmatilai Oh, now I think I'm getting the problem @ffesti was worried about – when using just `-S git`, anyone with properly configured git would end up being marked as the author of the non-git patches, whether they like it or not – and there is nothing they can easily do to switch back to usin

Re: [Rpm-maint] [rpm-software-management/rpm] Don't allow installing packages without ARCH or OS (PR #3478)

2024-12-03 Thread Florian Festi
@ffesti pushed 4 commits. 29e3a017c3e4c0e585f2fe02a938aa8afcf9c8d0 Don't allow installing packages without ARCH or OS 3a3179718c497e88e250933af2e41ab1edcd0e18 Add test case for missing mandatory tags b746621878f22e8fd855391cc39abc8fcbe71a1b Don't allow installing gpg-pubkey packages abbf0e8c

Re: [Rpm-maint] [rpm-software-management/rpm] rpmsign --delsign / --addsign regression can corrupt packages in rpm >= 4.18.1 (Issue #3469)

2024-12-03 Thread Florian Festi
Closed #3469 as completed via #3479. -- Reply to this email directly or view it on GitHub: https://github.com/rpm-software-management/rpm/issues/3469#event-15509259878 You are receiving this because you are subscribed to this thread. Message ID: ___ R

Re: [Rpm-maint] [rpm-software-management/rpm] Fix possible package corruption on --delsign/resign/addsign (PR #3479)

2024-12-03 Thread Florian Festi
Merged #3479 into master. -- Reply to this email directly or view it on GitHub: https://github.com/rpm-software-management/rpm/pull/3479#event-15509259607 You are receiving this because you are subscribed to this thread. Message ID: ___ Rpm-maint mail

Re: [Rpm-maint] [rpm-software-management/rpm] RFE: sign the signature header contents too (Issue #2224)

2024-12-03 Thread Simo Sorce
Unsure if this is possible with RPM, but if there was a way to add hashes calculated from the headers as data in he signed payload without the need to further modify said headers, then you could make this backwards compatible in the sense that older version of RPM would still check the classic s

Re: [Rpm-maint] [rpm-software-management/rpm] Add support for SHA3-256 and SHA3-512 (PR #3482)

2024-12-03 Thread Panu Matilainen
(commit message clarified a bit) -- Reply to this email directly or view it on GitHub: https://github.com/rpm-software-management/rpm/pull/3482#issuecomment-2513948563 You are receiving this because you are subscribed to this thread. Message ID: ___ Rp

Re: [Rpm-maint] [rpm-software-management/rpm] Deal with SOURCEPKGID, PKGID and HDRID (Issue #3330)

2024-12-03 Thread Panu Matilainen
Maybe, we could salvage HDRID for this purpose. Rename the tag pointing to SHA1HEADER to OLDHDRID as per rpm tag renaming tradition (we just haven't done that in ages) so older rpms always get the SHA1 they expect from that tag and nothing for v6 packages, newer rpm's will get SHA256HEADER, and

[Rpm-maint] [rpm-software-management/rpm] Add support for SHA3-256 and SHA3-512 (PR #3482)

2024-12-03 Thread Panu Matilainen
Only libgcrypt and openssl support this at the moment, so we can't yet test in the CI setup. Tests manually verified with both. You can view, comment on, or merge this pull request online at: https://github.com/rpm-software-management/rpm/pull/3482 -- Commit Summary -- * Add support for SHA

Re: [Rpm-maint] [rpm-software-management/rpm] Only configure git user if needed (PR #3472)

2024-12-03 Thread Jan Staněk
So, the attempt is here. I'm splitting the original setup macros into several named steps, then combining them back as needed. I'm not 100% satisfied with the names, but I figured they are good enough to throwing the implementation up for discussion. -- Reply to this email directly or view it

Re: [Rpm-maint] [rpm-software-management/rpm] Don't allow installing packages without ARCH or OS (PR #3478)

2024-12-03 Thread Florian Festi
@ffesti pushed 4 commits. 138f7b192c1a45c03c3477a31ae095b697e72672 Don't allow installing packages without ARCH or OS ade31e96dea2f91f9d2a470197b56e44fe1126ad Add test case for missing mandatory tags 8425def4db39050c661718bb9982eeeabbc1a964 Don't allow installing gpg-pubkey packages b6a57939

Re: [Rpm-maint] [rpm-software-management/rpm] Don't allow installing packages without ARCH or OS (PR #3478)

2024-12-03 Thread Florian Festi
@ffesti commented on this pull request. > @@ -159,9 +159,18 @@ static int addTE(rpmte p, Header h, fnpyKey key, > rpmRelocation * relocs) p->arch = headerGetAsString(h, RPMTAG_ARCH); p->os = headerGetAsString(h, RPMTAG_OS); -/* gpg-pubkey's dont have os or arch (sigh), for other

Re: [Rpm-maint] [rpm-software-management/rpm] Don't allow installing packages without ARCH or OS (PR #3478)

2024-12-03 Thread Panu Matilainen
Merged #3478 into master. -- Reply to this email directly or view it on GitHub: https://github.com/rpm-software-management/rpm/pull/3478#event-15510342648 You are receiving this because you are subscribed to this thread. Message ID: ___ Rpm-maint mail

Re: [Rpm-maint] [rpm-software-management/rpm] Refuse to create transaction elements from headers with no RPMTAG_ARCH (Issue #3344)

2024-12-03 Thread Panu Matilainen
Closed #3344 as completed via #3478. -- Reply to this email directly or view it on GitHub: https://github.com/rpm-software-management/rpm/issues/3344#event-15510343021 You are receiving this because you are subscribed to this thread. Message ID: ___ R

Re: [Rpm-maint] [rpm-software-management/rpm] Refuse to create transaction elements from headers with no RPMTAG_ARCH (Issue #3344)

2024-12-03 Thread Panu Matilainen
Closed #3344 as completed via b92bd1b9fd11ae7654cc2797fffaeeeddaaa3c7e. -- Reply to this email directly or view it on GitHub: https://github.com/rpm-software-management/rpm/issues/3344#event-15510343046 You are receiving this because you are subscribed to this thread. Message ID: __

Re: [Rpm-maint] [rpm-software-management/rpm] Only configure git user if needed (PR #3472)

2024-12-03 Thread Jan Staněk
@khardix pushed 1 commit. 5f6f6b8554f5593f14e2d293c1318b0194779126 Split git setup to multiple macros -- View it on GitHub: https://github.com/rpm-software-management/rpm/pull/3472/files/77d585ceb8cb5b8085fe0a80a54d07d51da36c45..5f6f6b8554f5593f14e2d293c1318b0194779126 You are receiving this be

Re: [Rpm-maint] [rpm-software-management/rpm] RFE: add support for SHA-3 (Issue #3436)

2024-12-03 Thread Florian Festi
Closed #3436 as completed via #3482. -- Reply to this email directly or view it on GitHub: https://github.com/rpm-software-management/rpm/issues/3436#event-15506443853 You are receiving this because you are subscribed to this thread. Message ID: ___ R

Re: [Rpm-maint] [rpm-software-management/rpm] Add support for SHA3-256 and SHA3-512 (PR #3482)

2024-12-03 Thread Florian Festi
Merged #3482 into master. -- Reply to this email directly or view it on GitHub: https://github.com/rpm-software-management/rpm/pull/3482#event-15506443515 You are receiving this because you are subscribed to this thread. Message ID: ___ Rpm-maint mail

Re: [Rpm-maint] [rpm-software-management/rpm] RFE: sign the signature header contents too (Issue #2224)

2024-12-03 Thread Demi Marie Obenour
Concrete proposal: - New-style signatures are _required_ in v6 packages. - New-style signatures always cover both headers, including the entire main header and all of the signature header except for the tag data entry containing the new-style signatures. - If a new-style signature is present, th

Re: [Rpm-maint] [rpm-software-management/rpm] Regex support while packaging files with %ghost (Discussion #3480)

2024-12-03 Thread Shreenidhi Shedi
Hi @pmatilai, @ffesti any inputs on this? -- Reply to this email directly or view it on GitHub: https://github.com/rpm-software-management/rpm/discussions/3480#discussioncomment-11457103 You are receiving this because you are subscribed to this thread. Message ID: __