diff options
author | Randy MacLeod <Randy.MacLeod@windriver.com> | 2024-01-10 15:25:01 -0500 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2024-01-15 21:42:15 +0000 |
commit | d2b445384da3f3e6dab8577b6c56648b5244a788 (patch) | |
tree | 3618c4d40b1a18a0713b8b1a598d35c83fd4eedf /meta/recipes-support/rng-tools/rng-tools | |
parent | e5a9f41366c362e2e9d949e908a1402e735798e2 (diff) | |
download | poky-d2b445384da3f3e6dab8577b6c56648b5244a788.tar.gz |
rng-tools: move to meta-oe
Nothing in oe-core depends on rng-tools anymore:
e7e1bc43ca rng-tools: splitting the rng-tools systemd/sysvinit serivce as a package
so move it to meta-oe for people who still want to run rngd
as a service for some reason or for those who want to run rng-test.
(From OE-Core rev: 9a651e5bc2492cf864261e8f17e4cbe34d6d48ce)
Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-support/rng-tools/rng-tools')
-rw-r--r-- | meta/recipes-support/rng-tools/rng-tools/default | 1 | ||||
-rw-r--r-- | meta/recipes-support/rng-tools/rng-tools/init | 42 | ||||
-rw-r--r-- | meta/recipes-support/rng-tools/rng-tools/rng-tools.service | 32 |
3 files changed, 0 insertions, 75 deletions
diff --git a/meta/recipes-support/rng-tools/rng-tools/default b/meta/recipes-support/rng-tools/rng-tools/default deleted file mode 100644 index b9f8e03635..0000000000 --- a/meta/recipes-support/rng-tools/rng-tools/default +++ /dev/null | |||
@@ -1 +0,0 @@ | |||
1 | EXTRA_ARGS="-r /dev/hwrng" | ||
diff --git a/meta/recipes-support/rng-tools/rng-tools/init b/meta/recipes-support/rng-tools/rng-tools/init deleted file mode 100644 index 13f0ecd37c..0000000000 --- a/meta/recipes-support/rng-tools/rng-tools/init +++ /dev/null | |||
@@ -1,42 +0,0 @@ | |||
1 | #!/bin/sh | ||
2 | # | ||
3 | # This is an init script for openembedded | ||
4 | # Copy it to @SYSCONFDIR@/init.d/rng-tools and type | ||
5 | # > update-rc.d rng-tools defaults 60 | ||
6 | # | ||
7 | |||
8 | rngd=@SBINDIR@/rngd | ||
9 | test -x "$rngd" || exit 1 | ||
10 | |||
11 | [ -r @SYSCONFDIR@/default/rng-tools ] && . "@SYSCONFDIR@/default/rng-tools" | ||
12 | |||
13 | case "$1" in | ||
14 | start) | ||
15 | echo -n "Starting random number generator daemon" | ||
16 | start-stop-daemon -S -q -x $rngd -- $EXTRA_ARGS | ||
17 | echo "." | ||
18 | ;; | ||
19 | stop) | ||
20 | echo -n "Stopping random number generator daemon" | ||
21 | start-stop-daemon -K -q -n rngd | ||
22 | echo "." | ||
23 | ;; | ||
24 | reload|force-reload) | ||
25 | echo -n "Signalling rng daemon restart" | ||
26 | start-stop-daemon -K -q -s 1 -x $rngd | ||
27 | start-stop-daemon -K -q -s 1 -x $rngd | ||
28 | ;; | ||
29 | restart) | ||
30 | echo -n "Stopping random number generator daemon" | ||
31 | start-stop-daemon -K -q -n rngd | ||
32 | echo "." | ||
33 | echo -n "Starting random number generator daemon" | ||
34 | start-stop-daemon -S -q -x $rngd -- $EXTRA_ARGS | ||
35 | echo "." | ||
36 | ;; | ||
37 | *) | ||
38 | echo "Usage: @SYSCONFDIR@/init.d/rng-tools {start|stop|reload|restart|force-reload}" | ||
39 | exit 1 | ||
40 | esac | ||
41 | |||
42 | exit 0 | ||
diff --git a/meta/recipes-support/rng-tools/rng-tools/rng-tools.service b/meta/recipes-support/rng-tools/rng-tools/rng-tools.service deleted file mode 100644 index 5ae2fba215..0000000000 --- a/meta/recipes-support/rng-tools/rng-tools/rng-tools.service +++ /dev/null | |||
@@ -1,32 +0,0 @@ | |||
1 | [Unit] | ||
2 | Description=Hardware RNG Entropy Gatherer Daemon | ||
3 | DefaultDependencies=no | ||
4 | Conflicts=shutdown.target | ||
5 | Before=sysinit.target shutdown.target | ||
6 | ConditionVirtualization=!container | ||
7 | |||
8 | [Service] | ||
9 | EnvironmentFile=-@SYSCONFDIR@/default/rng-tools | ||
10 | ExecStart=@SBINDIR@/rngd -f $EXTRA_ARGS | ||
11 | CapabilityBoundingSet=CAP_SYS_ADMIN | ||
12 | IPAddressDeny=any | ||
13 | LockPersonality=yes | ||
14 | MemoryDenyWriteExecute=yes | ||
15 | NoNewPrivileges=yes | ||
16 | PrivateTmp=yes | ||
17 | ProtectControlGroups=yes | ||
18 | ProtectHome=yes | ||
19 | ProtectHostname=yes | ||
20 | ProtectKernelModules=yes | ||
21 | ProtectKernelLogs=yes | ||
22 | ProtectSystem=strict | ||
23 | RestrictAddressFamilies=AF_UNIX | ||
24 | RestrictNamespaces=yes | ||
25 | RestrictRealtime=yes | ||
26 | RestrictSUIDSGID=yes | ||
27 | SystemCallArchitectures=native | ||
28 | SystemCallErrorNumber=EPERM | ||
29 | SystemCallFilter=@system-service | ||
30 | |||
31 | [Install] | ||
32 | WantedBy=sysinit.target | ||