<feed xmlns='http://www.w3.org/2005/Atom'>
<title>squashfs-tools-ng.git/bin/rdsquashfs, branch v1.0.2</title>
<subtitle>A new set of tools and libraries for working with SquashFS images</subtitle>
<id>https://git.infraroot.at/squashfs-tools-ng.git/atom?h=v1.0.2</id>
<link rel='self' href='https://git.infraroot.at/squashfs-tools-ng.git/atom?h=v1.0.2'/>
<link rel='alternate' type='text/html' href='https://git.infraroot.at/squashfs-tools-ng.git/'/>
<updated>2020-08-26T16:23:35+00:00</updated>
<entry>
<title>Fix rdsquashfs unpack under Windows if a directory exists</title>
<updated>2020-08-26T16:23:35+00:00</updated>
<author>
<name>David Oberhollenzer</name>
<email>david.oberhollenzer@sigma-star.at</email>
</author>
<published>2020-08-26T16:23:35+00:00</published>
<link rel='alternate' type='text/html' href='https://git.infraroot.at/squashfs-tools-ng.git/commit/?id=4afd9632251a8c050a44e8cad8fc2ccc45a35a2a'/>
<id>urn:sha1:4afd9632251a8c050a44e8cad8fc2ccc45a35a2a</id>
<content type='text'>
Behave the same way as the POSIX port and do not treat
that as an error.

Signed-off-by: David Oberhollenzer &lt;david.oberhollenzer@sigma-star.at&gt;
</content>
</entry>
<entry>
<title>Add a "--stat" option to rdsquashfs</title>
<updated>2020-08-11T22:25:34+00:00</updated>
<author>
<name>David Oberhollenzer</name>
<email>david.oberhollenzer@sigma-star.at</email>
</author>
<published>2020-08-10T14:16:39+00:00</published>
<link rel='alternate' type='text/html' href='https://git.infraroot.at/squashfs-tools-ng.git/commit/?id=1f2342c6e89280a21c2e1c665803aae0e42185cb'/>
<id>urn:sha1:1f2342c6e89280a21c2e1c665803aae0e42185cb</id>
<content type='text'>
This commit adds a --stat option to rdsquashfs that dumps a lot of
information about and inode that tunred out to be usefull in
debugging.

Signed-off-by: David Oberhollenzer &lt;david.oberhollenzer@sigma-star.at&gt;
</content>
</entry>
<entry>
<title>Add flags to functions that might logically be expanded in the future</title>
<updated>2020-06-11T13:36:08+00:00</updated>
<author>
<name>David Oberhollenzer</name>
<email>david.oberhollenzer@sigma-star.at</email>
</author>
<published>2020-06-10T23:57:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.infraroot.at/squashfs-tools-ng.git/commit/?id=259a98985b4f93347923d1b2c3aaa535397aaa89'/>
<id>urn:sha1:259a98985b4f93347923d1b2c3aaa535397aaa89</id>
<content type='text'>
Signed-off-by: David Oberhollenzer &lt;david.oberhollenzer@sigma-star.at&gt;
</content>
</entry>
<entry>
<title>Replace assert with propper error handling in rdsquashfs describe</title>
<updated>2020-06-07T15:23:51+00:00</updated>
<author>
<name>David Oberhollenzer</name>
<email>david.oberhollenzer@sigma-star.at</email>
</author>
<published>2020-06-07T14:24:47+00:00</published>
<link rel='alternate' type='text/html' href='https://git.infraroot.at/squashfs-tools-ng.git/commit/?id=b96c4240ae6bddb4c929115cbd7d31698d72a5f7'/>
<id>urn:sha1:b96c4240ae6bddb4c929115cbd7d31698d72a5f7</id>
<content type='text'>
If a SquashFS archive contains file names with '..', '/' or similar
nonsense in them, the unpacking code already refuses to process them,
but the 'describe' code path simply triggers an assert that might not
be there if the binary was compiled with NDEBUG defined.

This commit replaces the assert with propper error handling that also
reports on why things are failing and adds an additional check in the
describe_tree function that tests if the file name is sane.

Reported-by: Zachary Dremann &lt;dremann@gmail.com&gt;
Signed-off-by: David Oberhollenzer &lt;david.oberhollenzer@sigma-star.at&gt;
</content>
</entry>
<entry>
<title>Cleanup: Reorganize structure of Automake files</title>
<updated>2020-05-30T15:49:40+00:00</updated>
<author>
<name>David Oberhollenzer</name>
<email>david.oberhollenzer@sigma-star.at</email>
</author>
<published>2020-05-27T13:07:35+00:00</published>
<link rel='alternate' type='text/html' href='https://git.infraroot.at/squashfs-tools-ng.git/commit/?id=e5f99ba93e08e237962bcf337848e60730aa2d54'/>
<id>urn:sha1:e5f99ba93e08e237962bcf337848e60730aa2d54</id>
<content type='text'>
 - Split up the huge file in bin/ into one small file per sub directory
 - Remove the stub in doc/

Signed-off-by: David Oberhollenzer &lt;david.oberhollenzer@sigma-star.at&gt;
</content>
</entry>
<entry>
<title>Cleanup: move man pages to the respective program source directories</title>
<updated>2020-05-30T15:49:40+00:00</updated>
<author>
<name>David Oberhollenzer</name>
<email>david.oberhollenzer@sigma-star.at</email>
</author>
<published>2020-05-27T12:57:48+00:00</published>
<link rel='alternate' type='text/html' href='https://git.infraroot.at/squashfs-tools-ng.git/commit/?id=ceb86b571c1cabf2a0890603b140a1af99912fd9'/>
<id>urn:sha1:ceb86b571c1cabf2a0890603b140a1af99912fd9</id>
<content type='text'>
Signed-off-by: David Oberhollenzer &lt;david.oberhollenzer@sigma-star.at&gt;
</content>
</entry>
<entry>
<title>Fix: use 0644 as default permissions when creating files</title>
<updated>2020-05-02T23:43:11+00:00</updated>
<author>
<name>David Oberhollenzer</name>
<email>david.oberhollenzer@sigma-star.at</email>
</author>
<published>2020-05-02T23:43:11+00:00</published>
<link rel='alternate' type='text/html' href='https://git.infraroot.at/squashfs-tools-ng.git/commit/?id=4f08666b8aafe66d4786158c8f26dec1c540893b'/>
<id>urn:sha1:4f08666b8aafe66d4786158c8f26dec1c540893b</id>
<content type='text'>
Until now, when packing or unpacking a SquashFS image, files where
created with paranoid permissions (i.e. 0600). The rational behind
this was that otherwise, the tools may inadvertently expose secrets,
e.g. if a root user packs files that that aren't world readable,
such as the /etc/shadows file, but the packed SquashFS image is, we
have accidentally leaked this file to other users that can access
the newly created SquashFS image. The same line of reasoning also
applies when unpacking files.

Unfortunately, this breaks a list of other, more common standard use
cases (e.g. a build server where the an image is built by a deamon
running as user X but then has to be accessed by another deamon
running as Y).

This commit changes to a more standard approach of using permissive
file permissions by default and asking paranoid users to simply use
a paranoid umask.

For tar2sqfs &amp; gensquashfs this simply means chaning the default
permissions in the libsquashfs file implementation.

For rdsquashfs on the other hand there is still the use case where
the unpacked files get the permissions from the [secret] image, so
setting a strict umask is not applicable and changing to permissive
file mode leaks something. For this case a second code path needs to
be added that derives the permissions from the ones in the image.

Signed-off-by: David Oberhollenzer &lt;david.oberhollenzer@sigma-star.at&gt;
</content>
</entry>
<entry>
<title>Cleanup directory structure of the binary programs</title>
<updated>2020-04-27T09:59:02+00:00</updated>
<author>
<name>David Oberhollenzer</name>
<email>david.oberhollenzer@sigma-star.at</email>
</author>
<published>2020-04-27T09:59:02+00:00</published>
<link rel='alternate' type='text/html' href='https://git.infraroot.at/squashfs-tools-ng.git/commit/?id=20b0d509f67dea802706cd6b80b5e20d14988931'/>
<id>urn:sha1:20b0d509f67dea802706cd6b80b5e20d14988931</id>
<content type='text'>
Instead of having the binary programs in randomly named subdirectories,
move all of them to a "bin" subdirectory, similar to the utility
libraries that have subdirectories within "lib" and give the
subdirectories the propper names (e.g. have gensquashfs source in a
directory *actually* named "gensquashfs").

Signed-off-by: David Oberhollenzer &lt;david.oberhollenzer@sigma-star.at&gt;
</content>
</entry>
</feed>
