linux/meta-security.git/meta-parsec/recipes-parsec, branch masterMirror of git.yoctoproject.org/meta-security.githttps://git.enea.com/cgit/linux/meta-security.git/atom?h=master2026-05-17T14:44:55+00:00parsec-service: update TS group name2026-05-17T14:44:55+00:00Ross Burtonross.burton@arm.com2026-05-05T15:44:23+00:00urn:sha1:921b75fa4aceaeeef388acdd1a3a8e35b5afc4cc
meta-arm recently changed the group name that is used by TS[1], so update
the group name to match.
[1] meta-arm 595cb0f1a0 ("arm/trusted-services: fix udev management in libts")
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
parsec-service: do group membership modifications in useradd2026-05-17T14:44:55+00:00Ross Burtonross.burton@arm.com2026-05-05T15:44:22+00:00urn:sha1:a9384af621c5dd1b80bf3999bd3993190e8348f7
Instead of calling groupmems after creating the user, we can tell useradd
to do the group membership when creating the user. There are several
reasons for this:
1) Consolidation of the calls into a single call means creation is atomic,
it either worked or it did not.
2) The existing logic doesn't work if both TPM and TS were enabled.
3) GROUPMEMS_PARAM is broken in oe-core master[1] and this will not be
fixed as groupmems has been removed from shadow[2].
Instead, construct a list of groups that parsec needs to be a member of,
and pass them to useradd.
[1] https://bugzilla.yoctoproject.org/show_bug.cgi?id=16277
[2] shadow 388ce70 "*/: groupmems(8): Remove program"
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
parsec-service: assign PACKAGECONFIG in one line2026-05-17T14:44:55+00:00Ross Burtonross.burton@arm.com2026-05-05T15:44:21+00:00urn:sha1:58ac5eda9a6e142fc7871cf5bd79becb58b010f5
By :appending the TPM option we make it impossible for distros to simply
assign to PACKAGECONFIG.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
parsec-service: Update Parsec service version.2026-05-17T14:44:55+00:00Anton Antonovanton.antonov@arm.com2026-05-01T15:24:30+00:00urn:sha1:e6538dbad1656fc12634a910c098ba2b3fd7126e
This update adds compatibility with clang 22.1 in oe-core.
Signed-off-by: Anton Antonov <Anton.Antonov@arm.com>
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
parsec-service: update PACKAGECONFIG options as lists of cargo build features2025-07-04T16:41:20+00:00Anton Antonovanton.antonov@arm.com2025-05-19T08:45:53+00:00urn:sha1:b1f1c7a304de33916040928ea7182c03580efb28
After commit 7a2b9acef2 "cargo: pass PACKAGECONFIG_CONFARGS to cargo build"
we don't need to include Parsec cargo build features into CARGO_BUILD_FLAGS.
Let's update PACKAGECONFIG options as lists of features.
A small fix in readme.md as well.
Signed-off-by: Anton Antonov <Anton.Antonov@arm.com>
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
meta-security: Remove True option to getVar calls2025-02-03T02:11:12+00:00akash hadkeakash.hadke27@gmail.com2025-01-09T10:43:48+00:00urn:sha1:8fcbc47b9c56fe405a7a6d51ff0d8e2b756818ea
getVar() now defaults to expanding by default, thus remove the True
option from getVar() calls with a regex search and replace.
Signed-off-by: Akash Hadke <akash.hadke27@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
parsec-service: fix build error2025-01-07T01:01:40+00:00Armin Kusterakuster808@gmail.com2024-12-31T03:00:02+00:00urn:sha1:f771f969b1c4aec08d0092502d60145667c17c6d
Fixes:
| error: unnecessary qualification
| --> src/front/domain_socket.rs:247:30
| |
| 247 | let ucred_size = mem::size_of::<ucred>();
| | ^^^^^^^^^^^^^^^^^^^^^
Signed-off-by: Armin Kuster <akuster808@gmail.com>
parsec-service: UNPACKDIR fixes2024-07-30T00:07:01+00:00Mikko Rapelimikko.rapeli@linaro.org2024-07-25T09:01:21+00:00urn:sha1:58daab21b74e118ed42dd9bc961777e64bd466b3
New poky uses UNPACKDIR instead of WORKDIR
Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta-parsec: Update parsec-service to 1.4.12024-05-28T17:07:14+00:00Gowtham Suresh Kumargowtham.sureshkumar@arm.com2024-05-16T08:42:28+00:00urn:sha1:defb35fecb385f341a4b0ec4865648b3d60108dd
Signed-off-by: Gowtham Suresh Kumar <gowtham.sureshkumar@arm.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
parsec-tool: fix serialNumber check2024-01-28T17:13:54+00:00Mikko Rapelimikko.rapeli@linaro.org2024-01-03T13:35:19+00:00urn:sha1:7fab92b3c0650186d57b06466b420ca42995444a
New openssl 3.2.0 version removed spaces around serialNumber in:
Subject: CN=parallaxsecond.com, serialNumber=EZ4U2CIXL
Fixes parsec-service oeqa test on qemu.
Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>