|
[dunfell 21/32] apparmor: exclude mips64, not supported
Signed-off-by: Armin Kuster <akuster808@...>
(cherry picked from commit f176756890766bc9a6a00fe83bfe8e3c9bc13d07)
---
recipes-mac/AppArmor/apparmor_2.13.4.bb | 2 ++
1 file changed, 2
Signed-off-by: Armin Kuster <akuster808@...>
(cherry picked from commit f176756890766bc9a6a00fe83bfe8e3c9bc13d07)
---
recipes-mac/AppArmor/apparmor_2.13.4.bb | 2 ++
1 file changed, 2
|
By
Armin Kuster
·
#51073
·
|
|
[dunfell 20/32] packagegroup-core-security: dont include suricata on riscv or ppc
Signed-off-by: Armin Kuster <akuster808@...>
(cherry picked from commit caf76696e8669ee48339c13f01042da9e52515ae)
---
recipes-security/packagegroup/packagegroup-core-security.bb | 2 +-
1 file
Signed-off-by: Armin Kuster <akuster808@...>
(cherry picked from commit caf76696e8669ee48339c13f01042da9e52515ae)
---
recipes-security/packagegroup/packagegroup-core-security.bb | 2 +-
1 file
|
By
Armin Kuster
·
#51072
·
|
|
[dunfell 19/32] beaglebone-yocto-verity.wks.in: Refer IMGDEPLOYDIR
From: "niko.mauno@..." <niko.mauno@...>
Since dm-verity-image.bbclass effectively injects
<DM_VERITY_IMAGE>:do_image_<DM_VERITY_IMAGE_TYPE>
dependency for do_image_wic task, we
From: "niko.mauno@..." <niko.mauno@...>
Since dm-verity-image.bbclass effectively injects
<DM_VERITY_IMAGE>:do_image_<DM_VERITY_IMAGE_TYPE>
dependency for do_image_wic task, we
|
By
Armin Kuster
·
#51071
·
|
|
[dunfell 18/32] dm-verity-image-initramfs: Drop locales from image
From: "niko.mauno@..." <niko.mauno@...>
Since IMAGE_LINGUAS defaults to 'en-us en-gb' and since localization is
not needed on this type of purpose-specific initramfs image, reset
From: "niko.mauno@..." <niko.mauno@...>
Since IMAGE_LINGUAS defaults to 'en-us en-gb' and since localization is
not needed on this type of purpose-specific initramfs image, reset
|
By
Armin Kuster
·
#51070
·
|
|
[dunfell 17/32] dm-verity-image-initramfs: Add base-passwd package
From: "niko.mauno@..." <niko.mauno@...>
This removes following boot-time complaints from udevd regarding
missing group declarations:
[ 6.624454] udevd[163]: specified group
From: "niko.mauno@..." <niko.mauno@...>
This removes following boot-time complaints from udevd regarding
missing group declarations:
[ 6.624454] udevd[163]: specified group
|
By
Armin Kuster
·
#51069
·
|
|
[dunfell 16/32] dm-verity-initramfs-image: Cosmetic improvements
From: "niko.mauno@..." <niko.mauno@...>
- revise declaration ordering as suggested by oe-stylize.py
- sort PACKAGE_INSTALL entries in alphabetic order
- split long command line in
From: "niko.mauno@..." <niko.mauno@...>
- revise declaration ordering as suggested by oe-stylize.py
- sort PACKAGE_INSTALL entries in alphabetic order
- split long command line in
|
By
Armin Kuster
·
#51068
·
|
|
[dunfell 15/32] dm-verity-image-initramfs: Use initramfs-framework
From: "niko.mauno@..." <niko.mauno@...>
Switch from this layer's initramfs-dm-verity recipe to poky-provided
initramfs-framework suite to manage veritysetup et al.
This commit also
From: "niko.mauno@..." <niko.mauno@...>
Switch from this layer's initramfs-dm-verity recipe to poky-provided
initramfs-framework suite to manage veritysetup et al.
This commit also
|
By
Armin Kuster
·
#51067
·
|
|
[dunfell 14/32] initramfs-framework: Add dmverity module
From: "niko.mauno@..." <niko.mauno@...>
Add 'initramfs-module-dmverity' as an extension to poky upstream
provided initramfs-framework suite via matchingly named bbappend
From: "niko.mauno@..." <niko.mauno@...>
Add 'initramfs-module-dmverity' as an extension to poky upstream
provided initramfs-framework suite via matchingly named bbappend
|
By
Armin Kuster
·
#51066
·
|
|
[dunfell 13/32] dm-verity-img.bbclass: Stage verity.env file
From: "niko.mauno@..." <niko.mauno@...>
Introduce new STAGING_VERITY_DIR variable specific to this bbclass which
defines the directory where the verity.env file is stored
From: "niko.mauno@..." <niko.mauno@...>
Introduce new STAGING_VERITY_DIR variable specific to this bbclass which
defines the directory where the verity.env file is stored
|
By
Armin Kuster
·
#51065
·
|
|
[dunfell 12/32] linux-yocto(-dev): Add dm-verity fragment as needed
From: "niko.mauno@..." <niko.mauno@...>
Add checks that include dm-verity specific kernel config fragment
when dm-verity-img.bbclass is used.
Signed-off-by: Niko Mauno
From: "niko.mauno@..." <niko.mauno@...>
Add checks that include dm-verity specific kernel config fragment
when dm-verity-img.bbclass is used.
Signed-off-by: Niko Mauno
|
By
Armin Kuster
·
#51064
·
|
|
[dunfell 11/32] dm-verity-image-initramfs: Bind at do_image instead
From: "niko.mauno@..." <niko.mauno@...>
Bind custom actions in this image recipe in do_image() rather than
do_rootfs(), which can help shaving even dozens of seconds from duration
of
From: "niko.mauno@..." <niko.mauno@...>
Bind custom actions in this image recipe in do_image() rather than
do_rootfs(), which can help shaving even dozens of seconds from duration
of
|
By
Armin Kuster
·
#51063
·
|
|
[dunfell 10/32] dm-verity-image-initramfs: Ensure verity hash sync
From: "niko.mauno@..." <niko.mauno@...>
In order to ensure that the bundled initramfs always contains the most
recently generated DM_VERITY_IMAGE specific root filesystems' root
From: "niko.mauno@..." <niko.mauno@...>
In order to ensure that the bundled initramfs always contains the most
recently generated DM_VERITY_IMAGE specific root filesystems' root
|
By
Armin Kuster
·
#51062
·
|
|
[dunfell 09/32] dm-verity-img.bbclass: Reorder parse-time check
From: "niko.mauno@..." <niko.mauno@...>
Relocate checking if DM_VERITY_IMAGE and DM_VERITY_IMAGE_TYPE are
defined as non-empty strings before DM_VERITY_IMAGE vs. PN
comparison is
From: "niko.mauno@..." <niko.mauno@...>
Relocate checking if DM_VERITY_IMAGE and DM_VERITY_IMAGE_TYPE are
defined as non-empty strings before DM_VERITY_IMAGE vs. PN
comparison is
|
By
Armin Kuster
·
#51061
·
|
|
[dunfell 08/32] dm-verity-img.bbclass: Fix bashisms
From: "niko.mauno@..." <niko.mauno@...>
Resort to printf in order to avoid usage of non-POSIX compliant echo
flags. This mitigates following errors visible in console during
boot-up
From: "niko.mauno@..." <niko.mauno@...>
Resort to printf in order to avoid usage of non-POSIX compliant echo
flags. This mitigates following errors visible in console during
boot-up
|
By
Armin Kuster
·
#51060
·
|
|
[dunfell 07/32] sssd: Make manpages buildable
From: Jonatan Pålsson <jonatan.p@...>
Some XML related fixes are needed to make the sssd manpages buildable
Signed-off-by: Jonatan Pålsson <jonatan.p@...>
Signed-off-by: Armin Kuster
From: Jonatan Pålsson <jonatan.p@...>
Some XML related fixes are needed to make the sssd manpages buildable
Signed-off-by: Jonatan Pålsson <jonatan.p@...>
Signed-off-by: Armin Kuster
|
By
Armin Kuster
·
#51059
·
|
|
[dunfell 06/32] sssd: disable build secrets
From: Kai Kang <kai.kang@...>
It requires http_parser.h to build secrets:
| configure: error:
| You must have the header file http_parser.h installed to build sssd
| with secrets
From: Kai Kang <kai.kang@...>
It requires http_parser.h to build secrets:
| configure: error:
| You must have the header file http_parser.h installed to build sssd
| with secrets
|
By
Armin Kuster
·
#51058
·
|
|
[dunfell 05/32] packagegroup-core-security: remove libseccomp for riscv*
Signed-off-by: Armin Kuster <akuster808@...>
(cherry picked from commit 29f47b44852122c5618e30037710dde009146eb5)
---
recipes-security/packagegroup/packagegroup-core-security.bb | 2 +-
1 file
Signed-off-by: Armin Kuster <akuster808@...>
(cherry picked from commit 29f47b44852122c5618e30037710dde009146eb5)
---
recipes-security/packagegroup/packagegroup-core-security.bb | 2 +-
1 file
|
By
Armin Kuster
·
#51057
·
|
|
[dunfell 04/32] libsecomp: rv32/rv64 target builds are not supported yet
Signed-off-by: Armin Kuster <akuster808@...>
(cherry picked from commit b5a5cbe1f511468af0b0673f88c83c3dd1c77da3)
---
recipes-security/libseccomp/libseccomp_2.4.3.bb | 3 +++
1 file changed, 3
Signed-off-by: Armin Kuster <akuster808@...>
(cherry picked from commit b5a5cbe1f511468af0b0673f88c83c3dd1c77da3)
---
recipes-security/libseccomp/libseccomp_2.4.3.bb | 3 +++
1 file changed, 3
|
By
Armin Kuster
·
#51056
·
|
|
[dunfell 03/32] packagegroup-core-security: remove clamav for riscv*
Signed-off-by: Armin Kuster <akuster808@...>
(cherry picked from commit 98ff502d4096331e2b8a8e4044860b23bf6f8ea5)
---
recipes-security/packagegroup/packagegroup-core-security.bb | 4 +---
1
Signed-off-by: Armin Kuster <akuster808@...>
(cherry picked from commit 98ff502d4096331e2b8a8e4044860b23bf6f8ea5)
---
recipes-security/packagegroup/packagegroup-core-security.bb | 4 +---
1
|
By
Armin Kuster
·
#51055
·
|
|
[dunfell 02/32] packagegroup-core-security-ptest: update fail2ban ptest pkg name
Signed-off-by: Armin Kuster <akuster808@...>
(cherry picked from commit a2a102b2de68f31df5a3b46665c8afb2d28c0219)
---
.../packagegroup/packagegroup-core-security-ptest.bb | 2 +-
1
Signed-off-by: Armin Kuster <akuster808@...>
(cherry picked from commit a2a102b2de68f31df5a3b46665c8afb2d28c0219)
---
.../packagegroup/packagegroup-core-security-ptest.bb | 2 +-
1
|
By
Armin Kuster
·
#51054
·
|