From 7d760f274ed797a1272ae0091380bcaf2f6724bc Mon Sep 17 00:00:00 2001
From: sergio <sergiovelasquezzeballos@gmail.com>
Date: Thu, 16 Jul 2026 07:12:47 -0400
Subject: [PATCH] =?UTF-8?q?harkaq:=20declarar=20deps=20medidas=20por=20el?=
 =?UTF-8?q?=20kernel=20(cosecha=20autom=C3=A1tica)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Cosecha desatendida de la campaña harkaq. Cada dep de acá la denunció el audit de
Landlock en un build real: el kernel vio al build usarla sin declararla, y el
store del hub confirma qué artefacto la provee (deuda DECLARABLE, §4.5).

Recetas:bash binutils busybox bzip2

No se tocó ninguna receta con deuda IRREDUCIBLE: declarar algo que el store no
provee rompería el build en vez de arreglarlo. Esas van a tandas/needs-review-harkaq.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 recipes/bash.toml     | 2 +-
 recipes/binutils.toml | 3 +++
 recipes/busybox.toml  | 3 +++
 recipes/bzip2.toml    | 3 +++
 4 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/recipes/bash.toml b/recipes/bash.toml
index 3639aaf5..461c21bf 100644
--- a/recipes/bash.toml
+++ b/recipes/bash.toml
@@ -45,4 +45,4 @@ _abuild_phase
 '''
 
 [deps]
-build = ["ncurses", "readline", "linux-headers"]
+build = ["ncurses", "readline", "linux-headers", "busybox", "make"]
diff --git a/recipes/binutils.toml b/recipes/binutils.toml
index 13d53c5f..22534b7b 100644
--- a/recipes/binutils.toml
+++ b/recipes/binutils.toml
@@ -42,6 +42,9 @@ link        = "dynamic"
 # esquivaba con CC=gcc; ahora con el zig bueno por-receta gcc deja de hacer falta. SDD 11 §7.2b.
 zig_version = "0.13.0"
 
+[deps]
+build = ["busybox", "make"]
+
 [build.phases]
 # --disable-nls: sin gettext (ausente en el toolchain hermético). --disable-werror: binutils promueve
 # varios warnings a error por defecto. --disable-gprofng: el profiler de binutils 2.4x no es parte del
diff --git a/recipes/busybox.toml b/recipes/busybox.toml
index 604051de..85b0fd98 100644
--- a/recipes/busybox.toml
+++ b/recipes/busybox.toml
@@ -20,6 +20,9 @@ compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
 
+[deps]
+build = ["make"]
+
 [build.phases]
 # busybox usa Kconfig, no autotools: arrancamos de `defconfig` y forzamos CONFIG_STATIC=y. `tc`
 # no compila contra musl (gcc-ismos de red), así que lo desactivamos — es el ajuste mínimo
diff --git a/recipes/bzip2.toml b/recipes/bzip2.toml
index c8fc766c..6aa3f6c6 100644
--- a/recipes/bzip2.toml
+++ b/recipes/bzip2.toml
@@ -10,6 +10,9 @@ compiler = "gcc"
 target   = "x86_64-linux-musl"
 link     = "static"
 flags    = []
+[deps]
+build = ["make"]
+
 [build.phases]
 compile = 'make CC=gcc'
 install = 'make install PREFIX=/out/usr'