WelcomeWelcome | FAQFAQ | DownloadsDownloads | WikiWiki

Author Topic: Security concerns  (Read 6242 times)

Online Juanito

  • Administrator
  • Hero Member
  • *****
  • Posts: 14815
Re: Security concerns
« Reply #15 on: June 02, 2017, 11:51:01 AM »
submitqc5, submitqc6 and submitqc7 removed from 6.x/7.x/8.x x86 and x86_64 repos

Offline coreplayer2

  • Hero Member
  • *****
  • Posts: 3020
Re: Security concerns
« Reply #16 on: June 02, 2017, 01:00:17 PM »
Cool, gracias :)

Offline JustinCB

  • Newbie
  • *
  • Posts: 28
Re: Security concerns
« Reply #17 on: June 06, 2017, 12:50:31 PM »
submitqc5, submitqc6 and submitqc7 removed from 6.x/7.x/8.x x86 and x86_64 repos
And submitqc8 posted to the 8.x repo.  Is submitqc6 still in the 6.x repo, submitqc7 still in the 7.x repo or have they all been removed from all the repos? 

Online Juanito

  • Administrator
  • Hero Member
  • *****
  • Posts: 14815
Re: Security concerns
« Reply #18 on: June 06, 2017, 01:26:45 PM »
I'd understood that submitqc would work in all of the recent repos so I removed all of the submitqcx extensions - submitqc8 was not there at the time.

Offline JustinCB

  • Newbie
  • *
  • Posts: 28
Re: Security concerns
« Reply #19 on: June 06, 2017, 01:37:52 PM »
submitqcx.tcz is lighter than submitqc.tcz, but has much(but not all) of the same functionality.  This is why I believe that it is still useful(but, of course outdated versions not for the current release need not be in the repository[as long as submitqcx.tcz for the current release exists]). 

Offline coreplayer2

  • Hero Member
  • *****
  • Posts: 3020
Re: Security concerns
« Reply #20 on: June 06, 2017, 04:41:22 PM »
Some history here...

the older versions have errors or are broken to some degree or other.  They are not suitable for all TC versions and compared to the current version "submitqc" are missing some key features needed to create consistent extensions ready for submission.

Also, in the past we made some errors with the naming of each extension version.  As per the original audit instructions http://forum.tinycorelinux.net/index.php/topic,330.msg1999.html#msg1999 It's advised to submit extensions without the version appended to it's name, that's a rule we broke in the past but was fixed by the current "submitqc" extension maintainer.

While we have attempted to fix many of these errors as they developed along the way, it is dentonlt (the current extension maintainer AFAIK) who reconstructed submitqc  into a reliable cross-version audit extension which produces consistent results.  For this he deserves all the credit.

Since we were responsible for putting temporary band-aids on some of the older submitqc versions.  With the new submitqc version in place I'm quite confident the community will be better served with these older versions removed completely from all repos. 
besides, the older versions did not fit the naming convention (except perhaps the original by Jason)


I was not aware "dentonlt" has submitted an updated "submitqc" extension??   If he had I'd be surprised if "submitqc8" would've been used as it's name.

The only currently functioning version which works consistently across TC x86, x86_64 and armv7 versions is "submitqc"   
« Last Edit: June 06, 2017, 04:57:25 PM by coreplayer2 »

Online Juanito

  • Administrator
  • Hero Member
  • *****
  • Posts: 14815
Re: Security concerns
« Reply #21 on: June 07, 2017, 04:24:58 AM »
Whilst it's great to receive user submitted extensions, there's a risk of causing confusion with the submitqc extensions - thus submitqc5, submitqc6, submitqc7 and submitqc8 removed in favour of only maintaining and working with submitqc.

All suggestions for improvements will no doubt be gratefully received.