linux/meta-security.git/recipes-security/sssd, branch hardknott

sssd: re-package to fix QA issues

2021-12-03T22:15:13+00:00

It packages all file in ${libdir} to package sssd, including the .so symlink files. Then it causes QA issues: | ERROR: QA Issue: sssd rdepends on dbus-dev [dev-deps] | ERROR: QA Issue: sssd rdepends on ding-libs-dev [dev-deps] So re-package sssd then the .so symlink files and .pc files are packaged to sssd-dev which should be. File ${libdir}/libsss_sudo.so is not a symlink file but packaged to sssd-dev too. Then causes another QA issue: | ERROR: sssd-2.5.2-r0 do_package_qa: QA Issue: -dev package sssd-dev contains non-symlink .so '/usr/lib/libsss_sudo.so' [dev-elf] So create a new sub-package libsss-sudo to package file libsss_sudo.so and make sssd rdepends on it. JP: Updated for version differences. Signed-off-by: Kai Kang Signed-off-by: Armin Kuster (cherry picked from commit e81c15f851ca5396c78c8737967ee38db0ebe0cd) Signed-off-by: Jeremy A. Puhlman Signed-off-by: Armin Kuster

sssd: fix CVE-2021-3621

2021-09-10T14:23:59+00:00

Backport patch to fix CVE-2021-3621. CVE: CVE-2021-3621 Signed-off-by: Kai Kang Signed-off-by: Armin Kuster

sssd: update to latest ltm 1.16.5

2020-10-10T23:21:48+00:00

fix musl support Signed-off-by: Armin Kuster

nss: update patch to fix do_patch error

2020-09-12T15:55:28+00:00

Currently sssd's do_patch task fails. Update the patch to fix this problem. Signed-off-by: Chen Qi Signed-off-by: Armin Kuster

sssd: Avoid nss function conflicts with glibc nss.h

2020-09-05T18:01:47+00:00

glibc 2.32 will define these varibles [1] which results in conflicts with these static function names, backport a fix from upstream [1] https://sourceware.org/git/?p=glibc.git;a=commit;h=499a92df8b9fc64a054cf3b7f728f8967fc1da7d Signed-off-by: Hongxu Jia Signed-off-by: Armin Kuster

sssd: Make manpages buildable

2020-08-29T14:25:35+00:00

Some XML related fixes are needed to make the sssd manpages buildable Signed-off-by: Jonatan Pålsson Signed-off-by: Armin Kuster

sssd: disable build secrets

2020-06-23T15:00:52+00:00

It requires http_parser.h to build secrets: | configure: error: | You must have the header file http_parser.h installed to build sssd | with secrets responder. If you want to build sssd without secret responder | then specify --without-secrets when running configure. The header file is from package http-parser[1] rather than apache2. But there is no recipe http-parser in openembedded. So disable build secrets for sssd and remove related systemd service and socket files. Reference: 1. https://github.com/nodejs/http-parser Signed-off-by: Kai Kang Signed-off-by: Armin Kuster

sssd: Add infopipe PACKAGECONFIG

2020-03-27T23:53:25+00:00

infopipe was previously on by default, so add it to the default PACKAGECONFIG. The systemd files are only installed when --with-infopipe is passed to configure, so conditionally add them to SYSTEMD_SERVICE. Signed-off-by: Jonatan Pålsson Signed-off-by: Armin Kuster

sssd: Add missing DEPENDS on jansson

2020-03-27T23:53:25+00:00

When building with the curl PACKAGECONFIG, sssd will depend on the jansson library. Fixes the following error: | checking for JANSSON... no | checking jansson.h usability... no | checking jansson.h presence... no | checking for jansson.h... no | configure: error: | You must have the header file jansson.h installed to build sssd | with secrets and KCM responder. If you want to build sssd without these | responders then specify --without-secrets --without-kcm when running configure. Signed-off-by: Jonatan Pålsson Signed-off-by: Armin Kuster

sssd: Add missing files to SYSTEMD_SERVICE

2020-03-27T23:53:25+00:00

These files are installed when the ssh or curl PACKAGECONFIGs are enabled. Fixes the following error: ERROR: sssd-1.16.4-r0 do_package: QA Issue: sssd: Files/directories were installed but not shipped in any package: /lib/systemd/system/sssd-kcm.socket /lib/systemd/system/sssd-kcm.service /lib/systemd/system/sssd-ssh.socket /lib/systemd/system/sssd-ssh.service Signed-off-by: Jonatan Pålsson Signed-off-by: Armin Kuster