Projects
openEuler:Mainline
isula-build
Sign Up
Log In
Username
Password
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
Expand all
Collapse all
Changes of Revision 199
View file
_service:tar_scm_kernel_repo:isula-build.spec
Changed
@@ -2,7 +2,7 @@ Name: isula-build Version: 0.9.6 -Release: 11 +Release: 12 Summary: A tool to build container images License: Mulan PSL V2 URL: https://gitee.com/openeuler/isula-build @@ -85,6 +85,12 @@ /usr/share/bash-completion/completions/isula-build %changelog +* Wed Sep 14 2022 xingweizheng <xingweizheng@huawei.com> - 0.9.6-12 +- Type:bugfix +- CVE:NA +- SUG:restart +- DESC:improve security compile option of isula-build binary + * Fri Aug 19 2022 daisicheng <daisicheng@huawei.com> - 0.9.6-11 - Type:bugfix - CVE:NA
View file
_service:tar_scm_kernel_repo:apply-patches
Changed
@@ -9,7 +9,7 @@ pkg=isula-build cwd=${PWD} src=${cwd}/${pkg} -tar_file=v"$(awk -F"-" '{print $1}' < VERSION-openeuler)".tar.gz +tar_file=v"$(awk -F"-" '{print $1}' <VERSION-openeuler)".tar.gz mkdir ${src} && tar -zxvf "${tar_file}" -C ${src} --strip-components 1 if [ ! -d patch ]; then @@ -25,7 +25,7 @@ cd "${cwd}" series=${cwd}/series.conf -while IPF= read -r line; do +while IPF= read -r line || [ -n "$line" ]; do if [[ "${line}" =~ ^patch* ]]; then echo "git apply ${cwd}/${line}" cd "${src}" && git apply "${cwd}/${line}"
View file
_service:recompress:tar_scm_kernel_repo:patch.tar.gz/0126-improve-security-compile-option-of-isula-build-binar.patch
Added
@@ -0,0 +1,25 @@ +From bdbd4b3136d57ef5e8d30f8537d03693cc11c481 Mon Sep 17 00:00:00 2001 +From: xingweizheng <xingweizheng@huawei.com> +Date: Tue, 13 Sep 2022 23:07:28 +0800 +Subject: [PATCH] improve security compile option of isula-build binary + +--- + Makefile | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/Makefile b/Makefile +index 4bdb064..0d6bd01 100644 +--- a/Makefile ++++ b/Makefile +@@ -23,7 +23,7 @@ BUILDFLAGS := -tags "$(BUILDTAGS)" + TMPDIR := /tmp/isula_build_tmpdir + BEFLAG := -tmpdir=${TMPDIR} + SAFEBUILDFLAGS := -buildid=IdByIsula -buildmode=pie -extldflags=-ftrapv -extldflags=-zrelro -extldflags=-znow $(BEFLAG) $(LDFLAGS) +-STATIC_LDFLAGS := -linkmode=external -extldflags=-static ++STATIC_LDFLAGS := -linkmode=external -extldflags "-static-pie -Wl,-z,now" + + IMAGE_BUILDARGS := $(if $(http_proxy), --build-arg http_proxy=$(http_proxy)) + IMAGE_BUILDARGS += $(if $(https_proxy), --build-arg https_proxy=$(https_proxy)) +-- +2.27.0 +
View file
_service:tar_scm_kernel_repo:VERSION-openeuler
Changed
@@ -1 +1 @@ -0.9.6-11 +0.9.6-12
View file
_service:tar_scm_kernel_repo:git-commit
Changed
@@ -1 +1 @@ -e88af88d105b4a5f68bd3a816ced949c3958353c +716dbdd867b5ee948f741de9958525531b59a31e
View file
_service:tar_scm_kernel_repo:series.conf
Changed
@@ -33,4 +33,5 @@ patch/0122-registries.toml-could-not-be-empty-hosts-resolv.conf.patch patch/0123-modify-the-Makefile-and-README-document.patch patch/0124-add-the-constraints-and-limitations-of-the-doc.patch -patch/0125-fix-the-possible-file-leakage-problem-in-util-cipher.patch \ No newline at end of file +patch/0125-fix-the-possible-file-leakage-problem-in-util-cipher.patch +patch/0126-improve-security-compile-option-of-isula-build-binar.patch
Locations
Projects
Search
Status Monitor
Help
Open Build Service
OBS Manuals
API Documentation
OBS Portal
Reporting a Bug
Contact
Mailing List
Forums
Chat (IRC)
Twitter
Open Build Service (OBS)
is an
openSUSE project
.