Fossil

Timeline
Login

Timeline

Many hyperlinks are disabled.
Use anonymous login to enable hyperlinks.

33 check-ins using file src/setup.c version 997c91eab3

2020-08-21
15:08
Add missing db_unprotect() calls to backoffice. ... (check-in: c75dcc621b user: drh tags: sec2020)
15:05
Improved documentation of the database write protection logic. Added undocumented SQL command db_protect() and db_protect_pop() to the "sql" command. Panic on a protection stack overflow. ... (check-in: 75deba73b5 user: drh tags: sec2020)
13:04
Add triggers to prevent changes to sensitive settings when PROTECT_SENSITIVE is engaged. ... (check-in: c9b9a77d59 user: drh tags: sec2020)
11:26
Remove incorrect leaf ambiguity warning when doing a "fossil commit --dry-run". ... (check-in: 1b52c41415 user: drh tags: sec2020)
11:19
Fix the locate_unmanaged_files() routine so that it always see (and ignores) symbolic links. ... (check-in: 0938b56516 user: drh tags: sec2020)
10:29
More improvements to the allow-symlinks help text. ... (check-in: f7f31147de user: drh tags: sec2020)
10:23
Improved on-line help for the allow-symlinks setting. ... (check-in: d3090e91b8 user: drh tags: sec2020)
10:10
Improve comments on symlink logic ... (check-in: 39a5df1fde user: drh tags: sec2020)
01:09
Add a missing db_unprotect() to the "fossil all" command. ... (check-in: b9ae03f6ee user: drh tags: sec2020)
01:01
Merge the latest changes from trunk into sec2020. ... (check-in: 1d61aae314 user: drh tags: sec2020)
2020-08-20
16:25
Merge recent changes from trunk. ... (check-in: c93cb2bae9 user: drh tags: sec2020)
2020-08-19
16:13
Silently ignore reserved filenames that occur inside of manifests, rather than throwing an error. No need for a setting to allow reserved filenames in manifests. ... (check-in: 2e19c5fe2d user: drh tags: sec2020)
15:46
Remove commands "test-nondir-path" and "test-is-reserved-name" and add the equivalent functionality to "test-file-environment". ... (check-in: 0cec61e451 user: drh tags: sec2020)
15:26
Remove the --symlinks option from the "fossil open" command. It is not needed. Users who want to enable symlinks can use the "fossil settings" command first. ... (check-in: ff811934e0 user: drh tags: sec2020)
15:21
Add the "fossil test-nondir-path" command for testing parts of the new symlink logic. ... (check-in: 13cfef3383 user: drh tags: sec2020)
12:26
Fix harmless compiler warnings. ... (check-in: feef827504 user: drh tags: sec2020)
12:22
Additional defenses against doing "fossil add" of files that are beneath symlinks. ... (check-in: 928b023cb7 user: drh tags: sec2020)
12:08
Improved detection of attempts to write through a symlink. Now also works for "revert", "stash", and "undo/redo". ... (check-in: f63297b2c5 user: drh tags: sec2020)
00:15
Do not allow the "fossil add" command to add files beneath a symlink. ... (check-in: a6abfb911b user: drh tags: sec2020)
2020-08-18
23:39
An alternative method for dealing with historical files named "_FOSSIL_" in the tree: Simply pretend they are not there. ... (Closed-Leaf check-in: 8f24c07917 user: drh tags: ignore-reserved-filenames)
20:58
Silently refuse to "fossil add" files that use reserved names. ... (check-in: 888da94e0a user: drh tags: sec2020)
20:19
Improved error message and response when trying to manifest a check-out that contains a file beneath a symbolic link directory. ... (check-in: 20d90dd482 user: drh tags: sec2020)
19:56
Add a security audit warning if the strict-manifest-syntax flag is switched off. ... (check-in: 3105bedff2 user: drh tags: sec2020)
19:49
Rework the "permissive-manifest-parser" idea to be simpler and to call it "strict-manifest-syntax". ... (check-in: 4df8c856ee user: drh tags: sec2020)
17:25
permissive-manifest-parser setting is now marked as sensitive to keep an attacker from turning it on. ... (Closed-Leaf check-in: 1e34705ed8 user: stephan tags: sec2020-deadend)
16:07
Added and applied permissive-manifest-parser setting to permit parsing of manifests which have F-cards containing now-illegal names. Required for rebuild of historical data and support of repositories we now know to contain such files. ... (check-in: 9e59cf18fc user: stephan tags: sec2020-deadend)
14:02
Merge in the latest trunk changes. ... (check-in: 917917aa55 user: drh tags: sec2020)
13:17
More missing db_unprotect() calls. ... (check-in: 06d3789a2a user: drh tags: sec2020)
12:17
When writing files to disk for a check-out, refuse to write through a symbolic link to a directory. Ticket [f9831fdef1d4edcc]. ... (check-in: a64e384f0c user: drh tags: sec2020)
02:58
More missing calls to db_unprotect(). ... (check-in: 3ced48bdf8 user: drh tags: sec2020)
02:33
Yet another missed db_unprotect() call. ... (check-in: 2041072e8d user: drh tags: sec2020)
02:26
Fix missing enable of global_config in the "fossil all" command. ... (check-in: 16ec693dae user: drh tags: sec2020)
01:54
Disable writes the CONFIG and USER tables by default. Permission to write to those tables is turned on as needed. Note - might have missed a few places so expect bugs. ... (check-in: ca9156aa0a user: drh tags: sec2020)