No description
4402d4a28e
This lets us prohibit non-ancestor ptrace access to running processes and their credentials via sysctl kernel.yama.ptrace_scope=1. Yama stacks correctly with SELinux. Arch Linux enables it and sets ptrace_scope=1 by default, see https://wiki.archlinux.org/title/Security#ptrace_scope. Note that SELinux also has the deny_ptrace mechanism to achieve similar things, but we're not shipping SELinux at the moment and we can opt to switch to deny_ptrace for enforcing this in the future if desired. See https://docs.kernel.org/admin-guide/LSM/Yama.html for more information. Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8582> |
||
|---|---|---|
| .ci | ||
| .githooks | ||
| .gitlab/issue_templates | ||
| .well-known | ||
| cross | ||
| device | ||
| docs | ||
| extra-repos/systemd | ||
| main | ||
| modem | ||
| temp | ||
| .clang-format | ||
| .ecrc | ||
| .editorconfig | ||
| .gitignore | ||
| .gitlab-ci.yml | ||
| .mailmap | ||
| channels.cfg | ||
| COMMITSTYLE.md | ||
| deviceinfo_schema.toml | ||
| kconfig-generic.toml | ||
| kconfigcheck.toml | ||
| LICENSE | ||
| pmaports.cfg | ||
| README.md | ||
postmarketOS aports repository
This repository contains the APKBUILD files for postmarketOS-specific packages, along with the required patches and scripts, if any.
There are many more packages defined in the Alpine Linux aports on which these packages depend.
Helpful resources:
- Issues
- How to create a package
- APKBUILD reference
- pmaports commit style
- Approval rules
- Alpine Linux aports
- Alpine Linux package search
- postmarketOS package search
Git Hooks
You can find some useful git hooks in the .githooks directory.
To use them, run the following command after cloning this repository:
git config --local core.hooksPath .githooks