Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-02-10 | README: document the two other main commands | Michał Górny | |
2018-02-10 | README: update requirements | Michał Górny | |
2018-02-10 | Attempt to improve exception portability for py2 unicode | Michał Górny | |
2018-02-10 | cli: Fix typo in logging | Michał Górny | |
2018-02-10 | cli: Add helper openpgp-verify command | Michał Górny | |
2018-02-10 | cli: Abstract refreshing keys out to separate class | Michał Górny | |
2018-02-10 | cli: Add utility 'hash' command to hash files | Michał Górny | |
2018-02-10 | manifest: Remove unnecessary assertion preventing absolute paths | Michał Górny | |
2018-02-10 | cli: Add __slots__ to remaining classes | Michał Górny | |
2018-02-10 | cli: Split common update args into a base class | Michał Górny | |
2018-02-10 | cli: Correct the description of default path in create | Michał Górny | |
2018-02-10 | cli: Split common OpenPGP logic into a base class | Michał Górny | |
2018-02-10 | cli: Split argument processing into separate method | Michał Górny | |
2018-02-09 | cli: Start abstracting out commands into objects | Michał Górny | |
2018-02-09 | Bump to 11.1 | Michał Górny | |
2018-02-09 | Restore allow_xdev default to false for bugfix release | Michał Górny | |
2018-02-08 | recursiveloader: Allow cross-device processing by default | Michał Górny | |
2018-02-08 | recursiveloader: Control storing Manifest device explicitly | Michał Górny | |
Add an explicit keyword argument to control when st_dev of Manifest is stored as Manifest device. It does not make any real difference at the moment (since st_dev of sub-Manifests is forced to match that of top Manifest) but it will be useful in the future. | |||
2018-02-08 | find_top_level: Support crossing filesystem boundaries | Michał Górny | |
Default to allow crossing filesystem boundaries when looking for top-level Manifest. There is no real reason to prevent that, and it breaks the verification for overlayfs users. | |||
2018-02-08 | find_top_level: Remove broken cross-device test | Michał Górny | |
Remove the cross-device test that wrongly assumed we will be traversing logical parent directories rather than physical. In other words, '..' in the symlinked filesystem will never contain the Manifest file. | |||
2018-02-08 | find_top_level: Remove duplicate m_path declaration | Michał Górny | |
2018-02-08 | openpgp: Do not wipe the environment in isolated mode | Michał Górny | |
Do not wipe the complete environment when running in isolated mode as this had unintended side effect of wiping PATH. Since there is no real reasons to pursue a proper whitelist for this, just preserve the environment while overriding GNUPGHOME and TZ appropriately. | |||
2018-02-08 | openpgp: Fix duplicate message in key import/refresh exceptions | Michał Górny | |
2018-02-03 | tox: Fix collecting coverage for multiprocessing | Michał Górny | |
2018-02-02 | Bump to v11.0 | Michał Górny | |
2018-02-02 | recursiveloader: Detect symlink loops explicitly | Michał Górny | |
2018-02-02 | recursiveloader: Check for cross-device directories earlier in loop | Michał Górny | |
Check for cross-device directory when starting to process the directory rather than for each subdirectory to be processed. This will avoid double stat() call in the future. It also means that cross-device exceptions are raised a little later, when recurring into the directory rather than before doing that. However, the starting directory is now also tested. | |||
2018-02-02 | recursiveloader: Do not recur into directories when file was expected | Michał Górny | |
When verifying, do not let os.walk() recur into a directory for which we have an entry requesting it to be a file. The verification is going to fail on the directory entry anyway, so there is no point in seeking matches further and this could have currently resulted in crossing filesystem boundaries (since the cross-fs test is deferred to verifying thread). | |||
2018-02-02 | openpgp: Fix handling OpenPGPNoImplementation in tests | Michał Górny | |
2018-02-01 | cli: Unify exception handling and fix it to catch all gemato exceptions | Michał Górny | |
2018-02-01 | openpgp: Use assertion for home-after-close() | Michał Górny | |
2018-02-01 | openpgp: Replace RuntimeError with dedicated for import/refresh errors | Michał Górny | |
2018-02-01 | exceptions: Add a base OpenPGPRuntimeError class | Michał Górny | |
2018-02-01 | exceptions: Add a GematoException base class for all custom exceptions | Michał Górny | |
2018-02-01 | openpgp: Add tests for expired signature | Michał Górny | |
2018-02-01 | manifest: Remove unused openpgp module import | Michał Górny | |
2018-02-01 | cli: Fix missing explicit imports | Michał Górny | |
2018-01-30 | openpgp: Set trust-model via config file | Michał Górny | |
2018-01-25 | Bump to 10.3 | Michał Górny | |
2018-01-25 | openpgp: Fix reading time_t timestamps as UTC | Michał Górny | |
2018-01-24 | Bump to 10.2 | Michał Górny | |
2018-01-24 | openpgp: Fix GnuPG use to report UTC timestamps | Michał Górny | |
2018-01-24 | Bump to 10.1 | Michał Górny | |
2018-01-24 | cli: Print Manifest timestamp as well | Michał Górny | |
2018-01-24 | cli: Print OpenPGP signature info when verifying | Michał Górny | |
2018-01-24 | Expose Manifest signature data in Manifest classes | Michał Górny | |
2018-01-24 | openpgp: Return basic signature data when verifying signatures | Michał Górny | |
2018-01-24 | openpgp: Refactor status processing not to stop on GOODSIG | Michał Górny | |
2018-01-23 | Bump to v10.0 | Michał Górny | |
2018-01-19 | Refresh OpenPGP keys before verification | Michał Górny | |
Always refresh OpenPGP keys before starting the verification process. This ensures that the key has not been revoked, and also reduces the risk of using an expired key. |