[>]
http://marc.info/?l=openbsd-cvs&m=140764121419669&w=2
obsd.info.14
openbsd-cvs(obsdave,2) — All
2014-08-10 07:55:09
Module name: src
Changes by: lteo@cvs.openbsd.org 2014/08/09 21:26:20
Modified files:
sys/netinet : ip_divert.c
Log message:
Fix the length check for reinjected ICMP packets: sizeof(struct icmp) is
28 but an ICMP packet can be as small as 8 bytes (e.g. an ICMP echo
request packet with no payload), so check against ICMP_MINLEN instead.
Prior to this fix, divert(4) would erroneously discard valid ICMP
packets that are shorter than 20 bytes.
ICMPv6 is not affected, so this change applies to ICMP over IPv4 only.
ok florian@ henning@
[>]
http://marc.info/?l=openbsd-ports-cvs&m=140766121123082&w=2
obsd.info.14
openbsd-ports-cvs(obsdave,2) — All
2014-08-10 13:55:14
Module name: ports
Changes by: espie@cvs.openbsd.org 2014/08/10 02:59:48
Modified files:
infrastructure/mk: pkgpath.mk perl.port.mk bsd.port.mk
Log message:
framework to allow fake as non-root, based on an idea and initial patch by
naddy.
Not turned on yet, as it involves a critical new file.
Basically:
- introduce new variations on SUBST cmds to install various files
- use pkg_subst -i in !root mode
- unhardcode install path where possible, to allow for an install-wrapper
that disregards owner/groups.
- do links during fake to disable chown/chgrp/install.
Extra tweak (always-wrap) to actually encode "perl \
${PORTSDIR}/infra/bin/install-wrapper" as an install script, required by a few ports \
that keep track of the install script for later (eg., ruby, postgres).
[>]
http://marc.info/?l=openbsd-cvs&m=140766488023756&w=2
obsd.info.14
openbsd-cvs(obsdave,2) — All
2014-08-10 14:55:07
Module name: src
Changes by: espie@cvs.openbsd.org 2014/08/10 04:01:03
Modified files:
usr.sbin/pkg_add/OpenBSD: ArcCheck.pm Ustar.pm
Log message:
if pkg_create is run as non-root, restory correct group/owner to root/bin.
also, remove write permissions without explicit modes. Allows fake installs
to keep directories/files writable while producing correct package.