Compare commits

...

10 Commits

Author SHA1 Message Date
openeuler-ci-bot
7b5714e8f5
!22 Add ppc64le support
From: @yinxiulin 
Reviewed-by: @wang--ge 
Signed-off-by: @wang--ge
2024-03-06 07:13:43 +00:00
yinxiulin
87a33d38ca Add ppc64le support 2024-03-05 16:49:30 +08:00
openeuler-ci-bot
aa36a0bdd5
!15 Fix CVE-2024-23301 and only x86 require syslinux
From: @wk333 
Reviewed-by: @wang--ge 
Signed-off-by: @wang--ge
2024-01-15 08:05:21 +00:00
wk333
fcc4042ef9 Fix CVE-2024-23301 and only x86 require syslinux 2024-01-15 15:23:42 +08:00
openeuler-ci-bot
ef1279a664 !3 modify yaml
Merge pull request !3 from 成子晗/master
2020-07-17 15:13:26 +08:00
chengzihan2
022bab8684 modify yaml 2020-07-17 14:37:37 +08:00
openeuler-ci-bot
10477490fe !2 add yaml file
Merge pull request !2 from sugarfillet/master
2020-05-19 09:42:39 +08:00
sugarfillet
8402478af9 add yaml file 2020-05-08 16:01:29 +08:00
openeuler-ci-bot
adca5dde06 !1 rear: Package init
Merge pull request !1 from gnaygnil/master
2020-02-28 20:02:39 +08:00
gnaygnil
dc932ea4d4 rear: Package init 2020-02-28 19:53:51 +08:00
6 changed files with 110 additions and 75 deletions

34
CVE-2024-23301.patch Normal file
View File

@ -0,0 +1,34 @@
From 89b61793d80bc2cb2abe47a7d0549466fb087d16 Mon Sep 17 00:00:00 2001
From: Johannes Meixner <jsmeix@suse.com>
Date: Fri, 12 Jan 2024 08:04:40 +0100
Subject: [PATCH] Make initrd accessible only by root (#3123)
Origin: https://github.com/rear/rear/commit/89b61793d80bc2cb2abe47a7d0549466fb087d16
In pack/GNU/Linux/900_create_initramfs.sh call
chmod 0600 "$TMP_DIR/$REAR_INITRD_FILENAME"
to let only 'root' access the ReaR initrd because
the ReaR recovery system in the initrd can contain secrets
(not by default but when certain things are explicitly
configured by the user like SSH keys without passphrase)
see https://github.com/rear/rear/issues/3122
and https://bugzilla.opensuse.org/show_bug.cgi?id=1218728
---
usr/share/rear/pack/GNU/Linux/900_create_initramfs.sh | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/usr/share/rear/pack/GNU/Linux/900_create_initramfs.sh b/usr/share/rear/pack/GNU/Linux/900_create_initramfs.sh
index 1e0c11039..12be718ed 100644
--- a/usr/share/rear/pack/GNU/Linux/900_create_initramfs.sh
+++ b/usr/share/rear/pack/GNU/Linux/900_create_initramfs.sh
@@ -125,4 +125,10 @@ case "$REAR_INITRD_COMPRESSION" in
fi
;;
esac
+
+# Only root should be allowed to access the initrd
+# because the ReaR recovery system can contain secrets
+# cf. https://github.com/rear/rear/issues/3122
+test -s "$TMP_DIR/$REAR_INITRD_FILENAME" && chmod 0600 "$TMP_DIR/$REAR_INITRD_FILENAME"
+
popd >/dev/null

View File

@ -1,36 +0,0 @@
# rear
#### Description
{**When you're done, you can delete the content in this README and update the file with details for others getting started with your repository**}
#### Software Architecture
Software architecture description
#### Installation
1. xxxx
2. xxxx
3. xxxx
#### Instructions
1. xxxx
2. xxxx
3. xxxx
#### Contribution
1. Fork the repository
2. Create Feat_xxx branch
3. Commit your code
4. Create Pull Request
#### Gitee Feature
1. You can use Readme\_XXX.md to support different languages, such as Readme\_en.md, Readme\_zh.md
2. Gitee blog [blog.gitee.com](https://blog.gitee.com)
3. Explore open source project [https://gitee.com/explore](https://gitee.com/explore)
4. The most valuable open source project [GVP](https://gitee.com/gvp)
5. The manual of Gitee [https://gitee.com/help](https://gitee.com/help)
6. The most popular members [https://gitee.com/gitee-stars/](https://gitee.com/gitee-stars/)

View File

@ -1,39 +0,0 @@
# rear
#### 介绍
{**以下是码云平台说明,您可以替换此简介**
码云是 OSCHINA 推出的基于 Git 的代码托管平台(同时支持 SVN。专为开发者提供稳定、高效、安全的云端软件开发协作平台
无论是个人、团队、或是企业,都能够用码云实现代码托管、项目管理、协作开发。企业项目请看 [https://gitee.com/enterprises](https://gitee.com/enterprises)}
#### 软件架构
软件架构说明
#### 安装教程
1. xxxx
2. xxxx
3. xxxx
#### 使用说明
1. xxxx
2. xxxx
3. xxxx
#### 参与贡献
1. Fork 本仓库
2. 新建 Feat_xxx 分支
3. 提交代码
4. 新建 Pull Request
#### 码云特技
1. 使用 Readme\_XXX.md 来支持不同的语言,例如 Readme\_en.md, Readme\_zh.md
2. 码云官方博客 [blog.gitee.com](https://blog.gitee.com)
3. 你可以 [https://gitee.com/explore](https://gitee.com/explore) 这个地址来了解码云上的优秀开源项目
4. [GVP](https://gitee.com/gvp) 全称是码云最有价值开源项目,是码云综合评定出的优秀开源项目
5. 码云官方提供的使用手册 [https://gitee.com/help](https://gitee.com/help)
6. 码云封面人物是一档用来展示码云会员风采的栏目 [https://gitee.com/gitee-stars/](https://gitee.com/gitee-stars/)

BIN
rear-2.4.tar.gz Normal file

Binary file not shown.

72
rear.spec Normal file
View File

@ -0,0 +1,72 @@
%define debug_package %{nil}
Name: rear
Version: 2.4
Release: 6
License: GPLv3
Summary: Relax-and-Recover is a setup-and-forget Linux bare metal disaster recovery solution
URL: http://relax-and-recover.org/
Source0: https://sourceforge.net/projects/rear/files/rear/%{version}/rear-%{version}.tar.gz
Patch0: CVE-2024-23301.patch
ExclusiveArch: x86_64 loongarch64 ppc64le
Requires: binutils ethtool gzip iputils parted tar openssl gawk attr bc crontabs iproute
Requires: genisoimage util-linux
%ifarch x86_64 i686
Requires: syslinux
%endif
BuildRoot: %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX)
%description
Relax-and-Recover is a setup-and-forget Linux bare metal disaster recovery solution. It is easy to
set up and requires no maintenance so there is no excuse for not using it.
%package help
Summary: Help document for the rear
Buildarch: noarch
%description help
Help document for the rear package.
%pre
if [ $1 -gt 1 ] ; then
rm -rf %{_datadir}/rear/output/NETFS
fi
%prep
%autosetup -p1
%build
%install
rm -rf %{buildroot}
make install DESTDIR="%{buildroot}"
echo "30 1 * * * root /usr/sbin/rear checklayout || /usr/sbin/rear mkrescue" > rear.cron
install -Dp -m 0644 rear.cron %{buildroot}%{_sysconfdir}/cron.d/rear
%clean
rm -rf %{buildroot}
%files
%doc MAINTAINERS COPYING README.adoc doc/*.txt
%config(noreplace) %{_sysconfdir}/cron.d/rear
%config(noreplace) %{_sysconfdir}/rear/
%config(noreplace) %{_sysconfdir}/rear/cert/
%{_datadir}/rear/
%{_localstatedir}/lib/rear/
%{_sbindir}/rear
%files help
%doc %{_mandir}/man8/rear.8*
%changelog
* Tue Mar 5 2024 yinxiulin <xiulin.yin@shingroup.cn> - 2.4-6
- Add ppc64le support
* Mon Jan 15 2024 wangkai <13474090681@163.com> - 2.4-5
- Fix CVE-2024-23301 and only x86 require syslinux
* Tue Nov 15 2022 huajingyun <huajingyun@loongson.cn> - 2.4-4
- Add loongarch64 support
* Wed Feb 26 2020 Ling Yang <lingyang2@huawei.com> - 2.4-3
- Package Init

4
rear.yaml Normal file
View File

@ -0,0 +1,4 @@
version_control: github
src_repo: rear/rear
tag_prefix: "^"
seperator: "."