| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
| |
man page and inputs from schwarze@
ok sthen@
|
|
|
|
| |
"no objection" ajacoutot@
|
|
|
|
| |
wording help and ok jmc@
|
|
|
|
|
|
|
|
|
|
|
| |
- only extract the according /usr/share/compile/GENERIC{,.MP}
- if a "kernel" patch was properly installed (or rolled back), run
/usr/libexec/reorder_kernel _once_ just before exiting
- don't backup /bsd anymore, reorder_kernel already does it for us
- drop 2 now unused functions: install_kernel() and sp_cleanup()
While it appears to work fine after some quick testing, it should still be
considered WIP.
|
|
|
|
|
|
| |
only a subset of them.
with input from jmc@
|
|
|
|
|
|
| |
prodded by deraadt@
knobs sorting input jmc@
ok sthen@
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
(e.g. no x sets); in this case, syspatch will skip the patch *but* it will still
be listed as available. This will allow applying the patch in case sets are
installed later on.
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
missing patches matches the official names.
e.g.
$ doas syspatch -c
015_libssl
Add a bit more output on what we are doing.
Tighten a few checks and rename some vars.
People playing with syspatch on 6.0 should update syspatch.sh asap from current
as I will soon remove the temporary quirks glue.
|
|
|
|
| |
will always sync and apply all patches regardless of the installed sets.
|
|
|
|
|
| |
and less prone to conflict.
Simplify ls_installed while here.
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
Few tweaks while here.
|
| |
|
|
|
|
|
|
|
|
| |
corresponding stable. So prevent rollbacking a specific binpatch but instead
always rollback the latest one. It's the only way we can know the system is
consistent.
discussed with halex@ jasper@ robert@
|
|
|
|
|
|
| |
Put /var/syspatch into a variable, it's used more than 10 times.
prodded by robert@
|
|
This is currently a POC, maybe it will become something, maybe not.
Therefore it will not be hooked to the build before we are happy with it.
Workflow would be something like:
- fetch and verify signed tarballs containing the patched binaries from a mirror
- create a rollback tarball of the files we are about to replace
- extract and install the patched files
*** BIG FAT RED DISCLAIMER ***
This is very much WIP, it does *NOT* work, don't bikeshed, don't use it!
"get it in" deraadt@
|