diff options
Diffstat (limited to 'meta/recipes-core/systemd/systemd_244.5.bb')
-rw-r--r-- | meta/recipes-core/systemd/systemd_244.5.bb | 35 |
1 files changed, 32 insertions, 3 deletions
diff --git a/meta/recipes-core/systemd/systemd_244.5.bb b/meta/recipes-core/systemd/systemd_244.5.bb index 8c95648ca0..8b2f47b92f 100644 --- a/meta/recipes-core/systemd/systemd_244.5.bb +++ b/meta/recipes-core/systemd/systemd_244.5.bb | |||
@@ -18,8 +18,28 @@ SRC_URI += "file://touchscreen.rules \ | |||
18 | file://00-create-volatile.conf \ | 18 | file://00-create-volatile.conf \ |
19 | file://init \ | 19 | file://init \ |
20 | file://99-default.preset \ | 20 | file://99-default.preset \ |
21 | file://systemd-pager.sh \ | ||
21 | file://0001-binfmt-Don-t-install-dependency-links-at-install-tim.patch \ | 22 | file://0001-binfmt-Don-t-install-dependency-links-at-install-tim.patch \ |
22 | file://0003-implment-systemd-sysv-install-for-OE.patch \ | 23 | file://0003-implment-systemd-sysv-install-for-OE.patch \ |
24 | file://CVE-2021-33910.patch \ | ||
25 | file://CVE-2020-13529.patch \ | ||
26 | file://basic-pass-allocation-info-for-ordered-set-new-and-introd.patch \ | ||
27 | file://introduce-ordered_set_clear-free-with-destructor.patch \ | ||
28 | file://network-add-skeleton-of-request-queue.patch \ | ||
29 | file://network-merge-link_drop-and-link_detach_from_manager.patch \ | ||
30 | file://network-also-drop-requests-when-link-enters-linger-state.patch \ | ||
31 | file://network-fix-Link-reference-counter-issue.patch \ | ||
32 | file://rm-rf-refactor-rm-rf-children-split-out-body-of-directory.patch \ | ||
33 | file://rm-rf-optionally-fsync-after-removing-directory-tree.patch \ | ||
34 | file://CVE-2018-21029.patch \ | ||
35 | file://CVE-2021-3997-1.patch \ | ||
36 | file://CVE-2021-3997-2.patch \ | ||
37 | file://CVE-2021-3997-3.patch \ | ||
38 | file://CVE-2022-3821.patch \ | ||
39 | file://CVE-2023-26604-1.patch \ | ||
40 | file://CVE-2023-26604-2.patch \ | ||
41 | file://CVE-2023-26604-3.patch \ | ||
42 | file://CVE-2023-26604-4.patch \ | ||
23 | " | 43 | " |
24 | 44 | ||
25 | # patches needed by musl | 45 | # patches needed by musl |
@@ -88,6 +108,7 @@ PACKAGECONFIG ??= " \ | |||
88 | timesyncd \ | 108 | timesyncd \ |
89 | utmp \ | 109 | utmp \ |
90 | vconsole \ | 110 | vconsole \ |
111 | wheel-group \ | ||
91 | xz \ | 112 | xz \ |
92 | " | 113 | " |
93 | 114 | ||
@@ -148,6 +169,7 @@ PACKAGECONFIG[manpages] = "-Dman=true,-Dman=false,libxslt-native xmlto-native do | |||
148 | PACKAGECONFIG[microhttpd] = "-Dmicrohttpd=true,-Dmicrohttpd=false,libmicrohttpd" | 169 | PACKAGECONFIG[microhttpd] = "-Dmicrohttpd=true,-Dmicrohttpd=false,libmicrohttpd" |
149 | PACKAGECONFIG[myhostname] = "-Dnss-myhostname=true,-Dnss-myhostname=false,,libnss-myhostname" | 170 | PACKAGECONFIG[myhostname] = "-Dnss-myhostname=true,-Dnss-myhostname=false,,libnss-myhostname" |
150 | PACKAGECONFIG[networkd] = "-Dnetworkd=true,-Dnetworkd=false" | 171 | PACKAGECONFIG[networkd] = "-Dnetworkd=true,-Dnetworkd=false" |
172 | PACKAGECONFIG[no-dns-fallback] = "-Ddns-servers=" | ||
151 | PACKAGECONFIG[nss] = "-Dnss-systemd=true,-Dnss-systemd=false" | 173 | PACKAGECONFIG[nss] = "-Dnss-systemd=true,-Dnss-systemd=false" |
152 | PACKAGECONFIG[nss-mymachines] = "-Dnss-mymachines=true,-Dnss-mymachines=false" | 174 | PACKAGECONFIG[nss-mymachines] = "-Dnss-mymachines=true,-Dnss-mymachines=false" |
153 | PACKAGECONFIG[nss-resolve] = "-Dnss-resolve=true,-Dnss-resolve=false" | 175 | PACKAGECONFIG[nss-resolve] = "-Dnss-resolve=true,-Dnss-resolve=false" |
@@ -180,6 +202,7 @@ PACKAGECONFIG[sbinmerge] = "-Dsplit-bin=false,-Dsplit-bin=true" | |||
180 | PACKAGECONFIG[utmp] = "-Dutmp=true,-Dutmp=false" | 202 | PACKAGECONFIG[utmp] = "-Dutmp=true,-Dutmp=false" |
181 | PACKAGECONFIG[valgrind] = "-DVALGRIND=1,,valgrind" | 203 | PACKAGECONFIG[valgrind] = "-DVALGRIND=1,,valgrind" |
182 | PACKAGECONFIG[vconsole] = "-Dvconsole=true,-Dvconsole=false,,${PN}-vconsole-setup" | 204 | PACKAGECONFIG[vconsole] = "-Dvconsole=true,-Dvconsole=false,,${PN}-vconsole-setup" |
205 | PACKAGECONFIG[wheel-group] = "-Dwheel-group=true, -Dwheel-group=false" | ||
183 | # Verify keymaps on locale change | 206 | # Verify keymaps on locale change |
184 | PACKAGECONFIG[xkbcommon] = "-Dxkbcommon=true,-Dxkbcommon=false,libxkbcommon" | 207 | PACKAGECONFIG[xkbcommon] = "-Dxkbcommon=true,-Dxkbcommon=false,libxkbcommon" |
185 | PACKAGECONFIG[xz] = "-Dxz=true,-Dxz=false,xz" | 208 | PACKAGECONFIG[xz] = "-Dxz=true,-Dxz=false,xz" |
@@ -197,10 +220,12 @@ rootlibexecdir = "${rootprefix}/lib" | |||
197 | EXTRA_OEMESON += "-Dlink-udev-shared=false" | 220 | EXTRA_OEMESON += "-Dlink-udev-shared=false" |
198 | 221 | ||
199 | EXTRA_OEMESON += "-Dnobody-user=nobody \ | 222 | EXTRA_OEMESON += "-Dnobody-user=nobody \ |
200 | -Dnobody-group=nobody \ | 223 | -Dnobody-group=nogroup \ |
201 | -Drootlibdir=${rootlibdir} \ | 224 | -Drootlibdir=${rootlibdir} \ |
202 | -Drootprefix=${rootprefix} \ | 225 | -Drootprefix=${rootprefix} \ |
203 | -Ddefault-locale=C \ | 226 | -Ddefault-locale=C \ |
227 | -Dsystem-uid-max=999 \ | ||
228 | -Dsystem-gid-max=999 \ | ||
204 | " | 229 | " |
205 | 230 | ||
206 | # Hardcode target binary paths to avoid using paths from sysroot | 231 | # Hardcode target binary paths to avoid using paths from sysroot |
@@ -298,6 +323,9 @@ do_install() { | |||
298 | # install default policy for presets | 323 | # install default policy for presets |
299 | # https://www.freedesktop.org/wiki/Software/systemd/Preset/#howto | 324 | # https://www.freedesktop.org/wiki/Software/systemd/Preset/#howto |
300 | install -Dm 0644 ${WORKDIR}/99-default.preset ${D}${systemd_unitdir}/system-preset/99-default.preset | 325 | install -Dm 0644 ${WORKDIR}/99-default.preset ${D}${systemd_unitdir}/system-preset/99-default.preset |
326 | |||
327 | # add a profile fragment to disable systemd pager with busybox less | ||
328 | install -Dm 0644 ${WORKDIR}/systemd-pager.sh ${D}${sysconfdir}/profile.d/systemd-pager.sh | ||
301 | } | 329 | } |
302 | 330 | ||
303 | python populate_packages_prepend (){ | 331 | python populate_packages_prepend (){ |
@@ -385,9 +413,9 @@ FILES_${PN}-binfmt = "${sysconfdir}/binfmt.d/ \ | |||
385 | ${rootlibexecdir}/systemd/systemd-binfmt \ | 413 | ${rootlibexecdir}/systemd/systemd-binfmt \ |
386 | ${systemd_unitdir}/system/proc-sys-fs-binfmt_misc.* \ | 414 | ${systemd_unitdir}/system/proc-sys-fs-binfmt_misc.* \ |
387 | ${systemd_unitdir}/system/systemd-binfmt.service" | 415 | ${systemd_unitdir}/system/systemd-binfmt.service" |
388 | RRECOMMENDS_${PN}-binfmt = "kernel-module-binfmt-misc" | 416 | RRECOMMENDS_${PN}-binfmt = "${@bb.utils.contains('PACKAGECONFIG', 'binfmt', 'kernel-module-binfmt-misc', '', d)}" |
389 | 417 | ||
390 | RRECOMMENDS_${PN}-vconsole-setup = "kbd kbd-consolefonts kbd-keymaps" | 418 | RRECOMMENDS_${PN}-vconsole-setup = "${@bb.utils.contains('PACKAGECONFIG', 'vconsole', 'kbd kbd-consolefonts kbd-keymaps', '', d)}" |
391 | 419 | ||
392 | 420 | ||
393 | FILES_${PN}-journal-gatewayd = "${rootlibexecdir}/systemd/systemd-journal-gatewayd \ | 421 | FILES_${PN}-journal-gatewayd = "${rootlibexecdir}/systemd/systemd-journal-gatewayd \ |
@@ -520,6 +548,7 @@ FILES_${PN} = " ${base_bindir}/* \ | |||
520 | ${sysconfdir}/dbus-1/ \ | 548 | ${sysconfdir}/dbus-1/ \ |
521 | ${sysconfdir}/modules-load.d/ \ | 549 | ${sysconfdir}/modules-load.d/ \ |
522 | ${sysconfdir}/pam.d/ \ | 550 | ${sysconfdir}/pam.d/ \ |
551 | ${sysconfdir}/profile.d/ \ | ||
523 | ${sysconfdir}/sysctl.d/ \ | 552 | ${sysconfdir}/sysctl.d/ \ |
524 | ${sysconfdir}/systemd/ \ | 553 | ${sysconfdir}/systemd/ \ |
525 | ${sysconfdir}/tmpfiles.d/ \ | 554 | ${sysconfdir}/tmpfiles.d/ \ |