linux/meta-openembedded.git/meta-networking/recipes-daemons, branch morty

opensaf: fix QA Issue

2017-09-21T13:48:11+00:00

Move the do_sysvinit_install contents to do_install_append. Signed-off-by: Dengke Du Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald Signed-off-by: Armin Kuster

postfix: add dependency icu

2017-01-30T00:36:19+00:00

It calls icu-config to detect icu support in file makedefs of postfix. The compile results are different depends on whether icu has been built already. postfix should provide Unicode support, so add dependency icu to solve the problem. Signed-off-by: Kai Kang Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald Signed-off-by: Armin Kuster

tftp-hpa: fix ALTERNATIVE_PRIORITY to avoid conflict

2017-01-30T00:35:38+00:00

Fix ALTERNATIVE_PRIORITY to avoid the same priority of the 'tftp' utility with that from busybox. Signed-off-by: Chen Qi Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald Signed-off-by: Armin Kuster

squid: disable gnu atomic operations for mipsel

2017-01-30T00:11:55+00:00

Disable GNU atomic operations for mipsel since it's not supported. Refer to https://gcc.gnu.org/bugzilla/show_bug.cgi?id=56300: There is no hardware support for 8 bytes atomic operations on 32-bit MIPS targets. Signed-off-by: Jackie Huang Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald Signed-off-by: Armin Kuster

vblade: fix QA warning for GNU_HASH

2016-11-29T16:22:21+00:00

Add LDFLAGS variable to Makefile so that extra linker flags can be sent via this variable. Signed-off-by: Yi Zhao Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald (cherry picked from commit f08e9d4c7ca1e9261484e4ffedd27370109d2bba) Signed-off-by: Armin Kuster

iscsi-initiator-utils: fix postinstall and systemd service file

2016-11-29T16:22:21+00:00

Fix postinstall and systemd service file so that the postinstall script does not fail at rootfs time. Signed-off-by: Chen Qi Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald (cherry picked from commit 816c723aa5b4c106dcc37815a5691173f9f02af1) Signed-off-by: Armin Kuster

atftp: fixes musl libc build

2016-10-20T15:17:23+00:00

The patches derive from buildroot: https://git.busybox.net/buildroot/commit/?id=ef33c008e3c5048d1442f8b0f6336db2fa8d79a1 Signed-off-by: Ming Liu Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

squid: fix ptest failure

2016-10-20T15:16:53+00:00

Fix error when run ptest on target: cp: cannot stat '/usr/bin/true': No such file or directory make: *** [Makefile:1120: squid-conf-tests] Error 1 The correct path should be /bin/true on target. Signed-off-by: Yi Zhao Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

squid: specify sysconfdir and logdir

2016-10-20T15:16:49+00:00

The default sysconfdir is /etc and logdir is /var/logs. Set sysconfdir and logdir when configure, replace them with /etc/squid and /var/log/squid. Signed-off-by: Yi Zhao Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

vsftpd: allow sysinfo() in the seccomp sandbox

2016-09-12T14:43:38+00:00

* Allow sysinfo() in the seccomp sandbox otherwise comes below OOPS: priv_sock_get_cmd as the syscall sysinfo() not allowed tnftp 192.168.1.1 Connected to 192.168.1.1. 220 (vsFTPd 3.0.3) Name (192.168.1.1:root): anonymous 331 Please specify the password. Password: 230 Login successful. Remote system type is UNIX. Using binary mode to transfer files. ftp> prompt Interactive mode off. ftp> mget small* OOPS: priv_sock_get_cmd * use "strace -ff /usr/sbin/vsftpd" to track in both seccomp sandbox on and seccomp sandbox off (add seccomp_sandbox=NO in /etc/vsftpd.conf) scenarios when type the commands at ftp client as above, the ftp connection at server side ends up each time with SIGSYS when call sysinfo() syscall in seccomp sandbox on case, so we need to add sysinfo() in the seccomp sandbox if still use seccomp sandbox for vsftpd * The issue still exists in other distribution, Please check https://bugzilla.redhat.com/show_bug.cgi?id=845980 for details And check ftp://195.220.108.108/linux/fedora/linux/updates/\ 24/SRPMS/p/proftpd-1.3.5b-2.fc24.src.rpm for fedora, there is even a patch vsftpd-3.0.2-seccomp.patch as below to turn off seccomp sandbox for vsftpd by default which also means fedora doesn't limit the syscall any more by default. From dd86a1c28f11fa67b1263d5dc79fa9953629d30d Mon Sep 17 00:00:00 2001 From: Martin Sehnoutka Date: Fri, 8 Apr 2016 15:03:16 +0200 Subject: [PATCH 1/7] vsftpd-3.0.2-seccomp --- tunables.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tunables.c b/tunables.c index 93f85b1..b024be4 100644 --- a/tunables.c +++ b/tunables.c @@ -232,7 +232,7 @@ tunables_load_defaults() tunable_isolate_network = 1; tunable_ftp_enable = 1; tunable_http_enable = 0; - tunable_seccomp_sandbox = 1; + tunable_seccomp_sandbox = 0; tunable_allow_writeable_chroot = 0; tunable_accept_timeout = 60; Signed-off-by: Mingli Yu Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald