summaryrefslogtreecommitdiffstats
path: root/meta/recipes-extended
Commit message (Collapse)AuthorAgeFilesLines
...
* net-tools: Ensure quilt only operates on local patchesAlex Kiernan2018-08-071-1/+10
| | | | | | | | | | | | | | | When net-tools is built and the local patches haven't been applied, then `quilt pop -a` will climb parent directories attempting to find a {patches/.pc} directory; if this succeeds then we end up popping off some completely unrelated patches from a parent directory. Ensure that we do have a local patches directory and then turn off the directory climbing so that we avoid this problem. (From OE-Core rev: 61522645a1ccc8342706960efe90896001e94a8b) Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* man-db: remove '--disable-cache-owner' optionChen Qi2018-08-071-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | The following error appeared at boot. systemd-tmpfiles[115]: [/usr/lib/tmpfiles.d/man-db.conf:1] Unknown user '1w' By default cache owner is enabled and defaults to 'man'. Users could supply '--enable-cache-owner=[ARG]' to change the default cache owner. Using '--disable-cache-owner' leaves the ownership of system-wide cache files unconstrained, and users will allowed to modify them. We'd better keep the default behavior, just like other distros do. I can guess that we used '--disable-cache-owner' to bypass the following error at do_install. | chown: invalid user: ‘man:man’ The 'man' user is provided by base-passwd recipe, so add it to DEPENDS. (From OE-Core rev: 7080df4b6bc50440eed600e81f2c6fa76a80623d) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sudo: add PACKAGECONFIG for pam-wheelYi Zhao2018-08-022-0/+5
| | | | | | | | | | | | The pam_wheel PAM module is used to enforce the so-called wheel group. By default it permits root access to the system if the applicant user is a member of the wheel group. Add PACKAGECONFIG to enable pam_wheel module for sudo. (From OE-Core rev: 7a46ca79b18527a56de470fcaaf95c870c097cf6) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iptables: Split the iptables modules into separate packagesPeter Kjellerstedt2018-07-301-13/+30
| | | | | | | | | | | | | | | | By splitting the iptables modules into separate packages it is possible to pick and choose the modules to install and thereby reduce the total size of the installed modules. Backwards compatibility is maintained by adding a recommendation of iptables-modules, which is a meta package that depends on all the generated packages. (From OE-Core rev: 2e99caca64704d1ec51f4f65048d945e5ff1384f) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cups: depend on libusb1Ross Burton2018-07-301-1/+1
| | | | | | | | | | There is no need to depend on the compatibility library libusb-compat, as CUPS links directly to libusb1. (From OE-Core rev: feead64ac6df31d9b9499b232631aeb0edad3af0) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* unzip: fix symlink problemRoss Burton2018-07-302-0/+27
| | | | | | | | | Large zip files can cause unzip to crash, take a patch from Fedora to fix it. (From OE-Core rev: a001833b7c7a0a6eef88e053fe65e2a0c91ca7bc) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libidn2: add new versionRoss Burton2018-07-301-0/+23
| | | | | | | | | libidn 1.x is deprecated, add the parallel-installable libidn2. (From OE-Core rev: 2a747138a2945dc12e6f35b2cf64d0e2aad7094f) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* shadow: upgrade 4.2.1 -> 4.6Chen Qi2018-07-3014-375/+209
| | | | | | | | | | | | | | | | | | | | | | The following patches are removed because problems have been fixed in this version. 0001-shadow-CVE-2017-12424 fix-installation-failure-with-subids-disabled.patch usermod-fix-compilation-failure-with-subids-disabled.patch CVE-2017-2616.patch check_size_of_uid_t_and_gid_t_using_AC_CHECK_SIZEOF.patch 0001-Do-not-read-login.defs-before-doing-chroot.patch The following patches are rebased. 0001-Disable-use-of-syslog-for-sysroot.patch 0001-useradd-copy-extended-attributes-of-home.patch 0001-useradd.c-create-parent-directories-when-necessary.patch allow-for-setting-password-in-clear-text.patch (From OE-Core rev: 79dd22729d5b8a2f2cf4294ff6b261c9d6ecd977) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cups: upgrade 2.2.6 -> 2.2.8Chen Qi2018-07-302-6/+6
| | | | | | | | (From OE-Core rev: 2846cdf6f87f071e06aee0c9a67390b326098f65) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lsof: upgrade 4.89 -> 4.91Ovidiu Panait2018-07-301-2/+2
| | | | | | | | (From OE-Core rev: 784f993f52c8e591d96efadfec486a736b6f1ff5) Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* shadow: fix CVE-2017-2616Andrej Valek2018-07-262-0/+65
| | | | | | | | (From OE-Core rev: 94a1e2794df15f0f2cb62ae030cd81e6c0798b1f) Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* packagegroup-core-full-cmdline: clean up system-services dependenciesRoss Burton2018-07-261-8/+0
| | | | | | | | | | The 'system services' packagegroup depends on a number of packages which are not system services, so remove them from the list. (From OE-Core rev: 308e402a710dd7e6bb521517dde11a2e2b5fda22) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lsb: fix usrmerge install pathsIoan-Adrian Ratiu2018-07-261-2/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ${base_prefix} is set in bitbake.conf to empty. This makes lsb_release always install under /bin which is a problem if usrmerge is in DISTRO_FEATURES, because it needs to be installed under /usr/bin. By using ${root_prefix} instead, we fix the usrmerge install path and the following QA warning goes away while keeping the non-usrmerge path identical. WARNING: lsb-5.0-r0 do_package: QA Issue: lsb: Files/directories were installed but not shipped in any package: /bin /bin/lsb_release Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. lsb: 2 installed and not shipped files. [installed-vs-shipped] Also if usrmerge is defined don't try to create the lib64 symlink because base-files handles it to avoid the do_rootfs error Collected errors: * check_data_file_clashes: Package lsb wants to install file tmp-glibc/work/x64-nilrt-linux/test-image/1.0-r0/rootfs/lib64 But that file is already provided by package * base-files (From OE-Core rev: 852c9498ae365bc8c149b5e6df0c8667bd885c79) Signed-off-by: Ioan-Adrian Ratiu <adrian.ratiu@ni.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* logrotate: Improve configurability of the installed systemd service filesPeter Kjellerstedt2018-07-261-5/+15
| | | | | | | | | | | | | | | | | | This makes it possible to add extra options to the logrotate application (via ${LOGROTATE_OPTIONS}), and it allows the Persistent option in logrotate.timer to be configured via ${LOGROTATE_SYSTEMD_TIMER_PERSISTENT}. It also changes the sed expressions to allow for ${LOGROTATE_SYSTEMD_TIMER_BASIS} to contain commas without having to prefix them with backslahes, e.g.: LOGROTATE_SYSTEMD_TIMER_BASIS = "*-*-* *:00,30:00" (From OE-Core rev: ca3f2f6b49edee7052ef941228dc477d9060bdd9) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iputils: upgrade to s20190629Ross Burton2018-07-265-157/+145
| | | | | | | | | | | | | | | | | | | | License-Update: change license checksums to check the License files themselves (BSD3 and GPL2), and the tool-to-license file (LICENSE). Changes to LICENSE will now be detected. Backport a patch to fix the build with musl. Drop upstreamed patch. Update libidn build-dependency to libidn2. Patch in an install target and use that to install binaries, to avoid upstream adding binaries that we don't ship. Also ship all binaries that are installed. (From OE-Core rev: d227122d929330ff71a550689aaedc5d8299d859) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* xz: upgrade 5.2.3 -> 5.2.4Ross Burton2018-07-241-4/+5
| | | | | | | (From OE-Core rev: 0529b8c88a2cd6c21737023d757f44eebc5a0547) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sysstat: upgrade 11.7.3 -> 11.7.4Ross Burton2018-07-241-2/+2
| | | | | | | (From OE-Core rev: 8a50ab1ebf1b9b274521c194662d9144f99304fc) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bc: upgrade to 1.07.1Ross Burton2018-07-245-54/+103
| | | | | | | | | | | | | | | | | | | Relicensed to just GPLv3+, update LICENSE and checksums. The build dependency for flex should be flex-native. libmath.h is missing from the tarball (it was present in 1.06) and the generation rules are not cross-friendly, so delete the rules and copy in a pre-generated libmath.h. Remove fix-segment-fault.patch as the fixes are now upstream. Add PACKAGECONFIG for readline and libedit, defaulting to readline. (From OE-Core rev: 9862849ba883c110e4d2c57c39ab2c58e9b2d216) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bash: fix wrong exit status offsetRui Wang2018-07-181-1/+1
| | | | | | | | | | | | | | | In Linux，8 bits of the return code and 8 bits of the number of the killing signal are mixed into a single value on the exit code, so the exit status offset should be 8. But the autoconf checker can not determine it while cross compiling, and then it is set to the default value 0, which will cause generating the wrong exit code if program exit with an error code. (From OE-Core rev: e2dea46607a24620d6d2c250efc9b2e95bfd5ad8) Signed-off-by: Rui Wang <rui.wang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* psmisc:23.0 -> 23.1Hong Liu2018-07-151-1/+1
| | | | | | | | | | Upgrade psmisc from 23.0 to 23.1 (From OE-Core rev: cbaa7fd39a0f64611321077d48d47046f5228fbb) Signed-off-by: Hong Liu <hongl.fnst@cn.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* procps:3.3.14 -> 3.3.15Hong Liu2018-07-151-2/+2
| | | | | | | | | | Upgrade procps from 3.3.14 to 3.3.15. (From OE-Core rev: 19bd5ea331344c213c6d8ecdb47f78cf021c00ca) Signed-off-by: Hong Liu <hongl.fnst@cn.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ethtool:4.16 -> 4.17Hong Liu2018-07-152-5/+5
| | | | | | | | | | Upgrade ethtool from 4.16 to 4.17 (From OE-Core rev: 11dc07b0d2f3b3c0ff9edc5e6aac3da100cbf588) Signed-off-by: Hong Liu <hongl.fnst@cn.fujitsu.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* minicom: remove dead URL from UPSTREAM_CHECK_URIRoss Burton2018-07-061-2/+0
| | | | | | | (From OE-Core rev: f57363d307d573554a84443dd774df9549587b94) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* diffutils-ptest: add runtime dependency on makeZhang Xiao2018-07-061-0/+2
| | | | | | | | (From OE-Core rev: 0ab4fc861cff69acc42446c22f7a7ed2e6128849) Signed-off-by: Zhang Xiao <xiao.zhang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libnss-nis: Limit parse skip only for target recipe on muslKhem Raj2018-07-051-6/+1
| | | | | | | | | | | on the host side we are glibc based therefore some native and nativesdk recipes might need this package even when we target musl based systems (From OE-Core rev: c939255a88d367d19497184ed64b828f021e5ef4) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ghostscript: fix CVE-2018-10194Hongxu Jia2018-07-042-0/+50
| | | | | | | | | | https://nvd.nist.gov/vuln/detail/CVE-2018-10194 (From OE-Core rev: 4b56d6a61bfe4ca28d1301ae83898a979d3df73a) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* man-pages: 4.14 -> 4.16Hongxu Jia2018-07-041-2/+2
| | | | | | | | (From OE-Core rev: 5d84441e148a43f42697dc7493d6c37c713fe397) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* man-db: 2.8.2 -> 2.8.3Hongxu Jia2018-07-041-2/+2
| | | | | | | | (From OE-Core rev: 3e48ac4a65efca1653d6cd69434b0164af4ef39a) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mdadm: fix one more issue when building with gcc8Martin Jansa2018-06-271-1/+23
| | | | | | | (From OE-Core rev: 1a0ee6b0f194807b9eac1207c43ba3fae4d1f94c) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* findutils: Refresh patches with devtoolKhem Raj2018-06-272-22/+22
| | | | | | | | | | We get fuzz warnings when applying these patches and devtool reports it (From OE-Core rev: cb3c0343becc8bb2ebf4e9c12782c509a3d7754d) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libnewt-python: Add nativesdkZheng Ruoqin2018-06-271-1/+1
| | | | | | | | | Add nativesdk for libnewt-python. (From OE-Core rev: b992be195821e110691434e4a743b753bc04b3c4) Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libnewt: Add nativesdkZheng Ruoqin2018-06-271-1/+1
| | | | | | | | | Add nativesdk for libnewt. (From OE-Core rev: 6414d23cd23fc6ed2d31a7b55fce1be82a09ae67) Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* slang: add nativesdkZheng Ruoqin2018-06-271-1/+1
| | | | | | | | | Add nativesdk for slang. (From OE-Core rev: 458c835fe05279467ab781aab811498ab80f6904) Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* packagegroup-full-cmdline: remove poptRoss Burton2018-06-271-1/+0
| | | | | | | | | | popt is a library, so it makes no sense for this to be in a "command line" packagegroup. (From OE-Core rev: 4af90876914e5f2ccc5b7f833cd43c239c2dac55) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lsbinitscripts: remove spurious build dependenciesRoss Burton2018-06-271-1/+0
| | | | | | | | | | A recipe that doesn't configure, doesn't compile, and just ships a single shell script certainly does not need to build depend on popt and glib-2.0. (From OE-Core rev: 8a771f22980f766b71f3ea0825568fc5c669e444) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* minicom: change SRC_URI to use Debian mirrorsRoss Burton2018-06-271-1/+1
| | | | | | | | | | Alioth is dead and the minicom project on Salsa (the replacement for Alioth) doesn't actually have any files in, so just use the Debian mirror instead. (From OE-Core rev: b0338efcdabeec79c568c74b6888d7d523e8e9dc) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* shadow: update SRC_URI now Alioth is downRoss Burton2018-06-271-1/+3
| | | | | | | | | | | | | | | Alioth is dead so we can't use it for SRC_URI anymore. There is a shadow repository on GitHub which is the new upstream, but for some reason it is missing the 4.2.1 tag and tarball that we use. Also 4.2.1 was never uploaded into Debian itself, so we can't use their mirror network either. For now point SRC_URI at the Yocto Project source mirror and set UPSTREAM_CHECK_URI so that we get nagged to upgrade to 4.6. (From OE-Core rev: b3e246fef166030f327b5a852718ea907ada1759) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mktemp: removeRoss Burton2018-06-215-77/+0
| | | | | | | | | | | | | Both busybox and coreutils provide mktemp, and the only difference between those (and standalone mktemp) is that coreutils supports --suffix. Also mktemp.org has disappeared, so it's fair to assume that the standalone mktemp (last released in 2010) is dead. (From OE-Core rev: 59a825ca1e08a7e47fcbc807606103d463280e6c) Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* findutils: make -delete honour the -ignore_readdir_race optionZhixiong Chi2018-06-212-1/+148
| | | | | | | | | | | the '-delete' action no longer complains about disappeared files when the '-ignore_readdir_race' option is given, too. That action will also returns true in such a case now. (From OE-Core rev: f0808ee03a244be1fb485e0046983a05193b23b6) Signed-off-by: Zhixiong Chi <zhixiong.chi@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* xdg-utils: upgrade to 1.1.3Maxin B. John2018-06-181-2/+2
| | | | | | | | | 1.1.2 -> 1.1.3 (From OE-Core rev: 749253756a376428a4e1d89ba7c441c947a8fde7) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mc: upgrade to 4.8.21Maxin B. John2018-06-181-2/+2
| | | | | | | | | 4.8.20 -> 4.8.21 (From OE-Core rev: e1d16cd44630a14e91ff792f4e97d788bb0f2740) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cronie: upgrade to 1.5.2Maxin B. John2018-06-181-2/+2
| | | | | | | | | 1.5.1 -> 1.5.2 (From OE-Core rev: ed376ab653dd7c0500184c7527085120b51448a9) Signed-off-by: Maxin B. John <maxin.john@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* watchdog: fix init script for sysvinitChen Qi2018-06-183-59/+113
| | | | | | | | | | | | | | | The current init script is installed from source with redhat style. It does not get configuration from /etc/default/watchdog. We should use debian style init script. Write our own script just like what wd_keepalive does. Also, in the init script, we check the existence of /dev/watchdog to determine whether to start the daemon or not. (From OE-Core rev: a31f8dd34e8ea34dfb087ed464575aa390ece09b) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* watchdog: make init script start after syslogChen Qi2018-06-181-2/+2
| | | | | | | | | | | | | | We need to make sure logs are not lost. As long as there's no strong and vaild reason, we should make daemons start after syslog. As a side effect, we could check the logs to see if there are some potential problem. In OE, the 'parselogs' test case could do it automatically. (From OE-Core rev: 41e4d728ef92586e2714fa0c136b838c3fda051e) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* watchdog: disable systemd services by defaultChen Qi2018-06-181-0/+3
| | | | | | | | | | | | | systemd has internal support for watchdog. See the RuntimeWatchdogSec in /etc/systemd/system.conf. We'd better just disable this service by default. If users want to use watchdog, consider using the systemd one. (From OE-Core rev: 183c9125e78ae1035894600a66b4ea1fa6a3a532) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* watchdog: remove the useless watchdog-conf.patchChen Qi2018-06-182-17/+0
| | | | | | | | | | | | This patch modifies watchdog.conf file. But this file is deliberately deleted in do_install. The current mechanism in OE is to use another recipe watchdog-conf to handle watchdog configuration. So the patch is really useless. (From OE-Core rev: 80638247143b15a5643f9fcc116d7bc7dcbf3496) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ltp: fix CVE-2017-5669 test caseNaresh Kamboju2018-06-152-0/+98
| | | | | | | | | | | | | | | Adding CVE-2017-5669 test fix patch which is accepted upstream in LTP repo. Ref: cve-2017-5669: shmat() for 0 (or <PAGESIZE with RND flag) has to fail with REMAPs https://github.com/linux-test-project/ltp/pull/324 Upstream-Status: Accepted [https://github.com/linux-test-project/ltp/pull/324] (From OE-Core rev: e356cb7e7bfb407c2f3a1bd0f28b5f14beaff882) Signed-off-by: Naresh Kamboju <naresh.kamboju@linaro.org> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* xinetd: Fix systemd service for systemd>237Ricardo Ribalda Delgado2018-06-151-4/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | SystemD 237 implements a stricted PIDfile handling that breaks several daemons [1]. Change the way we start xinetd, mimicing other distros [2]. Fixes: root@qt5122:~# journalctl -u xinetd -- Logs begin at Fri 2018-05-25 14:33:29 UTC, end at Mon 2018-06-11 07:33:08 UTC. -- May 25 14:33:31 qt5122 systemd[1]: Starting Xinetd A Powerful Replacement For Inetd... May 25 14:33:31 qt5122 systemd[1]: xinetd.service: Permission denied while opening PID file or unsafe symlink chain: /var/run/xinetd.pid Jun 11 07:27:24 qt5122 systemd[1]: xinetd.service: Start operation timed out. Terminating. Jun 11 07:27:24 qt5122 systemd[1]: xinetd.service: Failed with result 'timeout'. Jun 11 07:27:24 qt5122 systemd[1]: Failed to start Xinetd A Powerful Replacement For Inetd. Jun 11 07:31:38 qt5122 systemd[1]: Starting Xinetd A Powerful Replacement For Inetd... Jun 11 07:31:38 qt5122 systemd[1]: xinetd.service: Permission denied while opening PID file or unsafe symlink chain: /var/run/xinetd.pid Jun 11 07:33:08 qt5122 systemd[1]: xinetd.service: Start operation timed out. Terminating. Jun 11 07:33:08 qt5122 systemd[1]: xinetd.service: Failed with result 'timeout'. Jun 11 07:33:08 qt5122 systemd[1]: Failed to start Xinetd A Powerful Replacement For Inetd. [1]: https://github.com/systemd/systemd/issues/8085 [2]: https://github.com/felixonmars/archlinux-community/commit/e49040636737fdb09031e75ec4d73a580f80676b (From OE-Core rev: eea25f03e4c46cfe0d05df46f8f50e1389179c80) Signed-off-by: Ricardo Ribalda Delgado <ricardo.ribalda@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* man-pages: inherit manpagesKai Kang2018-06-151-1/+7
| | | | | | | | | | | Inherit manpages to update manual file index caches after installation for man-pages. (From OE-Core rev: 72e5e124e565c5a72771c7325a783011aedcab96) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cpio: fix CVE-2016-2037Andre McCurdy2018-06-152-0/+347
| | | | | | | | | | | | | | | | | | | | | | | | "The cpio_safer_name_suffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted cpio file." https://nvd.nist.gov/vuln/detail/CVE-2016-2037 Note that there appear to be two versions of this fix. The original patch posted to the bug-cpio mailing list [1] is used by Debian [2], but apparently causes regression [3]. The patch accepted to the upstream git repo [4] seems to be the most complete fix. [1] https://lists.gnu.org/archive/html/bug-cpio/2016-01/msg00005.html [2] https://security-tracker.debian.org/tracker/CVE-2016-2037 [3] https://www.mail-archive.com/bug-cpio@gnu.org/msg00584.html [4] http://git.savannah.gnu.org/cgit/cpio.git/commit/?id=d36ec5f4e93130efb24fb9678aafd88e8070095b (From OE-Core rev: f170288ac706126e69a504a14d564b2e5c3513e4) Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-06-23 05:11:10 +0000