diff options
| author | Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com> | 2019-07-31 23:24:51 +0300 |
|---|---|---|
| committer | Armin Kuster <akuster808@gmail.com> | 2019-08-04 13:13:38 -0700 |
| commit | c2ddc05c2090d856e849b074d3dffa056a784bb5 (patch) | |
| tree | 6577b9364ecec6bb9fd6290d32444ee5848e0775 /meta-integrity | |
| parent | c9c4e6c228556cc2054a4b49f85b282fd69fc25c (diff) | |
| download | meta-security-c2ddc05c2090d856e849b074d3dffa056a784bb5.tar.gz | |
ima-evm-utils: bump to release 1.2.1
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Diffstat (limited to 'meta-integrity')
5 files changed, 3 insertions, 182 deletions
diff --git a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0001-ima-evm-utils-link-to-libcrypto-instead-of-OpenSSL.patch b/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0001-ima-evm-utils-link-to-libcrypto-instead-of-OpenSSL.patch deleted file mode 100644 index 5ccb73d..0000000 --- a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0001-ima-evm-utils-link-to-libcrypto-instead-of-OpenSSL.patch +++ /dev/null | |||
| @@ -1,65 +0,0 @@ | |||
| 1 | From 4feaf9b61f93e4043eca26b4ec9f9f68d0cf5e68 Mon Sep 17 00:00:00 2001 | ||
| 2 | From: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com> | ||
| 3 | Date: Wed, 6 Mar 2019 01:08:43 +0300 | ||
| 4 | Subject: [PATCH 1/4] ima-evm-utils: link to libcrypto instead of OpenSSL | ||
| 5 | |||
| 6 | There is no need to link to full libssl. evmctl uses functions from | ||
| 7 | libcrypto, so let's link only against that library. | ||
| 8 | |||
| 9 | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com> | ||
| 10 | --- | ||
| 11 | configure.ac | 4 +--- | ||
| 12 | src/Makefile.am | 9 ++++----- | ||
| 13 | 2 files changed, 5 insertions(+), 8 deletions(-) | ||
| 14 | |||
| 15 | diff --git a/configure.ac b/configure.ac | ||
| 16 | index 60f3684..32e8d85 100644 | ||
| 17 | --- a/configure.ac | ||
| 18 | +++ b/configure.ac | ||
| 19 | @@ -24,9 +24,7 @@ LT_INIT | ||
| 20 | # Checks for header files. | ||
| 21 | AC_HEADER_STDC | ||
| 22 | |||
| 23 | -PKG_CHECK_MODULES(OPENSSL, [ openssl >= 0.9.8 ]) | ||
| 24 | -AC_SUBST(OPENSSL_CFLAGS) | ||
| 25 | -AC_SUBST(OPENSSL_LIBS) | ||
| 26 | +PKG_CHECK_MODULES(LIBCRYPTO, [libcrypto >= 0.9.8 ]) | ||
| 27 | AC_SUBST(KERNEL_HEADERS) | ||
| 28 | AC_CHECK_HEADER(unistd.h) | ||
| 29 | AC_CHECK_HEADERS(openssl/conf.h) | ||
| 30 | diff --git a/src/Makefile.am b/src/Makefile.am | ||
| 31 | index d74fc6f..b81281a 100644 | ||
| 32 | --- a/src/Makefile.am | ||
| 33 | +++ b/src/Makefile.am | ||
| 34 | @@ -1,11 +1,11 @@ | ||
| 35 | lib_LTLIBRARIES = libimaevm.la | ||
| 36 | |||
| 37 | libimaevm_la_SOURCES = libimaevm.c | ||
| 38 | -libimaevm_la_CPPFLAGS = $(OPENSSL_CFLAGS) | ||
| 39 | +libimaevm_la_CPPFLAGS = $(LIBCRYPTO_CFLAGS) | ||
| 40 | # current[:revision[:age]] | ||
| 41 | # result: [current-age].age.revision | ||
| 42 | libimaevm_la_LDFLAGS = -version-info 0:0:0 | ||
| 43 | -libimaevm_la_LIBADD = $(OPENSSL_LIBS) | ||
| 44 | +libimaevm_la_LIBADD = $(LIBCRYPTO_LIBS) | ||
| 45 | |||
| 46 | include_HEADERS = imaevm.h | ||
| 47 | |||
| 48 | @@ -17,12 +17,11 @@ hash_info.h: Makefile | ||
| 49 | bin_PROGRAMS = evmctl | ||
| 50 | |||
| 51 | evmctl_SOURCES = evmctl.c | ||
| 52 | -evmctl_CPPFLAGS = $(OPENSSL_CFLAGS) | ||
| 53 | +evmctl_CPPFLAGS = $(LIBCRYPTO_CFLAGS) | ||
| 54 | evmctl_LDFLAGS = $(LDFLAGS_READLINE) | ||
| 55 | -evmctl_LDADD = $(OPENSSL_LIBS) -lkeyutils libimaevm.la | ||
| 56 | +evmctl_LDADD = $(LIBCRYPTO_LIBS) -lkeyutils libimaevm.la | ||
| 57 | |||
| 58 | INCLUDES = -I$(top_srcdir) -include config.h | ||
| 59 | |||
| 60 | CLEANFILES = hash_info.h | ||
| 61 | DISTCLEANFILES = @DISTCLEANFILES@ | ||
| 62 | - | ||
| 63 | -- | ||
| 64 | 2.17.1 | ||
| 65 | |||
diff --git a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0002-ima-evm-utils-replace-INCLUDES-with-AM_CPPFLAGS.patch b/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0002-ima-evm-utils-replace-INCLUDES-with-AM_CPPFLAGS.patch deleted file mode 100644 index 8237274..0000000 --- a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0002-ima-evm-utils-replace-INCLUDES-with-AM_CPPFLAGS.patch +++ /dev/null | |||
| @@ -1,43 +0,0 @@ | |||
| 1 | From 5bb10f3da420f4c46e44423276a9da0d4bc1b691 Mon Sep 17 00:00:00 2001 | ||
| 2 | From: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com> | ||
| 3 | Date: Wed, 6 Mar 2019 01:17:12 +0300 | ||
| 4 | Subject: [PATCH 2/4] ima-evm-utils: replace INCLUDES with AM_CPPFLAGS | ||
| 5 | |||
| 6 | Replace INCLUDES variable with AM_CPPFLAGS to stop Automake from warning | ||
| 7 | about deprecated variable usage. | ||
| 8 | |||
| 9 | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com> | ||
| 10 | --- | ||
| 11 | src/Makefile.am | 6 +++--- | ||
| 12 | 1 file changed, 3 insertions(+), 3 deletions(-) | ||
| 13 | |||
| 14 | diff --git a/src/Makefile.am b/src/Makefile.am | ||
| 15 | index b81281a..164e7e4 100644 | ||
| 16 | --- a/src/Makefile.am | ||
| 17 | +++ b/src/Makefile.am | ||
| 18 | @@ -1,7 +1,7 @@ | ||
| 19 | lib_LTLIBRARIES = libimaevm.la | ||
| 20 | |||
| 21 | libimaevm_la_SOURCES = libimaevm.c | ||
| 22 | -libimaevm_la_CPPFLAGS = $(LIBCRYPTO_CFLAGS) | ||
| 23 | +libimaevm_la_CPPFLAGS = $(AM_CPPFLAGS) $(LIBCRYPTO_CFLAGS) | ||
| 24 | # current[:revision[:age]] | ||
| 25 | # result: [current-age].age.revision | ||
| 26 | libimaevm_la_LDFLAGS = -version-info 0:0:0 | ||
| 27 | @@ -17,11 +17,11 @@ hash_info.h: Makefile | ||
| 28 | bin_PROGRAMS = evmctl | ||
| 29 | |||
| 30 | evmctl_SOURCES = evmctl.c | ||
| 31 | -evmctl_CPPFLAGS = $(LIBCRYPTO_CFLAGS) | ||
| 32 | +evmctl_CPPFLAGS = $(AM_CPPFLAGS) $(LIBCRYPTO_CFLAGS) | ||
| 33 | evmctl_LDFLAGS = $(LDFLAGS_READLINE) | ||
| 34 | evmctl_LDADD = $(LIBCRYPTO_LIBS) -lkeyutils libimaevm.la | ||
| 35 | |||
| 36 | -INCLUDES = -I$(top_srcdir) -include config.h | ||
| 37 | +AM_CPPFLAGS = -I$(top_srcdir) -include config.h | ||
| 38 | |||
| 39 | CLEANFILES = hash_info.h | ||
| 40 | DISTCLEANFILES = @DISTCLEANFILES@ | ||
| 41 | -- | ||
| 42 | 2.17.1 | ||
| 43 | |||
diff --git a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0003-ima-evm-utils-include-hash-info.gen-into-distributio.patch b/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0003-ima-evm-utils-include-hash-info.gen-into-distributio.patch deleted file mode 100644 index 3d250d2..0000000 --- a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0003-ima-evm-utils-include-hash-info.gen-into-distributio.patch +++ /dev/null | |||
| @@ -1,31 +0,0 @@ | |||
| 1 | From c587ec307a6259a990bfab727cea7db28dba4c23 Mon Sep 17 00:00:00 2001 | ||
| 2 | From: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com> | ||
| 3 | Date: Wed, 6 Mar 2019 01:22:30 +0300 | ||
| 4 | Subject: [PATCH 3/4] ima-evm-utils: include hash-info.gen into distribution | ||
| 5 | |||
| 6 | Include hash-info.gen into tarball and call it from the sourcedir to fix | ||
| 7 | out-of-tree build (and thus 'make distcheck'). | ||
| 8 | |||
| 9 | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com> | ||
| 10 | --- | ||
| 11 | src/Makefile.am | 3 ++- | ||
| 12 | 1 file changed, 2 insertions(+), 1 deletion(-) | ||
| 13 | |||
| 14 | diff --git a/src/Makefile.am b/src/Makefile.am | ||
| 15 | index 164e7e4..9c037e2 100644 | ||
| 16 | --- a/src/Makefile.am | ||
| 17 | +++ b/src/Makefile.am | ||
| 18 | @@ -11,8 +11,9 @@ include_HEADERS = imaevm.h | ||
| 19 | |||
| 20 | nodist_libimaevm_la_SOURCES = hash_info.h | ||
| 21 | BUILT_SOURCES = hash_info.h | ||
| 22 | +EXTRA_DIST = hash_info.gen | ||
| 23 | hash_info.h: Makefile | ||
| 24 | - ./hash_info.gen $(KERNEL_HEADERS) >$@ | ||
| 25 | + $(srcdir)/hash_info.gen $(KERNEL_HEADERS) >$@ | ||
| 26 | |||
| 27 | bin_PROGRAMS = evmctl | ||
| 28 | |||
| 29 | -- | ||
| 30 | 2.17.1 | ||
| 31 | |||
diff --git a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0004-ima-evm-utils-update-.gitignore-files.patch b/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0004-ima-evm-utils-update-.gitignore-files.patch deleted file mode 100644 index 4ada1a2..0000000 --- a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0004-ima-evm-utils-update-.gitignore-files.patch +++ /dev/null | |||
| @@ -1,34 +0,0 @@ | |||
| 1 | From b9f327c5c513ccea9cb56d4bbd50c1f66d629099 Mon Sep 17 00:00:00 2001 | ||
| 2 | From: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com> | ||
| 3 | Date: Wed, 6 Mar 2019 01:24:04 +0300 | ||
| 4 | Subject: [PATCH 4/4] ima-evm-utils: update .gitignore files | ||
| 5 | |||
| 6 | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com> | ||
| 7 | --- | ||
| 8 | .gitignore | 1 + | ||
| 9 | src/.gitignore | 1 + | ||
| 10 | 2 files changed, 2 insertions(+) | ||
| 11 | create mode 100644 src/.gitignore | ||
| 12 | |||
| 13 | diff --git a/.gitignore b/.gitignore | ||
| 14 | index ca7a06e..cb82166 100644 | ||
| 15 | --- a/.gitignore | ||
| 16 | +++ b/.gitignore | ||
| 17 | @@ -45,6 +45,7 @@ cscope.* | ||
| 18 | ncscope.* | ||
| 19 | |||
| 20 | # Generated documentation | ||
| 21 | +*.1 | ||
| 22 | *.8 | ||
| 23 | *.5 | ||
| 24 | manpage.links | ||
| 25 | diff --git a/src/.gitignore b/src/.gitignore | ||
| 26 | new file mode 100644 | ||
| 27 | index 0000000..38e8e3c | ||
| 28 | --- /dev/null | ||
| 29 | +++ b/src/.gitignore | ||
| 30 | @@ -0,0 +1 @@ | ||
| 31 | +hash_info.h | ||
| 32 | -- | ||
| 33 | 2.17.1 | ||
| 34 | |||
diff --git a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils_git.bb b/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils_git.bb index 6d4f008..92c24c9 100644 --- a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils_git.bb +++ b/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils_git.bb | |||
| @@ -6,9 +6,9 @@ DEPENDS += "openssl attr keyutils" | |||
| 6 | 6 | ||
| 7 | DEPENDS_class-native += "openssl-native keyutils-native" | 7 | DEPENDS_class-native += "openssl-native keyutils-native" |
| 8 | 8 | ||
| 9 | PV = "1.1+git${SRCPV}" | 9 | PV = "1.2.1+git${SRCPV}" |
| 10 | SRCREV = "782224f33cd711050cbf6146a12122cd73f9136b" | 10 | SRCREV = "3eab1f93b634249c1720f65fcb495b1996f0256e" |
| 11 | SRC_URI = "git://git.code.sf.net/p/linux-ima/ima-evm-utils" | 11 | SRC_URI = "git://git.code.sf.net/p/linux-ima/ima-evm-utils;branch=ima-evm-utils-1.2.y" |
| 12 | 12 | ||
| 13 | # Documentation depends on asciidoc, which we do not have, so | 13 | # Documentation depends on asciidoc, which we do not have, so |
| 14 | # do not build documentation. | 14 | # do not build documentation. |
| @@ -21,12 +21,6 @@ SRC_URI += "file://evmctl.c-do-not-depend-on-xattr.h-with-IMA-defines.patch" | |||
| 21 | # Required for xargs with more than one path as argument (better for performance). | 21 | # Required for xargs with more than one path as argument (better for performance). |
| 22 | SRC_URI += "file://command-line-apply-operation-to-all-paths.patch" | 22 | SRC_URI += "file://command-line-apply-operation-to-all-paths.patch" |
| 23 | 23 | ||
| 24 | SRC_URI += "\ | ||
| 25 | file://0001-ima-evm-utils-link-to-libcrypto-instead-of-OpenSSL.patch \ | ||
| 26 | file://0002-ima-evm-utils-replace-INCLUDES-with-AM_CPPFLAGS.patch \ | ||
| 27 | file://0003-ima-evm-utils-include-hash-info.gen-into-distributio.patch \ | ||
| 28 | file://0004-ima-evm-utils-update-.gitignore-files.patch \ | ||
| 29 | " | ||
| 30 | S = "${WORKDIR}/git" | 24 | S = "${WORKDIR}/git" |
| 31 | 25 | ||
| 32 | inherit pkgconfig autotools | 26 | inherit pkgconfig autotools |
