Compare commits
10 Commits
75fe572f4c
...
7b5714e8f5
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
7b5714e8f5 | ||
|
|
87a33d38ca | ||
|
|
aa36a0bdd5 | ||
|
|
fcc4042ef9 | ||
|
|
ef1279a664 | ||
|
|
022bab8684 | ||
|
|
10477490fe | ||
|
|
8402478af9 | ||
|
|
adca5dde06 | ||
|
|
dc932ea4d4 |
34
CVE-2024-23301.patch
Normal file
34
CVE-2024-23301.patch
Normal file
@ -0,0 +1,34 @@
|
||||
From 89b61793d80bc2cb2abe47a7d0549466fb087d16 Mon Sep 17 00:00:00 2001
|
||||
From: Johannes Meixner <jsmeix@suse.com>
|
||||
Date: Fri, 12 Jan 2024 08:04:40 +0100
|
||||
Subject: [PATCH] Make initrd accessible only by root (#3123)
|
||||
|
||||
Origin: https://github.com/rear/rear/commit/89b61793d80bc2cb2abe47a7d0549466fb087d16
|
||||
|
||||
In pack/GNU/Linux/900_create_initramfs.sh call
|
||||
chmod 0600 "$TMP_DIR/$REAR_INITRD_FILENAME"
|
||||
to let only 'root' access the ReaR initrd because
|
||||
the ReaR recovery system in the initrd can contain secrets
|
||||
(not by default but when certain things are explicitly
|
||||
configured by the user like SSH keys without passphrase)
|
||||
see https://github.com/rear/rear/issues/3122
|
||||
and https://bugzilla.opensuse.org/show_bug.cgi?id=1218728
|
||||
---
|
||||
usr/share/rear/pack/GNU/Linux/900_create_initramfs.sh | 6 ++++++
|
||||
1 file changed, 6 insertions(+)
|
||||
|
||||
diff --git a/usr/share/rear/pack/GNU/Linux/900_create_initramfs.sh b/usr/share/rear/pack/GNU/Linux/900_create_initramfs.sh
|
||||
index 1e0c11039..12be718ed 100644
|
||||
--- a/usr/share/rear/pack/GNU/Linux/900_create_initramfs.sh
|
||||
+++ b/usr/share/rear/pack/GNU/Linux/900_create_initramfs.sh
|
||||
@@ -125,4 +125,10 @@ case "$REAR_INITRD_COMPRESSION" in
|
||||
fi
|
||||
;;
|
||||
esac
|
||||
+
|
||||
+# Only root should be allowed to access the initrd
|
||||
+# because the ReaR recovery system can contain secrets
|
||||
+# cf. https://github.com/rear/rear/issues/3122
|
||||
+test -s "$TMP_DIR/$REAR_INITRD_FILENAME" && chmod 0600 "$TMP_DIR/$REAR_INITRD_FILENAME"
|
||||
+
|
||||
popd >/dev/null
|
||||
36
README.en.md
36
README.en.md
@ -1,36 +0,0 @@
|
||||
# rear
|
||||
|
||||
#### Description
|
||||
{**When you're done, you can delete the content in this README and update the file with details for others getting started with your repository**}
|
||||
|
||||
#### Software Architecture
|
||||
Software architecture description
|
||||
|
||||
#### Installation
|
||||
|
||||
1. xxxx
|
||||
2. xxxx
|
||||
3. xxxx
|
||||
|
||||
#### Instructions
|
||||
|
||||
1. xxxx
|
||||
2. xxxx
|
||||
3. xxxx
|
||||
|
||||
#### Contribution
|
||||
|
||||
1. Fork the repository
|
||||
2. Create Feat_xxx branch
|
||||
3. Commit your code
|
||||
4. Create Pull Request
|
||||
|
||||
|
||||
#### Gitee Feature
|
||||
|
||||
1. You can use Readme\_XXX.md to support different languages, such as Readme\_en.md, Readme\_zh.md
|
||||
2. Gitee blog [blog.gitee.com](https://blog.gitee.com)
|
||||
3. Explore open source project [https://gitee.com/explore](https://gitee.com/explore)
|
||||
4. The most valuable open source project [GVP](https://gitee.com/gvp)
|
||||
5. The manual of Gitee [https://gitee.com/help](https://gitee.com/help)
|
||||
6. The most popular members [https://gitee.com/gitee-stars/](https://gitee.com/gitee-stars/)
|
||||
39
README.md
39
README.md
@ -1,39 +0,0 @@
|
||||
# rear
|
||||
|
||||
#### 介绍
|
||||
{**以下是码云平台说明,您可以替换此简介**
|
||||
码云是 OSCHINA 推出的基于 Git 的代码托管平台(同时支持 SVN)。专为开发者提供稳定、高效、安全的云端软件开发协作平台
|
||||
无论是个人、团队、或是企业,都能够用码云实现代码托管、项目管理、协作开发。企业项目请看 [https://gitee.com/enterprises](https://gitee.com/enterprises)}
|
||||
|
||||
#### 软件架构
|
||||
软件架构说明
|
||||
|
||||
|
||||
#### 安装教程
|
||||
|
||||
1. xxxx
|
||||
2. xxxx
|
||||
3. xxxx
|
||||
|
||||
#### 使用说明
|
||||
|
||||
1. xxxx
|
||||
2. xxxx
|
||||
3. xxxx
|
||||
|
||||
#### 参与贡献
|
||||
|
||||
1. Fork 本仓库
|
||||
2. 新建 Feat_xxx 分支
|
||||
3. 提交代码
|
||||
4. 新建 Pull Request
|
||||
|
||||
|
||||
#### 码云特技
|
||||
|
||||
1. 使用 Readme\_XXX.md 来支持不同的语言,例如 Readme\_en.md, Readme\_zh.md
|
||||
2. 码云官方博客 [blog.gitee.com](https://blog.gitee.com)
|
||||
3. 你可以 [https://gitee.com/explore](https://gitee.com/explore) 这个地址来了解码云上的优秀开源项目
|
||||
4. [GVP](https://gitee.com/gvp) 全称是码云最有价值开源项目,是码云综合评定出的优秀开源项目
|
||||
5. 码云官方提供的使用手册 [https://gitee.com/help](https://gitee.com/help)
|
||||
6. 码云封面人物是一档用来展示码云会员风采的栏目 [https://gitee.com/gitee-stars/](https://gitee.com/gitee-stars/)
|
||||
BIN
rear-2.4.tar.gz
Normal file
BIN
rear-2.4.tar.gz
Normal file
Binary file not shown.
72
rear.spec
Normal file
72
rear.spec
Normal file
@ -0,0 +1,72 @@
|
||||
%define debug_package %{nil}
|
||||
|
||||
Name: rear
|
||||
Version: 2.4
|
||||
Release: 6
|
||||
License: GPLv3
|
||||
Summary: Relax-and-Recover is a setup-and-forget Linux bare metal disaster recovery solution
|
||||
URL: http://relax-and-recover.org/
|
||||
Source0: https://sourceforge.net/projects/rear/files/rear/%{version}/rear-%{version}.tar.gz
|
||||
Patch0: CVE-2024-23301.patch
|
||||
ExclusiveArch: x86_64 loongarch64 ppc64le
|
||||
Requires: binutils ethtool gzip iputils parted tar openssl gawk attr bc crontabs iproute
|
||||
Requires: genisoimage util-linux
|
||||
%ifarch x86_64 i686
|
||||
Requires: syslinux
|
||||
%endif
|
||||
BuildRoot: %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX)
|
||||
|
||||
%description
|
||||
Relax-and-Recover is a setup-and-forget Linux bare metal disaster recovery solution. It is easy to
|
||||
set up and requires no maintenance so there is no excuse for not using it.
|
||||
|
||||
%package help
|
||||
Summary: Help document for the rear
|
||||
Buildarch: noarch
|
||||
|
||||
%description help
|
||||
Help document for the rear package.
|
||||
|
||||
%pre
|
||||
if [ $1 -gt 1 ] ; then
|
||||
rm -rf %{_datadir}/rear/output/NETFS
|
||||
fi
|
||||
|
||||
%prep
|
||||
%autosetup -p1
|
||||
|
||||
%build
|
||||
|
||||
%install
|
||||
rm -rf %{buildroot}
|
||||
make install DESTDIR="%{buildroot}"
|
||||
echo "30 1 * * * root /usr/sbin/rear checklayout || /usr/sbin/rear mkrescue" > rear.cron
|
||||
install -Dp -m 0644 rear.cron %{buildroot}%{_sysconfdir}/cron.d/rear
|
||||
|
||||
%clean
|
||||
rm -rf %{buildroot}
|
||||
|
||||
%files
|
||||
%doc MAINTAINERS COPYING README.adoc doc/*.txt
|
||||
%config(noreplace) %{_sysconfdir}/cron.d/rear
|
||||
%config(noreplace) %{_sysconfdir}/rear/
|
||||
%config(noreplace) %{_sysconfdir}/rear/cert/
|
||||
%{_datadir}/rear/
|
||||
%{_localstatedir}/lib/rear/
|
||||
%{_sbindir}/rear
|
||||
|
||||
%files help
|
||||
%doc %{_mandir}/man8/rear.8*
|
||||
|
||||
%changelog
|
||||
* Tue Mar 5 2024 yinxiulin <xiulin.yin@shingroup.cn> - 2.4-6
|
||||
- Add ppc64le support
|
||||
|
||||
* Mon Jan 15 2024 wangkai <13474090681@163.com> - 2.4-5
|
||||
- Fix CVE-2024-23301 and only x86 require syslinux
|
||||
|
||||
* Tue Nov 15 2022 huajingyun <huajingyun@loongson.cn> - 2.4-4
|
||||
- Add loongarch64 support
|
||||
|
||||
* Wed Feb 26 2020 Ling Yang <lingyang2@huawei.com> - 2.4-3
|
||||
- Package Init
|
||||
Loading…
x
Reference in New Issue
Block a user