From 6ef5f1f7232aa68a28afd0481aa90d1960ec086b Mon Sep 17 00:00:00 2001 From: Todd Zullinger Date: Nov 11 2017 23:29:39 +0000 Subject: Disable cross-directory hardlinks We cannot be sure that users installing the git package have not mounted the git bin and lib dirs on different file systems. The cost is a small amount of extra disk space (1.25M in the current build). --- diff --git a/git.spec b/git.spec index 5e595f9..56891f9 100644 --- a/git.spec +++ b/git.spec @@ -368,6 +368,7 @@ DESTDIR = %{buildroot} INSTALL = install -p GITWEB_PROJECTROOT = %{_localstatedir}/lib/git GNU_ROFF = 1 +NO_CROSS_DIRECTORY_HARDLINKS = 1 htmldir = %{?_pkgdocdir}%{!?_pkgdocdir:%{_docdir}/%{name}-%{version}} prefix = %{_prefix} gitwebdir = %{_localstatedir}/www/git @@ -738,6 +739,7 @@ rm -rf %{buildroot} * Tue Nov 07 2017 Todd Zullinger - 2.15.0-2 - Fix git-clone memory exhaustion (CVE-2017-15298) Resolves: #1510455, #1510457 +- Disable cross-directory hardlinks * Mon Oct 30 2017 Todd Zullinger - 2.15.0-1 - Update to 2.15.0