commit c6ae2561a0345a7bd98652b66d7237d8bb88db5e from: Omar Polo date: Thu Feb 10 23:14:32 2022 UTC update the site for the release commit - b4b432e78ed2c8d7d3d42a722dd8deb5773848de commit + c6ae2561a0345a7bd98652b66d7237d8bb88db5e blob - c303c659a527d4374a5919afb191173bac60bc1f blob + 05a1922cd3ae4a998891dde1ee3b5d0feed438ba --- site/Makefile +++ site/Makefile @@ -15,7 +15,7 @@ REPOLOGY_BANNER = https://repology.org/badge/vertical- REPOLOGY_URL = https://repology.org/project/gmid/versions SUBST = ./subst GITHUB=https://github.com/omar-polo/gmid \ - VERS=1.8 \ + VERS=1.8.1 \ CURV=1.8 \ NEXTV=1.9 \ TREE=https://git.omarpolo.com/gmid/tree blob - 9d7e97c56d47e407992a1e4a6660686e7a5dc409 blob + b33781d479db8c2f589cec0971dd4c3c3c170cc3 --- site/changelog.gmi +++ site/changelog.gmi @@ -1,5 +1,25 @@ # change log +## 2022/02/10 - 1.8.1 “Lightbulb Sun” bugfix release + +### Bug fixes + +* fix landlock usage on linux: don't assume that access capabilities not listed are implicitly denied, because they are not. Mickaël Salaün, the landlock author, found the same error on game of trees: + +> In a nutshell, the ruleset's handled_access_fs is required for backward and forward compatibility (i.e. the kernel and user space may not know each other's supported restrictions), hence the need to be explicit about the denied-by-default access rights. + +In practice this affects only linux and only partially: thanks to the design of the daemon and the seccomp filter the effects of this mistake in handling landlock are fortunately limited. However, in theory at least, gmid could be for e.g. tricked into truncating existing files, so it's highly suggested to update. + +## Improvements + +All by Anna “CyberTailor”, thanks! + +* don't skip unit tests when SKIP_RUNTIME_TEST is set +* add `gg' to the regress target dependencies +* fix the "implicit declaration of asprintf" warning +* sync vim syntax + + ## 2022/01/30 - 1.8 “Lightbulb Sun” ### New Features blob - ac192e6efe00cd1eabee5a14b2de38f1cef1dc51 blob + 12ab8d40f94e6ca96f1cbfd7f29b227210ce632d --- site/index.gmi +++ site/index.gmi @@ -65,12 +65,10 @@ To verify the signatures with signify(1) ```Example of how to verify the signature with signify % signify -C -p gmid-1.8.pub -x SHA256.sig Signature Verified -gg.linux.aarch64: OK gg.linux.amd64: OK -gmid-1.8-binaries.tar.gz: OK +gmid-1.8.1-binaries.tar.gz: OK +gmid-1.8.1.tar.gz: OK gmid-1.8.pub: OK -gmid-1.8.tar.gz: OK gmid-1.9.pub: OK -gmid.linux.aarch64: OK gmid.linux.amd64: OK ```