tftpd: add hash file
PATCH 1/4 tftpd: add hash file
--- package/tftpd/tftpd.hash | 2 ++ 1 file changed, 2 insertions(+) create mode 100644 package/tftpd/tftpd.hash
package/tftpd/tftpd.hash new file +2 -0
@@ -0,0 +1,2 @@ +# From https://www.kernel.org/pub/software/network/tftp/tftp-hpa/sha256sums.asc +sha256 afee361df96a2f88344e191f6a25480fd714e1d28d176c3f10cc43fa206b718b tftp-hpa-5.2.tar.xz
Signature · 1 line
2.0.4
PATCH 2/4 pciutils: add hash file
And switch to kernel.org mirror because of inconsistency with it.
--- package/pciutils/pciutils.hash | 2 ++ package/pciutils/pciutils.mk | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) create mode 100644 package/pciutils/pciutils.hash
package/pciutils/pciutils.hash new file +2 -0
@@ -0,0 +1,2 @@ +# From https://www.kernel.org/pub/software/utils/pciutils/sha256sums.asc +sha256 9c1ad30d1e40e353ea78b0c7ca41487cc0923d91e560a6e07072c93bcf520c02 pciutils-3.2.1.tar.gz
package/pciutils/pciutils.mk +1 -1
@@ -5,7 +5,7 @@ ################################################################################ PCIUTILS_VERSION = 3.2.1 -PCIUTILS_SITE = ftp://atrey.karlin.mff.cuni.cz/pub/linux/pci +PCIUTILS_SITE = $(BR2_KERNEL_MIRROR)/software/utils/pciutils PCIUTILS_INSTALL_STAGING = YES PCIUTILS_LICENSE = GPLv2+ PCIUTILS_LICENSE_FILES = COPYING
Signature · 1 line
2.0.4
PATCH 2/4 pciutils: add hash file
Quoted 18 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line
"Gustavo" == Gustavo Zacarias <[email protected]> writes:
And switch to kernel.org mirror because of inconsistency with it.
Signed-off-by Gustavo Zacarias <[email protected]>--- package/pciutils/pciutils.hash | 2 ++ package/pciutils/pciutils.mk | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) create mode 100644 package/pciutils/pciutils.hashpackage/pciutils/pciutils.hash new file +0
-0
package/pciutils/pciutils.hash line 2
Quoted 2 lines
package/pciutils/pciutils.hash new file +2
-0@@ -0,0 +1,2 @@ +# From https://www.kernel.org/pub/software/utils/pciutils/sha256sums.asc +sha256 9c1ad30d1e40e353ea78b0c7ca41487cc0923d91e560a6e07072c93bcf520c02 pciutils-3.2.1.tar.gz
While this checksum matches the .asc file, it is different than what was on the old server (and on sources.buildroot.org, autobuilders and whatnot) - And as pciutils hasn't been bumped since Nov 2013 people are quite likely to already have it in their dl/.
As pciutils isn't really such a security sensitive package, I think we should wait with this until the version is bumped next time.
Quoted 2 lines
package/pciutils/pciutils.hash new file +1
-1-PCIUTILS_SITE = ftp://atrey.karlin.mff.cuni.cz/pub/linux/pci +PCIUTILS_SITE = $(BR2_KERNEL_MIRROR)/software/utils/pciutils
Signature · 1 line
Bye, Peter Korsgaard
PATCH 2/4 pciutils: add hash file
Quoted 7 lines · Peter Korsgaard
While this checksum matches the .asc file, it is different than what was on the old server (and on sources.buildroot.org, autobuilders and whatnot) - And as pciutils hasn't been bumped since Nov 2013 people are quite likely to already have it in their dl/.
As pciutils isn't really such a security sensitive package, I think we should wait with this until the version is bumped next time.
That shouldn't be a decisive factor, you're looking for consistency besides security and it shouldn't reduce the effort in doing so. I can argue that the security factor is indeed important, if you run things as root (lspci, setpci) - which is common in embedded targets - and the tarball installs a nifty backdoor then you probably wouldn't be too happy about it.
I know it would be odd to use those tools outside development. So compromise solution: switch to a new tarball format, that one isn't cached anywhere.
Regards.
PATCH 3/4 crda: add hash file
In reply to Gustavo Zacarias--- package/crda/crda.hash | 2 ++ 1 file changed, 2 insertions(+) create mode 100644 package/crda/crda.hash
package/crda/crda.hash new file +2 -0
@@ -0,0 +1,2 @@ +# From https://www.kernel.org/pub/software/network/crda/sha256sums.asc +sha256 2f85da7ab0170b140d6ed62596c8f268d4a7dedecf84cac7182ada979742ff59 crda-3.13.tar.xz
Signature · 1 line
2.0.4
PATCH 3/4 crda: add hash file
Quoted 3 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line
"]Gustavo" == Gustavo Zacarias <[email protected]> writes:
Signed-off-by Gustavo Zacarias <[email protected]>
Committed, thanks.
Signature · 1 line
Bye, Peter Korsgaard
PATCH 4/4 kmod: add hash file
In reply to Gustavo Zacarias--- package/kmod/kmod.hash | 2 ++ 1 file changed, 2 insertions(+) create mode 100644 package/kmod/kmod.hash
package/kmod/kmod.hash new file +2 -0
@@ -0,0 +1,2 @@ +# From https://www.kernel.org/pub/linux/utils/kernel/kmod/sha256sums.asc +sha256 e16e57272b54acb219c465b334715cfdddb5d97ff5d8948d4830ca1a372a868e kmod-18.tar.xz
Signature · 1 line
2.0.4
PATCH 4/4 kmod: add hash file
Quoted 3 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line
"Gustavo" == Gustavo Zacarias <[email protected]> writes:
Signed-off-by Gustavo Zacarias <[email protected]>
Committed, thanks.
Signature · 1 line
Bye, Peter Korsgaard
PATCH 1/4 tftpd: add hash file
In reply to Gustavo ZacariasQuoted 3 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line
"Gustavo" == Gustavo Zacarias <[email protected]> writes:
Signed-off-by Gustavo Zacarias <[email protected]>
Committed, thanks.
Signature · 1 line
Bye, Peter Korsgaard