Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 886017 - app-alternatives/{awk,bc,bzip2,cpio,gzip,lex,sh,tar,yacc}: stabilisation
Summary: app-alternatives/{awk,bc,bzip2,cpio,gzip,lex,sh,tar,yacc}: stabilisation
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Stabilization (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo's Team for Core System packages
URL:
Whiteboard:
Keywords: CC-ARCHES, PullRequest, SECURITY
Depends on: 886247
Blocks: EAPI6Removal CVE-2021-38185 868648 868651 886019 886021 888631
  Show dependency tree
 
Reported: 2022-12-15 05:33 UTC by Sam James
Modified: 2023-02-07 01:08 UTC (History)
12 users (show)

See Also:
Package list:
app-arch/bzip2-1.0.8-r4 app-arch/pbzip2-1.1.13 app-alternatives/bzip2-1 sys-devel/bc-1.07.1-r6 sci-calculators/bc-gh-6.1.1-r1 app-alternatives/bc-0 app-arch/cpio-2.13-r4 app-alternatives/cpio-0 sys-apps/gawk-5.2.1 sys-apps/nawk-20220122-r1 sys-apps/busybox-1.34.1-r1 app-alternatives/awk-3 app-arch/gzip-1.12-r3 app-alternatives/gzip-0 sys-devel/flex-2.6.4-r5 sys-devel/reflex-20221012 app-alternatives/lex-0-r1 sys-devel/bison-3.8.2-r2 dev-util/byacc-20221106 dev-util/yacc-1.9.1-r7 app-alternatives/yacc-1-r2 app-alternatives/sh-0 amd64 arm64 arm hppa ppc64 ppc sparc x86 app-shells/ksh-1.0.4 amd64 arm64 arm hppa ppc64 ppc sparc x86 app-shells/mksh-59c amd64 arm64 arm hppa ppc64 ppc sparc x86 app-arch/tar-1.34-r2 app-alternatives/tar-0 app-misc/unfoo-1.0.8-r1 ppc ppc64 x86
Runtime testing required: ---
nattka: sanity-check+


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-12-15 05:33:11 UTC
Filing in preparation so we do it all in sync.
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-12-15 05:37:44 UTC
I've included some first-time stabliisations here so we don't have to package.use.stable.mask in a bunch of places and most of these are pretty useful tools. It'll be nice for users to have more choice on various platforms.
Comment 2 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-12-15 06:10:56 UTC
I've added some detail for users & developers at https://wiki.gentoo.org/wiki/Project:Base/Alternatives.
Comment 3 Larry the Git Cow gentoo-dev 2022-12-27 11:30:15 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/gentoo-news.git/commit/?id=efcbc0f5a17ac5eb27f459b7634ad8794904e6c6

commit efcbc0f5a17ac5eb27f459b7634ad8794904e6c6
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2022-12-24 05:08:21 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2022-12-27 10:48:09 +0000

    2022-12-27-alternatives-introduction: add news item
    
    Bug: https://bugs.gentoo.org/886247
    Bug: https://bugs.gentoo.org/886017
    Signed-off-by: Sam James <sam@gentoo.org>

 .../2022-12-27-alternatives-introduction.en.txt    | 94 ++++++++++++++++++++++
 1 file changed, 94 insertions(+)
Comment 4 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-12-27 11:31:14 UTC
amd64 done
Comment 5 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-12-27 13:39:43 UTC
arm done
Comment 6 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-12-27 13:39:45 UTC
arm64 done
Comment 7 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-12-27 19:37:09 UTC
sparc done
Comment 8 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-12-27 19:37:12 UTC
hppa done
Comment 9 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-12-27 19:47:15 UTC
x86 done
Comment 10 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-12-27 19:47:17 UTC
ppc done
Comment 11 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-12-27 19:47:18 UTC
ppc64 done

all arches done
Comment 12 Larry the Git Cow gentoo-dev 2022-12-28 18:55:43 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=412f08a0980207e1502bf61fff242a041cbd212d

commit 412f08a0980207e1502bf61fff242a041cbd212d
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2022-12-28 15:56:15 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2022-12-28 18:54:09 +0000

    profiles/base: add app-alternatives/{awk,bzip2,gzip,sh,tar} to @system
    
    - Before this commit, nothing pulls in app-alternatives/sh, so we're relying on
      app-shells/bash handling /bin/sh as an orphaned symlink (which is one of the big
      things we're trying to move away from).
    
    - Add in the others (app-alternatives/{awk,bzip2,gzip,tar}) to allow setup
      via /etc/portage/package.use without adding these to @world manually,
      this also lays the ground work for at some point removing specific implementations
      in the future (after making sure ebuilds which need specific impls. depend on them).
    
    - Note that there's two exceptions:
      1. app-alternatives/yacc
    
         No need to explicitly add into @system, because we previously had virtual/yacc
         so it'll get pulled in by ebuild dependencies anyway.
    
      2. app-alternatives/lex
    
         We never had virtual/lex before and packages very often explicitly
         depend on sys-devel/flex. But this isn't a big deal given it's very unlikely
         that a user wants to try modify lex yet and reflex is still very new as an
         option in Gentoo.
    
         That is, as time goes on and we test more to ensure it works with any lex,
         it'll get pulled in as various ebuilds get updated anyway.
    
    - We keep app-arch/bzip2 & app-arch/gzip in @system for now because PMS
      is clear they must be available and I'd rather be conservative for now,
      as we want to get the change in this commit in to minimise disruption
      wrt the app-alternatives migration, but I'd like to revisit this another
      time.
    
    Bug: https://bugs.gentoo.org/886017
    Bug: https://bugs.gentoo.org/886247
    Signed-off-by: Sam James <sam@gentoo.org>

 profiles/base/packages | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)
Comment 13 Larry the Git Cow gentoo-dev 2023-02-07 01:08:50 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/proj/gentoo-functions.git/commit/?id=2a7399e84b2fcb37e9f2e9ec9f7ecd9c60111f3b

commit 2a7399e84b2fcb37e9f2e9ec9f7ecd9c60111f3b
Author:     Kerin Millar <kfm@plushkava.net>
AuthorDate: 2023-02-07 00:39:59 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2023-02-07 01:02:31 +0000

    Re-implement get_bootparam as pure sh, eliminating the gawk dependency
    
    The current implementation of get_bootparam() specifically invokes gawk
    and has some deficiencies, such as failing to inhibit pathname
    expansion and not breaking the loop once a match has been made.
    
    In fact, the problem can be solved using sh(1) alone, and the revised
    function does precisely that. Note that the definition of the function
    is now the kind of compound command that incurs a subshell. Hence, one
    subshell is incurred for the entire routine and there is no compelling
    reason to use the (non-standard) local keyword, nor be concerned with
    the consequences of disabling pathname expansion.
    
    Signed-off-by: Kerin Millar <kfm@plushkava.net>
    Bug: https://bugs.gentoo.org/886017
    Signed-off-by: Sam James <sam@gentoo.org>

 functions.sh | 45 ++++++++++++++++++++-------------------------
 1 file changed, 20 insertions(+), 25 deletions(-)