summaryrefslogtreecommitdiffstats
path: root/meta/recipes-core
Commit message (Collapse)AuthorAgeFilesLines
* dropbear: fix multiple CVEsSona Sarmadi2016-11-085-0/+2720
| | | | | | | | | | | | | | | | | | | CVE-2016-7406 CVE-2016-7407 CVE-2016-7408 CVE-2016-7409 References: https://matt.ucc.asn.au/dropbear/CHANGES http://seclists.org/oss-sec/2016/q3/504 [YOCTO #10443] (From OE-Core rev: cca372506522c1d588f9ebc66c6051089743d2a9) Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: fix CVE-2016-1234, CVE-2016-3075, CVE-2016-5417Pascal Bach2016-11-084-0/+495
| | | | | | | | | | Only relevant for krogoth since version 2.24+ (master, morty) is not affected. (From OE-Core rev: 88be4b40bacc7c8a08fb76fc220f491deb2c1c3a) Signed-off-by: Pascal Bach <pascal.bach@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* util-linux: Security fix for CVE-2016-5011Armin Kuster2016-09-233-0/+152
| | | | | | | | | affects util-linux < 2.28.2 (From OE-Core rev: 72a8636e3cfdfef8d95fee4af721dd7acaa89ffc) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dropbear: upgrade to 2016.72Sona Sarmadi2016-09-232-5/+4
| | | | | | | | | | | | | | | | | | | The upgrade addresses CVE-2016-3116: - Validate X11 forwarding input. Could allow bypass of authorized_keys command= restrictions, found by github.com/tintinweb. Thanks for Damien Miller for a patch. CVE-2016-3116 References: https://matt.ucc.asn.au/dropbear/CHANGES https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3116 (From OE-Core rev: 5ebac39d1d6dcf041e05002c0b8bf18bfb38e6d3) Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: Avoid race building libbbJuro Bystricky2016-09-235-66/+151
| | | | | | | | | | | | | | | | | | | | | | | When building busybox, an occasional error was observed. The error is consistently the same: libbb/appletlib.c:164:13: error: 'NUM_APPLETS' undeclared (first use in this function) while (i < NUM_APPLETS) { The reason is the include file where NUM_APPLETS is defined is not yet generated (or is being modified) at the time libbb/appletlib.c is compiled. The attached patchset fixes the problem by assuring libb is compiled as the last directory. [YOCTO#10116] (From OE-Core rev: a866a05e2c7d090a77aa6e95339c93e3592703a6) (From OE-Core rev: 6c94afadaa3e035bb58755985a9e193cae5e9b34) Signed-off-by: Juro Bystricky <juro.bystricky@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: fix "sed n (flushes pattern space, terminates early)" testcase failureDengke Du2016-09-232-0/+73
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It is a busybox upstream known bug. When the busybox sed sub-command 'n' hit the files EOF, it print an extra character that have been printed, but the GNU sed would not print it. In busybox source code ../editors/sed.c ------------------------------------------------------------------------ case 'n': if (!G.be_quiet) sed_puts(pattern_space, last_gets_char); if (next_line) { free(pattern_space); pattern_space = next_line; last_gets_char = next_gets_char; next_line = get_next_line(&next_gets_char, &last_puts_char, last_gets_char); substituted = 0; linenum++; break; } /* fall through */ /* Quit. End of script, end of input. */ case 'q': /* Exit the outer while loop */ free(next_line); next_line = NULL; goto discard_commands; ------------------------------------------------------------------------ when read at the end of the file, the 'next_line' is null, it would go "case 'q'" and goto discard_commands, the discard_commands would print the old pattern space which have been printed. So in order to comply with GNU sed, in case 'n', when the next_line is null I add "else" at the end of the second "if": "goto again;" and send it to the busybox upstream, the busybox maintainer adopt it and make a little changes to the patch, we can see it at: His reply: http://lists.busybox.net/pipermail/busybox/2016-September/084613.html The new patch on busybox master branch: https://git.busybox.net/busybox/commit/?id=76d72376e0244a5cafd4880cdc623e37d86a75e4 (From OE-Core rev: 5a680c267454d7c135c4bfe4e551a780f38a5087) (From OE-Core rev: efcd439977d111b10bd2c74ff3bc4fa30d8b394d) Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* initramfs-live-boot: Make sure we kill udev before switching root when live ↵Alejandro Hernandez2016-09-231-1/+3
| | | | | | | | | | | | | | | | | | | | | booting When live booting, we need to make sure the running udev processes are killed to avoid unexepected behavior, we do this just before switching root, once we do, a new udev process will be spawned from init and will take care of whatever work was still missing [YOCTO #9520] (From OE-Core rev: e88d9e56952414e6214804f9b450c7106d04318d) (From OE-Core rev: e5190cdcf4efe5e80967bded13ef8e530811b0ec) Signed-off-by: Alejandro Hernandez <alejandro.hernandez@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: Add parallel make fixRichard Purdie2016-09-232-0/+66
| | | | | | | | | | | | | | | | We're seeing regular parallel make failures in applet headers in busybox. This adds a patch to try and avoid the issue, building upon a fix already backported from upstream. The patch has been sent to upstream. [YOCTO #10116] (From OE-Core rev: 199cef0e8a50b20d0ee6fefd1d4cf3372eba7728) (From OE-Core rev: e3cca9da7e7a7f10db708f39097e1d8700f8ba2d) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: Backport makefile fix from upstreamRichard Purdie2016-09-232-0/+41
| | | | | | | | | | | | | | This at least partially addresses one of the build races we've seen on the autobuilder in busybox. Its a straightforward backport from upstream. (From OE-Core rev: 8599059164ad0eb908fd1177044af8bc9a9881e4) (From OE-Core rev: 542a182af6503ac5d5ddea4bf307ea38ddaeeb50) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: Fix busybox-init on non-tty consolesStefan Agner2016-09-231-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | When using non-tty consoles (e.g. VirtIO console /dev/hvc0) the current init system fails with: process '/sbin/getty 115200 hvc0' (pid 545) exited. Scheduling for restart. can't open /dev/ttyhvc0: No such file or directory The first field needs to be a valid device. The BusyBox inittab example explains as follows: "<id>: WARNING: This field has a non-traditional meaning for BusyBox init! The id field is used by BusyBox init to specify the controlling tty for the specified process to run on. The contents of this field are appended to "/dev/" and used as-is." (From OE-Core rev: a53393082f331a613cb3eb973a07bab22cefcde8) (From OE-Core rev: 3c5097574e24a3923b093d8ef92506411dc8df08) Signed-off-by: Stefan Agner <stefan@agner.ch> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* systemd: Create missing sysusers offlineKhem Raj2016-09-231-1/+7
| | | | | | | | | | | | | | | | Some system users which are needed by systemd components were missing create these users knobbed with relevant packageconfig (From OE-Core rev: d18957925c6c073b7194e3a233efea24e436f74e) (From OE-Core rev: 901a6dbe420eb3f76503871ca3ccfe544b9b3b57) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit fd36a447d0da53e713d992b17ce86dd31ea63c67) Signed-off-by: Kristian Amlie <kristian.amlie@mender.io> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* musl: Fix mips regressions in 1.1.15Khem Raj2016-08-231-1/+1
| | | | | | | | | | | | | | | | | | Bobby Bingham (2): remove or1k version of sem.h remove obsolete gitignore rules Rich Felker (4): remove obsolete and unused gethostbyaddr implementation fix asctime day/month names not to vary by locale fix regression in tcsetattr on all mips archs revert unrelated change that slipped into last commit (From OE-Core rev: bd7b23c63a9beb6118bbdfe1dd1564e2735c0159) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: use the host locale archive in nativesdk buildsRoss Burton2016-08-231-0/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The nativesdk libc when used by buildtools has a hard requirement on supporting a UTF-8 locale because Python 3 needs a UTF-8 locale. However we currently only ship the C locale, which means that Python attempts to lookup the user's locale (for example, en_NZ.UTF-8) in the locale archive under it's prefix it fails and falls back to C. This the results in Python using ASCII instead of UTF-8 for file encoding, and bitbake breaks. Th obvious solution would be to ship all locales, but this would add approximately 250MB to the size of the buildtools tarball (which is currently around 30MB). Generating a binary locale archive reduces this down to 100MB, but this is still a drastic increase in footprint. If we ship a subset of locales in the tarball then there will be users whose locale isn't in the tarball, and they'll have to change their locale to an "approved" one, which isn't the best of messages to send to new users. The alternative is to tell the nativesdk libc that the locale archive isn't under it own prefix but is in fact at /usr/lib/locale/locale-archive, so the buildtools libc uses the host locale archive. The locale archive format appears to be at least fairly stable: our glibc 2.24 can read the locale archive generated by glibc 2.17 (Centos 7). [ YOCTO #9775 ] (From OE-Core rev: d36a2314a8b25a37a8e4ea0b33ce5197e44fedeb) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* base-files: restrict resize to run on serial consoles only in profile │·bavery2016-08-231-3/+4
| | | | | | | | | | | | | We don't need/wan't to run resize on an ssh connection. It's useless and it breaks the Eclipse SSH debug connection. So, we added a check. YOCTO #9362 (From OE-Core rev: c97a232272b18bbc2a102fd3ab305b862bb3b954) Signed-off-by: bavery <brian.avery@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: Update to krogoth head revisionyocto-2.1.1krogoth-15.0.1Richard Purdie2016-08-011-1/+1
| | | | | | (From OE-Core rev: 1dc9ce406497d6e996a40afc53293d9a576c8314) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* netbase: use snapshot.debian.org for SRC_URIMaxin B. John2016-08-011-1/+2
| | | | | | | | | | | | | | | | Using ${DEBIAN_MIRROR} for SRC_URI doesn't work very well as that will only contain releases that are currently in Debian. So, move all of SRC_URI to the .bb so it can use snapshot.debian.org instead, and set UPSTREAM_CHECK_URI to ${DEBIAN_MIRROR} so upstream release checking continues to work. [YOCTO #10040] (From OE-Core rev: 55e7a0e1c829de1294f8b96a01de64334d5b464c) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glib-2.0: Ignore useless warning found with gcc-6Khem Raj2016-07-274-2/+128
| | | | | | | | | | | | | | | | | | | | | ../../glib-2.46.2/glib/gdate.c:2497:7: error: format not a string literal, format string not checked [-Werror=format-nonliteral] tmplen = strftime (tmpbuf, tmpbufsize, locale_format, &tm); ^~~~~~ | ../../../../../../../../workspace/sources/glib-2.0/glib/tests/gdatetime.c: In function 'test_strftime': | ../../../../../../../../workspace/sources/glib-2.0/glib/tests/gdatetime.c:1338:3: error: '%c' yields only last 2 digits of year in some locales [-Werror=format-y2k] | "a%a A%A b%b B%B c%c C%C d%d e%e F%F g%g G%G h%h H%H I%I j%j m%m M%M " \ Additionally fix the problem seen where write() return code is ignored (From OE-Core rev: 3fdecff96dd7516605ec9248b2a39de4db81306f) (From OE-Core rev: 76271b5710e8d02d4ca0559cbf72c149f9beb4e2) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* musl: Update to v1.1.15 releaseKhem Raj2016-07-271-2/+2
| | | | | | | | | | | | | | | here is shortlog of changes http://git.musl-libc.org/cgit/musl/commit/?id=faf69b9a73d09fafcbe4fd3007b8d8724293d8e1 (From OE-Core rev: 3164db2a2f16eedfed3bcd2413321e7473900637) (From OE-Core rev: 6e7a9fd67a982f81a72a928709f145d61186e320) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dropbear: Remove incorrect SFTPSERVER_PATH from CFLAGSDominic Sacré2016-07-271-1/+0
| | | | | | | | | | | | | | | | | | | Openssh now installs the sftp-server binary as /usr/libexec/sftp-server, whereas the dropbear recipe assumes a different path. Dropbear uses the correct path by default, so it's no longer necessary to override SFTPSERVER_PATH via CFLAGS. This fixes SFTP access to systems using dropbear as the SSH server. (From OE-Core rev: df798bca330583103b2301678236cc841cc861dd) (From OE-Core rev: e9bbced4da1f13951abdd298590a3577f377866e) Signed-off-by: Dominic Sacré <dominic.sacre@gmx.de> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* musl: Upgrade to tipKhem Raj2016-07-271-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Rich Felker (4): fix undefined pointer arithmetic in CMSG_NXTHDR macro fix a64l undefined behavior on ILP32 archs, wrong results on LP64 archs avoid padding gaps in struct sockaddr_storage remove comments on copyright status from UTF-8 implementation files Szabolcs Nagy (8): fix the use of uninitialized value in regcomp add preadv2 and pwritev2 syscall numbers for linux v4.6 add SO_CNX_ADVICE to sys/socket.h, new in linux v4.6 add ETH_P_MACSEC netinet/if_ether.h, new in linux v4.6 update siginfo struct for linux v4.6 add CLONE_NEWCGROUP clone flag, new in linux v4.6 add new tcp_info fields from linux v4.6 update sys/socket.h to linux v4.6 (From OE-Core rev: d81bb8c6362d59a124bbe9b3a60cb259733b120d) (From OE-Core rev: fc73e73e9a879909edf2f129790d26d4e883b3c2) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* musl: Update to latest tipKhem Raj2016-07-271-1/+1
| | | | | | | | | | | | | | | | | Bobby Bingham (3): x32: remove arch-specific syscall remapping x32: eliminate __X32_SYSCALL_BIT constant deduplicate __NR_* and SYS_* syscall number definitions (From OE-Core rev: 6993e88cccbfe2f990e4ea9bd7cc186d59e5a84b) (From OE-Core rev: 11b36c1a2672c0a6240a934144828c2529a6e0a3) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* musl: Upgrade to tip of treeKhem Raj2016-07-272-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | COPYRIGHT file was changed to clarfiy the MIT Licence which resulted in checksum change, see http://git.musl-libc.org/cgit/musl/commit/?id=f0a61399330bae42beeb27d6ecd05570b3382a60 below are changes in upgrade Andrew Kelley (1): fix incorrect protocol name and number for egp Bobby Bingham (1): add powerpc64 port LeMay, Michael (1): fix redundant processing of --build flag in configure script Petr Vaněk (1): remove dead store in res_msend Rich Felker (10): fix undefined pointer comparison in stdio-internal __toread fix regression disabling use of pause instruction for x86 a_spin fix read past end of haystack buffer for short needles in memmem add support for mips and mips64 r6 isa add mips n32 port (ILP32 ABI for mips64) fix thread structure/dtv-pointer corruption on powerpc fix FILE buffer underflow in ungetwc update COPYRIGHT file to clarify that permissions apply for all files follow standard configure behavior for cross compile prefix fix spurious trailing whitespace in powerpc & powerpc64 bits/errno.h (From OE-Core rev: 21d8d60b2bfb205dcb5d304119d4dbd627db7163) (From OE-Core rev: d867cc39394c3b0bdd2286b90344f222138ae36e) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: Security fix for CVE-2016-4429Armin Kuster2016-07-272-0/+90
| | | | | | | | | Master will a have fix after pending update (From OE-Core rev: c14f2ba7ae1ddef3dc7bb837454e51469bead948) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* glibc: Security fix for CVE-2016-3706Armin Kuster2016-07-272-0/+225
| | | | | | | | | Master not affected. (From OE-Core rev: 6c5aaa3150e6cf74219e5bcf4819365ae3628102) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: Update to krogoth head revisionRichard Purdie2016-07-061-1/+1
| | | | | | (From OE-Core rev: dd330056ace289c8a9c5d77b6bb6e860b9f0913e) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: Update to krogoth head revisionRichard Purdie2016-07-061-1/+1
| | | | | | (From OE-Core rev: 6d3751ff5d1ee0b34b24a1572b89a2c46f1b8d19) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* initramfs-framework: base: Ensures /run/lock is availableOtavio Salvador2016-06-291-2/+2
| | | | | | | | | | | | | | | | Depending on the module we use, the /run/lock may be required. This creates it as part of initial setup and thus makes it available for every sub module. (From OE-Core rev: 1cf288a0514ae9365fe55a0ff90b5abe35042cef) (From OE-Core rev: ac26089702a634654530114bbbf151bc0fde5711) Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* initramfs-framework: mdev: Add a runtime dependency on busybox-mdevOtavio Salvador2016-06-291-1/+1
| | | | | | | | | | | | | | | | The mdev support relies on the mdev support inside busybox, which thus builds the busybox-mdev package. Adding the runtime dependency ensures its installation fails if mdev support is disabled. (From OE-Core rev: 48dbdc0317db6836cfeba083844910c15d5beb77) (From OE-Core rev: a32a7743003fb4b90b0dca7440235eceee787c00) Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxml2: upgrade to 2.9.4Hongxu Jia2016-06-292-48/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Drop configure.ac-fix-cross-compiling-warning.patch, libxml2 2.9.4 has fixed it (From OE-Core rev: 323c7cec65603476994dde196f4c2c151d0e0d31) updated stable for these reasons: this includes the following security fixes: CVE-2016-1762 CVE-2016-3705 CVE-2016-1834 CVE-2016-4483 CVE-2016-1840 CVE-2016-1838 CVE-2016-1839 CVE-2016-1836 CVE-2016-4449 CVE-2016-1837 CVE-2016-1835 CVE-2016-1833 CVE-2016-3627 plus many bug fixes. see http://xmlsoft.org/news.html for details. (From OE-Core rev: 1576cb4ac24340cda504ee9807b465f8428138f0) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* musl: Create symlinks for stub librariesKhem Raj2016-06-291-0/+4
| | | | | | | | | | | | | | | | | | | Some libraries e.g. libm.so are needed to be created so that SDKs built with distros which disable static librararies can have the stubs and since default linker script requires -lm this helps in compiling applications with SDK there are .a equivalents for these libraries but they do not land in SDKs when static libs are disabled distrowide (From OE-Core rev: 0f4dfb6ce041e8ba4bc67de956512cfb6ac225c9) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* eudev: remove eudev-hwdb from RRECOMMENDS_eudevRobert Yang2016-06-291-1/+1
| | | | | | | | | | | | | | | The eudev-hwdb needs 12M after install, this made small images like core-image-minimal much biggher than before, and may also hurt the devices which use udev, so remove it RRECOMMENDS_eudev by default. (From OE-Core rev: dfb2dc45943d64f3d6da84c0d7b99ac5254fc738) (From OE-Core rev: 99e2a4351804e77d7f5863aa2d99e2c0ed3839e9) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* coreutils: fix for native and nativesdkDengke Du2016-06-291-5/+9
| | | | | | | | | | | | | | | | The do_install_append is used for moving/renaming for ALTERNATIVE, but it breaks native, for example there is no ln, but ln.coreutils, that makes coreutils-native don't work. This patch fixes the problem. (From OE-Core rev: 1b5b831d1bbb92760ce01b38347cf0bcaa1bb59f) (From OE-Core rev: 14bcfa16e33c09ce9898bd58872e4fdf56ed8325) Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* base-files: add some safety checks in profileDiego Rondini2016-06-291-2/+4
| | | | | | | | | | | | | | | | | | | | | | Add some safety checks when sourcing files in /etc/profile.d/, in particular: - source only *.sh files, not every file. This is the practice in use in both Fedora and Debian/Ubuntu (see https://help.ubuntu.com/community/EnvironmentVariables#A.2Fetc.2Fprofile.d.2F.2A.sh); - check the input is actually a file and is readable. This check is especially important if profile.d is empty, as "*.sh" will get expanded only if profile.d is not empty. Previously if profile.d was present but empty, "/etc/profile.d/*" was sourced causing errors on login and breaking stuff, for example X startup. (From OE-Core rev: 8961bc4b71723477a3b4a837a1d9c25c1b860b9e) (From OE-Core rev: fde37b91284953cedc50bc32d22aac65a65afde1) Signed-off-by: Diego Rondini <diego.ml@zoho.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dbus-test: install executables not libtool wrapper scriptsRoss Burton2016-06-291-8/+5
| | | | | | | | | | | | | | | | | | All of the binaries are linked with libtool now, so install the binaries and not the wrapper scripts. Also remove dbus-1.init from SRC_URI as dbus-test doesn't use it. [ YOCTO #9528 ] (From OE-Core rev: a4b5076b2c06cafff0ce764955d0aa7c334c7a8e) (From OE-Core rev: b4db000519da45cc4e911a43dedaa5bd20a8624e) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* eudev: add PACKAGECONFIG for hwdbRoss Burton2016-06-291-1/+3
| | | | | | | | | | | | | | Some users may not want the hwdb at all, so add a PACKAGECONFIG option to disable building it entirely. (From OE-Core rev: 7006d3084bd4d6aab2ca64d052df3a014abaf813) (From OE-Core rev: 87606439e7eadcdcbea510b3facf8754ed7d0220) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libxml2: fix dependencies and QA IssuesMaxin B. John2016-06-291-1/+1
| | | | | | | | | | | | | | | | | | | | | | Fix the following QA warnings: WARNING: libxml2-2.9.3-r0 do_package_qa: QA Issue: libxml2 rdepends on libiconv, but it isn't a build dependency, missing libiconv in DEPENDS or PACKAGECONFIG? [build-deps] WARNING: libxml2-2.9.3-r0 do_package_qa: QA Issue: libxml2-python rdepends on libiconv, but it isn't a build dependency, missing libiconv in DEPENDS or PACKAGECONFIG? [build-deps] (From OE-Core rev: 3d97a40cffb780cda4d4acf6d87371427912228b) (From OE-Core rev: 66ee51986db68e1bcd7d8e2b5e91dcdbcb0e6d84) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cross-localedef-native_2.22.bb: Use autotools configureTristan Van Berkom2016-06-291-5/+4
| | | | | | | | | | | | | | | | | Use the autotools default configure commands and just tell autotools where to run configure from. This fixes the build when running on an aarch64 host, which the prebuilt configure scripts with glibc 2.22 do not recognize. (From OE-Core rev: 33d4c758a5d71435437dde74556d32404d91342f) (From OE-Core rev: ae347b60406990c79fe1b89d23b175a48439274a) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sysvinit-inittab: restrict labels to 4 charsStephano Cetola2016-06-291-1/+2
| | | | | | | | | | | | | | | | | | The current recipe creates inittab labels based off the device node name of TTYs used as consoles. If those names exceed the 4 character label limit of inittab, it will break. This change takes the last 4 chars of the device names in order to avoid any errors. [ YOCTO #9529 ] (From OE-Core rev: 30acc7a6b9e6d1c42ba1df6e5a362d10b43cb4eb) (From OE-Core rev: 3bfa60541216e1d1bd228b6d8c516d4a5736ae09) Signed-off-by: Stephano Cetola <stephano.cetola@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: don't build arRoss Burton2016-06-291-1/+1
| | | | | | | | | | | | | | | As it's not 1978 anymore, nobody is using ar for anything apart from static archives. If people are using static archives, then binutils provides a far more capable ar. (From OE-Core rev: 664a7743a7a2dd6a5c3676c06c35b692af2907e2) (From OE-Core rev: cd88d65d4c1f8f56ddccb95f7e75cd9f5229602c) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* packagegroup-core-tools-profile: Enable valgrind on ARMv7a and aboveFelipe F. Tonello2016-06-291-2/+4
| | | | | | | | | | | | | | | | | Fixes: e5f41c221356 ("task-core-tools-profile: fix valgrind for arm and systemtap for mips") Valgrind works on ARMv7a and above. (From OE-Core rev: 08cbf28d70505a6564193c3df63a0c1798d5214f) (From OE-Core rev: dde8b5d61a3e97deabe09b5888094dd148914430) Signed-off-by: Felipe F. Tonello <eu@felipetonello.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: musl mips64 ip fixArmin Kuster2016-04-292-0/+91
| | | | | | | (From OE-Core rev: ef64e61c598b64922ca3e1f9126139a0470b71c2) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: Security fix CVE-2016-2147Armin Kuster2016-04-293-0/+91
| | | | | | | | | busybox <= 1.24.2 (From OE-Core rev: 8a7a392ef37b3d5bd8ef81ab17d976696ad64dfe) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: Security Fix CVE-2016-2148Armin Kuster2016-04-292-0/+75
| | | | | | | | | busybox <= 1.24.2 (From OE-Core rev: ff1a31824a2a43e63682a176a904de43ad0e1c2e) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* busybox: update flock behavior to match upstreamMaxin B. John2016-04-222-0/+74
| | | | | | | | | | | | | | | | | | | | | | | | | | | | In "util-linux" implementation of flock, -c 'PROG ARGS' means run "sh -c 'PROG ARGS'". At present, busybox implementation doesn't follow it. That causes errors like the one listed below: smart install /media/cronie-1.5.0-r0.core2_64.rpm Updating cache... <snip> Output from cronie-1.5.0-r0@core2_64: Running groupadd commands... NOTE: cronie: Performing groupadd with [ --system crontab] ERROR: cronie: groupadd command did not succeed. error: %pre(cronie-1.5.0-r0.core2_64) scriptlet failed, exit status 1 error: install: %pre scriptlet failed (2), skipping cronie-1.5.0-r0.core2_64 This is because we use flock command in preinstall scripts in packages which create new groups/users. [YOCTO #9496] (From OE-Core rev: 84686b51043c5a6b0ae184d00f547ccbd7832f39) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: Update to krogoth head revisionyocto-2.1krogoth-15.0.0Richard Purdie2016-04-191-2/+2
| | | | | | (From OE-Core rev: 9838f8d077d16e52ad592879d65a9e8350b93075) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* buildtools-tarball: set INHIBIT_DEFAULT_DEPSRobert Yang2016-04-191-0/+3
| | | | | | | | | | The recipe doesn't need any default deps. (From OE-Core rev: 25f904b4f0f5a049ffabc7b3613d5902099d4ae0) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* buildtools-tarball: fix perl being included when building with ipkPaul Eggleton2016-04-182-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Due to some logic within opkg, a package with the name matching a dependency will always win over a package with that name in RPROVIDES - even if there is an RCONFLICTS (which is silently ignored), higher feed priority and version. The end result is that buildtools gets perl installed instead of the nativesdk-buildtools-perl-dummy package and that perl (with missing dependencies) gets used in preference to the host one, which is precisely what we were trying to avoid. This is almost certainly a bug in opkg, especially as the other package's dependencies aren't properly installed under these circumstances either. However, specifying RREPLACES works around this, and with no apparent side-effects is probably the safest solution for now. At the same time I noticed that in prepending to SDK_PACKAGE_ARCHS we were actually ending up with a low priority for the dummy package feed rather than a high one, so change to append it instead. This has no effect on the packages that get installed at the moment, but should be done in case the package manager behaviour changes to factor in the feed priority in future. Fixes [YOCTO #9469]. (From OE-Core rev: b18134ddaf949b4f001a1613ab876aed6324040a) Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* buildtools-tarball.bb: fix unexpected operatorRobert Yang2016-04-181-1/+1
| | | | | | | | | | | | | Fixed: run.create_sdk_files.45747: 131: [: =: unexpected operator The SDKMACHINE is not set by default. (From OE-Core rev: 528388c3cef027d436fc794c73d57a247521c238) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* build-appliance-image: Load TUN at startupJuro Bystricky2016-04-181-2/+6
| | | | | | | | | | | | | | | | | | | | This patch addresses the issue of not being able to execute "runqemu" in the Build Appliance. The root cause of the problem was that TAP/TUN was not available, although required by "runqemu". In addition, the recommended remedy $ sudo modprobe tun would fail for two reasons: modprobe not in PATH (user builder), and "iptables" located in /usr/sbin but expected in /sbin. [YOCTO #9437] (From OE-Core rev: 65db0a29be91a157522cf02ebb21961b8ba55759) Signed-off-by: Juro Bystricky <juro.bystricky@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* images: zero out the rootfs_extra_space in initramfs imagesStephano Cetola2016-04-181-0/+1
| | | | | | | | | | | Setting IMAGE_ROOTFS_EXTRA_SPACE impacts the initramfs images, results in an error about INITRAMFS_MAXSIZE. (From OE-Core rev: 3ee82430f3f3eb62cbc949658808d109222e8b24) Signed-off-by: Stephano Cetola <stephano.cetola@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>