Philip Withnall bc46274ae4 common/dir: Verify commit bindings when pulling from an untrusted repo ...

When pulling from a local, untrusted repo (i.e. one which the user
downloaded into, and we want to pull into the trusted system repo),
verify the collection ID and ref bindings in the commit metadata for
each commit.

This is something which is normally done by libostree, but since we’re
rewriting the commit manually, we’re bypassing that part of the pull()
code path.

This is an inlined version of the check from verify_bindings() in
libostree.

Signed-off-by: Philip Withnall <withnall@endlessm.com>

2017-08-18 14:23:03 +02:00

..

gvdb

Rename lib/ to common/ in preparation for public xdg-app library

2015-11-26 22:05:38 +01:00

flatpak-chain-input-stream.c

Fix license headers

2016-07-29 14:27:49 -04:00

flatpak-chain-input-stream.h

Fix license headers

2016-07-29 14:27:49 -04:00

flatpak-common-types.h

Add flatpak_pull_from_oci helper

2016-12-09 14:44:25 +01:00

flatpak-db.c

Rename everything but the on-disk location to flatpak

2016-05-09 11:11:55 +02:00

flatpak-db.h

Rename everything but the on-disk location to flatpak

2016-05-09 11:11:55 +02:00

flatpak-dir.c

common/dir: Verify commit bindings when pulling from an untrusted repo

2017-08-18 14:23:03 +02:00

flatpak-dir.h

common: Support collection IDs for related refs and extensions

2017-08-18 14:23:03 +02:00

flatpak-json-oci.c

OCI: Update org.opencontainers.ref.name to org.opencontainers.image.ref.name

2017-07-06 17:07:08 -04:00

flatpak-json-oci.h

OCI: Add json format for atomic-based signatures

2017-03-29 17:14:36 +02:00

flatpak-json.c

OCI: Add support for strict and mandatory json properties

2017-03-29 17:14:36 +02:00

flatpak-json.h

OCI: Add support for strict and mandatory json properties

2017-03-29 17:14:36 +02:00

flatpak-oci-registry.c

Update to latest libglnx and use the new GLnxTmpFile API

2017-05-22 09:08:49 +02:00

flatpak-oci-registry.h

OCI: Verify signatures

2017-03-29 17:14:36 +02:00

flatpak-portal-error.c

Change portal error names to not contain Flatpak

2016-05-12 22:03:09 +02:00

flatpak-portal-error.h

Rename everything but the on-disk location to flatpak

2016-05-09 11:11:55 +02:00

flatpak-run.c

Merge pull request #900 from pwithnall/lan-and-usb-preparation

2017-07-08 20:54:28 -04:00

flatpak-run.h

common: Support collection IDs for related refs and extensions

2017-08-18 14:23:03 +02:00

flatpak-table-printer.c

Don't crash if there's more titles than columns

2017-05-03 12:40:14 +02:00

flatpak-table-printer.h

Add table printer api for number columns

2017-05-03 11:06:43 +02:00

flatpak-utils.c

common: Support collection IDs for related refs and extensions

2017-08-18 14:23:03 +02:00

flatpak-utils.h

common: Support collection IDs for related refs and extensions

2017-08-18 14:23:03 +02:00

Makefile.am.inc

build: Add AM_* variables to all per-target special variables

2017-07-06 15:05:58 +01:00