pool/forgejo
SHA256
8
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
factory
forgejo/forgejo.keyring

65 lines
3.8 KiB
Plaintext
Raw Permalink Normal View History

- move permissions of the log dir and the data dir from forgejo:forgejo u=rwX,g=rwX,o= to forgejo:forgejo u=rwX,g=rX,o= - update apparmor profile to a profile that is less broad. - create all directories before actually installing files - make the HOME dir in the service file the same as the user - migrate existing authorized keys files from %{_datadir}/%{name}/.ssh/authorized_keys to %{_sharedstatedir}/%{name}/data/home/.ssh/authorized_keys - fix file list to lock down permissions more - don't require the apparmor subpackage when apparmor is installed the current profile is rather bad and it should be possible to keep it out. - user should actually use /var/lib/forgejo/data/home OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm/forgejo?expand=0&rev=53
2025-03-11 12:47:50 +00:00
-----BEGIN PGP PUBLIC KEY BLOCK-----
- update to 10.0.2: * update of translations * When migrating from a Forgejo version lower than v10, the TOTP secrets found to be corrupted are now transparently removed * replies to pending review comments no longer generate a notification * consider public issues for project boards * the rootless Forgejo image version label is not set * do not allow SSH url for migration * setting.Service.EnableInternalSignIn = false is disabling forgotten password * show internal login prompt for account linking * enable ssh mirrors in rootless Forgejo images * render link in heading correctly in wiki TOC * Update module github.com/redis/go-redis/v9 * fix: consider issues in repository accessible via access table * fix(api): miss-spelled description, corrected to public * fix: revert issue rendering for <a> element * chore(ci): ensure the manually cached Go can be run * chore(ci): Get Go binary from GOROOT instead of hardcoded path * fix: return 404 for empty repositories * fix: delay deleting authorization token * fix: native parsing of ssh certificate key * fix(ui): hide extra PR property labels on title edit * fix: always set stripped slashes on http request * fix(ui): hide 'New migration' button on org pages with migrations disabled * ui: update language stats layout and click behavior * Update dependency go to v1.23.6 - add patch fix-CVE-2025-22869.patch, fixing bsc#1239488, bsc#1239276, bsc#1234574 OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm/forgejo?expand=0&rev=60
2025-03-21 18:29:17 +00:00
Comment: EB11 4F5E 6C0D C2BC DD18 3550 A4B6 1A2D C592 3710
Comment: Forgejo <contact@forgejo.org>
Comment: Forgejo Releases <release@forgejo.org>
- move permissions of the log dir and the data dir from forgejo:forgejo u=rwX,g=rwX,o= to forgejo:forgejo u=rwX,g=rX,o= - update apparmor profile to a profile that is less broad. - create all directories before actually installing files - make the HOME dir in the service file the same as the user - migrate existing authorized keys files from %{_datadir}/%{name}/.ssh/authorized_keys to %{_sharedstatedir}/%{name}/data/home/.ssh/authorized_keys - fix file list to lock down permissions more - don't require the apparmor subpackage when apparmor is installed the current profile is rather bad and it should be possible to keep it out. - user should actually use /var/lib/forgejo/data/home OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm/forgejo?expand=0&rev=53
2025-03-11 12:47:50 +00:00
xjMEY3T/yhYJKwYBBAHaRw8BAQdAVxqCQrSbpDNrx8CiTM8PUAVqdCyv2UmBDhpP
HZIpoIDNHUZvcmdlam8gPGNvbnRhY3RAZm9yZ2Vqby5vcmc+wsB+BBMWCgDmAhsD
BQsJCAcDBRUKCQgLBRYCAwEAAh4BAheAAhkBFiEE6xFPXmwNwrzdGDVQpLYaLcWS
- update to 10.0.2: * update of translations * When migrating from a Forgejo version lower than v10, the TOTP secrets found to be corrupted are now transparently removed * replies to pending review comments no longer generate a notification * consider public issues for project boards * the rootless Forgejo image version label is not set * do not allow SSH url for migration * setting.Service.EnableInternalSignIn = false is disabling forgotten password * show internal login prompt for account linking * enable ssh mirrors in rootless Forgejo images * render link in heading correctly in wiki TOC * Update module github.com/redis/go-redis/v9 * fix: consider issues in repository accessible via access table * fix(api): miss-spelled description, corrected to public * fix: revert issue rendering for <a> element * chore(ci): ensure the manually cached Go can be run * chore(ci): Get Go binary from GOROOT instead of hardcoded path * fix: return 404 for empty repositories * fix: delay deleting authorization token * fix: native parsing of ssh certificate key * fix(ui): hide extra PR property labels on title edit * fix: always set stripped slashes on http request * fix(ui): hide 'New migration' button on org pages with migrations disabled * ui: update language stats layout and click behavior * Update dependency go to v1.23.6 - add patch fix-CVE-2025-22869.patch, fixing bsc#1239488, bsc#1239276, bsc#1234574 OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm/forgejo?expand=0&rev=60
2025-03-21 18:29:17 +00:00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=zbGk
- move permissions of the log dir and the data dir from forgejo:forgejo u=rwX,g=rwX,o= to forgejo:forgejo u=rwX,g=rX,o= - update apparmor profile to a profile that is less broad. - create all directories before actually installing files - make the HOME dir in the service file the same as the user - migrate existing authorized keys files from %{_datadir}/%{name}/.ssh/authorized_keys to %{_sharedstatedir}/%{name}/data/home/.ssh/authorized_keys - fix file list to lock down permissions more - don't require the apparmor subpackage when apparmor is installed the current profile is rather bad and it should be possible to keep it out. - user should actually use /var/lib/forgejo/data/home OBS-URL: https://build.opensuse.org/package/show/devel:tools:scm/forgejo?expand=0&rev=53
2025-03-11 12:47:50 +00:00
-----END PGP PUBLIC KEY BLOCK-----
Reference in New Issue Copy Permalink