Skip to content

Replaced coreutils-full with toybox and coreutils for improved security#136

Open
rishi-prajapati wants to merge 2 commits intobuildsafedev:mainfrom
rishi-prajapati:feature
Open

Replaced coreutils-full with toybox and coreutils for improved security#136
rishi-prajapati wants to merge 2 commits intobuildsafedev:mainfrom
rishi-prajapati:feature

Conversation

@rishi-prajapati
Copy link
Copy Markdown

@rishi-prajapati rishi-prajapati commented Jan 2, 2025

Fixes #123

This update replaces the coreutils-full package with toybox and coreutils to enhance security. The toybox package is a lightweight alternative that includes essential utilities, while coreutils remains to provide a more comprehensive set of core utilities. These changes aim to improve the security and efficiency of the system by reducing unnecessary dependencies and simplifying the overall package structure.

Copy link
Copy Markdown
Contributor

@rakshitgondwal rakshitgondwal left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for the PR @rishi-prajapati, can you please sign you commit for the faling DCO check? You'll also need to add youself to the CONTRIBUTORS.md file.

Signed-off-by: rishi-prajapati <[email protected]>
@rishi-prajapati
Copy link
Copy Markdown
Author

Hi @rakshitgondwal I have signed the commit and also updated CONTRIBUTORS.md file.

Copy link
Copy Markdown
Contributor

@rakshitgondwal rakshitgondwal left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm, @dr-housemd do you wanna have a look?

@rishi-prajapati
Copy link
Copy Markdown
Author

Hi @rakshitgondwal, Any updates on this issue?

@rakshitgondwal
Copy link
Copy Markdown
Contributor

Hey @rishi-prajapati, The changes are good but we have a blocker for this to be merged: #122
We cant use bsf develop on a darwin machine since toybox is a linux package. Thus a tools parameter would be required first.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Replace coreutils-full with toybox + coreutils

2 participants