Compare commits
10 Commits
75fe572f4c
...
7b5714e8f5
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
7b5714e8f5 | ||
|
|
87a33d38ca | ||
|
|
aa36a0bdd5 | ||
|
|
fcc4042ef9 | ||
|
|
ef1279a664 | ||
|
|
022bab8684 | ||
|
|
10477490fe | ||
|
|
8402478af9 | ||
|
|
adca5dde06 | ||
|
|
dc932ea4d4 |
34
CVE-2024-23301.patch
Normal file
34
CVE-2024-23301.patch
Normal file
@ -0,0 +1,34 @@
|
|||||||
|
From 89b61793d80bc2cb2abe47a7d0549466fb087d16 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Johannes Meixner <jsmeix@suse.com>
|
||||||
|
Date: Fri, 12 Jan 2024 08:04:40 +0100
|
||||||
|
Subject: [PATCH] Make initrd accessible only by root (#3123)
|
||||||
|
|
||||||
|
Origin: https://github.com/rear/rear/commit/89b61793d80bc2cb2abe47a7d0549466fb087d16
|
||||||
|
|
||||||
|
In pack/GNU/Linux/900_create_initramfs.sh call
|
||||||
|
chmod 0600 "$TMP_DIR/$REAR_INITRD_FILENAME"
|
||||||
|
to let only 'root' access the ReaR initrd because
|
||||||
|
the ReaR recovery system in the initrd can contain secrets
|
||||||
|
(not by default but when certain things are explicitly
|
||||||
|
configured by the user like SSH keys without passphrase)
|
||||||
|
see https://github.com/rear/rear/issues/3122
|
||||||
|
and https://bugzilla.opensuse.org/show_bug.cgi?id=1218728
|
||||||
|
---
|
||||||
|
usr/share/rear/pack/GNU/Linux/900_create_initramfs.sh | 6 ++++++
|
||||||
|
1 file changed, 6 insertions(+)
|
||||||
|
|
||||||
|
diff --git a/usr/share/rear/pack/GNU/Linux/900_create_initramfs.sh b/usr/share/rear/pack/GNU/Linux/900_create_initramfs.sh
|
||||||
|
index 1e0c11039..12be718ed 100644
|
||||||
|
--- a/usr/share/rear/pack/GNU/Linux/900_create_initramfs.sh
|
||||||
|
+++ b/usr/share/rear/pack/GNU/Linux/900_create_initramfs.sh
|
||||||
|
@@ -125,4 +125,10 @@ case "$REAR_INITRD_COMPRESSION" in
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
+
|
||||||
|
+# Only root should be allowed to access the initrd
|
||||||
|
+# because the ReaR recovery system can contain secrets
|
||||||
|
+# cf. https://github.com/rear/rear/issues/3122
|
||||||
|
+test -s "$TMP_DIR/$REAR_INITRD_FILENAME" && chmod 0600 "$TMP_DIR/$REAR_INITRD_FILENAME"
|
||||||
|
+
|
||||||
|
popd >/dev/null
|
||||||
36
README.en.md
36
README.en.md
@ -1,36 +0,0 @@
|
|||||||
# rear
|
|
||||||
|
|
||||||
#### Description
|
|
||||||
{**When you're done, you can delete the content in this README and update the file with details for others getting started with your repository**}
|
|
||||||
|
|
||||||
#### Software Architecture
|
|
||||||
Software architecture description
|
|
||||||
|
|
||||||
#### Installation
|
|
||||||
|
|
||||||
1. xxxx
|
|
||||||
2. xxxx
|
|
||||||
3. xxxx
|
|
||||||
|
|
||||||
#### Instructions
|
|
||||||
|
|
||||||
1. xxxx
|
|
||||||
2. xxxx
|
|
||||||
3. xxxx
|
|
||||||
|
|
||||||
#### Contribution
|
|
||||||
|
|
||||||
1. Fork the repository
|
|
||||||
2. Create Feat_xxx branch
|
|
||||||
3. Commit your code
|
|
||||||
4. Create Pull Request
|
|
||||||
|
|
||||||
|
|
||||||
#### Gitee Feature
|
|
||||||
|
|
||||||
1. You can use Readme\_XXX.md to support different languages, such as Readme\_en.md, Readme\_zh.md
|
|
||||||
2. Gitee blog [blog.gitee.com](https://blog.gitee.com)
|
|
||||||
3. Explore open source project [https://gitee.com/explore](https://gitee.com/explore)
|
|
||||||
4. The most valuable open source project [GVP](https://gitee.com/gvp)
|
|
||||||
5. The manual of Gitee [https://gitee.com/help](https://gitee.com/help)
|
|
||||||
6. The most popular members [https://gitee.com/gitee-stars/](https://gitee.com/gitee-stars/)
|
|
||||||
39
README.md
39
README.md
@ -1,39 +0,0 @@
|
|||||||
# rear
|
|
||||||
|
|
||||||
#### 介绍
|
|
||||||
{**以下是码云平台说明,您可以替换此简介**
|
|
||||||
码云是 OSCHINA 推出的基于 Git 的代码托管平台(同时支持 SVN)。专为开发者提供稳定、高效、安全的云端软件开发协作平台
|
|
||||||
无论是个人、团队、或是企业,都能够用码云实现代码托管、项目管理、协作开发。企业项目请看 [https://gitee.com/enterprises](https://gitee.com/enterprises)}
|
|
||||||
|
|
||||||
#### 软件架构
|
|
||||||
软件架构说明
|
|
||||||
|
|
||||||
|
|
||||||
#### 安装教程
|
|
||||||
|
|
||||||
1. xxxx
|
|
||||||
2. xxxx
|
|
||||||
3. xxxx
|
|
||||||
|
|
||||||
#### 使用说明
|
|
||||||
|
|
||||||
1. xxxx
|
|
||||||
2. xxxx
|
|
||||||
3. xxxx
|
|
||||||
|
|
||||||
#### 参与贡献
|
|
||||||
|
|
||||||
1. Fork 本仓库
|
|
||||||
2. 新建 Feat_xxx 分支
|
|
||||||
3. 提交代码
|
|
||||||
4. 新建 Pull Request
|
|
||||||
|
|
||||||
|
|
||||||
#### 码云特技
|
|
||||||
|
|
||||||
1. 使用 Readme\_XXX.md 来支持不同的语言,例如 Readme\_en.md, Readme\_zh.md
|
|
||||||
2. 码云官方博客 [blog.gitee.com](https://blog.gitee.com)
|
|
||||||
3. 你可以 [https://gitee.com/explore](https://gitee.com/explore) 这个地址来了解码云上的优秀开源项目
|
|
||||||
4. [GVP](https://gitee.com/gvp) 全称是码云最有价值开源项目,是码云综合评定出的优秀开源项目
|
|
||||||
5. 码云官方提供的使用手册 [https://gitee.com/help](https://gitee.com/help)
|
|
||||||
6. 码云封面人物是一档用来展示码云会员风采的栏目 [https://gitee.com/gitee-stars/](https://gitee.com/gitee-stars/)
|
|
||||||
BIN
rear-2.4.tar.gz
Normal file
BIN
rear-2.4.tar.gz
Normal file
Binary file not shown.
72
rear.spec
Normal file
72
rear.spec
Normal file
@ -0,0 +1,72 @@
|
|||||||
|
%define debug_package %{nil}
|
||||||
|
|
||||||
|
Name: rear
|
||||||
|
Version: 2.4
|
||||||
|
Release: 6
|
||||||
|
License: GPLv3
|
||||||
|
Summary: Relax-and-Recover is a setup-and-forget Linux bare metal disaster recovery solution
|
||||||
|
URL: http://relax-and-recover.org/
|
||||||
|
Source0: https://sourceforge.net/projects/rear/files/rear/%{version}/rear-%{version}.tar.gz
|
||||||
|
Patch0: CVE-2024-23301.patch
|
||||||
|
ExclusiveArch: x86_64 loongarch64 ppc64le
|
||||||
|
Requires: binutils ethtool gzip iputils parted tar openssl gawk attr bc crontabs iproute
|
||||||
|
Requires: genisoimage util-linux
|
||||||
|
%ifarch x86_64 i686
|
||||||
|
Requires: syslinux
|
||||||
|
%endif
|
||||||
|
BuildRoot: %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX)
|
||||||
|
|
||||||
|
%description
|
||||||
|
Relax-and-Recover is a setup-and-forget Linux bare metal disaster recovery solution. It is easy to
|
||||||
|
set up and requires no maintenance so there is no excuse for not using it.
|
||||||
|
|
||||||
|
%package help
|
||||||
|
Summary: Help document for the rear
|
||||||
|
Buildarch: noarch
|
||||||
|
|
||||||
|
%description help
|
||||||
|
Help document for the rear package.
|
||||||
|
|
||||||
|
%pre
|
||||||
|
if [ $1 -gt 1 ] ; then
|
||||||
|
rm -rf %{_datadir}/rear/output/NETFS
|
||||||
|
fi
|
||||||
|
|
||||||
|
%prep
|
||||||
|
%autosetup -p1
|
||||||
|
|
||||||
|
%build
|
||||||
|
|
||||||
|
%install
|
||||||
|
rm -rf %{buildroot}
|
||||||
|
make install DESTDIR="%{buildroot}"
|
||||||
|
echo "30 1 * * * root /usr/sbin/rear checklayout || /usr/sbin/rear mkrescue" > rear.cron
|
||||||
|
install -Dp -m 0644 rear.cron %{buildroot}%{_sysconfdir}/cron.d/rear
|
||||||
|
|
||||||
|
%clean
|
||||||
|
rm -rf %{buildroot}
|
||||||
|
|
||||||
|
%files
|
||||||
|
%doc MAINTAINERS COPYING README.adoc doc/*.txt
|
||||||
|
%config(noreplace) %{_sysconfdir}/cron.d/rear
|
||||||
|
%config(noreplace) %{_sysconfdir}/rear/
|
||||||
|
%config(noreplace) %{_sysconfdir}/rear/cert/
|
||||||
|
%{_datadir}/rear/
|
||||||
|
%{_localstatedir}/lib/rear/
|
||||||
|
%{_sbindir}/rear
|
||||||
|
|
||||||
|
%files help
|
||||||
|
%doc %{_mandir}/man8/rear.8*
|
||||||
|
|
||||||
|
%changelog
|
||||||
|
* Tue Mar 5 2024 yinxiulin <xiulin.yin@shingroup.cn> - 2.4-6
|
||||||
|
- Add ppc64le support
|
||||||
|
|
||||||
|
* Mon Jan 15 2024 wangkai <13474090681@163.com> - 2.4-5
|
||||||
|
- Fix CVE-2024-23301 and only x86 require syslinux
|
||||||
|
|
||||||
|
* Tue Nov 15 2022 huajingyun <huajingyun@loongson.cn> - 2.4-4
|
||||||
|
- Add loongarch64 support
|
||||||
|
|
||||||
|
* Wed Feb 26 2020 Ling Yang <lingyang2@huawei.com> - 2.4-3
|
||||||
|
- Package Init
|
||||||
Loading…
x
Reference in New Issue
Block a user