[yocto] Delete /run/nologin after boot up.

2019-03-08 Thread Vishwanath Chandapur
Hi Team,

We are using poky thud version with systemd .we have enabled pam mdoule for
authentication because of which  non-root users no longer able to login to
terminal/ssh.
I have gone through systemd documentation according that  "/run/nologin"
should be deleted after boot up so that pam module cam allow to login.

There is already init script is available but it deletes in /etc/login not
/run/login.

https://git.yoctoproject.org/cgit/cgit.cgi/poky/tree/meta/recipes-core/initscripts/initscripts-1.0/rmnologin.sh

With Regards
Vishwa
-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


Re: [yocto] [yocto-security] Open ssl version

2018-12-20 Thread Vishwanath Chandapur
I think issues is below part is missing in openssl_1.1.0i.bb file.

FILES_libcrypto = "${libdir}/libcrypto${SOLIBS}"

FILES_libssl = "${libdir}/libssl${SOLIBS}"

FILES_openssl-conf = "${sysconfdir}/ssl/openssl.cnf"

With Regards
Vishwa
On Thu, Dec 20, 2018 at 3:56 PM Alexander Kanavin 
wrote:

> It's likely that you ask bitbake to build something that has a hard
> dependency on openssl 1.0. Most probably openssh.
>
> Alex
>
> On Thu, 20 Dec 2018 at 05:30, Vishwanath Chandapur 
> wrote:
> >
> > Hi Team,
> >
> > I have set opnessl version in sumo but getting below errors.
> >
> >
> > PREFERRED_VERSION_openssl = "1.1.0i"
> >
> >
> > Logs:
> >
> > NOTE: Resolving any missing task queue dependencies
> >
> > NOTE: preferred version 1.1.0i of openssl not available (for item libssl)
> > NOTE: versions of openssl available: 1.0.2p
> > NOTE: preferred version 1.1.0i of openssl not available (for item
> openssl10)
> > NOTE: versions of openssl available: 1.0.2p
> > NOTE: preferred version 1.1.0i of openssl not available (for item
> openssl-conf)
> > NOTE: versions of openssl available: 1.0.2p
> >
> >
> > ERROR: Multiple versions of openssl are due to be built
> (/home/ubuntu/workspace/yocto/sources/poky/meta/recipes-connectivity/openssl/
> openssl_1.0.2p.bb
> /home/ubuntu/workspace/yocto/sources/poky/meta/recipes-connectivity/openssl/
> openssl_1.1.0i.bb). Only one version of a given PN should be built in any
> given build. You likely need to set PREFERRED_VERSION_openssl to select the
> correct version or don't depend on multiple versions.
> >
> >
> > With Regards
> > Vishwa
> >
> > On Fri, Dec 14, 2018 at 5:31 PM Burton, Ross 
> wrote:
> >>
> >> How did you set it?
> >>
> >> Also this isn't relevant to yocto-security, please move to yocto@.
> >>
> >> Ross
> >> On Fri, 14 Dec 2018 at 11:53, Vishwanath Chandapur 
> wrote:
> >> >
> >> > Hi Ross,
> >> >
> >> > I tried to enable by using PREFERRED_VERSION.
> >> >
> >> > But getting these errors .
> >> > >>>>>>>>>>>>>>>>>>>>>>>>>>>>
> >> > NOTE: Resolving any missing task queue dependencies
> >> > NOTE: preferred version 1.0.% of openssl not available (for item
> openssl)
> >> > NOTE: versions of openssl available: 1.1.0i
> >> > NOTE: preferred version 1.0.% of openssl-native not available (for
> item openssl-native)
> >> > NOTE: versions of openssl-native available: 1.1.0i
> >> > NOTE: preferred version 1.0.% of nativesdk-openssl not available (for
> item nativesdk-openssl)
> >> > NOTE: versions of nativesdk-openssl available: 1.1.0i
> >> > NOTE: preferred version 1.0.% of openssl not available (for item
> openssl-dev)
> >> > NOTE: versions of openssl available: 1.1.0i
> >> > NOTE: preferred version 1.0.% of nativesdk-openssl not available (for
> item nativesdk-openssl-dev)
> >> > NOTE: versions of nativesdk-openssl available: 1.1.0i
> >> > ERROR: Nothing RPROVIDES 'libssl
> >> > >>>>>>>>>>>>>>>>>>>>>>>>>>>
> >> >
> >> > With Regards
> >> > Vishwa
> >> >
> >> >
> >> > On Thu, 13 Dec 2018 at 5:57 PM, Burton, Ross 
> wrote:
> >> >>
> >> >> Yes, Sumo has OpenSSL 1.1 but it isn't enabled by default because at
> >> >> the time of release some important pieces of software had not yet
> >> >> migrated.
> >> >>
> >> >> You can switch by using PREFERRED_VERSION.
> >> >>
> >> >> Ross
> >> >> On Thu, 13 Dec 2018 at 12:13, Vishwanath Chandapur <
> vishwa...@gmail.com> wrote:
> >> >> >
> >> >> > Hi Team,
> >> >> >
> >> >> > Currently we are migrating to poly sumo version .
> >> >> > But we have requirement to use 1.1.0 but poky is still supporting
> 1.0.2
> >> >> >
> >> >> > I would like know if latest OpenSSL available for future release .
> >> >> >
> >> >> > With Regard
> >> >> > Vishwa
> >> >> > ___
> >> >> > yocto-security mailing list
> >> >> > yocto-secur...@yoctoproject.org
> >> >> > https://lists.yoctoproject.org/listinfo/yocto-security
> >
> > --
> > ___
> > yocto mailing list
> > yocto@yoctoproject.org
> > https://lists.yoctoproject.org/listinfo/yocto
>
-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


Re: [yocto] [yocto-security] Open ssl version

2018-12-19 Thread Vishwanath Chandapur
Hi Team,

I have set opnessl version in sumo but getting below errors.


*PREFERRED_VERSION_openssl = "1.1.0i"*


*Logs:*

NOTE: Resolving any missing task queue dependencies

NOTE: preferred version 1.1.0i of openssl not available (for item libssl)
NOTE: versions of openssl available: 1.0.2p
NOTE: preferred version 1.1.0i of openssl not available (for item openssl10)
NOTE: versions of openssl available: 1.0.2p
NOTE: preferred version 1.1.0i of openssl not available (for item openssl-conf)
NOTE: versions of openssl available: 1.0.2p


ERROR: Multiple versions of openssl are due to be built
(/home/ubuntu/workspace/yocto/sources/poky/meta/recipes-connectivity/openssl/openssl_1.0.2p.bb
/home/ubuntu/workspace/yocto/sources/poky/meta/recipes-connectivity/openssl/openssl_1.1.0i.bb).
Only one version of a given PN should be built in any given build. You
likely need to set PREFERRED_VERSION_openssl to select the correct
version or don't depend on multiple versions.


With Regards
Vishwa

On Fri, Dec 14, 2018 at 5:31 PM Burton, Ross  wrote:

> How did you set it?
>
> Also this isn't relevant to yocto-security, please move to yocto@.
>
> Ross
> On Fri, 14 Dec 2018 at 11:53, Vishwanath Chandapur 
> wrote:
> >
> > Hi Ross,
> >
> > I tried to enable by using PREFERRED_VERSION.
> >
> > But getting these errors .
> > >>>>>>>>>>>>>>>>>>>>>>>>>>>>
> > NOTE: Resolving any missing task queue dependencies
> > NOTE: preferred version 1.0.% of openssl not available (for item openssl)
> > NOTE: versions of openssl available: 1.1.0i
> > NOTE: preferred version 1.0.% of openssl-native not available (for item
> openssl-native)
> > NOTE: versions of openssl-native available: 1.1.0i
> > NOTE: preferred version 1.0.% of nativesdk-openssl not available (for
> item nativesdk-openssl)
> > NOTE: versions of nativesdk-openssl available: 1.1.0i
> > NOTE: preferred version 1.0.% of openssl not available (for item
> openssl-dev)
> > NOTE: versions of openssl available: 1.1.0i
> > NOTE: preferred version 1.0.% of nativesdk-openssl not available (for
> item nativesdk-openssl-dev)
> > NOTE: versions of nativesdk-openssl available: 1.1.0i
> > ERROR: Nothing RPROVIDES 'libssl
> > >>>>>>>>>>>>>>>>>>>>>>>>>>>
> >
> > With Regards
> > Vishwa
> >
> >
> > On Thu, 13 Dec 2018 at 5:57 PM, Burton, Ross 
> wrote:
> >>
> >> Yes, Sumo has OpenSSL 1.1 but it isn't enabled by default because at
> >> the time of release some important pieces of software had not yet
> >> migrated.
> >>
> >> You can switch by using PREFERRED_VERSION.
> >>
> >> Ross
> >> On Thu, 13 Dec 2018 at 12:13, Vishwanath Chandapur 
> wrote:
> >> >
> >> > Hi Team,
> >> >
> >> > Currently we are migrating to poly sumo version .
> >> > But we have requirement to use 1.1.0 but poky is still supporting
> 1.0.2
> >> >
> >> > I would like know if latest OpenSSL available for future release .
> >> >
> >> > With Regard
> >> > Vishwa
> >> > ___
> >> > yocto-security mailing list
> >> > yocto-secur...@yoctoproject.org
> >> > https://lists.yoctoproject.org/listinfo/yocto-security
>
-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto