Date   

[meta-security][PATCH 1/4] libseccomp: fix ptest failures.

akuster
 

Fixes:
BusyBox v1.32.0 () multi-call binary.
Usage: dd [if=FILE] [of=FILE] [bs=N] [count=N] [skip=N]

Don't use Busybox dd, not compatable. Use coreutils

Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
recipes-security/libseccomp/libseccomp_2.5.0.bb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/recipes-security/libseccomp/libseccomp_2.5.0.bb b/recipes-security/libseccomp/libseccomp_2.5.0.bb
index 35365d5..0cf2d70 100644
--- a/recipes-security/libseccomp/libseccomp_2.5.0.bb
+++ b/recipes-security/libseccomp/libseccomp_2.5.0.bb
@@ -45,4 +45,4 @@ do_install_ptest() {
FILES_${PN} = "${bindir} ${libdir}/${BPN}.so*"
FILES_${PN}-dbg += "${libdir}/${PN}/tests/.debug/* ${libdir}/${PN}/tools/.debug"

-RDEPENDS_${PN}-ptest = "bash"
+RDEPENDS_${PN}-ptest = "coreutils bash"
--
2.17.1


Re: [meta-security][zeus][PATCH 1/1] clamav: add INSTALL_CLAMAV_CVD flag to do_install

Charlie Davies
 

Hi Armin,

A reminder that this patch is waiting to be signed off.

Many Thanks,

Charlie


Re: #yocto #linux #systemd Having issues building command line utilities: ntpq, timedatectl, and ntpstat into kernel image #systemd #yocto #linux

Monsees, Steven C (US)
 

Thanks...

Yesterday I decided to go with ntpq/ntpdate/and a ntpstat script which does some basic stats through ntpd/ntpq/ntpdate and Chrony. We will see how it goes might be enough...

Steve

-----Original Message-----
From: Khem Raj [mailto:raj.khem@gmail.com]
Sent: Wednesday, September 30, 2020 1:15 AM
To: Monsees, Steven C (US) <steven.monsees@baesystems.com>
Cc: yocto@lists.yoctoproject.org
Subject: Re: [yocto] #yocto #linux #systemd Having issues building command line utilities: ntpq, timedatectl, and ntpstat into kernel image

*** WARNING ***
EXTERNAL EMAIL -- This message originates from outside our organization.


what all functionality are you looking for. E.g. there is date utility and hwclock utility which can help you manipulate system time. you could also look into ntpd and/or chrony for Network time setting etc.

On Tue, Sep 29, 2020 at 11:05 AM Monsees, Steven C (US) via lists.yoctoproject.org <steven.monsees=baesystems.com@lists.yoctoproject.org> wrote:


Currently not using system as our default init system (investigating why but this might not be an option).

Is there any other utility I might use under Yocto to get similar data as that produced by timedatectl ?

Thanks,
Steve


Warrior uninative

Anders Montonen
 

Hi,

The checksum of <https://downloads.yoctoproject.org/releases/uninative/2.7/x86_64-nativesdk-libc.tar.xz> doesn’t match what’s specified in yocto-uninative.inc. The actual checksum seems to match an older commit, so at least there’s nothing untowards going on.

I realize that the Warrior branch is officially EOL, but I still think this should be fixed.

Regards,
Anders Montonen


development package in rootfs

Marek Belisko
 

Hi,

I'm facing some strange issue that after my image rebuild I see in
do_rootfs log that the -dev package of some go application is
installed. Which is not what I want and I'm not sure how it get to
rootfs because I don't have explicitly set -dev package. Any ideas how
to debug it? I'm using rocko poky release.

Thanks and BR,

marek

--
as simple and primitive as possible
-------------------------------------------------
Marek Belisko - OPEN-NANDRA
Freelance Developer

Ruska Nova Ves 219 | Presov, 08005 Slovak Republic
Tel: +421 915 052 184
skype: marekwhite
twitter: #opennandra
web: http://open-nandra.com


Re: #yocto #linux #systemd Having issues building command line utilities: ntpq, timedatectl, and ntpstat into kernel image #systemd #yocto #linux

Zoran
 

Is there documentation on how to set this up ?
Please, try this:

https://github.com/ZoranStojsavljevic/bbb-yocto/blob/master/bbb-releases/bbb-dunfell/local.conf

This is the systemd addendum in my BBB Dunfell local.conf :

## Add systemd service
DISTRO_FEATURES_BACKFILL_CONSIDERED += "sysvinit"
VIRTUAL-RUNTIME_init_manager = "systemd"
VIRTUAL-RUNTIME_dev_manager = "systemd"
VIRTUAL-RUNTIME_initscripts = ""

With systemd added, you'll inherit timedatectl tool.

Best Regards,
Zoran
_______

On Tue, Sep 29, 2020 at 5:57 PM Monsees, Steven C (US) via
lists.yoctoproject.org
<steven.monsees=baesystems.com@lists.yoctoproject.org> wrote:


Is there documentation on how to set this up ?

-----Original Message-----
From: yocto@lists.yoctoproject.org [mailto:yocto@lists.yoctoproject.org] On Behalf Of Quentin Schulz
Sent: Tuesday, September 29, 2020 11:53 AM
To: Monsees, Steven C (US) <steven.monsees@baesystems.com>
Cc: yocto@lists.yoctoproject.org
Subject: Re: [yocto] #yocto #linux #systemd Having issues building command line utilities: ntpq, timedatectl, and ntpstat into kernel image

*** WARNING ***
EXTERNAL EMAIL -- This message originates from outside our organization.


Hi Steve,

On Tue, Sep 29, 2020 at 08:45:56AM -0700, Monsees, Steven C (US) via lists.yoctoproject.org wrote:
I currently have "ntpq" building and installing correctly...

Can someone tell me what it takes to get the "timedatectl" command utility built into Yocto kernel image ?

I see it referenced in both :

openembedded-core/meta/recipes-core/systemd/systemd_234.bb: ${bindir}/timedatectl \
poky/meta/recipes-core/systemd/systemd_234.bb: ${bindir}/timedatectl \
It comes with systemd. Use it as your init system and then you'll have the command.

Quentin



Kernel panic after failing to load libssl.so.1.0.0 #kernel

aravind.chittapur@...
 

I have patched busybox httpd with open ssl APIs to support https. I have patched Makefile.flags to include opessl library as below.
-------------------------------------
--- busybox-1.23.2/Makefile.flags 2020-05-25 13:52:54.424147022 +0200
+++ busybox-1.23.2/Makefile_edit.flags 2020-05-25 14:18:23.328520511 +0200
@@ -126,6 +126,10 @@
 LDLIBS += m
 endif
 
+# Openssl Library
+#LDLIBS += openssl
+LDLIBS += m ssl
+
 ifeq ($(CONFIG_PAM),y)
 # libpam uses libpthread, so for static builds busybox must be linked to
 # libpthread. On some platforms that requires an explicit -lpthread, so
--------------------------------------------------------
I am able to rebake busybox without any errors. I tested the https functionality by pushing the busybox binary using adb to the /data/ folder. 
When I flash the firmware image to the board, while booting the kernel I get the following error.
"/bin/sh: error while loading shared libraries: libssl.so.1.0.0: cannot open shared object file: No such file or directory"
After this Kernel panic happens. 
libssl.so.1.0.0 is present in /usr/lib. I don't why it fails to load. I need help in resolving this problem.

Thanks,
Aravind



Re: #yocto #linux #systemd Having issues building command line utilities: ntpq, timedatectl, and ntpstat into kernel image #systemd #yocto #linux

Khem Raj
 

what all functionality are you looking for. E.g. there is date utility
and hwclock utility which can help you manipulate system time. you
could also look into ntpd and/or chrony for Network time setting etc.

On Tue, Sep 29, 2020 at 11:05 AM Monsees, Steven C (US) via
lists.yoctoproject.org
<steven.monsees=baesystems.com@lists.yoctoproject.org> wrote:



Currently not using system as our default init system (investigating why but this might not be an option).

Is there any other utility I might use under Yocto to get similar data as that produced by timedatectl ?

Thanks,
Steve


OpenEmbedded Happy Hour September 30 9pm/2100 UTC

Denys Dmytriyenko
 

Just a reminder about our upcoming OpenEmbedded Happy Hour on September 30 for
Oceania/Asia timezones @ 2100/9pm UTC (5pm EDT):

https://www.openembedded.org/wiki/Calendar
https://www.timeanddate.com/worldclock/fixedtime.html?msg=OpenEmbedded+Happy+Hour+September+30&;iso=20200930T21

--
Denys


[PATCH yocto-autobuilder-helper] config.json: QAMAIL_CC => qa-build-notification

Tim Orling
 

From: Tim Orling <timothy.t.orling@linux.intel.com>

Replace the hard-coded individual email addresses with
the mailing list created for this purpose:

qa-build-notification@lists.yoctoproject.org

Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
---
config.json | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config.json b/config.json
index 9d66d48..d65c0f4 100644
--- a/config.json
+++ b/config.json
@@ -16,7 +16,7 @@
"TRASH_DIR" : "${BASE_HOMEDIR}/git/trash",

"QAMAIL_TO" : "yocto@lists.yoctoproject.org",
- "QAMAIL_CC" : "otavio@ossystems.com.br, yi.zhao@windriver.com, apoorv.sangal@intel.com, ee.peng.yeoh@intel.com, aaron.chun.yew.chan@intel.com, richard.purdie@linuxfoundation.org, akuster808@gmail.com, sjolley.yp.pm@gmail.com, sangeeta.jain@intel.com",
+ "QAMAIL_CC" : "qa-build-notification@lists.yoctoproject.org",
"WEBPUBLISH_DIR" : "${BASE_SHAREDDIR}/",
"WEBPUBLISH_URL" : "https://autobuilder.yocto.io/";,

--
2.25.0


Yocto Technical Team Minutes, Engineering Sync, for September 29, 2020

Trevor Woerner
 

Yocto Technical Team Minutes, Engineering Sync, for September 29, 2020
archive: https://docs.google.com/document/d/1ly8nyhO14kDNnFcW2QskANXW3ZT7QwKC5wWVDg9dDH4/edit

== disclaimer ==
Best efforts are made to ensure the below is accurate and valid. However,
errors sometimes happen. If any errors or omissions are found, please feel
free to reply to this email with any corrections.

== attendees ==
Trevor Woerner, Stephen Jolly, Saul Wold, Armin Kuster, Richard Purdie,
Bruce Ashfield, Jon Mason, Michael Halstead, David Reyna, Jeremy Puhlman,
Jan-Simon Möller, Ross Burton, Paul Barker, Scott Murray, Tim Orling,
Steve Sakoman, Randy MacLeod, <phone-in>, Alejandro H

== notes ==
- M3-rc2 through QA, release for later this week
- 3.1.3 in QA, release Thur or Fri this week
- more AB issues resolved, but many remain
- --x corruption in pseudo, probably undetected in many cases

== general ==
RP: 2 of 5 bugs fixed against M3-rc1, so we’re ready to move on

RP: the pseudo issue explains strange bugs we’ve seen over the years
Randy: any solutions?
RP: seems worrying, Peter thinks it should abort. with the aborts it only gets
through 2-3 tasks before aborting
PaulB: can we do something when non-pseudo tries to touch these paths?
RP: pseudo assumes it has 100% access to the entire system, but there are
things we change outside pseudo (which are fine), so we need a patch to
tell pseudo to restrict what it can see, but the ignore-list isn’t
complete. e.g. pseudo and qemu don’t get along so we stop pseudo to run
qemu, qemu then touches files that pseudo controls, but we can’t tell
which files were touched

RP: despite all the changes we’ve made, we’re still seeing timeout issues
on the AB

ScottM: could we scan a set of directories
RP: we could do an integrity check, the problem is deciding when to do it.
there are a number of tasks that run in parallel, so the trick is figuring
out when to do the integrity check.
ScottM: how amenable is that to someone helping without deep knowledge of
pseudo?
RP: once it’s down to analysing individual changes, we should be fine
ScottM: do we need a failed build to work on?
RP: no, with the aborts in place the issues crop up quickly
J-SM: could the abort patch be made available conditionally so people can dig
in?
RP: possibly. the build dies very quickly with the patch, so if we can get to
a certain point before failing then others can jump in
PaulB: other distros use fakeroot, is it worth looking elsewhere for ideas?
RP: we use pseudo because fakeroot had massive issues that didn’t map well
to what we’re doing (not sure if these have all been addressed) e.g. if
you open a shell and do the whole build sequentially in that one shell,
then fakeroot will work fine. but with us we use different tasks, in
parallel, etc which fakeroot doesn’t support
RP: these issues tend to only appear because of the heavy heavy load of the
build servers, these most likely won’t affect people doing “normal”
builds on mostly not-overloaded systems. i.e. the inodes are re-used very
quickly on our AB infrastructure

RP: i have some patches in master-next which i’ll push later this week. but
it raises the question about what to do regarding -stable
J-SM: i suggest doing the same, make the patch optionally available
RP: i’ll try to get it working somewhat so others can jump in more easily
Randy: things generally look good
RP: i think this bug’s been here a long time, but was exacerbated by
recipe-specific sysroots, these generate a *tonne* of database entries
RP: the only way people might have noticed this in the past is if someone did
a binary compare
Randy: right, but nobody’s complained about /bin/ls not having --x (for
example)
Jeremy: i’m guessing the issue has been around since 2.4 (Rocko). we have
been seeing issues where random executables would be missing --x
PaulB: we have to make sure to not attribute this issue to too many bugs

PaulB: Randy and i emailed the maintainers of meta-rust to bring rust support
in during the next development cycle. looks good so far
Randy: i have a patch
PaulB: and the patch adds the fetcher into bitbake

TW: OE happy hour tomorrow

TW: there was a discussion re default values, any resolution?
RP: nobody liked any of the suggestions well enough, so it faded

PaulB: inclusive language: add to contribution guidelines? the contributing
guideline only appears in the wiki, should we have something at the
top-level of the repository?
RP: go for it, anything to help new users


[meta-virtualization] How to enable libvirt to work with XEN on a custom board. #yocto #meta-virtualization

daparrag@...
 

Dear all, 

In the past days I was looking for some documentation that allows me to enable libvirt to work with xen. In my current implementation I managed to run XEN on DOM0 but unluckly I am having problems to make it works with libvirt. 
I had followed all the recommendations listed on  http://git.yoctoproject.org/cgit.cgi/meta-virtualization/tree/README but nothing works for me. 

when I added libvirt in my packages I got the same error discribed on : https://www.yoctoproject.org/pipermail/meta-virtualization/2016-March/001835.html

any Idea of how can I enable libvirt to work with xen?
do you have some .bbappend that works out of the box?

Please let me know. 

Configuration:
YOCTO version => rocko


Re: [yocto-builds] relocate_sdk.py is failing when installing yocto3.1.2 SDK

Ansurivijay Ramana <ansurivijay.r@...>
 

Classification: HCL Internal

Hi Randi,

 

I’m using poky distro.

 

DISTRO ?= "poky"

 

Using Ubuntu 16.04 LTS machine. Python version available in ubuntu machine is

 

/usr/bin/python3 --version

Python 3.5.2

 

 

Python version available in distro is 3.8.2

 

tmp/work/core2-32-poky-linux/python3/3.8.2-r0/

 

 

 

Thanks & Regards,

Vijay

 

From: Randy MacLeod <randy.macleod@...>
Sent: Thursday, September 17, 2020 9:40 PM
To: Ansurivijay Ramana <ansurivijay.r@...>; Yocto discussion list <yocto@...>
Subject: Re: [yocto-builds] relocate_sdk.py is failing when installing yocto3.1.2 SDK

 

[CAUTION: This Email is from outside the Organization. Unless you trust the sender, Don’t click links or open attachments as it may be a Phishing email, which can steal your Information and compromise your Computer.]

Hi Vijay,

 

I have redirected this thread to the main yocto list.

The yocto-builds list is for automated build outputs

rather than discussions.

 

 

What distro are you using?

What version of python3 is provided by that distro?

On Ubu-20.04, fyi:

$ grep python3 /.../oe-core.git/scripts/relocate_sdk.py
#!/usr/bin/env python3

$ python3 --version
Python 3.8.2

 

../Randy

 

On 2020-09-17 9:49 a.m., Ansurivijay Ramana wrote:

Classification: HCL Internal

Hi ,

 

I have added my layer and builded the SDK in yocto 3.1.2 but relocate_sdk.py is failing when installing.

 

Please help me in fixing this.

 

./poky-glibc-x86_64-core-image-sato-sdk-core2-32-qemux86-toolchain-3.1.2.sh

Poky (Yocto Project Reference Distro) SDK installer version 3.1.2

=================================================================

Enter target directory for SDK (default: /opt/poky/3.1.2): /home/vijay/build/test3

You are about to install the SDK to "/home/vijay/build/test3". Proceed [Y/n]? Y

Extracting SDK.........................................................................................................................................................................................................................................................................done

Setting it up...Traceback (most recent call last):

  File "/home/vijay/build/test3/relocate_sdk.py", line 244, in <module>

    change_dl_sysdirs(e)

  File "/home/vijay/build/test3/relocate_sdk.py", line 118, in change_dl_sysdirs

    sh_offset, sh_size = struct.unpack("<24xQQ24x", sh_hdr)

struct.error: unpack requires a string argument of length 64

SDK could not be set up. Relocate script failed. Abort!

 

Thanks & Regards,

Vijay

::DISCLAIMER::


The contents of this e-mail and any attachment(s) are confidential and intended for the named recipient(s) only. E-mail transmission is not guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or may contain viruses in transmission. The e mail and its contents (with or without referred errors) shall therefore not attach any liability on the originator or HCL or its affiliates. Views or opinions, if any, presented in this email are solely those of the author and may not necessarily reflect the views or opinions of HCL or its affiliates. Any form of reproduction, dissemination, copying, disclosure, modification, distribution and / or publication of this message without the prior written consent of authorized representative of HCL is strictly prohibited. If you have received this email in error please delete it and notify the sender immediately. Before opening any email and/or attachments, please check them for viruses and other defects.




 

 

 

-- 
# Randy MacLeod
# Wind River Linux


Re: #yocto #linux #systemd Having issues building command line utilities: ntpq, timedatectl, and ntpstat into kernel image #systemd #yocto #linux

Monsees, Steven C (US)
 


Currently not using system as our default init system (investigating why but this might not be an option).

Is there any other utility I might use under Yocto to get similar data as that produced by timedatectl ?

Thanks,
Steve


Re: #yocto #linux #systemd Having issues building command line utilities: ntpq, timedatectl, and ntpstat into kernel image #systemd #yocto #linux

Monsees, Steven C (US)
 

Is there documentation on how to set this up ?

-----Original Message-----
From: yocto@lists.yoctoproject.org [mailto:yocto@lists.yoctoproject.org] On Behalf Of Quentin Schulz
Sent: Tuesday, September 29, 2020 11:53 AM
To: Monsees, Steven C (US) <steven.monsees@baesystems.com>
Cc: yocto@lists.yoctoproject.org
Subject: Re: [yocto] #yocto #linux #systemd Having issues building command line utilities: ntpq, timedatectl, and ntpstat into kernel image

*** WARNING ***
EXTERNAL EMAIL -- This message originates from outside our organization.


Hi Steve,

On Tue, Sep 29, 2020 at 08:45:56AM -0700, Monsees, Steven C (US) via lists.yoctoproject.org wrote:
I currently have "ntpq" building and installing correctly...

Can someone tell me what it takes to get the "timedatectl" command utility built into Yocto kernel image ?

I see it referenced in both :

openembedded-core/meta/recipes-core/systemd/systemd_234.bb:                ${bindir}/timedatectl \
poky/meta/recipes-core/systemd/systemd_234.bb:                ${bindir}/timedatectl \
It comes with systemd. Use it as your init system and then you'll have the command.

Quentin


Re: #yocto #linux #systemd Having issues building command line utilities: ntpq, timedatectl, and ntpstat into kernel image #systemd #yocto #linux

Quentin Schulz
 

Hi Steve,

On Tue, Sep 29, 2020 at 08:45:56AM -0700, Monsees, Steven C (US) via lists.yoctoproject.org wrote:
I currently have "ntpq" building and installing correctly...

Can someone tell me what it takes to get the "timedatectl" command utility built into Yocto kernel image ?

I see it referenced in both :

openembedded-core/meta/recipes-core/systemd/systemd_234.bb:                ${bindir}/timedatectl \
poky/meta/recipes-core/systemd/systemd_234.bb:                ${bindir}/timedatectl \
It comes with systemd. Use it as your init system and then you'll have the command.

Quentin


Re: #yocto #linux #systemd Having issues building command line utilities: ntpq, timedatectl, and ntpstat into kernel image #systemd #yocto #linux

Monsees, Steven C (US)
 


I currently have "ntpq" building and installing correctly...

Can someone tell me what it takes to get the "timedatectl" command utility built into Yocto kernel image ?

I see it referenced in both :

openembedded-core/meta/recipes-core/systemd/systemd_234.bb:                ${bindir}/timedatectl \
poky/meta/recipes-core/systemd/systemd_234.bb:                ${bindir}/timedatectl \

but have yet to figure out how to get the command built and transferred to the kernel image.

Thanks,
Steve


Yocto Project Status WW39'20

Stephen Jolley
 

Current Dev Position: YP 3.2 M4

Next Deadline: YP 3.2 M4 Feature Freeze - Now

 

Next Team Meetings:

 

Key Status/Updates:

  • YP M3 rc2 has been through QA. We have resolved the beaglebone and bitbake UI issues, the ptest issues remain and need attention in M4. It is likely M3 rc2 will be released.
  • YP 3.1.3 is currently going through QA.
  • Unfortunately intermittent autobuilder issues, whilst reduced, do still remain.
  • Issues with file mode corruption in pseudo have been identified and we’re concerned this may be going undetected in the majority of cases. The issue uncovered would explain several odd bugs we’ve seen over the last few years where file mode bits have disappeared. There are some experimental pseudo patches available that reduce the impact and frequency of these issues but as yet we don’t have a full solution. We’re hampered by a lack of a pseudo maintainer with both the availability and experience to be able to help.
  • We continue to struggle with a number of autobuilder intermittent bugs. You can see the list of failures we’re continuing to see by searching for the “AB-INT” tag in bugzilla: https://bugzilla.yoctoproject.org/buglist.cgi?quicksearch=AB-INT

Help with any of these would be much appreciated, unfortunately it is proving hard to find anyone interested in helping figure these out and they significantly hamper our testing.

 

Ways to contribute:

 

YP 3.2 Milestone Dates:

  • YP 3.2 M3 is out of QA and should release soon.
  • YP 3.2 M4 build date 2020/10/5
  • YP 3.2 M4 Release date 2020/10/30

 

Planned upcoming dot releases:

  • YP 3.1.3 is built and in QA
  • YP 3.1.4 build date 2020/11/2
  • YP 3.1.4 release date 2020/11/13

 

Tracking Metrics:

 

The Yocto Project’s technical governance is through its Technical Steering Committee, more information is available at:

https://wiki.yoctoproject.org/wiki/TSC

 

The Status reports are now stored on the wiki at: https://wiki.yoctoproject.org/wiki/Weekly_Status

 

[If anyone has suggestions for other information you’d like to see on this weekly status update, let us know!]

 

Thanks,

 

Stephen K. Jolley

Yocto Project Program Manager

(    Cell:                (208) 244-4460

* Email:              sjolley.yp.pm@...

 


Re: [meta-security][master][dunfell][PATCH] gitignore added

akuster
 

On 9/22/20 11:25 PM, Adrian Freihofer wrote:
After running testimage there are some python left overs at
lib/oeqa/runtime/cases/__pycache__/

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
merged
thanks
---
.gitignore | 7 +++++++
1 file changed, 7 insertions(+)
create mode 100644 .gitignore

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..c01df45
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,7 @@
+*.pyc
+*.pyo
+/*.patch
+*.swp
+*.orig
+*.rej
+*~



[meta-security][PATCH] packagegroup-core-security: add opendnssec to pkg grp

akuster
 

Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
recipes-core/packagegroup/packagegroup-core-security.bb | 1 +
1 file changed, 1 insertion(+)

diff --git a/recipes-core/packagegroup/packagegroup-core-security.bb b/recipes-core/packagegroup/packagegroup-core-security.bb
index c69e3b3..789f4ea 100644
--- a/recipes-core/packagegroup/packagegroup-core-security.bb
+++ b/recipes-core/packagegroup/packagegroup-core-security.bb
@@ -38,6 +38,7 @@ RDEPENDS_packagegroup-security-utils = "\
python3-scapy \
softhsm \
libest \
+ opendnssec \
${@bb.utils.contains_any("TUNE_FEATURES", "riscv32 ", "", " libseccomp",d)} \
${@bb.utils.contains("DISTRO_FEATURES", "pam", "sssd google-authenticator-libpam", "",d)} \
${@bb.utils.contains("DISTRO_FEATURES", "pax", "pax-utils packctl", "",d)} \
--
2.17.1

1601 - 1620 of 52471