Aelin
4402d4a28e
This lets us prohibit non-ancestor ptrace access to running processes and their credentials via sysctl kernel.yama.ptrace_scope=1. Yama stacks correctly with SELinux. Arch Linux enables it and sets ptrace_scope=1 by default, see https://wiki.archlinux.org/title/Security#ptrace_scope. Note that SELinux also has the deny_ptrace mechanism to achieve similar things, but we're not shipping SELinux at the moment and we can opt to switch to deny_ptrace for enforcing this in the future if desired. See https://docs.kernel.org/admin-guide/LSM/Yama.html for more information. Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8582>
postmarketOS aports repository
This repository contains the APKBUILD files for postmarketOS-specific packages, along with the required patches and scripts, if any.
There are many more packages defined in the Alpine Linux aports on which these packages depend.
Helpful resources:
- Issues
- How to create a package
- APKBUILD reference
- pmaports commit style
- Approval rules
- Alpine Linux aports
- Alpine Linux package search
- postmarketOS package search
Git Hooks
You can find some useful git hooks in the .githooks directory.
To use them, run the following command after cloning this repository:
git config --local core.hooksPath .githooks