Tiny Core Linux

Tiny Core Extensions => TCE Talk => Topic started by: GNUser on March 02, 2024, 08:11:55 PM

Title: hostile takeover of TCL15 x86_64 repo?
Post by: GNUser on March 02, 2024, 08:11:55 PM

Today when I tried to sync my mirror of the repo, I noticed that abiword-dev.tcz.tree was taking a long time to download. Turns out the file is multiple GB in size now--up from around 400 KB. I aborted the sync.

Something does not seem right. Please take a look at the repo to make sure someone malicious hasn't altered it.

Title: Re: hostile takeover of TCL15 x86_64 repo?
Post by: Rich on March 02, 2024, 08:33:23 PM

Hi GNUser

Quote from: GNUser on March 02, 2024, 08:11:55 PM

... Turns out the file is multiple GB in size now--up from around 400 KB. ...

There's a circular dependency that needs to be resolved. That's
the cause of the huge file. Only -dev extensions appear to be
affected. Juanito is looking into it.

Title: Re: hostile takeover of TCL15 x86_64 repo?
Post by: GNUser on March 02, 2024, 08:44:05 PM

Thanks, Rich. Glad to hear it's a known issue and not a security breach.

EDIT: When problem is resolved, would someone kindly make it known (e.g., on this thread)?

Title: Re: hostile takeover of TCL15 x86_64 repo?
Post by: Rich on March 02, 2024, 09:08:15 PM

Hi GNUser
One of us will update this thread.

Title: Re: hostile takeover of TCL15 x86_64 repo?
Post by: Juanito on March 03, 2024, 04:28:59 AM

The main problem of a circular dependency between elogind and polkit is fixed, there may be some other, minor, tidying up to do.

Title: Re: hostile takeover of TCL15 x86_64 repo?
Post by: GNUser on March 03, 2024, 06:54:08 AM

Good to hear. Thanks for the update.

Title: Re: hostile takeover of TCL15 x86_64 repo?
Post by: hiro on March 04, 2024, 09:49:13 AM

abiword would need elogind or polkit? for what?

Title: Re: hostile takeover of TCL15 x86_64 repo?
Post by: Rich on March 04, 2024, 10:17:30 AM

Hi hiro
According to the tree file, elogind gets pulled in by dbus as follows:

Code: [Select]

abiword.tcz->goffice.tcz->gtk3.tcz->at-spi2-core.tcz->dbus.tcz->elogind.tcz->acl.tcz->attr.tczFound here:
http://tinycorelinux.net/15.x/x86_64/tcz/abiword.tcz.tree

I don't see polkit showing up in there.