linux/meta-openembedded.git/meta-filesystems/recipes-support, branch rocko-next

fuse: CVE-2018-10906

2018-09-04T14:36:55+00:00

* CVE-2018-10906-1: fusermount: don't feed "escaped commas" into mount options The old code permits the following behavior: $ _FUSE_COMMFD=10000 priv_strace -etrace=mount -s200 fusermount -o 'foobar=\,allow_other' mount mount("/dev/fuse", ".", "fuse", MS_NOSUID|MS_NODEV, "foobar=\\,allow_other,fd=3,rootmode=40000,user_id=1000,group_id=1000") = -1 EINVAL (Invalid argument) However, backslashes do not have any special meaning for the kernel here. As it happens, you can't abuse this because there is no FUSE mount option that takes a string value that can contain backslashes; but this is very brittle. Don't interpret "escape characters" in places where they don't work. * CVE-2018-10906-2: fusermount: refuse unknown options Blacklists are notoriously fragile; especially if the kernel wishes to add some security-critical mount option at a later date, all existing systems with older versions of fusermount installed will suddenly have a security problem. Additionally, if the kernel's option parsing became a tiny bit laxer, the blacklist could probably be bypassed. Whitelist known-harmless flags instead, even if it's slightly more inconvenient. Affects fuse < 2.9.8 and fuse < 3.2.5 Signed-off-by: Jagadeesh Krishnanjanappa Signed-off-by: Armin Kuster

fuse: Correct runlevels and startup order

2017-07-24T16:57:33+00:00

:**/fuse*.bb * Assert INITSCRIPT_PARAMS to install the fuse initscript according to its LSB header instead of defaults. Script now starts only during runlevel 'S'. * Also set priority to 03 such that fuse is loaded before udev. This enables systems which utilize udev to mount exfat and other fuse-provided filesystems as a part of the boot process. Natinst-CAR-ID: 630632 Signed-off-by: Alex Stewart Signed-off-by: Martin Jansa

fuse: fix fetcher error.

2017-06-14T12:51:17+00:00

The recent fuse recipe update broke fetching the sources when building fuse-native (it tried to fetch non-existent package fuse-native-2.9.7.tar.gz). Signed-off-by: Ismo Puustinen Signed-off-by: Martin Jansa

fuse: let overriding base_sbindir have the proper effect.

2017-06-14T12:51:15+00:00

Set MOUNT_FUSE_PATH explicitly to ${base_sbindir} before configure. Making this explicit will let people override base_sbindir with the desired effect (for instance when building a distro with merged / and /usr). Signed-off-by: Krisztian Litkey

fuse: update 2.9.4 to 2.9.7

2017-06-12T04:56:24+00:00

Signed-off-by: Martin Jansa

fuse: Remove unneeded RDEPENDS on util-linux-mount

2017-03-04T11:39:51+00:00

Fuse claimed to need util-linux-mount at runtime, which isn't true. This drags util-linux-mount into any image that uses fuse. Encountered no problems with busybox's mount command and fuse (and never had). Fuse doesn't call the "mount" program anywhere, so the dependency doesn't make sense anyway. Signed-off-by: Mike Looijmans Signed-off-by: Martin Jansa

fuse: support native compilation

2017-02-13T17:43:32+00:00

This is required for swtpm-native (from meta-security) and simulating a virtual TPM in qemu. Right now, accessing swtpm only works via CUSE and thus needs fuse. Signed-off-by: Patrick Ohly Signed-off-by: Martin Jansa

Revert "physfs: move to sources found at github/supertux"

2016-11-22T12:38:14+00:00

This reverts commit 3bbec2b7921c83e13b64e808ef34122a608933f0. The commit was intended to make supertux in meta-games happy. Now I found out that: * other packets e.g meta-retro d1x-rebirth segfault with supertux version of physfs * supertux can be configured to use it's own physfs as static library To avoid package version counting backwards PE = 1 was added. The patch required for supertux was already applied in meta-games. Signed-off-by: Andreas Müller Signed-off-by: Martin Jansa

physfs: move to sources found at github/supertux

2016-10-03T17:19:57+00:00

* It seems that physfs is still maintained there and has the functionality required by latest supertux. * License changed Copyright year causing checksum change. Signed-off-by: Andreas Müller Signed-off-by: Martin Jansa

fuse: upgrade to 2.9.4

2015-09-23T13:39:46+00:00

Changes: * Remove 001-fix_exec_environment_for_mount_and_umount.patch which has been included in the new version * Add sysvinit and systemd support * For systemd, there is not a fuse.service since systemd provides sys-fs-fuse-connections.mount to mount the fuse control filesystem, so instead, only fuse.conf is added to modules-load.d to load the required fuse kernel module. * Add RDEPENDS on util-linux-mount * Add a patch to fix the return value of "--help" option Signed-off-by: Jackie Huang Signed-off-by: Martin Jansa