Implements "report_cve" and "report_patched" tasks.
"report_patched" prepares image manifest with patched CVE info.
"report_cve" runs cvert-* scripts to generate kernel and package CVE reports.
You can configure it to set report filenames, reuse NVD feeds,
stop after manifest generation and
cvert-kernel - generate CVE report for the Linux kernel.
NVD entries for the Linux kernel is almost always outdated.
For example, https://nvd.nist.gov/vuln/detail/CVE-2018-1065
is shown as matched for "versions up to (including) 4.15.7",
however the patch 57ebd808a97d has been back ported
On Fri, 3 Aug 2018, Ocampo Coronado, Omar wrote:
Yes, we would like to keep the symbols on a signed kernel module.
Andre shared this link:
https://www.kernel.org/doc/html/v4.17/admin-guide/module-signing.html#signed-modules-and-stripping
, from conversation topic: Re: [OE-core] Strip
From: foocampo
Executing strip action on kernel modules removes the signature.
Is not possible to strip and keep the signature, therefore avoid
strip signed kernel modules.
Signed-off-by: Omar Ocampo
---
meta/lib/oe/package.py | 20
1 file changed, 16 insertions(+), 4
From: foocampo
Executing strip action on kernel modules removes the signature.
Is not possible to strip and keep the signature, therefore avoid
strip signed kernel modules.
Signed-off-by: foocampo
Signed-off-by: Omar Ocmapo
---
meta/lib/oe/package.py | 20
1 file
On Fri, 2018-08-03 at 09:49 +0800, kai.k...@windriver.com wrote:
> From: Kai Kang
>
> The following allarch packages rdepends on TUNE_PKGARCH packages. So
> remove allarch from these recipes.
>
> ca-certificates -> openssl
Should we reverse this, i.e. have openssl RRECOMMENDS ca-certificates?
Yes, we would like to keep the symbols on a signed kernel module.
Andre shared this link:
https://www.kernel.org/doc/html/v4.17/admin-guide/module-signing.html#signed-modules-and-stripping
, from conversation topic: Re: [OE-core] Strip kernel modules and signatures
-28 are the last 28 bytes
On Fri, 3 Aug 2018, omar.ocampo.coron...@intel.com wrote:
From: foocampo
Executing strip action on kernel modules removes the signature.
Is not possible to strip and keep the signature, therefore avoid
strip signed kernel modules.
Signed-off-by: foocampo
---
meta/lib/oe/package.py | 10
From: foocampo
Executing strip action on kernel modules removes the signature.
Is not possible to strip and keep the signature, therefore avoid
strip signed kernel modules.
Signed-off-by: foocampo
---
meta/lib/oe/package.py | 10 ++
1 file changed, 10 insertions(+)
diff --git
it seems patch scanner is confused here
On Fri, Aug 3, 2018 at 11:34 AM Patchwork
wrote:
>
> == Series Details ==
>
> Series: glibc: Upgrade to 2.28 (rev2)
> Revision: 2
> URL : https://patchwork.openembedded.org/series/13377/
> State : failure
>
> == Summary ==
>
>
> Thank you for submitting
On Fri, Aug 3, 2018 at 11:17 AM Burton, Ross wrote:
>
> Has that actually been fixed in gnulib yet?
>
haven't check lately but few months back it is not fixed yet.
> Ross
>
> On 3 August 2018 at 18:30, Khem Raj wrote:
> > Fixes
> > ERROR: libidn2-2.0.5-r0 do_package: QA Issue: libidn2:
== Series Details ==
Series: glibc: Upgrade to 2.28 (rev2)
Revision: 2
URL : https://patchwork.openembedded.org/series/13377/
State : failure
== Summary ==
Thank you for submitting this patch series to OpenEmbedded Core. This is
an automated response. Several tests have been executed on the
License-Update: libidn is dropped from glibc and a testcase that was a
particular contributor copyrighted
see
Has that actually been fixed in gnulib yet?
Ross
On 3 August 2018 at 18:30, Khem Raj wrote:
> Fixes
> ERROR: libidn2-2.0.5-r0 do_package: QA Issue: libidn2: Files/directories were
> installed but not shipped in any packag
> e:
> /usr/lib/charset.alias
> Please set FILES such that these items
== Series Details ==
Series: glibc: Upgrade to 2.28
Revision: 1
URL : https://patchwork.openembedded.org/series/13377/
State : failure
== Summary ==
Thank you for submitting this patch series to OpenEmbedded Core. This is
an automated response. Several tests have been executed on the
Fixes
ERROR: libidn2-2.0.5-r0 do_package: QA Issue: libidn2: Files/directories were
installed but not shipped in any packag
e:
/usr/lib/charset.alias
Please set FILES such that these items are packaged. Alternatively if they are
unneeded, avoid installing them or del
ete them within
Drop upstreamed and backported patches
Signed-off-by: Khem Raj
---
meta/conf/distro/include/tcmode-default.inc | 2 +-
...2.27.bb => cross-localedef-native_2.28.bb} | 2 +-
...-initial_2.27.bb => glibc-initial_2.28.bb} | 0
...bc-locale_2.27.bb => glibc-locale_2.28.bb} | 0
On Fri, 2018-08-03 at 16:27 +0800, Chen Qi wrote:
> When using syslog-ng as the syslog provider, oe_syslog test case
> fails
> because it cannot find the syslog daemon. This is because it greps
> for
> 'syslogd' but syslog-ng's daemon is 'syslog-ng'. So fix the grep
> command
> to also consider
On Fri, 2018-08-03 at 08:49 -0700, Khem Raj wrote:
> Yes, will do. I explained it in original thread as well
I know, but we need it in the commit message so we record why we did
it...
Cheers,
Richard
--
___
Openembedded-core mailing list
Signed-off-by: Ross Burton
---
meta/recipes-extended/packagegroups/packagegroup-core-lsb.bb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta/recipes-extended/packagegroups/packagegroup-core-lsb.bb
b/meta/recipes-extended/packagegroups/packagegroup-core-lsb.bb
index
This causes regression on build machines where libunistring is installed
on host. It is also because gnuts is using non standard AC macro called
AC_LIB_HAVE_LINKFLAGS to detect this library and it confusing cross builds.
This reverts commit 60fef4940de7f0440f1216eb2ea0ea683b3e8fdd.
Yes, will do. I explained it in original thread as well
On Fri, Aug 3, 2018 at 8:47 AM Richard Purdie
wrote:
>
> On Fri, 2018-08-03 at 08:40 -0700, Khem Raj wrote:
> > ping^1
>
> Could you put something about why in the commit message please?
>
> Cheers,
>
> Richard
--
On Fri, 2018-08-03 at 08:40 -0700, Khem Raj wrote:
> ping^1
Could you put something about why in the commit message please?
Cheers,
Richard
--
___
Openembedded-core mailing list
Openembedded-core@lists.openembedded.org
ping^1
On Fri, Jul 27, 2018 at 2:04 PM Khem Raj wrote:
>
> This reverts commit 60fef4940de7f0440f1216eb2ea0ea683b3e8fdd.
> ---
> meta/recipes-support/gnutls/gnutls.inc | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/meta/recipes-support/gnutls/gnutls.inc
>
Cleans up the packaging by moving libasound.so.2 back into the alsa-lib
package which was previously empty.
Previously, it was difficult to create an image that had libasound.so.2,
then create an SDK from that image that had the proper development
files, because the only way to get libasound.so.2
On Fri, 2018-08-03 at 15:02 +0100, Burton, Ross wrote:
> On 3 August 2018 at 14:48, Joshua Watt wrote:
> > # upgrade path
> > +RPROVIDES_${PN}-dev = "libasound"
> > +RREPLACES_${PN}-dev = "libasound"
> > +RCONFLICTS_${PN}-dev = "libasound"
>
> Shouldn't this just be PN?
Indeed! Good catch.
On 3 August 2018 at 14:48, Joshua Watt wrote:
> # upgrade path
> +RPROVIDES_${PN}-dev = "libasound"
> +RREPLACES_${PN}-dev = "libasound"
> +RCONFLICTS_${PN}-dev = "libasound"
Shouldn't this just be PN?
Ross
--
___
Openembedded-core mailing list
Also fix the license, as this is GPLv2+ not just v2.
Signed-off-by: Ross Burton
---
...le-utils-native_0.23.bb => desktop-file-utils_0.23.bb} | 15 ---
1 file changed, 8 insertions(+), 7 deletions(-)
rename
Add a new SDK testcase that builds assimp, a project that uses cmake.
Using TARGET_ARCH and TARGET_OS which is now exported into the environment,
check that the generated binaries match the ELF headers we expect.
Signed-off-by: Ross Burton
---
meta/lib/oeqa/sdk/cases/assimp.py | 68
It's useful for the SDK to know exactly what TARGET_ARCH and TARGET_OS are,
specifically for SDK QA.
Signed-off-by: Ross Burton
---
meta/classes/toolchain-scripts.bbclass | 3 +++
1 file changed, 3 insertions(+)
diff --git a/meta/classes/toolchain-scripts.bbclass
CMake, in it's infinite wisdom, when searching for libraries (using
find_library) will look inside the libraries PREFIX/lib, PREFIX/lib32, and
PREFIX/lib64. In a multilib SDK more than one of these will exist (potentially
all three) and obviously for a given build configuration only one of those
On Fri, 2018-08-03 at 14:21 +0100, Burton, Ross wrote:
> I agree with Tanu, the packaging in this recipe is non-standard and
> instead of making it more non-standard, let's just fix it.
>
> Remove the libasound recipe, the contents of that can go into $PN.
> Either way with Debian renaming it
Cleans up the packaging by moving libasound.so.2 back into the alsa-lib
package which was previously empty.
Previously, it was difficult to create an image that had libasound.so.2,
then create an SDK from that image that had the proper development
files, because the only way to get libasound.so.2
I agree with Tanu, the packaging in this recipe is non-standard and
instead of making it more non-standard, let's just fix it.
Remove the libasound recipe, the contents of that can go into $PN.
Either way with Debian renaming it gets renamed to libasound2, and
without renaming it's still a
On Thu, 2018-08-02 at 16:22 -0500, Joshua Watt wrote:
> Without ALLOW_EMPTY, the empty alsa-lib package (which gets culled)
> makes it fairly difficult to create an image that has libasound, then
> create an SDK from that image that has the proper development files.
>
> If there is no alsa-lib
Hw breakpoint is based on hardware.
Signed-off-by: Hongzhi.Song
---
meta/lib/oeqa/runtime/cases/ksample.py | 16
1 file changed, 16 deletions(-)
diff --git a/meta/lib/oeqa/runtime/cases/ksample.py
b/meta/lib/oeqa/runtime/cases/ksample.py
index 26fbe9d8cb..5e8699a2e2 100644
v3:
remove the case of hw breakpoint
v2:
test_trace_events_sample of ksample.py
Hongzhi.Song (2):
runtime selftest: test_trace_events_sample of ksample.py
runtime selftest: remove the case of hw breakpoint
meta/lib/oeqa/runtime/cases/ksample.py | 30 --
1
The debug info can not be written to trace buffer immediately
by thread. So we should sleep some seconds.
Signed-off-by: Hongzhi.Song
---
meta/lib/oeqa/runtime/cases/ksample.py | 14 --
1 file changed, 12 insertions(+), 2 deletions(-)
diff --git
*** BLURB HERE ***
The following changes since commit da24071e92071ecbefe51314d82bf40f85172485:
bitbake: toaster/orm/management/commands/lsupdates.py: Use new layerindexlib
module (2018-08-02 10:18:27 +0100)
are available in the git repository at:
git://git.pokylinux.org/poky-contrib
When using syslog-ng as the syslog provider, oe_syslog test case fails
because it cannot find the syslog daemon. This is because it greps for
'syslogd' but syslog-ng's daemon is 'syslog-ng'. So fix the grep command
to also consider syslog-ng.
Also, when the test case fails, what I get is:
|
On Thu, Aug 2, 2018 at 9:54 AM, Ocampo Coronado, Omar
wrote:
> Neither 'nm' or 'readelf' provide a symbol that we can use to strip.
> I'm having a hard time reading kernel-source/scripts/sign-file.c and how
> exactly how the sign works and what bytes are being added, so we can avoid
> stripping
On 2018年08月03日 00:15, Martin Hundebøll wrote:
Hi Hongzhi,
I think duplicating all of 'automount' when the only difference is the
call to 'mount' is unnecessary.
Hi,
The patch is compatible with both systemd and sysvinit.
And generally speaking, there will be no systemd-mount command when
42 matches
Mail list logo
