Richard Hughes 47efacfe5d Remove the firmware builder functionality ... We used the firmware builder functionality to either build or modify firmware images on the end-user system, e.g. copying the MAC address from the old system image to the new system image. Unfortunately running fwupd on the command line (e.g. ./src/fwupd) leaves the tty connected and thus bubblewrap doesn't protect us from installing malicious signed firmware. The firmware would have to have been uploaded to the LVFS by a trusted vendor and signed before being installed, which further decreases the severity of this problem. As there was only one vendor who asked for this functionality (who have yet to upload a single firmware to the LVFS...) just rip out this functionality to reduce our attack surface and completely fix the bug, and any like it. Many thanks to Aaron Janse <aaron@ajanse.me> for discovering and disclosing this issue to us.		2022-07-29 16:52:38 +01:00
..
fwupdagent	trivial: Use bash-completion facilities to get arguments	2022-06-20 12:57:40 -04:00
fwupdmgr	Add support for reading and writing firmware attributes	2022-07-28 17:30:57 -05:00
fwupdtool	Remove the firmware builder functionality	2022-07-29 16:52:38 +01:00
meson.build	trivial: Make meson.build indentation consistent	2022-06-21 03:27:38 -04:00