summaryrefslogtreecommitdiff
path: root/methods
AgeCommit message (Expand)AuthorFilesLines
2018-04-06Allow restart_syscall() syscall in seccomp sandboxesJulian Andres Klode1-0/+1
2018-04-06Turn off seccomp sandboxing by defaultJulian Andres Klode1-1/+1
2018-02-19use a more standard approach to disable security for cdrom methodDavid Kalnischkies1-2/+8
2018-01-03non-local mirrorlists shouldn't redirect to localDavid Kalnischkies2-3/+47
2018-01-03add tag-based control over mirror choices from the listDavid Kalnischkies1-34/+103
2018-01-03require methods to request AuxRequest capability at startupDavid Kalnischkies1-1/+1
2018-01-03reimplement and simplify mirror:// methodDavid Kalnischkies6-478/+251
2018-01-03Correctly report transient errors againJulian Andres Klode1-4/+8
2018-01-03Add rapid "happy eyeballs" connection fallback (RFC 8305)Julian Andres Klode1-26/+100
2018-01-03connect: Extract Connection::CheckError() methodJulian Andres Klode1-0/+6
2018-01-03connect: Store the IP used when picking a connectionJulian Andres Klode1-9/+5
2018-01-03connect: Extract a Connection structJulian Andres Klode1-8/+36
2018-01-03connect: Alternate address families for addressesJulian Andres Klode1-24/+48
2017-12-13report transient errors as transient errorsDavid Kalnischkies9-232/+433
2017-12-13mark some 500 HTTP codes as transient acquire errorsDavid Kalnischkies1-1/+13
2017-12-13avoid some useless casts reported by -Wuseless-castDavid Kalnischkies1-1/+1
2017-11-19Also look at https_proxy for https URLsJulian Andres Klode1-4/+13
2017-11-12Do not attempt seccomp under qemu-user and drop EFAULT workaroundJulian Andres Klode1-1/+37
2017-10-27seccomp: Allow clock_nanosleep() and nanosleep() syscallsJulian Andres Klode1-0/+2
2017-10-26Drop unused gzip, lzma, bzip2, and xz symlinks of storeJulian Andres Klode1-1/+1
2017-10-26seccomp: Allow ipc() for fakeroot, and allow sysinfo() for sortJulian Andres Klode1-0/+2
2017-10-26Print syscall number and arch to stderr when trapped by seccompJulian Andres Klode1-0/+33
2017-10-25Only warn about seccomp() EINVAL (normal) and EFAULT (qemu) errorsJulian Andres Klode1-3/+5
2017-10-25methods: Enable additional syscalls (SYSV IPC) in fakerootJulian Andres Klode1-0/+10
2017-10-23CMake: methods: Cleanup link libraries, use OBJECT librariesJulian Andres Klode1-17/+14
2017-10-23seccomp: Conditionalize statx() whitelistingJulian Andres Klode1-0/+2
2017-10-23seccomp: Add missing syscalls for ppc64el, i386, and othersJulian Andres Klode1-0/+11
2017-10-22Sandbox methods with seccomp-BPF; except cdrom, gpgv, rshJulian Andres Klode8-19/+240
2017-10-22methods/basehttp.cc: Remove proxy autodetect debugging codeJulian Andres Klode1-2/+0
2017-10-22methods/mirror: Enable sandboxing and other aptMethod featuresJulian Andres Klode1-1/+1
2017-10-22Run Proxy-Auto-Detect script from main processJulian Andres Klode2-1/+10
2017-09-26proper error reporting for v3 onion servicesDavid Kalnischkies1-3/+3
2017-09-24Drop curl method and apt-transport-https packageJulian Andres Klode3-655/+1
2017-07-26allow the auth.conf to be root:root ownedDavid Kalnischkies7-27/+47
2017-07-26lookup login info for proxies in auth.confDavid Kalnischkies1-1/+1
2017-07-26reimplement and document auth.confDavid Kalnischkies6-8/+25
2017-07-26fail early in http if server answer is too small as wellDavid Kalnischkies4-6/+37
2017-07-26fail earlier if server answers with too much dataDavid Kalnischkies3-7/+17
2017-07-26don't try to parse all fields starting with HTTP as status-lineDavid Kalnischkies1-1/+1
2017-07-12Reformat and sort all includes with clang-formatJulian Andres Klode21-96/+95
2017-07-12methods/aptmethod.h: Add missing fileutl.h includeJulian Andres Klode1-0/+1
2017-07-03Stop bragging about old speeds in http.cc commentsJulian Andres Klode1-8/+0
2017-07-03don't set ip addresses as server names for SNIDavid Kalnischkies1-2/+12
2017-07-03Swap file descriptors before the handshakeJulian Andres Klode1-2/+4
2017-07-03Do not error out, only warn if ca certificates are not availableJulian Andres Klode1-5/+5
2017-07-03tls: Add more details to error messages, and detect more errorsJulian Andres Klode1-9/+11
2017-07-01http: A response with Content-Length: 0 has no contentJulian Andres Klode1-1/+4
2017-07-01Make Verify-Host and Verify-Peer independent againJulian Andres Klode1-2/+2
2017-06-30TLS support: Error out on unsupported curl optionsJulian Andres Klode1-2/+4
2017-06-30Improve closing the TLS connectionJulian Andres Klode1-3/+3