I have been trying out the whitelisting of tools in $PATH, and it seems to work very well. However, one thing that I realized is that the tools used by the various fetchers need to be whitelisted. This patch adds sftp to HOSTTOOLS_NONFATAL as that is the only fetcher we use appart from git and wget, but I expect other tools such as cvs, svn, hg, etc need to be added as well.
Feel free to squash this commit with the "base/bitbake.conf: Filter contents of PATH to only allow whitelisted tools" commit. //Peter The following changes since commit 1cf50b756c589d8bf8f1f32f2062b69fb769242d: base/bitbake.conf: Filter contents of PATH to only allow whitelisted tools (2017-03-10 18:07:27 +0000) are available in the git repository at: git://git.yoctoproject.org/poky-contrib pkj/whitelist_sftp http://git.yoctoproject.org/cgit.cgi/poky-contrib/log/?h=pkj/whitelist_sftp Peter Kjellerstedt (1): bitbake.conf: Add 'sftp' to HOSTTOOLS_NONFATAL meta/conf/bitbake.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) -- 2.12.0 -- _______________________________________________ Openembedded-core mailing list [email protected] http://lists.openembedded.org/mailman/listinfo/openembedded-core
