Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | install_patch -> apply_patch to remove confusion with install_kernel and | 2016-11-01 | 1 | -26/+26 | ||
| | | | | install_file. | |||||
* | We don't want to run on -stable (i.e. locally built release) but only on | 2016-11-01 | 1 | -5/+7 | ||
| | | | | | official release. Remove the half cooked rollback patch if we run into an error. | |||||
* | First compute the variables, then set them readonly. So that we can catch | 2016-09-11 | 1 | -7/+8 | ||
| | | | | errors (e.g. mktemp(1) failing). | |||||
* | Indent cleanup. | 2016-09-11 | 1 | -23/+22 | ||
| | | | | Fix apply_patches return code while here. | |||||
* | Drop syspatch_trap, it's simple enough for trap no needing its own function. | 2016-09-10 | 1 | -10/+8 | ||
| | | | | Introduce sp_err() which will get used for error messages. | |||||
* | apply_patches should not take any arguments. | 2016-09-10 | 1 | -6/+7 | ||
| | | | | Few tweaks while here. | |||||
* | Don't fetch all patches at once but instead fetch+verify+patch one by one. | 2016-09-07 | 1 | -5/+7 | ||
| | ||||||
* | Don't put bsd.mp twice in the GENERIC.MP rollback tarball. | 2016-09-07 | 1 | -5/+4 | ||
| | ||||||
* | syspatch goal is not to act as a package manager but to sync the system to the | 2016-09-07 | 1 | -37/+20 | ||
| | | | | | | | | corresponding stable. So prevent rollbacking a specific binpatch but instead always rollback the latest one. It's the only way we can know the system is consistent. discussed with halex@ jasper@ robert@ | |||||
* | Drop useless variable and check. | 2016-09-06 | 1 | -7/+4 | ||
| | ||||||
* | Greatly simplify patch type detection and make things more generic. | 2016-09-06 | 1 | -19/+10 | ||
| | ||||||
* | Sort and set readonly global vars. | 2016-09-06 | 1 | -6/+7 | ||
| | ||||||
* | Make sure the file exists before putting it in the rollback tarball. | 2016-09-05 | 1 | -7/+9 | ||
| | ||||||
* | Missing local. | 2016-09-05 | 1 | -12/+12 | ||
| | | | | Shorter var name. | |||||
* | use a for loop for mtree for the two spec files | 2016-09-05 | 1 | -4/+5 | ||
| | | | | | | and add a better comment ok ajacoutot@ | |||||
* | No need to install the /var/syspatch/$REL directory, the binpatch does it for us. | 2016-09-05 | 1 | -11/+10 | ||
| | | | | | | Put /var/syspatch into a variable, it's used more than 10 times. prodded by robert@ | |||||
* | Welcome syspatch(8), a binary patch management utility for the base system. | 2016-09-05 | 1 | -0/+276 | ||
This is currently a POC, maybe it will become something, maybe not. Therefore it will not be hooked to the build before we are happy with it. Workflow would be something like: - fetch and verify signed tarballs containing the patched binaries from a mirror - create a rollback tarball of the files we are about to replace - extract and install the patched files *** BIG FAT RED DISCLAIMER *** This is very much WIP, it does *NOT* work, don't bikeshed, don't use it! "get it in" deraadt@ |