[yocto] [meta-security][master|dunfell][PATCH 1/2] clamav: resolve multilib issues
From: Jeremy Puhlman Signed-off-by: Jeremy Puhlman --- recipes-scanners/clamav/clamav_0.101.5.bb | 5 - 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/recipes-scanners/clamav/clamav_0.101.5.bb b/recipes-scanners/clamav/clamav_0.101.5.bb index f4625b1..2ea2c9b 100644 --- a/recipes-scanners/clamav/clamav_0.101.5.bb +++ b/recipes-scanners/clamav/clamav_0.101.5.bb @@ -25,7 +25,7 @@ S = "${WORKDIR}/git" LEAD_SONAME = "libclamav.so" SO_VER = "9.0.2" -inherit autotools pkgconfig useradd systemd +inherit autotools pkgconfig useradd systemd multilib_header multilib_script CLAMAV_UID ?= "clamav" CLAMAV_GID ?= "clamav" @@ -45,6 +45,8 @@ PACKAGECONFIG[bz2] = "--with-libbz2-prefix=${CLAMAV_USR_DIR}, --disable-bzip2, b PACKAGECONFIG[ncurses] = "--with-libncurses-prefix=${CLAMAV_USR_DIR}, --without-libncurses-prefix, ncurses, " PACKAGECONFIG[systemd] = "--with-systemdsystemunitdir=${systemd_unitdir}/system/, --without-systemdsystemunitdir, " +MULTILIB_SCRIPTS = "${PN}-dev:${bindir}/clamav-config ${PN}-cvd:${localstatedir}/lib/clamav/mirrors.dat" + EXTRA_OECONF_CLAMAV = "--without-libcheck-prefix --disable-unrar \ --disable-mempool \ --program-prefix="" \ @@ -93,6 +95,7 @@ do_install_append_class-target () { install -d ${D}${sysconfdir}/tmpfiles.d install -m 0644 ${WORKDIR}/tmpfiles.clamav ${D}${sysconfdir}/tmpfiles.d/clamav.conf fi +oe_multilib_header clamav-types.h } pkg_postinst_ontarget_${PN} () { -- 2.20.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#49635): https://lists.yoctoproject.org/g/yocto/message/49635 Mute This Topic: https://lists.yoctoproject.org/mt/74852100/21656 Group Owner: yocto+ow...@lists.yoctoproject.org Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[yocto] [meta-security][master|dunfell][PATCH 2/2] tripwire: Remove makefiles from the man directories.
From: Jeremy Puhlman Signed-off-by: Jeremy Puhlman --- recipes-ids/tripwire/tripwire_2.4.3.7.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/recipes-ids/tripwire/tripwire_2.4.3.7.bb b/recipes-ids/tripwire/tripwire_2.4.3.7.bb index c26392a..4f50bff 100644 --- a/recipes-ids/tripwire/tripwire_2.4.3.7.bb +++ b/recipes-ids/tripwire/tripwire_2.4.3.7.bb @@ -52,6 +52,7 @@ do_install () { install -m 0644 ${S}/man/man4/* ${D}${mandir}/man4 install -m 0644 ${S}/man/man5/* ${D}${mandir}/man5 install -m 0644 ${S}/man/man8/* ${D}${mandir}/man8 +rm ${D}${mandir}/man*/Makefile* install -m 0644 ${S}/policy/templates/* ${D}${docdir}/${BPN}/templates install -m 0644 ${S}/policy/*txt ${D}${docdir}/${BPN} install -m 0644 ${S}/COPYING ${D}${docdir}/${BPN} -- 2.20.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#49636): https://lists.yoctoproject.org/g/yocto/message/49636 Mute This Topic: https://lists.yoctoproject.org/mt/74852102/21656 Group Owner: yocto+ow...@lists.yoctoproject.org Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[yocto] [meta-rockchip][PATCH] wic: Use --offset and --fixed-size instead of --align and --size
The --align argument isn't intended to make a partition exist at a fixed location like the Rockchip boot ROM requires. Use the recently added --offset argument which will fail to build the image if the partition can't be placed at the correct location. Also used --fixed-size to make sure that Wic isn't inserting hidden padding that changes things around. Finally, the location of the rootfs isn't required to be at sector 262144 since u-boot and the kernel reads the partition table to find it and actually hasn't been at this location anyway since Wic has been padding the /boot partition, so remove it's alignment requirements. Signed-off-by: Joshua Watt --- wic/firefly-rk3288.wks | 2 +- wic/rk3288-boot.wks| 14 +++--- wic/rk3399-boot.wks| 14 +++--- wic/rock-pi-4.wks | 2 +- wic/tinker-board.wks | 2 +- wic/vyasa-rk3288.wks | 2 +- 6 files changed, 18 insertions(+), 18 deletions(-) diff --git a/wic/firefly-rk3288.wks b/wic/firefly-rk3288.wks index b60aa0e..da0067f 100644 --- a/wic/firefly-rk3288.wks +++ b/wic/firefly-rk3288.wks @@ -2,6 +2,6 @@ # Released under the MIT license (see COPYING.MIT for the terms) include rk3288-boot.wks -part / --align 131072 --ondisk ${RK_BOOT_DEVICE} --source rootfs --fstype=ext4 --label root +part / --ondisk ${RK_BOOT_DEVICE} --source rootfs --fstype=ext4 --label root bootloader --ptable gpt --append="console=tty1 console=ttyS2,115200n8 rw root=/dev/${RK_BOOT_DEVICE}p7 rootfstype=ext4 init=/sbin/init" diff --git a/wic/rk3288-boot.wks b/wic/rk3288-boot.wks index c0b7d95..e4d30cc 100644 --- a/wic/rk3288-boot.wks +++ b/wic/rk3288-boot.wks @@ -12,13 +12,13 @@ # loader2 16384 8192 # atf 24576 8192 # boot32768 229376 -# root262144 - +# root262144 - (suggested) # -part loader1--align 32 --size 4000K--ondisk ${RK_BOOT_DEVICE} --source rawcopy --sourceparams="file=idbloader.img" -part reserved1 --align 4032 --size 64K --ondisk ${RK_BOOT_DEVICE} -part reserved2 --align 4096 --size 4096K--ondisk ${RK_BOOT_DEVICE} -part loader2--align 8192 --size 4096K--ondisk ${RK_BOOT_DEVICE} --source rawcopy --sourceparams="file=u-boot.bin" -part atf--align 12288 --size 4096K--ondisk ${RK_BOOT_DEVICE} -part /boot --align 16384 --size=114688K --active --ondisk ${RK_BOOT_DEVICE} --source bootimg-partition --fstype=vfat --label boot --sourceparams="loader=u-boot" +part loader1--offset 32 --fixed-size 4000K--ondisk ${RK_BOOT_DEVICE} --source rawcopy --sourceparams="file=idbloader.img" +part reserved1 --offset 4032 --fixed-size 64K --ondisk ${RK_BOOT_DEVICE} +part reserved2 --offset 4096 --fixed-size 4096K--ondisk ${RK_BOOT_DEVICE} +part loader2--offset 8192 --fixed-size 4096K--ondisk ${RK_BOOT_DEVICE} --source rawcopy --sourceparams="file=u-boot.bin" +part atf--offset 12288 --fixed-size 4096K--ondisk ${RK_BOOT_DEVICE} +part /boot --offset 16384 --size 114688K --active --ondisk ${RK_BOOT_DEVICE} --source bootimg-partition --fstype=vfat --label boot --sourceparams="loader=u-boot" diff --git a/wic/rk3399-boot.wks b/wic/rk3399-boot.wks index 885d46b..8a65179 100644 --- a/wic/rk3399-boot.wks +++ b/wic/rk3399-boot.wks @@ -12,13 +12,13 @@ # loader2 16384 8192 # atf 24576 8192 # boot32768 229376 -# root262144 - +# root262144 - (suggested) # -part loader1--align 32 --size 4000K--ondisk ${RK_BOOT_DEVICE} --source rawcopy --sourceparams="file=idbloader.img" -part reserved1 --align 4032 --size 64K --ondisk ${RK_BOOT_DEVICE} -part reserved2 --align 4096 --size 4096K--ondisk ${RK_BOOT_DEVICE} -part loader2--align 8192 --size 4096K--ondisk ${RK_BOOT_DEVICE} --source rawcopy --sourceparams="file=u-boot.itb" -part atf--align 12288 --size 4096K--ondisk ${RK_BOOT_DEVICE} -part /boot --align 16384 --size=114688K --active --ondisk ${RK_BOOT_DEVICE} --source bootimg-partition --fstype=vfat --label boot --sourceparams="loader=u-boot" +part loader1--offset 32 --fixed-size 4000K--ondisk ${RK_BOOT_DEVICE} --source rawcopy --sourceparams="file=idbloader.img" +part reserved1 --offset 4032 --fixed-size 64K --ondisk ${RK_BOOT_DEVICE} +part reserved2 --offset 4096 --fixed-size 4096K--ondisk ${RK_BOOT_DEVICE} +part loader2--offset 8192 --fixed-size 4096K--ondisk ${RK_BOOT_DEVICE} --source rawcopy --sourceparams="file=u-boot.itb" +part atf--offset 12288 --fixed-size 4096K--ondisk ${RK_BOOT_DEVICE} +part /boot --offset 16384 --size 114688K --active --ondisk
[yocto] [meta-rockchip][PATCH] Use TF-A recipe from meta-arm
Converts the build to pull the canonical TF-A recipe from meta-arm instead of duplicating it in this layer. Signed-off-by: Joshua Watt --- README| 4 ++ conf/layer.conf | 2 +- conf/machine/include/rk3399.inc | 5 +-- .../arm-trusted-firmware_2.3.bb | 43 --- .../trusted-firmware-a_%.bbappend | 6 +++ recipes-bsp/u-boot/u-boot%.bbappend | 6 +-- 6 files changed, 16 insertions(+), 50 deletions(-) delete mode 100644 recipes-bsp/arm-trusted-firmware/arm-trusted-firmware_2.3.bb create mode 100644 recipes-bsp/trusted-firmware-a/trusted-firmware-a_%.bbappend diff --git a/README b/README index a97b89e..e1cfe3e 100644 --- a/README +++ b/README @@ -11,6 +11,10 @@ Dependencies: layers: meta branch: matched branches (e.g. master, sumo, ...) + URI: git://git.yoctoproject.org/meta-arm + layers: meta-arm + branch: matched branches (e.g. master, sumo, ...) + Status of supported boards: -- builds and boots wic image: diff --git a/conf/layer.conf b/conf/layer.conf index 72d5366..4168391 100644 --- a/conf/layer.conf +++ b/conf/layer.conf @@ -15,4 +15,4 @@ BBFILE_PRIORITY_rockchip = "1" # cause compatibility issues with other layers LAYERVERSION_rockchip = "1" LAYERSERIES_COMPAT_rockchip = "dunfell" -LAYERDEPENDS_rockchip = "core" +LAYERDEPENDS_rockchip = "core meta-arm" diff --git a/conf/machine/include/rk3399.inc b/conf/machine/include/rk3399.inc index 1fd8fd6..4019988 100644 --- a/conf/machine/include/rk3399.inc +++ b/conf/machine/include/rk3399.inc @@ -13,9 +13,8 @@ KBUILD_DEFCONFIG ?= "defconfig" KERNEL_CLASSES = "kernel-fitimage" KERNEL_IMAGETYPE = "fitImage" -ATF_PLATFORM ?= "rk3399" -ATF_TARGET ?= "bl31" -ATF_SUFFIX ?= "elf" +TFA_PLATFORM = "rk3399" +TFA_BUILD_TARGET = "bl31" UBOOT_SUFFIX ?= "itb" UBOOT_ENTRYPOINT ?= "0x0600" diff --git a/recipes-bsp/arm-trusted-firmware/arm-trusted-firmware_2.3.bb b/recipes-bsp/arm-trusted-firmware/arm-trusted-firmware_2.3.bb deleted file mode 100644 index 8d36d66..000 --- a/recipes-bsp/arm-trusted-firmware/arm-trusted-firmware_2.3.bb +++ /dev/null @@ -1,43 +0,0 @@ -# Copyright (C) 2019 Garmin Ltd. or its subsidaries -# Released under the MIT license (see COPYING.MIT for the terms) - -SUMMARY = "Arm Trusted Firmware" -HOMEPAGE = "https://developer.trustedfirmware.org/; -LICENSE = "BSD-3-Clause" -LIC_FILES_CHKSUM = "file://docs/license.rst;md5=189505435dbcdcc8caa63c46fe93fa89" - -# Rockchip RK3399 compiles some M0 firmware which requires an arm-none-eabi GCC -# toolchain -DEPENDS_rk3399 = "virtual/arm-none-eabi-gcc" - -PROVIDES = "virtual/atf" - -BRANCH = "master" -SRC_URI = "git://git.trustedfirmware.org/TF-A/trusted-firmware-a.git;protocol=http;branch=${BRANCH} \ - " -SRCREV = "8ff55a9e14a23d7c7f89f52465bcc6307850aa33" - -S = "${WORKDIR}/git" -B = "${WORKDIR}/build" - -inherit deploy - -ATF_SUFFIX ??= "bin" - -do_compile() { -unset LDFLAGS -unset CFLAGS -unset CPPFLAGS - -oe_runmake -C ${S} BUILD_BASE=${B} DEBUG=0 CROSS_COMPILE=${TARGET_PREFIX} \ -PLAT=${ATF_PLATFORM} ${ATF_TARGET} -} - -PACKAGE_ARCH = "${MACHINE_ARCH}" - -do_deploy() { -install -m 644 ${B}/${ATF_PLATFORM}/release/${ATF_TARGET}/${ATF_TARGET}.${ATF_SUFFIX} \ -${DEPLOYDIR}/${ATF_TARGET}.${ATF_SUFFIX} -} -addtask deploy after do_compile - diff --git a/recipes-bsp/trusted-firmware-a/trusted-firmware-a_%.bbappend b/recipes-bsp/trusted-firmware-a/trusted-firmware-a_%.bbappend new file mode 100644 index 000..ecde25d --- /dev/null +++ b/recipes-bsp/trusted-firmware-a/trusted-firmware-a_%.bbappend @@ -0,0 +1,6 @@ +# Rockchip RK3399 compiles some M0 firmware which requires an arm-none-eabi GCC +# toolchain +DEPENDS_append_rk3399 = " virtual/arm-none-eabi-gcc" + +COMPATIBLE_MACHINE_append_rk3399 = "|rk3399" + diff --git a/recipes-bsp/u-boot/u-boot%.bbappend b/recipes-bsp/u-boot/u-boot%.bbappend index 401d649..042507d 100644 --- a/recipes-bsp/u-boot/u-boot%.bbappend +++ b/recipes-bsp/u-boot/u-boot%.bbappend @@ -7,8 +7,8 @@ do_compile_append_rock2-square () { ATF_DEPENDS ??= "" -EXTRA_OEMAKE_append_rk3399 = " BL31=${DEPLOY_DIR_IMAGE}/bl31.elf" -ATF_DEPENDS_rk3399 = "virtual/atf:do_deploy" +EXTRA_OEMAKE_append_rk3399 = " BL31=${DEPLOY_DIR_IMAGE}/bl31-rk3399.elf" +ATF_DEPENDS_rk3399 = " virtual/trusted-firmware-a:do_deploy" -do_compile[depends] += "${ATF_DEPENDS}" +do_compile[depends] .= "${ATF_DEPENDS}" -- 2.26.2 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#49633): https://lists.yoctoproject.org/g/yocto/message/49633 Mute This Topic: https://lists.yoctoproject.org/mt/74844089/21656 Group Owner: yocto+ow...@lists.yoctoproject.org Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[yocto] [meta-security][PATCH 6/6] openscap: update to 1.3.3
Signed-off-by: Armin Kuster --- .../openscap/{openscap_1.3.1.bb => openscap_1.3.3.bb} | 2 +- .../recipes-openscap/openscap/openscap_git.bb | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) rename meta-security-compliance/recipes-openscap/openscap/{openscap_1.3.1.bb => openscap_1.3.3.bb} (76%) diff --git a/meta-security-compliance/recipes-openscap/openscap/openscap_1.3.1.bb b/meta-security-compliance/recipes-openscap/openscap/openscap_1.3.3.bb similarity index 76% rename from meta-security-compliance/recipes-openscap/openscap/openscap_1.3.1.bb rename to meta-security-compliance/recipes-openscap/openscap/openscap_1.3.3.bb index ad29efd..51fa9ee 100644 --- a/meta-security-compliance/recipes-openscap/openscap/openscap_1.3.1.bb +++ b/meta-security-compliance/recipes-openscap/openscap/openscap_1.3.3.bb @@ -2,7 +2,7 @@ SUMARRY = "NIST Certified SCAP 1.2 toolkit" require openscap.inc -SRCREV = "3a4c635691380fa990a226acc8558db35d7ebabc" +SRCREV = "0cb55c55af6be9934d6fd0caf4563b206f289732" SRC_URI = "git://github.com/OpenSCAP/openscap.git;branch=maint-1.3 \ " diff --git a/meta-security-compliance/recipes-openscap/openscap/openscap_git.bb b/meta-security-compliance/recipes-openscap/openscap/openscap_git.bb index 963d3de..73a4729 100644 --- a/meta-security-compliance/recipes-openscap/openscap/openscap_git.bb +++ b/meta-security-compliance/recipes-openscap/openscap/openscap_git.bb @@ -5,8 +5,8 @@ SUMARRY = "NIST Certified SCAP 1.2 toolkit with OE changes" include openscap.inc -SRCREV = "4bbdb46ff651f809d5b38ca08d769790c4bfff90" +SRCREV = "a85943eee400fdbe59234d1c4a02d8cf710c4625" SRC_URI = "git://github.com/akuster/openscap.git;branch=oe-1.3 \ " -PV = "1.3.1+git${SRCPV}" +PV = "1.3.3+git${SRCPV}" -- 2.17.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#49632): https://lists.yoctoproject.org/g/yocto/message/49632 Mute This Topic: https://lists.yoctoproject.org/mt/74843583/21656 Group Owner: yocto+ow...@lists.yoctoproject.org Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[yocto] [meta-security][PATCH 3/6] tpm2-tss-engine: add branch to SRC_URI & update to tip
LICENSE changed to BSD 3 Signed-off-by: Armin Kuster --- .../recipes-tpm2/tpm2-tss-engine/tpm2-tss-engine_1.0.1.bb | 8 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/meta-tpm/recipes-tpm2/tpm2-tss-engine/tpm2-tss-engine_1.0.1.bb b/meta-tpm/recipes-tpm2/tpm2-tss-engine/tpm2-tss-engine_1.0.1.bb index 3641b1b..ebd6d53 100644 --- a/meta-tpm/recipes-tpm2/tpm2-tss-engine/tpm2-tss-engine_1.0.1.bb +++ b/meta-tpm/recipes-tpm2/tpm2-tss-engine/tpm2-tss-engine_1.0.1.bb @@ -1,15 +1,15 @@ SUMMARY = "The tpm2-tss-engine project implements a cryptographic engine for OpenSSL." DESCRIPTION = "The tpm2-tss-engine project implements a cryptographic engine for OpenSSL for Trusted Platform Module (TPM 2.0) using the tpm2-tss software stack that follows the Trusted Computing Groups (TCG) TPM Software Stack (TSS 2.0). It uses the Enhanced System API (ESAPI) interface of the TSS 2.0 for downwards communication. It supports RSA decryption and signatures as well as ECDSA signatures." -LICENSE = "BSD-2-Clause" -LIC_FILES_CHKSUM = "file://LICENSE;md5=7b3ab643b9ce041de515d1ed092a36d4" +LICENSE = "BSD-3-Clause" +LIC_FILES_CHKSUM = "file://LICENSE;md5=3fb0047fd29391478a71e8e6101c76eb" SECTION = "security/tpm" DEPENDS = "autoconf-archive-native bash-completion libtss2 libgcrypt openssl" -SRCREV = "fdc8f65dfc8bad8b5a3aed181fae338267308f70" -SRC_URI = "git://github.com/tpm2-software/tpm2-tss-engine.git" +SRCREV = "24f1383cc6befde44d6f01a51ea653304d844ffd" +SRC_URI = "git://github.com/tpm2-software/tpm2-tss-engine.git;branch=v1.0.x" inherit autotools-brokensep pkgconfig systemd -- 2.17.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#49629): https://lists.yoctoproject.org/g/yocto/message/49629 Mute This Topic: https://lists.yoctoproject.org/mt/74843580/21656 Group Owner: yocto+ow...@lists.yoctoproject.org Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[yocto] [meta-security][PATCH 2/6] tpm2-tss: update to 2.4.1
Signed-off-by: Armin Kuster --- .../tpm2-tss/{tpm2-tss_2.3.2.bb => tpm2-tss_2.4.1.bb} | 7 ++- 1 file changed, 2 insertions(+), 5 deletions(-) rename meta-tpm/recipes-tpm2/tpm2-tss/{tpm2-tss_2.3.2.bb => tpm2-tss_2.4.1.bb} (82%) diff --git a/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_2.3.2.bb b/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_2.4.1.bb similarity index 82% rename from meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_2.3.2.bb rename to meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_2.4.1.bb index 135efed..22b961d 100644 --- a/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_2.3.2.bb +++ b/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_2.4.1.bb @@ -9,16 +9,13 @@ DEPENDS = "autoconf-archive-native libgcrypt openssl" SRCREV = "a99e733ba66c359502689a9c42fd5e02ed1dd7d6" SRC_URI = "https://github.com/tpm2-software/${BPN}/releases/download/${PV}/${BPN}-${PV}.tar.gz; -SRC_URI[md5sum] = "fb7e6d371959a65dc6d129af81739742" -SRC_URI[sha256sum] = "82929a0611f39246e09202702a61b54c980ab694626c1f5823520ddf75024fa6" -SRC_URI[sha1sum] = "c24ce8b20a8686ada775239389292f6d78020668" -SRC_URI[sha384sum] = "a0c023c024efb6c9906df1e143d692f44433de332b616dc0584c9b4cd4fb0ad544308f291892e91c5a52ef1a4b2abf7f" -SRC_URI[sha512sum] = "7b679b54f3478c3adee5b6c3135cbe491ffd9f4712991f465edbd6c7d2831e5f1537038ec36f288e9545c719d5d167b61116c924cf5d816220615d0b58a1d436" +SRC_URI[sha256sum] = "58d7afcab9ff3daaafb5316e57d2c28334b470d5a5bc6ceace6f89a1e60d" inherit autotools pkgconfig systemd extrausers PACKAGECONFIG ??= "" PACKAGECONFIG[oxygen] = ",--disable-doxygen-doc, " +PACKAGECONFIG[fapi] = "--enable-fapi,--disable-fapi,json-c " EXTRA_OECONF += "--enable-static --with-udevrulesdir=${base_prefix}/lib/udev/rules.d/" EXTRA_OECONF_remove = " --disable-static" -- 2.17.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#49628): https://lists.yoctoproject.org/g/yocto/message/49628 Mute This Topic: https://lists.yoctoproject.org/mt/74843577/21656 Group Owner: yocto+ow...@lists.yoctoproject.org Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[yocto] [meta-security][PATCH 4/6] tpm2-pkcs11: update 1.2.0
add yaml package Updated LICNESE Signed-off-by: Armin Kuster --- .../{tpm2-pkcs11_0.9.9.bb => tpm2-pkcs11_1.2.0.bb}| 11 +-- 1 file changed, 5 insertions(+), 6 deletions(-) rename meta-tpm/recipes-tpm2/tpm2-pkcs11/{tpm2-pkcs11_0.9.9.bb => tpm2-pkcs11_1.2.0.bb} (67%) diff --git a/meta-tpm/recipes-tpm2/tpm2-pkcs11/tpm2-pkcs11_0.9.9.bb b/meta-tpm/recipes-tpm2/tpm2-pkcs11/tpm2-pkcs11_1.2.0.bb similarity index 67% rename from meta-tpm/recipes-tpm2/tpm2-pkcs11/tpm2-pkcs11_0.9.9.bb rename to meta-tpm/recipes-tpm2/tpm2-pkcs11/tpm2-pkcs11_1.2.0.bb index 351e03e..ce2dac0 100644 --- a/meta-tpm/recipes-tpm2/tpm2-pkcs11/tpm2-pkcs11_0.9.9.bb +++ b/meta-tpm/recipes-tpm2/tpm2-pkcs11/tpm2-pkcs11_1.2.0.bb @@ -2,15 +2,14 @@ SUMMARY = "A PKCS#11 interface for TPM2 hardware" DESCRIPTION = "PKCS #11 is a Public-Key Cryptography Standard that defines a standard method to access cryptographic services from tokens/ devices such as hardware security modules (HSM), smart cards, etc. In this project we intend to use a TPM2 device as the cryptographic token." SECTION = "security/tpm" LICENSE = "BSD-2-Clause" -LIC_FILES_CHKSUM = "file://LICENSE;md5=93645981214b60a02688745c14f93c95" +LIC_FILES_CHKSUM = "file://LICENSE;md5=0fc19f620a102768d6dbd1e7166e78ab" -DEPENDS = "autoconf-archive pkgconfig dstat sqlite3 openssl libtss2-dev tpm2-tools" +DEPENDS = "autoconf-archive pkgconfig dstat sqlite3 openssl libtss2-dev tpm2-tools libyaml" -SRC_URI = "git://github.com/tpm2-software/tpm2-pkcs11.git \ - file://bootstrap_fixup.patch \ - " +SRC_URI = "git://github.com/tpm2-software/tpm2-pkcs11.git;branch=1.X \ + file://bootstrap_fixup.patch " -SRCREV = "6de3f6f9c6e0a4983f3fb90e35feb34906f8aea7" +SRCREV = "8d8f137f65f1d61d66cc191947b59c378f23e97d" S = "${WORKDIR}/git" -- 2.17.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#49630): https://lists.yoctoproject.org/g/yocto/message/49630 Mute This Topic: https://lists.yoctoproject.org/mt/74843581/21656 Group Owner: yocto+ow...@lists.yoctoproject.org Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[yocto] [meta-security][PATCH 5/6] libtpm: update to 0.7.2
Signed-off-by: Armin Kuster --- .../recipes-tpm/libtpm/{libtpm_0.7.0.bb => libtpm_0.7.2.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta-tpm/recipes-tpm/libtpm/{libtpm_0.7.0.bb => libtpm_0.7.2.bb} (86%) diff --git a/meta-tpm/recipes-tpm/libtpm/libtpm_0.7.0.bb b/meta-tpm/recipes-tpm/libtpm/libtpm_0.7.2.bb similarity index 86% rename from meta-tpm/recipes-tpm/libtpm/libtpm_0.7.0.bb rename to meta-tpm/recipes-tpm/libtpm/libtpm_0.7.2.bb index 4588c8d..0ade01d 100644 --- a/meta-tpm/recipes-tpm/libtpm/libtpm_0.7.0.bb +++ b/meta-tpm/recipes-tpm/libtpm/libtpm_0.7.2.bb @@ -2,8 +2,8 @@ SUMMARY = "LIBPM - Software TPM Library" LICENSE = "BSD-3-Clause" LIC_FILES_CHKSUM = "file://LICENSE;md5=e73f0786a936da3814896df06ad225a9" -SRCREV = "c26e8f7b08b19a69cea9e8f1f1e6639c7951fb01" -SRC_URI = "git://github.com/stefanberger/libtpms.git;branch=stable-${PV}" +SRCREV = "7325acb4777f70419fe10a1d9621c2666e977e73" +SRC_URI = "git://github.com/stefanberger/libtpms.git;branch=stable-0.7.0" PE = "1" -- 2.17.1 -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#49631): https://lists.yoctoproject.org/g/yocto/message/49631 Mute This Topic: https://lists.yoctoproject.org/mt/74843582/21656 Group Owner: yocto+ow...@lists.yoctoproject.org Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[yocto] Meta-security layer LTS statement
Hello all, As the maintainer for meta-security layer, I will be aligning with the LTS policy the Yocto Project has defined and the Dunfell branch of meta-security will have the same life cycle of 2 years. Best regards, Armin -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#49626): https://lists.yoctoproject.org/g/yocto/message/49626 Mute This Topic: https://lists.yoctoproject.org/mt/74843210/21656 Group Owner: yocto+ow...@lists.yoctoproject.org Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-