From patchwork Sat Jul 4 15:38:44 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 10015 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1 raw public key) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4gsvtB4Nlvz3wmP for ; Sat, 04 Jul 2026 15:38:58 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail02.haj.ipfire.org", Issuer "YE1" (not verified)) by mail01.ipfire.org (Postfix) with ESMTPS id 4gsvt90XTSz6sQ for ; Sat, 04 Jul 2026 15:38:57 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4gsvt80wRlz33td for ; Sat, 04 Jul 2026 15:38:56 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1 raw public key) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4gsvt53Dscz2xHd for ; Sat, 04 Jul 2026 15:38:53 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4gsvt431c1zMj; Sat, 04 Jul 2026 15:38:52 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1783179532; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=OYz8RSl0dYGZCd+o+vKSl/PNQlGt9DvXNhQYz1LKK/U=; b=GDF/u9emo1pypQSi247fGoQH75nGZkVNk+St/a5D+PITFIgE+Fu2JaVdxWVXn6Pr9UyfnN QjPsBxAWPk0Ww2Cg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1783179532; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=OYz8RSl0dYGZCd+o+vKSl/PNQlGt9DvXNhQYz1LKK/U=; b=frnDy/blptCYtSdHfVHV/0RC3F2WZmsPA08b7a/4mcJarl/lWuiEb8wAZcmvEqsjjE3lTK 8TUGmoJI1RiQCGSeSsI0ya+H5GvcI7vjXpILtqkQHdr1S4mx6/nNE2FFFBbOLXa20K+1e1 CpMWHFZFzgJU541i0V4ODSdqTc004XiXxkHwBEs21V14bUnZW7+3/f9mw+zk/kLvtSATYp IkwlUow1+p7sYi2YLbJpeeGX0N06lHdhWSaI7XLqM+tekillSlesZKJIjYNRk1aCUHizpN o+jI8jUaFQTsp/tgmn2w4Gj5rIXKzZnzao0+2/8ovkzqikEJmlMiUSBjrRID/Q== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH 1/6] acl: Update to version 2.4.0 Date: Sat, 4 Jul 2026 17:38:44 +0200 Message-ID: <20260704153849.3586287-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 - Update from version 2.3.2 to 2.4.0 - Update of rootfile - 2 CVE fixes - Changelog 2.4.0 * Major security and robustness improvements: - Fix multiple security vulnerabilities: CVE-2026-54369 and CVE-2026-54370 - Harden setfacl, getfacl, and chacl against malicious input - Prevent NULL pointer dereferences and memory corruption - Fix setfacl --restore for pathnames beginning with whitespace - Prevent setfacl --restore --test from changing file permissions * New library functions: - Add acl_get_file_at(), acl_set_file_at(), acl_delete_def_file_at() for safer file operations using file descriptors and to control symlink following - acl_delete_def_file_at() allows removing default ACLs via file descriptor * API improvements and bug fixes: - Remove libacl dependency on libattr - Reject invalid numeric UIDs and GIDs in libacl - Fix memory wasting loop when user does not exist - Retry harder in acl_get_file/acl_get_fd operations - Improve errno handling in acl permission functions - Fix compiler warnings and sequence point issues * Build system and code organization: - Rename internal symbols with __acl_ prefix to avoid conflicts - Internalize walk_tree API and replace with hardened version - Mark local variables and functions static where appropriate - Remove unnecessary dependencies and dead code * Test suite improvements: - Fix test compatibility issues with getpwnam/getgrnam functions - Add comprehensive restore.run test for --restore functionality - Fix shell quoting errors in test scripts - Improve test lookup library accessibility * Documentation updates: - Clarify symlink following behavior in manual pages - Document new _at function variants - Clarify that on Linux, acl_perm_t is a bitset * Translation updates: - German translation update Signed-off-by: Adolf Belka --- config/rootfiles/common/acl | 6 +++++- lfs/acl | 6 +++--- 2 files changed, 8 insertions(+), 4 deletions(-) diff --git a/config/rootfiles/common/acl b/config/rootfiles/common/acl index 505fd563c..9d449a60a 100644 --- a/config/rootfiles/common/acl +++ b/config/rootfiles/common/acl @@ -7,7 +7,7 @@ usr/bin/setfacl #usr/lib/libacl.la usr/lib/libacl.so usr/lib/libacl.so.1 -usr/lib/libacl.so.1.1.2302 +usr/lib/libacl.so.1.2.2400 #usr/lib/pkgconfig/libacl.pc #usr/share/doc/acl #usr/share/doc/acl/CHANGES @@ -37,6 +37,7 @@ usr/lib/libacl.so.1.1.2302 #usr/share/man/man3/acl_copy_int.3 #usr/share/man/man3/acl_create_entry.3 #usr/share/man/man3/acl_delete_def_file.3 +#usr/share/man/man3/acl_delete_def_file_at.3 #usr/share/man/man3/acl_delete_entry.3 #usr/share/man/man3/acl_delete_perm.3 #usr/share/man/man3/acl_dup.3 @@ -45,6 +46,7 @@ usr/lib/libacl.so.1.1.2302 #usr/share/man/man3/acl_error.3 #usr/share/man/man3/acl_extended_fd.3 #usr/share/man/man3/acl_extended_file.3 +#usr/share/man/man3/acl_extended_file_at.3 #usr/share/man/man3/acl_extended_file_nofollow.3 #usr/share/man/man3/acl_free.3 #usr/share/man/man3/acl_from_mode.3 @@ -52,6 +54,7 @@ usr/lib/libacl.so.1.1.2302 #usr/share/man/man3/acl_get_entry.3 #usr/share/man/man3/acl_get_fd.3 #usr/share/man/man3/acl_get_file.3 +#usr/share/man/man3/acl_get_file_at.3 #usr/share/man/man3/acl_get_perm.3 #usr/share/man/man3/acl_get_permset.3 #usr/share/man/man3/acl_get_qualifier.3 @@ -59,6 +62,7 @@ usr/lib/libacl.so.1.1.2302 #usr/share/man/man3/acl_init.3 #usr/share/man/man3/acl_set_fd.3 #usr/share/man/man3/acl_set_file.3 +#usr/share/man/man3/acl_set_file_at.3 #usr/share/man/man3/acl_set_permset.3 #usr/share/man/man3/acl_set_qualifier.3 #usr/share/man/man3/acl_set_tag_type.3 diff --git a/lfs/acl b/lfs/acl index b0008d4db..9b6f90b96 100644 --- a/lfs/acl +++ b/lfs/acl @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2024 IPFire Team # +# Copyright (C) 2007-2026 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 2.3.2 +VER = 2.4.0 THISAPP = acl-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 9f2abfddcd403df2c716c05f02a1b52453613d10948dc58a65b9ef41b44e37db6de99fb22dcfc4f6f0fb5d0319c939da61bd4e0fba2cdb5643e8087ecd34eeac +$(DL_FILE)_BLAKE2 = c7e4cd5dc482b1e9e283ca0ec6740cd1051d23e9cb533917e3d58e8d2381af516bb74d340f195a5e38f9f76466406a7b2e8f31dff5362ae2cc09e9d1f47eeec7 install : $(TARGET) From patchwork Sat Jul 4 15:38:45 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 10017 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4gsvtC0Vwnz3wqQ for ; Sat, 04 Jul 2026 15:38:59 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail02.haj.ipfire.org", Issuer "YE1" (not verified)) by mail01.ipfire.org (Postfix) with ESMTPS id 4gsvt96dRmz6q7 for ; Sat, 04 Jul 2026 15:38:57 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4gsvt85ZQXz34Kt for ; Sat, 04 Jul 2026 15:38:56 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [IPv6:2001:678:b28::25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1 raw public key) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4gsvt60kxhz30M5 for ; Sat, 04 Jul 2026 15:38:54 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4gsvt51W0Dzfg; Sat, 04 Jul 2026 15:38:53 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1783179533; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=9iOA6zTQHCgEEp9uaBOtemBOgU6ozhZEuHbU0SnZWcI=; b=uV9KSXCPR11m6QUv/IC/6yvdelzmreYipgJFAPZcyawgDCS7KtnSAFIS7K4VKSqRGxiAeg ngIsqS3KOXfMhUAw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1783179533; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=9iOA6zTQHCgEEp9uaBOtemBOgU6ozhZEuHbU0SnZWcI=; b=ty64JszcNl1c2Gzj6NBBv902Be7Kpb1jOnFkDSKC2C03GPv7yv9IkNJGqB+15iuFmHt0Y4 V1DTAtEnbFo4c9ZViRzPUUOEwxJ/Dx/0U2T0NH2QNjvahztLJNdTUIIyG3D0UTcFW360+c V11XzkbeRNTrmXFtdppFjzbSn3Rrf2QbkbiAveWjAM/H97z4dmMcQ25/Y3TiyKEZrFqS29 ndx/ieDWHKpXFS0akxPtoY8KRcg/01vGP4Qh6yWdvDyUEsdpMt2DmoCDdzX5Opb481solx MDGLN8KEHpjf5ciC41B4AR0DB5G8Kr4JiYqSnLp9K+gf9aguC9SF4gip3j6zOg== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH 2/6] core204: Ship acl Date: Sat, 4 Jul 2026 17:38:45 +0200 Message-ID: <20260704153849.3586287-2-adolf.belka@ipfire.org> In-Reply-To: <20260704153849.3586287-1-adolf.belka@ipfire.org> References: <20260704153849.3586287-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 Signed-off-by: Adolf Belka --- config/rootfiles/core/204/filelists/acl | 1 + 1 file changed, 1 insertion(+) create mode 120000 config/rootfiles/core/204/filelists/acl diff --git a/config/rootfiles/core/204/filelists/acl b/config/rootfiles/core/204/filelists/acl new file mode 120000 index 000000000..d819f9c48 --- /dev/null +++ b/config/rootfiles/core/204/filelists/acl @@ -0,0 +1 @@ +../../../common/acl \ No newline at end of file From patchwork Sat Jul 4 15:38:46 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 10019 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4gsvtC1D2mz3wvc for ; Sat, 04 Jul 2026 15:38:59 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [IPv6:2001:678:b28::201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail02.haj.ipfire.org", Issuer "YE1" (not verified)) by mail01.ipfire.org (Postfix) with ESMTPS id 4gsvt96r6dz6q6 for ; Sat, 04 Jul 2026 15:38:57 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4gsvt86Gs2z34Qg for ; Sat, 04 Jul 2026 15:38:56 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [IPv6:2001:678:b28::25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1 raw public key) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4gsvt60nXnz30Mt for ; Sat, 04 Jul 2026 15:38:54 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4gsvt5327wzZd; Sat, 04 Jul 2026 15:38:53 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1783179533; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=5WIbLV/5EQN7PAqq0rZirptJ2HBYt55kcms56MT8Z+w=; b=tuQ8Qcb3bXGoF+BMUcD95nnjzfDVQ7Hll3rLaCaDpFAlgD3ZwnAuAqRjBqqYLqg+UsatpU jUPaHLPIuZU0EtBg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1783179533; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=5WIbLV/5EQN7PAqq0rZirptJ2HBYt55kcms56MT8Z+w=; b=L2o/L3xs+NgcSvaLKHil7Yv1VGxsBbr6qxgU1wLGeaMHrw0owe5rvxoiPPz/6BomeRujK1 /C9ynTHInxufwGUtQlIMkxwS66vDbYyHc3eMYc1LJPwUefZz6/7jufEszRfo+A1nHYFP4W ul+kiu56hAsNmy2wekpVp2etWmVdBB0bxTQ3oBPrspPeM4olzQT8qUxQToH01a+PaPoLjI Y0cMvwEsagMbHiJthqOjl9v5o6RDsGTiNRBMyp4OTsYBAirkoZ/OroTvnlhQ6aZ3t8ihvE /iAq0UQTb9NczLwjrXRJhGlvfSHbgBcskMl0olbCTAGo3g8uHLDgRG6EDJM73Q== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH 3/6] attr: Update to version 2.6.0 Date: Sat, 4 Jul 2026 17:38:46 +0200 Message-ID: <20260704153849.3586287-3-adolf.belka@ipfire.org> In-Reply-To: <20260704153849.3586287-1-adolf.belka@ipfire.org> References: <20260704153849.3586287-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 - Update from version 2.5.2 to 2.6.0 - Update rootfile - 1 CVE fix - Changelog 2.6.0 - Security fixes for CVE-2026-54371: - Fix symlink traversal privilege escalation vulnerability in getfattr and setfattr - Harden getfattr to properly handle symlinks with -h/--no-dereference option - Harden setfattr --restore with new -P/--physical option for safe restoring - Add warnings for potentially unsafe restore operations (can be disabled with the --disable-unsafe-restore-warnings configure option) - New extended attribute system call support: - Add wrappers for new xattrat() system calls (getxattrat, setxattrat, listxattrat, removexattrat) introduced in kernel 6.13 - Add backwards compatibility layer for older systems without xattrat() support - Add openat2() syscall wrapper support for enhanced security (kernel 5.6+) - Code improvements and fixes: - Add new walk_tree helper, remove old implementation - Fix multiple memory management issues in attr_copy_* functions - Fix race conditions in listxattr and lgetxattr operations - Fix buffer overflow and use-after-free bugs in setfattr --restore - Remove dead code and improve compiler warning handling - Add visibility attribute support for better library symbol management - Build system and compatibility: - Improve test suite for SELinux environments - Add License variable to pkg-config file - Fix various compiler warnings with -Wall, -Wextra, -Wmissing-prototypes - Add missing header includes and mark local functions static - Translation updates: - Update the German translation - Configuration updates: - Remove obsolete system.nfs4acl entry from xattr.conf - Add configure option --disable-unsafe-restore-warnings Signed-off-by: Adolf Belka --- config/rootfiles/common/attr | 3 +-- lfs/attr | 6 +++--- 2 files changed, 4 insertions(+), 5 deletions(-) diff --git a/config/rootfiles/common/attr b/config/rootfiles/common/attr index 73f8e9500..4307e1dd0 100644 --- a/config/rootfiles/common/attr +++ b/config/rootfiles/common/attr @@ -1,7 +1,6 @@ usr/bin/attr usr/bin/getfattr usr/bin/setfattr -#usr/etc #usr/etc/xattr.conf #usr/include/attr #usr/include/attr/attributes.h @@ -11,7 +10,7 @@ usr/bin/setfattr #usr/lib/libattr.la #usr/lib/libattr.so usr/lib/libattr.so.1 -usr/lib/libattr.so.1.1.2502 +usr/lib/libattr.so.1.1.2600 #usr/lib/pkgconfig/libattr.pc #usr/share/doc/attr #usr/share/doc/attr/CHANGES diff --git a/lfs/attr b/lfs/attr index 8a85b109e..2c005d7b3 100644 --- a/lfs/attr +++ b/lfs/attr @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2024 IPFire Team # +# Copyright (C) 2007-2026 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 2.5.2 +VER = 2.6.0 THISAPP = attr-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = cf26348c3a96622e4f62493ac7655e14b6580d36a5784ef4c3750178856eceabd33192fd58516be21c8aa1ad41d56c024ad440ef4bc922bed8f7a4984ea16c63 +$(DL_FILE)_BLAKE2 = 10e36188a11344e1cc1dd7d0bcc8724a62bfc945799755cff6a54fff6c6d7e306596628fca4f882e84a156cf2ea790a1a8411599819de4e60b0a21dc3b400d64 install : $(TARGET) From patchwork Sat Jul 4 15:38:47 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 10016 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4gsvtB74gLz3wqB for ; Sat, 04 Jul 2026 15:38:58 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [IPv6:2001:678:b28::201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail02.haj.ipfire.org", Issuer "YE1" (not verified)) by mail01.ipfire.org (Postfix) with ESMTPS id 4gsvt94XzZz6p4 for ; Sat, 04 Jul 2026 15:38:57 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4gsvt84QBSz308L for ; Sat, 04 Jul 2026 15:38:56 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4gsvt56TLhz2yrj for ; Sat, 04 Jul 2026 15:38:53 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4gsvt54GlgzMj; Sat, 04 Jul 2026 15:38:53 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1783179533; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=vC0KUj6WjNMJGfuBAyfJvwOXENKoD29tXgtAbKLAZ+c=; b=C3odLRXw3ja+dUqsB3v8laKY3gqa6pNkTgrMyzsAo2mX2aJ4lg1RHOwP8RppoU9NaaEZ7r m228GiLGFZklfCiIDIVdBDjZ5DvVaqQHyEt/1KcnET+ub7b9gTFAjt9l7eguCHKIuLe6uQ EoGtL+7dMgzCDDxwa+sqpGeZxRrBWVrs9qZwtNXaUYVO4Sq9kg/7wiibZQLLrLvMOTdkbc hVa8VGv222cYUpWEuV5CqLEL+iqqu0c7gn/OmlGCW4aHgk7KWiWvKWaRN+3zOg7BQAguR5 pO+ejOaOKfrCwxzCXv6mCVGaVyDpzSKJj1edv9MB1bukvzq2WJ6aJQl6KxTdzQ== DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1783179533; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=vC0KUj6WjNMJGfuBAyfJvwOXENKoD29tXgtAbKLAZ+c=; b=G4owl0IaM/Mq/dBpq5ATvWGO7CdqUdLAFlhUmd61HC9tUMpfiMSH/wkQEA+bny8ppJwu3e 8VIyYgr2HHFRsjAA== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH 4/6] core203: Ship attr Date: Sat, 4 Jul 2026 17:38:47 +0200 Message-ID: <20260704153849.3586287-4-adolf.belka@ipfire.org> In-Reply-To: <20260704153849.3586287-1-adolf.belka@ipfire.org> References: <20260704153849.3586287-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 Signed-off-by: Adolf Belka --- config/rootfiles/core/204/filelists/attr | 1 + 1 file changed, 1 insertion(+) create mode 120000 config/rootfiles/core/204/filelists/attr diff --git a/config/rootfiles/core/204/filelists/attr b/config/rootfiles/core/204/filelists/attr new file mode 120000 index 000000000..c80801751 --- /dev/null +++ b/config/rootfiles/core/204/filelists/attr @@ -0,0 +1 @@ +../../../common/attr \ No newline at end of file From patchwork Sat Jul 4 15:38:48 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 10018 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4gsvtC0xfnz3wvY for ; Sat, 04 Jul 2026 15:38:59 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail02.haj.ipfire.org", Issuer "YE1" (not verified)) by mail01.ipfire.org (Postfix) with ESMTPS id 4gsvt96XF7z5tf for ; Sat, 04 Jul 2026 15:38:57 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4gsvt85P4gz335Q for ; Sat, 04 Jul 2026 15:38:56 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4gsvt603K1z30C8 for ; Sat, 04 Jul 2026 15:38:53 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4gsvt55nSlz2kf; Sat, 04 Jul 2026 15:38:53 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1783179533; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=FaKIIAJH69JoTZzc6DUOJjMK2eFJOP4MRrzj6jxl3ss=; b=/Xy5c3lhLO4Ln3AqHzozl9cJK+coa95g7cQF30TVoAw12eMVIuDSL7f+BCJc4Y1mk24yKj 8f0tRx/ZgwNxQyCg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1783179533; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=FaKIIAJH69JoTZzc6DUOJjMK2eFJOP4MRrzj6jxl3ss=; b=wBC3aMDnlc9FVyq+XqrKYgXP/TiZ8jW5Hzk5E8Mbply0n6spXwi27rnFsTw/lNTXJ7/D89 vYJUH9En8VycNW9Eo2W8eq4MART9VBtLxbtmcZv1cnZ2x0NBIg/Kseq8k5cmvUoWxayBjl fjkX9K43p2utUHfmXFWKBMQTesRNOe5F/uIuoMHYc5CHv+XO4/LRQLkAwfCEaP6bGw/T4h eUdX9fEtNc32dkC+gofNODkQ60ORGAxral77h8sWbSUyJuNxxm1zlfEVhnqsZ1aPb0ZGLh ogJrmIXrFD8NxZw3QBbJRuAghIMZObC5R2PNlrPYxhcEKsYK4VE8e2xajC1/5w== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH 5/6] tar: Avoid acl_ prefixes for functions Date: Sat, 4 Jul 2026 17:38:48 +0200 Message-ID: <20260704153849.3586287-5-adolf.belka@ipfire.org> In-Reply-To: <20260704153849.3586287-1-adolf.belka@ipfire.org> References: <20260704153849.3586287-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 - The latest updates for acl and attr created some functions that ended up duplicating ones that tar had created. This patch has been implemented to make these functions start with tar_ so that they are specific to the tar project. - No change to the rootfile Signed-off-by: Adolf Belka --- lfs/tar | 5 +- ...1.35_Avoid_acl__prefix_for_functions.patch | 83 +++++++++++++++++++ 2 files changed, 85 insertions(+), 3 deletions(-) create mode 100644 src/patches/tar/tar-1.35_Avoid_acl__prefix_for_functions.patch diff --git a/lfs/tar b/lfs/tar index 745b658e7..b4e8ff656 100644 --- a/lfs/tar +++ b/lfs/tar @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2023 IPFire Team # +# Copyright (C) 2007-2026 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -80,9 +80,8 @@ $(subst %,%_BLAKE2,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) - cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/tar/01_extract.c.patch - + cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/tar/tar-1.35_Avoid_acl__prefix_for_functions.patch cd $(DIR_APP) && ./configure $(EXTRA_CONFIG) FORCE_UNSAFE_CONFIGURE=1 cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install diff --git a/src/patches/tar/tar-1.35_Avoid_acl__prefix_for_functions.patch b/src/patches/tar/tar-1.35_Avoid_acl__prefix_for_functions.patch new file mode 100644 index 000000000..66788ce77 --- /dev/null +++ b/src/patches/tar/tar-1.35_Avoid_acl__prefix_for_functions.patch @@ -0,0 +1,83 @@ +--- tar-1.35/src/xattrs.c.orig 2023-07-10 09:29:17.000000000 +0200 ++++ tar-1.35/src/xattrs.c 2026-07-04 13:16:07.585006365 +0200 +@@ -139,13 +139,13 @@ + #ifdef HAVE_POSIX_ACLS + + /* acl-at wrappers, TODO: move to gnulib in future? */ +-static acl_t acl_get_file_at (int, const char *, acl_type_t); +-static int acl_set_file_at (int, const char *, acl_type_t, acl_t); ++static acl_t tar_acl_get_file_at (int, const char *, acl_type_t); ++static int tar_acl_set_file_at (int, const char *, acl_type_t, acl_t); + static int file_has_acl_at (int, char const *, struct stat const *); +-static int acl_delete_def_file_at (int, char const *); ++static int tar_acl_delete_def_file_at (int, char const *); + +-/* acl_get_file_at */ +-#define AT_FUNC_NAME acl_get_file_at ++/* tar_acl_get_file_at */ ++#define AT_FUNC_NAME tar_acl_get_file_at + #define AT_FUNC_RESULT acl_t + #define AT_FUNC_FAIL (acl_t)NULL + #define AT_FUNC_F1 acl_get_file +@@ -159,8 +159,8 @@ + #undef AT_FUNC_POST_FILE_PARAM_DECLS + #undef AT_FUNC_POST_FILE_ARGS + +-/* acl_set_file_at */ +-#define AT_FUNC_NAME acl_set_file_at ++/* tar_acl_set_file_at */ ++#define AT_FUNC_NAME tar_acl_set_file_at + #define AT_FUNC_F1 acl_set_file + #define AT_FUNC_POST_FILE_PARAM_DECLS , acl_type_t type, acl_t acl + #define AT_FUNC_POST_FILE_ARGS , type, acl +@@ -170,8 +170,8 @@ + #undef AT_FUNC_POST_FILE_PARAM_DECLS + #undef AT_FUNC_POST_FILE_ARGS + +-/* acl_delete_def_file_at */ +-#define AT_FUNC_NAME acl_delete_def_file_at ++/* tar_acl_delete_def_file_at */ ++#define AT_FUNC_NAME tar_acl_delete_def_file_at + #define AT_FUNC_F1 acl_delete_def_file + #define AT_FUNC_POST_FILE_PARAM_DECLS + #define AT_FUNC_POST_FILE_ARGS +@@ -299,10 +299,10 @@ + /* No "default" IEEE 1003.1e ACL set for directory. At this moment, + FILE_NAME may already have inherited default acls from parent + directory; clean them up. */ +- if (acl_delete_def_file_at (chdir_fd, file_name)) ++ if (tar_acl_delete_def_file_at (chdir_fd, file_name)) + WARNOPT (WARN_XATTR_WRITE, + (0, errno, +- _("acl_delete_def_file_at: Cannot drop default POSIX ACLs " ++ _("tar_acl_delete_def_file_at: Cannot drop default POSIX ACLs " + "for file '%s'"), + file_name)); + return; +@@ -316,11 +316,11 @@ + return; + } + +- if (acl_set_file_at (chdir_fd, file_name, type, acl) == -1) ++ if (tar_acl_set_file_at (chdir_fd, file_name, type, acl) == -1) + /* warn even if filesystem does not support acls */ + WARNOPT (WARN_XATTR_WRITE, + (0, errno, +- _ ("acl_set_file_at: Cannot set POSIX ACLs for file '%s'"), ++ _ ("tar_acl_set_file_at: Cannot set POSIX ACLs for file '%s'"), + file_name)); + + acl_free (acl); +@@ -357,10 +357,10 @@ + char *val = NULL; + acl_t acl; + +- if (!(acl = acl_get_file_at (parentfd, file_name, type))) ++ if (!(acl = tar_acl_get_file_at (parentfd, file_name, type))) + { + if (errno != ENOTSUP) +- call_arg_warn ("acl_get_file_at", file_name); ++ call_arg_warn ("tar_acl_get_file_at", file_name); + return; + } + From patchwork Sat Jul 4 15:38:49 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 10020 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4gsvtG22Srz3wmP for ; Sat, 04 Jul 2026 15:39:02 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail02.haj.ipfire.org", Issuer "YE1" (not verified)) by mail01.ipfire.org (Postfix) with ESMTPS id 4gsvtF6vYKz6sM for ; Sat, 04 Jul 2026 15:39:01 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4gsvtF3Lm8z30Nk for ; Sat, 04 Jul 2026 15:39:01 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4gsvt61bQ1z2xl4 for ; Sat, 04 Jul 2026 15:38:54 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4gsvt573zsz3kZ; Sat, 04 Jul 2026 15:38:53 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1783179534; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=0PVeQR2S5bvy+ZAoU9Re3D/e+0H4k3tWItE7f72zhK4=; b=D82e/5XjiVXCO6RwjZ0NRz5rjajWLvoJR99IwvKrAEPp7Xbo/YPVcDoG2NQO4UVvL0aUds y60Xoz1RnS57pWHcbL/QnJdIhrjjRdM68id5DIYyi1L7OuS63QbJ/3hxRSEmYHgaBRFBzQ 32YycgRgorDsdwHsilnQhuQ/dFZpfo2Y7Mgku/la6uhI7Xtd71AvaIde0IP61AWB0xwsTp DNxkW7kyiTFVhRcXd+OOtetC+2Ygx/ifSNekmhCeHzPIp4ryjuyRJNLwu8RLOG5UgTVdpi 6uLwlMcNe4CdFSS3I/Whe12Js1Ewi8lEAMTmWDKFxJ/exJwZBmQnP3+Jep4bBQ== DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1783179534; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=0PVeQR2S5bvy+ZAoU9Re3D/e+0H4k3tWItE7f72zhK4=; b=Cat0ta0KUWTB4Gnoxu9jnI86uXDbCOtdzNJNPbqig2As4uSlE++sckNUeow+RxRvdX+dEO l3yxKo2DXL5aHoBg== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH 6/6] core204: Ship tar Date: Sat, 4 Jul 2026 17:38:49 +0200 Message-ID: <20260704153849.3586287-6-adolf.belka@ipfire.org> In-Reply-To: <20260704153849.3586287-1-adolf.belka@ipfire.org> References: <20260704153849.3586287-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 Signed-off-by: Adolf Belka --- config/rootfiles/core/204/filelists/tar | 1 + 1 file changed, 1 insertion(+) create mode 120000 config/rootfiles/core/204/filelists/tar diff --git a/config/rootfiles/core/204/filelists/tar b/config/rootfiles/core/204/filelists/tar new file mode 120000 index 000000000..3e585d2eb --- /dev/null +++ b/config/rootfiles/core/204/filelists/tar @@ -0,0 +1 @@ +../../../common/tar \ No newline at end of file