Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.bugs.rc > #353000
| From | Helmut Grohne <helmut@subdivi.de> |
|---|---|
| Newsgroups | linux.debian.bugs.rc |
| Subject | Bug#1055509: bfh-container: diversions need to be updated to deal with DEP17 P3 |
| Date | 2023-12-19 15:20 +0100 |
| Message-ID | <HMJ6V-eEwe-5@gated-at.bofh.it> (permalink) |
| References | <Hxwlj-3Oys-1@gated-at.bofh.it> <Hxwlj-3Oys-1@gated-at.bofh.it> <HxWIN-453q-3@gated-at.bofh.it> <Hxwlj-3Oys-1@gated-at.bofh.it> <HxWIN-453q-3@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
[Multipart message — attachments visible in raw view] - view raw
On Wed, Nov 08, 2023 at 08:07:29PM +0100, Helmut Grohne wrote: > I'm proposing the attached patch to implement DEP17 mitigation M18. I > caution that the patch is untested, because piuparts failed for > unrelated reasons. open-infrastructure-compute-tools.postinst and > sudo.prerm fail inside piuparts. So consider this a starting point. The original patch didn't work at all. molly-guard was using the same approach and it failed on multiple accounts. After quite some back and forth, molly-guard now has a patch that looks reasonably good and I've ported the approach to bfh-container. Notable: * Diversion targets must differ in more than aliasing. * Since bfh-container does not need access to the diverted files, we can continue to move them to a different directory. * To avoid the conflicts-is-not-conflicts problem, bfh-container must support aliased as well as canonicalized versions and not declare Breaks or Conflicts for diverted packages such as systemd-sysv. Since systemd-sysv now Conflits with bfh-container testing the patch in unstable is difficult. I've tested installing, removing and upgrading it in bookworm though and that all works. Also the diversions look reasonable to me. When uploading this, please target experimental. Then we'll update systemd-sysv to add a version to their breaks and further test the patch before uploading to unstable. Helmut
Back to linux.debian.bugs.rc | Previous | Next — Previous in thread | Find similar | Unroll thread
Bug#1055509: bfh-container: diversions need to be updated to deal with DEP17 P3 Helmut Grohne <helmut@subdivi.de> - 2023-11-08 20:50 +0100 Bug#1055509: bfh-container: diversions need to be updated to deal with DEP17 P3 Helmut Grohne <helmut@subdivi.de> - 2023-12-19 15:20 +0100
csiph-web