Date   

Re: [meta-selinux][PATCH 3/3] util-linux: drop obsolete patch

Yi Zhao
 

Hi Joe,


Seems you were missing this patch. Would you please merge it? Thanks.


//Yi

On 5/20/19 12:41 PM, Yi Zhao wrote:
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
---
.../util-linux/fix-libmount_la_DEPENDENCIES.patch | 28 ----------------------
1 file changed, 28 deletions(-)
delete mode 100644 recipes-core/util-linux/util-linux/fix-libmount_la_DEPENDENCIES.patch

diff --git a/recipes-core/util-linux/util-linux/fix-libmount_la_DEPENDENCIES.patch b/recipes-core/util-linux/util-linux/fix-libmount_la_DEPENDENCIES.patch
deleted file mode 100644
index ab54818..0000000
--- a/recipes-core/util-linux/util-linux/fix-libmount_la_DEPENDENCIES.patch
+++ /dev/null
@@ -1,28 +0,0 @@
-Subject: [PATCH] util-linux: fix libmount_la_DEPENDENCIES.
-
-Upstream-Status: Pending
-
-libmount_la_LIBADD contains "-lselinux", this is not a object that
-could consider as a dependency target. So fix this.
-
-Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
----
- libmount/src/Makemodule.am | 2 +-
- 1 files changed, 1 insertions(+), 1 deletions(-)
-
-diff --git a/libmount/src/Makemodule.am b/libmount/src/Makemodule.am
-index 494e02a..bf494a4 100644
---- a/libmount/src/Makemodule.am
-+++ b/libmount/src/Makemodule.am
-@@ -38,7 +38,7 @@ libmount_la_CFLAGS = \
- -I$(top_srcdir)/libmount/src
-
- libmount_la_DEPENDENCIES = \
-- $(libmount_la_LIBADD) \
-+ libcommon.la libblkid.la \
- libmount/src/libmount.sym \
- libmount/src/libmount.h.in
-
---
-1.7.5.4
-


[meta-security] [PATCH] checksec: upgrade 1.11.1 -> 2.1.0

Yuan Chao <yuanc.fnst@...>
 

Signed-off-by: Yuan Chao <yuanc.fnst@cn.fujitsu.com>
---
.../checksec/{checksec_1.11.1.bb => checksec_2.1.0.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename recipes-security/checksec/{checksec_1.11.1.bb => checksec_2.1.0.bb} (91%)

diff --git a/recipes-security/checksec/checksec_1.11.1.bb b/recipes-security/checksec/checksec_2.1.0.bb
similarity index 91%
rename from recipes-security/checksec/checksec_1.11.1.bb
rename to recipes-security/checksec/checksec_2.1.0.bb
index 835dffc..5c6528e 100644
--- a/recipes-security/checksec/checksec_1.11.1.bb
+++ b/recipes-security/checksec/checksec_2.1.0.bb
@@ -6,7 +6,7 @@ HOMEPAGE="https://github.com/slimm609/checksec.sh"

LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=93fddcca19f6c897871f9b5f9a035f4a"

-SRCREV = "3c15cb89641c700096fdec0c1904a0cf9b83c5e2"
+SRCREV = "04582bad41589ad479ca8b1f0170ed317475b5a5"
SRC_URI = "git://github.com/slimm609/checksec.sh"

S = "${WORKDIR}/git"
--
2.17.1


Re: [meta-selinux][PATCH 1/2] meson-selinux.bbclass: fix meson flags for glib-2.0-native

Mikko Rapeli
 

Hi,

On Wed, Aug 28, 2019 at 01:19:17PM -0400, Joe MacDonald wrote:
Hi Mikko,

Is this specifically for warrior (or thud), maybe? The following commit
explains the current logic:

commit bb0c9c3abcb935e4b362eb57985e1ee7fec0bfe0
Author: Yi Zhao <yi.zhao@windriver.com>
Date: Wed Jun 12 15:53:20 2019 +0800

glib-2.0: fix configure error for meson build

In glib 2.60.x, it turns selinux into a meson feature. We should use
'-Dselinux=enabled/disabled' rather than '-Dselinux=true/false' to
enable/disable the feature.

Add meso-enable-selinux.bbclass for this change and inherit it in
glib-2.0 bbappend to fix the configure error.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>

and the second patch is already present in tree:

commit 087fe5c8144c246c6361bd8bcbd1ffd9e9b675bb
Author: Yi Zhao <yi.zhao@windriver.com>
Date: Fri Aug 9 17:48:00 2019 +0800

libselinux: fix build with glibc 2.30

Fix build error:
procattr.c:27:14: error: static declaration of 'gettid' follows
non-static declaration
27 | static pid_t gettid(void)
| ^~~~~~
In file included from /buildarea/build/tmp/work/core2-64-poky-linux/libselinux/2.8-r0/recipe-sysroot/usr/include/unistd.h:1170,
from procattr.c:2:
/buildarea/build/tmp/work/core2-64-poky-linux/libselinux/2.8-r0/recipe-sysroot/usr/include/bits/unistd_ext.h:34:16:
note: previous declaration of 'gettid' was here
34 | extern __pid_t gettid (void) __THROW;
| ^~~~~~

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>

This is what my current work tree looks like, for reference:

$ repo forall -p -c git log -1 --pretty=oneline
project meta-openembedded/
2ebaa8df1257389161d0bee9e553c28f63e52005 python3-pyatspi: Add Dbus ATSPI recipe

project meta-selinux/
154654a6fe12206a6b9ad6d8c36a4dbe672bcc46 selinux-python: Fix dependency for ntpath

project yocto-mainline/
ca2207f418b7847ffce4b8c53a5a442e5cf461d9 commands.py: fix typo
Hmm, good that same patches are already in master branch but I somehow got a
much older master branch state from remote git://git.yoctoproject.org/meta-selinux

commit a917c322c120c05fc6746fc9aca38c27398ffb4a
Author: Yi Zhao <yi.zhao@windriver.com>
AuthorDate: Fri Apr 19 10:46:32 2019 +0800
Commit: Joe MacDonald <joe@deserted.net>
CommitDate: Tue Apr 23 11:12:57 2019 -0400

Was also checking master-next there.

Based on time stamps in .git/modules/meta-selinux/refs/remotes/upstream/ my last fetch
was Aug 28 11:02 CET. Seems like the "libselinux: fix build with glibc 2.30"
was pushed to the server just after I had been checking for it:

commit 087fe5c8144c246c6361bd8bcbd1ffd9e9b675bb
Author: Yi Zhao <yi.zhao@windriver.com>
AuthorDate: Fri Aug 9 17:48:00 2019 +0800
Commit: Joe MacDonald <joe_macdonald@mentor.com>
CommitDate: Wed Aug 28 10:26:52 2019 -0400

libselinux: fix build with glibc 2.30

Anyway, fixes are in and life continues :)

Thanks,

-Mikko

-J.

[[yocto] [meta-selinux][PATCH 1/2] meson-selinux.bbclass: fix meson flags for glib-2.0-native] On 19.08.28 (Wed 18:30) Mikko Rapeli wrote:

With latest poky master, glib-2.0-native fails to compile:

| meson.build:1:0: ERROR: Value "false" for combo option is not one of the choices. Possible choices are: "enabled",
"disabled", "auto".

Thus use enabled and disabled when enabling and disabling flags
with meson. Now glib-2.0-native compiles again.

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
---
classes/meson-selinux.bbclass | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/classes/meson-selinux.bbclass b/classes/meson-selinux.bbclass
index 77a763a..91c2a2b 100644
--- a/classes/meson-selinux.bbclass
+++ b/classes/meson-selinux.bbclass
@@ -1,4 +1,4 @@
inherit selinux

PACKAGECONFIG_append = " ${@target_selinux(d)}"
-PACKAGECONFIG[selinux] = "-Dselinux=true,-Dselinux=false,libselinux,"
+PACKAGECONFIG[selinux] = "-Dselinux=enabled,-Dselinux=disabled,libselinux,"
--
1.9.1

--
_______________________________________________
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto
--
-Joe MacDonald.
:wq


Query on error log "no providers found in RDEPENDS"

SIMON BABY <simonkbaby@...>
 

Hi,

I am new to this mail group. I have the below error while creating a package, Can someone help to fix this issue.

@ubuntu:~/EVO_BUILD/741058_MGMT_Core_OPS/build_mpxls1046$ bitbake datatransfer-mgr
Loading cache: 100% |########################################################################################################################################################################| Time: 0:00:01
Loaded 3343 entries from dependency cache.
Parsing recipes: 100% |######################################################################################################################################################################| Time: 0:00:04
Parsing of 2450 .bb files complete (2446 cached, 4 parsed). 3345 targets, 177 skipped, 0 masked, 0 errors.
NOTE: Resolving any missing task queue dependencies

Build Configuration:
BB_VERSION           = "1.36.0"
BUILD_SYS            = "i686-linux"
NATIVELSBSTRING      = "universal"
TARGET_SYS           = "aarch64-fsl-linux"
MACHINE              = "mpxls1046"
DISTRO               = "fsl-qoriq"
DISTRO_VERSION       = "2.4.4"
TUNE_FEATURES        = "aarch64"
TARGET_FPU           = ""
meta                
meta-poky            
meta-yocto-bsp      
meta-oe              
meta-multimedia      
meta-python          
meta-networking      
meta-gnome          
meta-filesystems    
meta-webserver      
meta-perl            
meta-virtualization  
meta-security        
meta-freescale      
meta-freescale-distro
meta-qoriq-demos    
meta-bsp-teledyne    
meta-laird-cp        
meta-microsys-layerscape = "develop:25b4f49569fcf4417572f2a4081f21221a8d802b"

Initialising tasks: 100% |###################################################################################################################################################################| Time: 0:00:01
NOTE: Executing SetScene Tasks
NOTE: Executing RunQueue Tasks
ERROR: datatransfer-mgr-1.0-r1 do_package_qa: QA Issue: /usr/bin/DataTransferMgr contained in package datatransfer-mgr requires libzipcpp.so()(64bit), but no providers found in RDEPENDS_datatransfer-mgr? [file-rdeps]
ERROR: datatransfer-mgr-1.0-r1 do_package_qa: QA run found fatal errors. Please consider fixing them.

ERROR: datatransfer-mgr-1.0-r1 do_package_qa: Function failed: do_package_qa
ERROR: Logfile of failure stored in: /home/tdy/EVO_BUILD/741058_MGMT_Core_OPS/build_mpxls1046/tmp/work/aarch64-fsl-linux/datatransfer-mgr/1.0-r1/temp/log.do_package_qa.22226
ERROR: Task (/home/tdy/EVO_BUILD/741058_MGMT_Core_OPS/sources/meta-bsp-teledyne/recipes-wireless/datatransfer-mgr/datatransfer-mgr_1.0.bb:do_package_qa) failed with exit code '1'
NOTE: Tasks Summary: Attempted 591 tasks of which 577 didn't need to be rerun and 1 failed.

Summary: 1 task failed:
  /home/tdy/EVO_BUILD/741058_MGMT_Core_OPS/sources/meta-bsp-teledyne/recipes-wireless/datatransfer-mgr/datatransfer-mgr_1.0.bb:do_package_qa
Summary: There were 3 ERROR messages shown, returning a non-zero exit code.

my .bb file for zipcpp is below:

#
# This file is the zipcpp recipe.
#

DEPENDS = "zeromq cppzmq"
SUMMARY = "ZeroMQ based IPC C++ library"
SECTION = "base"
LICENSE = "CLOSED"

SRC_URI = "git://git@elsvsapp02/TDY/ZIPCpp.git;protocol=ssh;branch=develop"
SRCREV = "${AUTOREV}"

S = "${WORKDIR}/git"

LIB_ARTIFACT = "libzipcpp.so"
LIB_VERSION = "1"

do_install() {
    install -d ${D}${libdir}
    install -m 0755 ${S}/bin/${LIB_ARTIFACT}.${LIB_VERSION} ${D}${libdir}/${LIB_ARTIFACT}.${LIB_VERSION}
    ln -rs ${D}${libdir}/${LIB_ARTIFACT}.${LIB_VERSION} ${D}${libdir}/${LIB_ARTIFACT}
    install -d ${D}${includedir}
    install -m 0644 ${S}/include/zipc.h ${D}${includedir}
    install -m 0644 ${S}/include/logger.h ${D}${includedir}
    install -d ${D}${includedir}/fmt
    install -m 0644 ${S}/include/fmt/* ${D}${includedir}/fmt
}

#do_install_append() {
#    rm -r ${D}/usr/share
#}

#PACKAGES = "${PN}-dev"
FILES_${PN} += "${libdir}/${LIB_ARTIFACT}.${LIB_VERSION}"
FILES_${PN} += "${libdir}/${LIB_ARTIFACT}"
#RDEPENDS_${PN} = "${LIB_ARTIFACT}.${LIB_VERSION}"
#RDEPENDS_${PN} = "${LIB_ARTIFACT}"


and the .bb file for datatransfer-mgr is below.

# Copyright (C) 2018 Teledyne Controls

DEPENDS = "zeromq cppzmq zipcpp protobuf json-c jsoncpp rapidjson"
DESCRIPTION = "Wireless Data Transfer Manager for Evo"
SECTION = "base"
PRIORITY = "optional"
LICENSE = "CLOSED"
PR = "r1"

SRC_URI = "git://git@elsvsapp02/GroundLink-Evo/DataTransferManager.git;protocol=ssh "
SRC_URI = "file:///home/tdy/DataTransferManager/DataTransferManager.tgz"
SRCREV = "${AUTOREV}"

CDT_CONFIGURATION ?= "Release"
BUILD_ARTIFACT = "DataTransferMgr"

S = "${WORKDIR}/git/DataTransferManager-1.0"
S = "${WORKDIR}/DataTransferManager-1.0"

export STAGING_INCDIR
export STAGING_LIBDIR
export PV
export PR

#EXTRA_OEMAKE = "'CXX=${CXX}' 'RANLIB=${RANLIB}' 'AR=${AR}' \
#               'CXXFLAGS=${CXXFLAGS}' 'BUILDDIR=${S}' \
#               'STAGING_LIBDIR=${STAGING_LIBDIR}'"

EXTRA_OEMAKE += "'INCLUDE_DIR=${D}${includedir}' 'LIB_DIR=${D}${libdir}'"

do_compile() {
        cd Release
        oe_runmake
}

do_install() {
        mkdir -p ${D}${bindir}
        install -m 755 ${S}/Release/${BUILD_ARTIFACT} ${D}${bindir}
}

FILES_${PN} = "${bindir}/${BUILD_ARTIFACT}"
~                                                                               


Rgds
Simon


[meta-selinux] [PATCH] python-scapy: upgrade 2.4.2 -> 2.4.3

Yuan Chao <yuanc.fnst@...>
 

License file changed from bin/scapy to LICENSE

Signed-off-by: Yuan Chao <yuanc.fnst@cn.fujitsu.com>
---
recipes-security/scapy/python-scapy.inc | 4 ++--
.../scapy/{python-scapy_2.4.2.bb => python-scapy_2.4.3.bb} | 0
.../scapy/{python3-scapy_2.4.2.bb => python3-scapy_2.4.3.bb} | 0
3 files changed, 2 insertions(+), 2 deletions(-)
rename recipes-security/scapy/{python-scapy_2.4.2.bb => python-scapy_2.4.3.bb} (100%)
rename recipes-security/scapy/{python3-scapy_2.4.2.bb => python3-scapy_2.4.3.bb} (100%)

diff --git a/recipes-security/scapy/python-scapy.inc b/recipes-security/scapy/python-scapy.inc
index baa69b2..28e13f2 100644
--- a/recipes-security/scapy/python-scapy.inc
+++ b/recipes-security/scapy/python-scapy.inc
@@ -3,11 +3,11 @@ DESCRIPTION = "Scapy is a powerful interactive packet manipulation program. It i
SECTION = "security"
LICENSE = "GPLv2"

-LIC_FILES_CHKSUM = "file://bin/scapy;beginline=9;endline=13;md5=1d5249872cc54cd4ca3d3879262d0c69"
+LIC_FILES_CHKSUM = "file://LICENSE;md5=b234ee4d69f5fce4486a80fdaf4a4263"

S = "${WORKDIR}/git"

-SRCREV = "bad14cb1a5aee29f8107fbe8ad008d4645f14da7"
+SRCREV = "3047580162a9407ef05fe981983cacfa698f1159"
SRC_URI = "git://github.com/secdev/scapy.git"

inherit ptest
diff --git a/recipes-security/scapy/python-scapy_2.4.2.bb b/recipes-security/scapy/python-scapy_2.4.3.bb
similarity index 100%
rename from recipes-security/scapy/python-scapy_2.4.2.bb
rename to recipes-security/scapy/python-scapy_2.4.3.bb
diff --git a/recipes-security/scapy/python3-scapy_2.4.2.bb b/recipes-security/scapy/python3-scapy_2.4.3.bb
similarity index 100%
rename from recipes-security/scapy/python3-scapy_2.4.2.bb
rename to recipes-security/scapy/python3-scapy_2.4.3.bb
--
2.17.1


Re: Error trying to generate Raspberry Pi initramfs

Zoran
 

Three things:
[1] The initramfs is NOT the initrd (te second one is the temp
stage in booting the linux to mmcblk...);
[2] There are some config parameters you need to set up in
your kernel .config file:
https://github.com/ZoranStojsavljevic/bbb-yocto/blob/master/custom/config-initramfs
[3] The command line is formed in u-boot or in grub2, or in
your Linux boot loader (you need to add some lines
in ash u-boot config script, as the following example):
https://github.com/ZoranStojsavljevic/bbb-yocto/blob/master/custom/u-boot.ash

Good Luck,
Zoran
_______


On Wed, Aug 28, 2019 at 7:26 PM Greg Wilson-Lindberg
<GWilson@sakuraus.com> wrote:

I'm trying to generate an initramfs for a raspberry pi 3 for a sumo build. We are based off of the Qt boot2qt system.

I have followed the instructions in the meta-raspberrypi.pdf documentation, section 3.14 Image with Initramfs.

I edited the meta-raspberrypi/recipes-kernel/linux/linux-raspberry.inc file and added the variables into my local.conf file. I created a rpi-minimal-initramfs.bb recipe and it is created when I build the system. But the command line that is put into the boot partition is:

dwc_otg.lpm_enable=0 root=/dev/mmcblk0p2 rootfstype=ext4 rootwait fbcon=map:10 fbcon=font:VGA8x8

No initramfs.

In the linux-raspberry.inc file, after the insertion point for the new kernel variables, there is a test for KERNEL_INITRAMFS. I tried setting this in my local.conf file, but when I do I get an error for a missing file:

| /home/..../tmp/deploy/images/raspberrypi3/uImage1-raspberrypi3.bin: No such file or directory

So, apparently that can't be set directly.

There seems to be something missing in the instructions in the meta-raspberrypi.pdf documentation. Anyone that has any experience with setting this up and can help me figure out what I'm missing, I would greatly appreciate the help.

Regards,
Greg Wilson-Lindberg











--
_______________________________________________
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


Error trying to generate Raspberry Pi initramfs

Greg Wilson-Lindberg
 

I'm trying to generate an initramfs for a raspberry pi 3 for a sumo build. We are based off of the Qt boot2qt system.

I have followed the instructions in the meta-raspberrypi.pdf documentation, section 3.14 Image with Initramfs.

I edited the meta-raspberrypi/recipes-kernel/linux/linux-raspberry.inc file and added the variables into my local.conf file. I created a rpi-minimal-initramfs.bb recipe and it is created when I build the system. But the command line that is put into the boot partition is:

dwc_otg.lpm_enable=0 root=/dev/mmcblk0p2 rootfstype=ext4 rootwait fbcon=map:10 fbcon=font:VGA8x8

No initramfs.

In the linux-raspberry.inc file, after the insertion point for the new kernel variables, there is a test for KERNEL_INITRAMFS. I tried setting this in my local.conf file, but when I do I get an error for a missing file:

| /home/..../tmp/deploy/images/raspberrypi3/uImage1-raspberrypi3.bin: No such file or directory

So, apparently that can't be set directly.

There seems to be something missing in the instructions in the meta-raspberrypi.pdf documentation. Anyone that has any experience with setting this up and can help me figure out what I'm missing, I would greatly appreciate the help.

Regards,
Greg Wilson-Lindberg


Re: [meta-selinux][PATCH 1/2] meson-selinux.bbclass: fix meson flags for glib-2.0-native

Joe MacDonald
 

Hi Mikko,

Is this specifically for warrior (or thud), maybe? The following commit
explains the current logic:

commit bb0c9c3abcb935e4b362eb57985e1ee7fec0bfe0
Author: Yi Zhao <yi.zhao@windriver.com>
Date: Wed Jun 12 15:53:20 2019 +0800

glib-2.0: fix configure error for meson build

In glib 2.60.x, it turns selinux into a meson feature. We should use
'-Dselinux=enabled/disabled' rather than '-Dselinux=true/false' to
enable/disable the feature.

Add meso-enable-selinux.bbclass for this change and inherit it in
glib-2.0 bbappend to fix the configure error.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>

and the second patch is already present in tree:

commit 087fe5c8144c246c6361bd8bcbd1ffd9e9b675bb
Author: Yi Zhao <yi.zhao@windriver.com>
Date: Fri Aug 9 17:48:00 2019 +0800

libselinux: fix build with glibc 2.30

Fix build error:
procattr.c:27:14: error: static declaration of 'gettid' follows
non-static declaration
27 | static pid_t gettid(void)
| ^~~~~~
In file included from /buildarea/build/tmp/work/core2-64-poky-linux/libselinux/2.8-r0/recipe-sysroot/usr/include/unistd.h:1170,
from procattr.c:2:
/buildarea/build/tmp/work/core2-64-poky-linux/libselinux/2.8-r0/recipe-sysroot/usr/include/bits/unistd_ext.h:34:16:
note: previous declaration of 'gettid' was here
34 | extern __pid_t gettid (void) __THROW;
| ^~~~~~

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>

This is what my current work tree looks like, for reference:

$ repo forall -p -c git log -1 --pretty=oneline
project meta-openembedded/
2ebaa8df1257389161d0bee9e553c28f63e52005 python3-pyatspi: Add Dbus ATSPI recipe

project meta-selinux/
154654a6fe12206a6b9ad6d8c36a4dbe672bcc46 selinux-python: Fix dependency for ntpath

project yocto-mainline/
ca2207f418b7847ffce4b8c53a5a442e5cf461d9 commands.py: fix typo

-J.

[[yocto] [meta-selinux][PATCH 1/2] meson-selinux.bbclass: fix meson flags for glib-2.0-native] On 19.08.28 (Wed 18:30) Mikko Rapeli wrote:

With latest poky master, glib-2.0-native fails to compile:

| meson.build:1:0: ERROR: Value "false" for combo option is not one of the choices. Possible choices are: "enabled",
"disabled", "auto".

Thus use enabled and disabled when enabling and disabling flags
with meson. Now glib-2.0-native compiles again.

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
---
classes/meson-selinux.bbclass | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/classes/meson-selinux.bbclass b/classes/meson-selinux.bbclass
index 77a763a..91c2a2b 100644
--- a/classes/meson-selinux.bbclass
+++ b/classes/meson-selinux.bbclass
@@ -1,4 +1,4 @@
inherit selinux

PACKAGECONFIG_append = " ${@target_selinux(d)}"
-PACKAGECONFIG[selinux] = "-Dselinux=true,-Dselinux=false,libselinux,"
+PACKAGECONFIG[selinux] = "-Dselinux=enabled,-Dselinux=disabled,libselinux,"
--
1.9.1

--
_______________________________________________
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto
--
-Joe MacDonald.
:wq


[meta-selinux][PATCH 2/2] libselinux: fix build with glibc-2.30 from poky

Mikko Rapeli
 


[meta-selinux][PATCH 1/2] meson-selinux.bbclass: fix meson flags for glib-2.0-native

Mikko Rapeli
 

With latest poky master, glib-2.0-native fails to compile:

| meson.build:1:0: ERROR: Value "false" for combo option is not one of the choices. Possible choices are: "enabled",
"disabled", "auto".

Thus use enabled and disabled when enabling and disabling flags
with meson. Now glib-2.0-native compiles again.

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
---
classes/meson-selinux.bbclass | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/classes/meson-selinux.bbclass b/classes/meson-selinux.bbclass
index 77a763a..91c2a2b 100644
--- a/classes/meson-selinux.bbclass
+++ b/classes/meson-selinux.bbclass
@@ -1,4 +1,4 @@
inherit selinux

PACKAGECONFIG_append = " ${@target_selinux(d)}"
-PACKAGECONFIG[selinux] = "-Dselinux=true,-Dselinux=false,libselinux,"
+PACKAGECONFIG[selinux] = "-Dselinux=enabled,-Dselinux=disabled,libselinux,"
--
1.9.1


[PATCH] selinux-python: Fix dependency for ntpath

Lorenz Kofler <lorenz@...>
 

On yocto warrior the semanage tool didn't work correctly, because it
couldn't find ntpath module. It turned out that this module is now part
of the package python-misc, therefore add dependency to python-misc.

Signed-off-by: Lorenz Kofler <lorenz@sigma-star.at>
---
recipes-security/selinux/selinux-python.inc | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/recipes-security/selinux/selinux-python.inc b/recipes-security/selinux/selinux-python.inc
index c774de4..911d678 100644
--- a/recipes-security/selinux/selinux-python.inc
+++ b/recipes-security/selinux/selinux-python.inc
@@ -44,7 +44,8 @@ RDEPENDS_${BPN}-semanage += "\
python-ipy \
python-compression \
python-xml \
- libselinux-python \
+ python-misc \
+ libselinux-python \
${BPN} \
"
RDEPENDS_${BPN}-sepolicy += "\
--
2.16.4


[meta]/recipes-extended - Sumo Branch

Prawn Hongs <prawnhongs@...>
 

Hi Everyone,

In the Sumo branch, the iptables are not compiling correctly, I see that the xtables.c isn't getting compiled at all.

Here is the recipe for iptables 


Has anyone faced this issue?

Thanks




[meta-security][PATCH] libenv-perl: Remove, moved to meta-perl

Adrian Bunk
 

Signed-off-by: Adrian Bunk <bunk@stusta.de>
---
conf/distro/include/maintainers.inc | 1 -
recipes-perl/perl/libenv-perl_1.04.bb | 21 ---------------------
2 files changed, 22 deletions(-)
delete mode 100644 recipes-perl/perl/libenv-perl_1.04.bb

diff --git a/conf/distro/include/maintainers.inc b/conf/distro/include/maintainers.inc
index 47f5317..7b82ef7 100644
--- a/conf/distro/include/maintainers.inc
+++ b/conf/distro/include/maintainers.inc
@@ -35,7 +35,6 @@ RECIPE_MAINTAINER_pn-hash-perl = "Armin Kuster <akuster808@gmail.com>"
RECIPE_MAINTAINER_pn-isic = "Armin Kuster <akuster808@gmail.com>"
RECIPE_MAINTAINER_pn-keyutils = "Armin Kuster <akuster808@gmail.com>"
RECIPE_MAINTAINER_pn-libaes-siv = "Armin Kuster <akuster808@gmail.com>"
-RECIPE_MAINTAINER_pn-libenv-perl = "Armin Kuster <akuster808@gmail.com>"
RECIPE_MAINTAINER_pn-libgssglue = "Armin Kuster <akuster808@gmail.com>"
RECIPE_MAINTAINER_pn-libhtp = "Armin Kuster <akuster808@gmail.com>"
RECIPE_MAINTAINER_pn-libmhash = "Armin Kuster <akuster808@gmail.com>"
diff --git a/recipes-perl/perl/libenv-perl_1.04.bb b/recipes-perl/perl/libenv-perl_1.04.bb
deleted file mode 100644
index dd8e115..0000000
--- a/recipes-perl/perl/libenv-perl_1.04.bb
+++ /dev/null
@@ -1,21 +0,0 @@
-SUMMARY = "Perl module that imports environment variables as scalars or arrays"
-DESCRIPTION = "Perl maintains environment variables in a special hash named %ENV. \
-For when this access method is inconvenient, the Perl module Env allows environment \
-variables to be treated as scalar or array variables."
-
-HOMEPAGE = "http://search.cpan.org/~flora/Env/"
-SECTION = "libs"
-LICENSE = "Artistic-1.0 | GPL-1.0+"
-
-LIC_FILES_CHKSUM = "file://LICENSE;md5=76c1cbf18db56b3340d91cb947943bd3"
-
-SRC_URI = "http://search.cpan.org/CPAN/authors/id/F/FL/FLORA/Env-${PV}.tar.gz"
-
-SRC_URI[md5sum] = "fdba5c0690e66972c96fee112cf5f25c"
-SRC_URI[sha256sum] = "d94a3d412df246afdc31a2199cbd8ae915167a3f4684f7b7014ce1200251ebb0"
-
-S = "${WORKDIR}/Env-${PV}"
-
-inherit cpan
-
-BBCLASSEXTEND = "native"
--
2.17.1


[meta-security][PATCH] xmlsec1: Remove, moved to meta-oe

Adrian Bunk
 

Signed-off-by: Adrian Bunk <bunk@stusta.de>
---
conf/distro/include/maintainers.inc | 1 -
.../packagegroup-core-security-ptest.bb | 1 -
.../packagegroup-core-security.bb | 1 -
.../xmlsec1/change-finding-path-of-nss.patch | 67 ---------------
.../xmlsec1/xmlsec1/fix-ltmain.sh.patch | 26 ------
.../xmlsec1/xmlsec1/makefile-ptest.patch | 40 ---------
recipes-security/xmlsec1/xmlsec1/run-ptest | 85 -------------------
...examples-allow-build-in-separate-dir.patch | 30 -------
recipes-security/xmlsec1/xmlsec1_1.2.28.bb | 64 --------------
9 files changed, 315 deletions(-)
delete mode 100644 recipes-security/xmlsec1/xmlsec1/change-finding-path-of-nss.patch
delete mode 100644 recipes-security/xmlsec1/xmlsec1/fix-ltmain.sh.patch
delete mode 100644 recipes-security/xmlsec1/xmlsec1/makefile-ptest.patch
delete mode 100755 recipes-security/xmlsec1/xmlsec1/run-ptest
delete mode 100644 recipes-security/xmlsec1/xmlsec1/xmlsec1-examples-allow-build-in-separate-dir.patch
delete mode 100644 recipes-security/xmlsec1/xmlsec1_1.2.28.bb

diff --git a/conf/distro/include/maintainers.inc b/conf/distro/include/maintainers.inc
index 94b45f2..47f5317 100644
--- a/conf/distro/include/maintainers.inc
+++ b/conf/distro/include/maintainers.inc
@@ -56,4 +56,3 @@ RECIPE_MAINTAINER_pn-smack = "Armin Kuster <akuster808@gmail.com>"
RECIPE_MAINTAINER_pn-sssd = "Armin Kuster <akuster808@gmail.com>"
RECIPE_MAINTAINER_pn-suricata = "Armin Kuster <akuster808@gmail.com>"
RECIPE_MAINTAINER_pn-tripwire = "Armin Kuster <akuster808@gmail.com>"
-RECIPE_MAINTAINER_pn-xmlsec1 = "Armin Kuster <akuster808@gmail.com>"
diff --git a/recipes-security/packagegroup/packagegroup-core-security-ptest.bb b/recipes-security/packagegroup/packagegroup-core-security-ptest.bb
index 4934889..ddcf208 100644
--- a/recipes-security/packagegroup/packagegroup-core-security-ptest.bb
+++ b/recipes-security/packagegroup/packagegroup-core-security-ptest.bb
@@ -13,7 +13,6 @@ SUMMARY_${PN} = "Security packages with ptests"
RDEPENDS_${PN} = " \
ptest-runner \
samhain-standalone-ptest \
- xmlsec1-ptest \
keyutils-ptest \
libseccomp-ptest \
python-scapy-ptest \
diff --git a/recipes-security/packagegroup/packagegroup-core-security.bb b/recipes-security/packagegroup/packagegroup-core-security.bb
index 9165eef..20ba46f 100644
--- a/recipes-security/packagegroup/packagegroup-core-security.bb
+++ b/recipes-security/packagegroup/packagegroup-core-security.bb
@@ -29,7 +29,6 @@ RDEPENDS_packagegroup-security-utils = "\
pinentry \
python-scapy \
ding-libs \
- xmlsec1 \
keyutils \
libseccomp \
${@bb.utils.contains("DISTRO_FEATURES", "pam", "sssd", "",d)} \
diff --git a/recipes-security/xmlsec1/xmlsec1/change-finding-path-of-nss.patch b/recipes-security/xmlsec1/xmlsec1/change-finding-path-of-nss.patch
deleted file mode 100644
index 1cec47f..0000000
--- a/recipes-security/xmlsec1/xmlsec1/change-finding-path-of-nss.patch
+++ /dev/null
@@ -1,67 +0,0 @@
-From c1c980a95d85bcaf8802524d6148783522b300d7 Mon Sep 17 00:00:00 2001
-From: Yulong Pei <Yulong.pei@windriver.com>
-Date: Wed, 21 Jul 2010 22:33:43 +0800
-Subject: [PATCH] change finding path of nss and nspr
-
-Upstream-Status: Pending
-
-Signed-off-by: Yulong Pei <Yulong.pei@windriver.com>
-Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
-Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
----
- configure.ac | 20 ++++++++++----------
- 1 file changed, 10 insertions(+), 10 deletions(-)
-
-diff --git a/configure.ac b/configure.ac
-index 951b3eb..1fdeb0f 100644
---- a/configure.ac
-+++ b/configure.ac
-@@ -866,10 +866,10 @@ MOZILLA_MIN_VERSION="1.4"
- NSS_CRYPTO_LIB="$XMLSEC_PACKAGE-nss"
- NSPR_PACKAGE=mozilla-nspr
- NSS_PACKAGE=mozilla-nss
--NSPR_INCLUDE_MARKER="nspr/nspr.h"
-+NSPR_INCLUDE_MARKER="nspr.h"
- NSPR_LIB_MARKER="libnspr4$shrext"
- NSPR_LIBS_LIST="-lnspr4 -lplds4 -lplc4"
--NSS_INCLUDE_MARKER="nss/nss.h"
-+NSS_INCLUDE_MARKER="nss3/nss.h"
- NSS_LIB_MARKER="libnss3$shrext"
- NSS_LIBS_LIST="-lnss3 -lsmime3"
-
-@@ -898,24 +898,24 @@ fi
- dnl Priority 1: User specifies the path to installation
- if test "z$NSPR_FOUND" = "zno" -a "z$with_nspr" != "z" -a "z$with_nspr" != "zyes" ; then
- AC_MSG_CHECKING(for nspr library installation in "$with_nspr" folder)
-- if test -f "$with_nspr/include/$NSPR_INCLUDE_MARKER" -a -f "$with_nspr/lib/$NSPR_LIB_MARKER" ; then
-- NSPR_INCLUDE_PATH="$with_nspr/include"
-- NSPR_LIB_PATH="$with_nspr/lib"
-+ if test -f "$with_nspr/usr/include/$NSPR_INCLUDE_MARKER" -a -f "$with_nspr/${libdir}/$NSPR_LIB_MARKER" ; then
-+ NSPR_INCLUDE_PATH="$with_nspr/usr/include"
-+ NSPR_LIB_PATH="$with_nspr/${libdir}"
- NSPR_FOUND="yes"
- AC_MSG_RESULT([yes])
- else
-- AC_MSG_ERROR([not found: "$with_nspr/include/$NSPR_INCLUDE_MARKER" and/or "$with_nspr/lib/$NSPR_LIB_MARKER" files don't exist), typo?])
-+ AC_MSG_ERROR([not found: "$with_nspr/usr/include/$NSPR_INCLUDE_MARKER" and/or "$with_nspr/${libdir}/$NSPR_LIB_MARKER" files don't exist), typo?])
- fi
- fi
- if test "z$NSS_FOUND" = "zno" -a "z$with_nss" != "z" -a "z$with_nss" != "zyes" ; then
- AC_MSG_CHECKING(for nss library installation in "$with_nss" folder)
-- if test -f "$with_nss/include/$NSS_INCLUDE_MARKER" -a -f "$with_nss/lib/$NSS_LIB_MARKER" ; then
-- NSS_INCLUDE_PATH="$with_nss/include"
-- NSS_LIB_PATH="$with_nss/lib"
-+ if test -f "$with_nss/usr/include/$NSS_INCLUDE_MARKER" -a -f "$with_nss/${libdir}/$NSS_LIB_MARKER" ; then
-+ NSS_INCLUDE_PATH="$with_nss/usr/include/nss3"
-+ NSS_LIB_PATH="$with_nss/${libdir}"
- NSS_FOUND="yes"
- AC_MSG_RESULT([yes])
- else
-- AC_MSG_ERROR([not found: "$with_nss/include/$NSS_INCLUDE_MARKER" and/or "$with_nss/lib/$NSS_LIB_MARKER" files don't exist), typo?])
-+ AC_MSG_ERROR([not found: "$with_nss/usr/include/$NSS_INCLUDE_MARKER" and/or "$with_nss/${libdir}/$NSS_LIB_MARKER" files don't exist), typo?])
- fi
- fi
-
---
-2.7.4
-
diff --git a/recipes-security/xmlsec1/xmlsec1/fix-ltmain.sh.patch b/recipes-security/xmlsec1/xmlsec1/fix-ltmain.sh.patch
deleted file mode 100644
index af598fe..0000000
--- a/recipes-security/xmlsec1/xmlsec1/fix-ltmain.sh.patch
+++ /dev/null
@@ -1,26 +0,0 @@
-From 847dc52f5a50e34ee4d6e3dc2c708711747a58ca Mon Sep 17 00:00:00 2001
-From: Yulong Pei <Yulong.pei@windriver.com>
-Date: Thu, 21 Jan 2010 14:11:20 +0800
-Subject: [PATCH] force to use our own libtool
-
-Upstream-Status: Inappropriate [ OE specific ]
-
-Signed-off-by: Yulong Pei <Yulong.pei@windriver.com>
-
----
- ltmain.sh | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/ltmain.sh b/ltmain.sh
-index 147d758..a61f16b 100644
---- a/ltmain.sh
-+++ b/ltmain.sh
-@@ -6969,7 +6969,7 @@ func_mode_link ()
- dir=$func_resolve_sysroot_result
- # We need an absolute path.
- case $dir in
-- [\\/]* | [A-Za-z]:[\\/]*) ;;
-+ =* | [\\/]* | [A-Za-z]:[\\/]*) ;;
- *)
- absdir=`cd "$dir" && pwd`
- test -z "$absdir" && \
diff --git a/recipes-security/xmlsec1/xmlsec1/makefile-ptest.patch b/recipes-security/xmlsec1/xmlsec1/makefile-ptest.patch
deleted file mode 100644
index d453569..0000000
--- a/recipes-security/xmlsec1/xmlsec1/makefile-ptest.patch
+++ /dev/null
@@ -1,40 +0,0 @@
-From 83a1381e1d6bd1b5ec3df6f7c4bc1f4fe4f860b6 Mon Sep 17 00:00:00 2001
-From: Jackie Huang <jackie.huang@windriver.com>
-Date: Thu, 15 Jun 2017 14:44:01 +0800
-Subject: [PATCH] xmlsec1: add new recipe
-
-This enables the building of the examples directory
-and it's installed as ptest.
-
-Upstream-Status: Inappropriate [ OE ptest specific ]
-
-Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
-
----
- examples/Makefile | 12 ++++++++++--
- 1 file changed, 10 insertions(+), 2 deletions(-)
-
-diff --git a/examples/Makefile b/examples/Makefile
-index 89b1d61..c1cbcca 100644
---- a/examples/Makefile
-+++ b/examples/Makefile
-@@ -8,9 +8,17 @@ PROGRAMS = \
- decrypt1 decrypt2 decrypt3 \
- xmldsigverify
-
-+ifndef CC
- CC = gcc
--CFLAGS += -g $(shell xmlsec1-config --cflags) -DUNIX_SOCKETS
--LDLIBS += -g $(shell xmlsec1-config --libs)
-+endif
-+
-+CFLAGS += -I../include -g $(shell PKG_CONFIG_PATH=.. pkg-config --cflags xmlsec1 ) -DUNIX_SOCKETS
-+LDLIBS += -L../src/.libs -g $(shell PKG_CONFIG_PATH=.. pkg-config --libs xmlsec1 )
-+
-+DESTDIR = /usr/share/xmlsec1
-+install-ptest:
-+ if [ ! -d $(DESTDIR) ]; then mkdir -p $(DESTDIR); fi
-+ cp * $(DESTDIR)
-
- all: $(PROGRAMS)
-
diff --git a/recipes-security/xmlsec1/xmlsec1/run-ptest b/recipes-security/xmlsec1/xmlsec1/run-ptest
deleted file mode 100755
index a203c38..0000000
--- a/recipes-security/xmlsec1/xmlsec1/run-ptest
+++ /dev/null
@@ -1,85 +0,0 @@
-#!/bin/sh
-
-check_return() {
- if [ $? == 0 ]; then
- echo -e "PASS: $1\n"
- else
- echo -e "FAIL: $1\n"
- fi
-}
-
-echo "---------------------------------------------------"
-echo "Signing a template file..."
-./sign1 sign1-tmpl.xml rsakey.pem > sign1-res.xml
-./verify1 sign1-res.xml rsapub.pem
-check_return sign-tmpl
-
-echo "---------------------------------------------------"
-echo "Signing a dynamicaly created template..."
-./sign2 sign2-doc.xml rsakey.pem > sign2-res.xml
-./verify1 sign2-res.xml rsapub.pem
-check_return sign-dynamic-templ
-
-echo "---------------------------------------------------"
-echo "Signing with X509 certificate..."
-./sign3 sign3-doc.xml rsakey.pem rsacert.pem > sign3-res.xml
-./verify3 sign3-res.xml ca2cert.pem cacert.pem
-check_return sign-x509
-
-echo "---------------------------------------------------"
-echo "Verifying a signature with a single key..."
-./verify1 sign1-res.xml rsapub.pem
-./verify1 sign2-res.xml rsapub.pem
-check_return verify-single-key
-
-echo "---------------------------------------------------"
-echo "Verifying a signature with keys manager..."
-./verify2 sign1-res.xml rsapub.pem
-./verify2 sign2-res.xml rsapub.pem
-check_return verify-keys-manager
-
-echo "---------------------------------------------------"
-echo "Verifying a signature with X509 certificates..."
-./verify3 sign3-res.xml ca2cert.pem cacert.pem
-check_return verify-x509
-
-echo "---------------------------------------------------"
-echo "Verifying a signature with additional restrictions..."
-./verify4 verify4-res.xml ca2cert.pem cacert.pem
-check_return verify-res
-
-echo "---------------------------------------------------"
-echo "Encrypting data with a template file..."
-./encrypt1 encrypt1-tmpl.xml deskey.bin > encrypt1-res.xml
-./decrypt1 encrypt1-res.xml deskey.bin
-check_return encrypt-tmpl
-
-echo "---------------------------------------------------"
-echo "Encrypting data with a dynamicaly created template..."
-./encrypt2 encrypt2-doc.xml deskey.bin > encrypt2-res.xml
-./decrypt1 encrypt2-res.xml deskey.bin
-check_return encrypt-dynamic-tmpl
-
-echo "---------------------------------------------------"
-echo "Encrypting data with a session key..."
-./encrypt3 encrypt3-doc.xml rsakey.pem > encrypt3-res.xml
-./decrypt3 encrypt3-res.xml
-check_return encrypt-session-key
-
-echo "---------------------------------------------------"
-echo "Decrypting data with a single key..."
-./decrypt1 encrypt1-res.xml deskey.bin
-./decrypt1 encrypt2-res.xml deskey.bin
-check_return encrypt-single-key
-
-echo "---------------------------------------------------"
-echo "Decrypting data with keys manager..."
-./decrypt2 encrypt1-res.xml deskey.bin
-./decrypt2 encrypt2-res.xml deskey.bin
-check_return encrypt-keys-manager
-
-echo "---------------------------------------------------"
-echo "Writing a custom keys manager..."
-./decrypt3 encrypt1-res.xml
-./decrypt3 encrypt2-res.xml
-check_return write-keys-manager
diff --git a/recipes-security/xmlsec1/xmlsec1/xmlsec1-examples-allow-build-in-separate-dir.patch b/recipes-security/xmlsec1/xmlsec1/xmlsec1-examples-allow-build-in-separate-dir.patch
deleted file mode 100644
index 8b2533e..0000000
--- a/recipes-security/xmlsec1/xmlsec1/xmlsec1-examples-allow-build-in-separate-dir.patch
+++ /dev/null
@@ -1,30 +0,0 @@
-From 0c38c6864e7ba8f53a657d87894f24374a6a4932 Mon Sep 17 00:00:00 2001
-From: Jackie Huang <jackie.huang@windriver.com>
-Date: Tue, 30 Dec 2014 11:18:17 +0800
-Subject: [PATCH] examples: allow build in separate dir
-
-Upstream-Status: Inappropriate [ OE specific ]
-
-Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
-
----
- examples/Makefile | 6 ++++--
- 1 file changed, 4 insertions(+), 2 deletions(-)
-
-diff --git a/examples/Makefile b/examples/Makefile
-index c1cbcca..3f1bd14 100644
---- a/examples/Makefile
-+++ b/examples/Makefile
-@@ -12,8 +12,10 @@ ifndef CC
- CC = gcc
- endif
-
--CFLAGS += -I../include -g $(shell PKG_CONFIG_PATH=.. pkg-config --cflags xmlsec1 ) -DUNIX_SOCKETS
--LDLIBS += -L../src/.libs -g $(shell PKG_CONFIG_PATH=.. pkg-config --libs xmlsec1 )
-+top_srcdir = ..
-+top_builddir = ..
-+CFLAGS += -I$(top_srcdir)/include -g $(shell PKG_CONFIG_PATH=$(top_srcdir) pkg-config --cflags xmlsec1 ) -DUNIX_SOCKETS
-+LDLIBS += -L$(top_builddir)/src/.libs -g $(shell PKG_CONFIG_PATH=$(top_srcdir) pkg-config --libs xmlsec1 )
-
- DESTDIR = /usr/share/xmlsec1
- install-ptest:
diff --git a/recipes-security/xmlsec1/xmlsec1_1.2.28.bb b/recipes-security/xmlsec1/xmlsec1_1.2.28.bb
deleted file mode 100644
index 0a4c56a..0000000
--- a/recipes-security/xmlsec1/xmlsec1_1.2.28.bb
+++ /dev/null
@@ -1,64 +0,0 @@
-SUMMARY = "XML Security Library is a C library based on LibXML2"
-DESCRIPTION = "\
- XML Security Library is a C library based on \
- LibXML2 and OpenSSL. The library was created with a goal to support major \
- XML security standards "XML Digital Signature" and "XML Encryption". \
- "
-HOMEPAGE = "http://www.aleksey.com/xmlsec/"
-DEPENDS = "libtool libxml2 libxslt zlib"
-
-LICENSE = "MIT"
-LIC_FILES_CHKSUM = "file://COPYING;md5=352791d62092ea8104f085042de7f4d0"
-
-SECTION = "libs"
-
-SRC_URI = "http://www.aleksey.com/xmlsec/download/${BP}.tar.gz \
- file://fix-ltmain.sh.patch \
- file://change-finding-path-of-nss.patch \
- file://makefile-ptest.patch \
- file://xmlsec1-examples-allow-build-in-separate-dir.patch \
- file://run-ptest \
- "
-
-SRC_URI[md5sum] = "69b8d95c009a404462e19f335e650241"
-SRC_URI[sha256sum] = "13eec4811ea30e3f0e16a734d1dbf7f9d246a71d540b48d143a07b489f6222d4"
-
-inherit autotools-brokensep ptest pkgconfig
-
-CFLAGS += "-I${STAGING_INCDIR}/nspr4 -I${STAGING_INCDIR}/nss3"
-CPPFLAGS += "-I${STAGING_INCDIR}/nspr4 -I${STAGING_INCDIR}/nss3"
-
-PACKAGECONFIG ??= "gnutls libgcrypt nss openssl des"
-PACKAGECONFIG[gnutls] = ",,gnutls"
-PACKAGECONFIG[libgcrypt] = ",,libgcrypt"
-PACKAGECONFIG[nss] = "--with-nss=${STAGING_LIBDIR}/../.. --with-nspr=${STAGING_LIBDIR}/../..,,nss nspr"
-PACKAGECONFIG[openssl] = ",,openssl"
-PACKAGECONFIG[des] = ",--disable-des,,"
-
-# these can be dynamically loaded with xmlSecCryptoDLLoadLibrary()
-FILES_SOLIBSDEV = "${libdir}/libxmlsec1.so"
-FILES_${PN} += "${libdir}/libxmlsec1-*.so"
-INSANE_SKIP_${PN} = "dev-so"
-
-FILES_${PN}-dev += "${libdir}/xmlsec1Conf.sh"
-FILES_${PN}-dbg += "${PTEST_PATH}/.debug/*"
-
-RDEPENDS_${PN}-ptest += "${PN}-dev"
-INSANE_SKIP_${PN}-ptest += "dev-deps"
-
-PTEST_EXTRA_ARGS = "top_srcdir=${S} top_builddir=${B}"
-
-do_compile_ptest () {
- oe_runmake -C ${S}/examples ${PTEST_EXTRA_ARGS} all
-}
-
-do_install_append() {
- for i in ${bindir}/xmlsec1-config ${libdir}/xmlsec1Conf.sh \
- ${libdir}/pkgconfig/xmlsec1-openssl.pc; do
- sed -i -e "s@${RECIPE_SYSROOT}@@g" ${D}$i
- done
-}
-
-do_install_ptest () {
- oe_runmake -C ${S}/examples DESTDIR=${D}${PTEST_PATH} ${PTEST_EXTRA_ARGS} install-ptest
-}
--
2.17.1


Re: MySql python support in Yocto.

Marek Belisko
 

Hi Mauro,

On Wed, Aug 28, 2019 at 6:14 AM Mauro Ziliani <mauro@faresoftware.it> wrote:

Hi all.

There is some library for MariaDB/MySql in Python3 in Yocto?
You can check: https://layers.openembedded.org/layerindex/recipe/4825/


Best regards.

MZ

--
_______________________________________________
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto
BR,

marek

--
as simple and primitive as possible
-------------------------------------------------
Marek Belisko - OPEN-NANDRA
Freelance Developer

Ruska Nova Ves 219 | Presov, 08005 Slovak Republic
Tel: +421 915 052 184
skype: marekwhite
twitter: #opennandra
web: http://open-nandra.com


MySql python support in Yocto.

Mauro Ziliani
 

Hi all.

There is some library for MariaDB/MySql in Python3 in Yocto?


Best regards.

  MZ


[meta-security][PATCH 2/2] ecryptfs-utils: fix race condition in do_install

Chen Qi
 

The rootsbindir is a self-defined directory. The install-rootsbinPROGRAMS
is actually treated as part of install-data instead of install-exec.

Do making install-exec-am depend on it actually results in the following
Makefile contents.

install-data-am: install-rootsbinPROGRAMS
install-exec-am: install-binPROGRAMS install-binSCRIPTS
@$(NORMAL_INSTALL)
$(MAKE) $(AM_MAKEFLAGS) install-exec-hook
install-exec-hook: install-rootsbinPROGRAMS

And this results in race condition as two install commands of the same
file running at the same time. Error message is like below.

TOPDIR/tmp-glibc/hosttools/install: cannot create regular file 'TOPDIR/tmp-glibc/work/aarch64-wrs-linux/ecryptfs-utils/111-r0/image/sbin/mount.ecryptfs': File exists

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
---
.../ecryptfs-utils/ecryptfs-utils_111.bb | 1 +
.../files/0001-avoid-race-condition.patch | 32 +++++++++++++++++++
2 files changed, 33 insertions(+)
create mode 100644 recipes-security/ecryptfs-utils/files/0001-avoid-race-condition.patch

diff --git a/recipes-security/ecryptfs-utils/ecryptfs-utils_111.bb b/recipes-security/ecryptfs-utils/ecryptfs-utils_111.bb
index 8e498c9..e45ee0b 100644
--- a/recipes-security/ecryptfs-utils/ecryptfs-utils_111.bb
+++ b/recipes-security/ecryptfs-utils/ecryptfs-utils_111.bb
@@ -14,6 +14,7 @@ DEPENDS = "keyutils libgcrypt intltool-native glib-2.0-native"
SRC_URI = "\
https://launchpad.net/ecryptfs/trunk/${PV}/+download/${BPN}_${PV}.orig.tar.gz \
file://ecryptfs-utils-CVE-2016-6224.patch \
+ file://0001-avoid-race-condition.patch \
file://ecryptfs.service \
"

diff --git a/recipes-security/ecryptfs-utils/files/0001-avoid-race-condition.patch b/recipes-security/ecryptfs-utils/files/0001-avoid-race-condition.patch
new file mode 100644
index 0000000..af28d58
--- /dev/null
+++ b/recipes-security/ecryptfs-utils/files/0001-avoid-race-condition.patch
@@ -0,0 +1,32 @@
+From ab671b02e3aaf65dd1fd279789ea933b8140fe52 Mon Sep 17 00:00:00 2001
+From: Chen Qi <Qi.Chen@windriver.com>
+Date: Tue, 27 Aug 2019 16:08:00 +0800
+Subject: [PATCH] avoid race condition
+
+The rootsbin directory is self defined. The install-rootsbinPROGRAMS
+is actually treated as part of install-data.
+
+This would avoid race condition which causes install failure.
+
+Upstream-Status: Pending
+
+Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
+---
+ src/utils/Makefile.am | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/utils/Makefile.am b/src/utils/Makefile.am
+index 83cf851..344883a 100644
+--- a/src/utils/Makefile.am
++++ b/src/utils/Makefile.am
+@@ -67,6 +67,6 @@ ecryptfs_stat_LDADD = $(top_builddir)/src/libecryptfs/libecryptfs.la
+ test_SOURCES = test.c io.c
+ test_LDADD = $(top_builddir)/src/libecryptfs/libecryptfs.la
+
+-install-exec-hook: install-rootsbinPROGRAMS
++install-data-hook: install-rootsbinPROGRAMS
+ -rm -f "$(DESTDIR)/$(rootsbindir)/umount.ecryptfs_private"
+ $(LN_S) "mount.ecryptfs_private" "$(DESTDIR)/$(rootsbindir)/umount.ecryptfs_private"
+--
+2.17.1
+
--
2.17.1


[meta-security][PATCH 1/2] ecryptfs-utils: remove openssl PACKAGECONFIG

Chen Qi
 

ecryptfs-utils does not build with openssl1.1.

Previously this openssl PACKAGECONFIG is disabled by default, so
we are not getting build failures by default. But if we enable it,
we get do_compile failure.

This package is from ubuntu source, and the one ubuntu ships does not
depend on openssl. The development of this package has stopped for about
3 years. I don't see it will fix the build offically.

So remove this PACKAGECONFIG and use '--disable-openssl' directly.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
---
recipes-security/ecryptfs-utils/ecryptfs-utils_111.bb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/recipes-security/ecryptfs-utils/ecryptfs-utils_111.bb b/recipes-security/ecryptfs-utils/ecryptfs-utils_111.bb
index 1f780f9..8e498c9 100644
--- a/recipes-security/ecryptfs-utils/ecryptfs-utils_111.bb
+++ b/recipes-security/ecryptfs-utils/ecryptfs-utils_111.bb
@@ -30,13 +30,13 @@ EXTRA_OECONF = "\
--disable-pywrap \
--disable-nls \
--with-pamdir=${base_libdir}/security \
+ --disable-openssl \
"

PACKAGECONFIG ??= "nss \
${@bb.utils.filter('DISTRO_FEATURES', 'pam', d)} \
"
PACKAGECONFIG[nss] = "--enable-nss,--disable-nss,nss,"
-PACKAGECONFIG[openssl] = "--enable-openssl,--disable-openssl,openssl,"
PACKAGECONFIG[pam] = "--enable-pam,--disable-pam,libpam,"

do_configure_prepend() {
--
2.17.1


Re: Build break in the latest openbmc tree.

Brad Bishop
 

On Sun, 2019-08-25 at 10:49 -0700, akuster808 wrote:
the meta-security layer should be fix now.

please update and let me know if not.
Thanks Armin!

Jae, I've pulled this into OpenBMC. Can you give it a try?

-brad


Re: [meta-mingw] QEMU on thud mingw SDK is broken

Joshua Watt
 

On 8/26/19 9:55 PM, Sinan Kaya wrote:
On 8/26/2019 9:47 PM, Joshua Watt wrote:
No, I don't think that is supported. Just to make sure, did you try
building with

SDKMACHINE = "x86_64-mingw32"

to try building the entire SDK as 64-bit?
Yup, that's what I have been using.

SDKMACHINE = "x86_64-mingw32"
Hmm, we are actually building the mingw-w64 runtime libraries (see meta-mingw/recipes-devtools/mingw-w64), and compiling for 64-bit, so I'm not sure where qemu is getting hung up. Perhaps there is something preventing it from detecting this?


7441 - 7460 of 53882