Re: [meta-security][hardknott][PATCH] sssd: re-package to fix QA issues

Jeremy Puhlman

Hold up, there is a problem with these.

On 11/15/2021 7:50 PM, Jeremy A. Puhlman wrote:
It packages all file in ${libdir} to package sssd, including the .so
symlink files. Then it causes QA issues:

| ERROR: QA Issue: sssd rdepends on dbus-dev [dev-deps]
| ERROR: QA Issue: sssd rdepends on ding-libs-dev [dev-deps]

So re-package sssd then the .so symlink files and .pc files are packaged
to sssd-dev which should be.

File ${libdir}/ is not a symlink file but packaged to
sssd-dev too. Then causes another QA issue:

| ERROR: sssd-2.5.2-r0 do_package_qa: QA Issue:
-dev package sssd-dev contains non-symlink .so '/usr/lib/' [dev-elf]

So create a new sub-package libsss-sudo to package file
and make sssd rdepends on it.

Signed-off-by: Kai Kang <kai.kang@...>
Signed-off-by: Armin Kuster <akuster808@...>
(cherry picked from commit e81c15f851ca5396c78c8737967ee38db0ebe0cd)
Signed-off-by: Jeremy A. Puhlman <jpuhlman@...>
recipes-security/sssd/ | 15 ++++++++++-----
1 file changed, 10 insertions(+), 5 deletions(-)

diff --git a/recipes-security/sssd/ b/recipes-security/sssd/
index 02d0837..01ee88b 100644
--- a/recipes-security/sssd/
+++ b/recipes-security/sssd/
@@ -120,10 +120,15 @@ SYSTEMD_SERVICE_${PN} = " \
-FILES_${PN} += "${libdir} ${datadir} ${base_libdir}/security/"
-FILES_${PN}-dev = " ${includedir}/* ${libdir}/*la ${libdir}/*/*la"
+PACKAGES =+ "libsss-sudo"
+ALLOW_EMPTY_libsss-sudo = "1"
-# The package contains symlinks that trip up insane
-INSANE_SKIP_${PN} = "dev-so"
+FILES_${PN} += "${base_libdir}/security/pam_sss*.so \
+ ${datadir}/dbus-1/system-services/*.service \
+ ${libdir}/krb5/* \
+ ${libdir}/ldb/* \
+ "
-RDEPENDS_${PN} = "bind dbus libldb libpam"
+FILES_libsss-sudo = "${libdir}/"
+RDEPENDS_${PN} = "bind dbus libldb libpam libsss-sudo"

Join to automatically receive all group messages.