[yocto] [meta-security][master|dunfell][PATCH 1/2] clamav: resolve multilib issues

2020-06-12 Thread Jeremy Puhlman
From: Jeremy Puhlman 

Signed-off-by: Jeremy Puhlman 
---
 recipes-scanners/clamav/clamav_0.101.5.bb | 5 -
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/recipes-scanners/clamav/clamav_0.101.5.bb 
b/recipes-scanners/clamav/clamav_0.101.5.bb
index f4625b1..2ea2c9b 100644
--- a/recipes-scanners/clamav/clamav_0.101.5.bb
+++ b/recipes-scanners/clamav/clamav_0.101.5.bb
@@ -25,7 +25,7 @@ S = "${WORKDIR}/git"
 LEAD_SONAME = "libclamav.so"
 SO_VER = "9.0.2"
 
-inherit autotools pkgconfig useradd systemd
+inherit autotools pkgconfig useradd systemd multilib_header multilib_script
 
 CLAMAV_UID ?= "clamav"
 CLAMAV_GID ?= "clamav"
@@ -45,6 +45,8 @@ PACKAGECONFIG[bz2] = "--with-libbz2-prefix=${CLAMAV_USR_DIR}, 
--disable-bzip2, b
 PACKAGECONFIG[ncurses] = "--with-libncurses-prefix=${CLAMAV_USR_DIR}, 
--without-libncurses-prefix, ncurses, "
 PACKAGECONFIG[systemd] = 
"--with-systemdsystemunitdir=${systemd_unitdir}/system/, 
--without-systemdsystemunitdir, "
 
+MULTILIB_SCRIPTS = "${PN}-dev:${bindir}/clamav-config 
${PN}-cvd:${localstatedir}/lib/clamav/mirrors.dat"
+
 EXTRA_OECONF_CLAMAV = "--without-libcheck-prefix --disable-unrar \
 --disable-mempool \
 --program-prefix="" \
@@ -93,6 +95,7 @@ do_install_append_class-target () {
 install -d ${D}${sysconfdir}/tmpfiles.d
 install -m 0644 ${WORKDIR}/tmpfiles.clamav 
${D}${sysconfdir}/tmpfiles.d/clamav.conf
 fi
+oe_multilib_header clamav-types.h
 }
 
 pkg_postinst_ontarget_${PN} () {
-- 
2.20.1

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#49635): https://lists.yoctoproject.org/g/yocto/message/49635
Mute This Topic: https://lists.yoctoproject.org/mt/74852100/21656
Group Owner: yocto+ow...@lists.yoctoproject.org
Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


[yocto] [meta-security][master|dunfell][PATCH 2/2] tripwire: Remove makefiles from the man directories.

2020-06-12 Thread Jeremy Puhlman
From: Jeremy Puhlman 

Signed-off-by: Jeremy Puhlman 
---
 recipes-ids/tripwire/tripwire_2.4.3.7.bb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/recipes-ids/tripwire/tripwire_2.4.3.7.bb 
b/recipes-ids/tripwire/tripwire_2.4.3.7.bb
index c26392a..4f50bff 100644
--- a/recipes-ids/tripwire/tripwire_2.4.3.7.bb
+++ b/recipes-ids/tripwire/tripwire_2.4.3.7.bb
@@ -52,6 +52,7 @@ do_install () {
 install -m 0644 ${S}/man/man4/* ${D}${mandir}/man4
 install -m 0644 ${S}/man/man5/* ${D}${mandir}/man5
 install -m 0644 ${S}/man/man8/* ${D}${mandir}/man8
+rm ${D}${mandir}/man*/Makefile*
 install -m 0644 ${S}/policy/templates/* ${D}${docdir}/${BPN}/templates
 install -m 0644 ${S}/policy/*txt ${D}${docdir}/${BPN}
 install -m 0644 ${S}/COPYING ${D}${docdir}/${BPN}
-- 
2.20.1

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#49636): https://lists.yoctoproject.org/g/yocto/message/49636
Mute This Topic: https://lists.yoctoproject.org/mt/74852102/21656
Group Owner: yocto+ow...@lists.yoctoproject.org
Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


[yocto] [meta-rockchip][PATCH] wic: Use --offset and --fixed-size instead of --align and --size

2020-06-12 Thread Joshua Watt
The --align argument isn't intended to make a partition exist at a fixed
location like the Rockchip boot ROM requires. Use the recently added
--offset argument which will fail to build the image if the partition
can't be placed at the correct location. Also used --fixed-size to make
sure that Wic isn't inserting hidden padding that changes things around.

Finally, the location of the rootfs isn't required to be at sector
262144 since u-boot and the kernel reads the partition table to find it
and actually hasn't been at this location anyway since Wic has been
padding the /boot partition, so remove it's alignment requirements.

Signed-off-by: Joshua Watt 
---
 wic/firefly-rk3288.wks |  2 +-
 wic/rk3288-boot.wks| 14 +++---
 wic/rk3399-boot.wks| 14 +++---
 wic/rock-pi-4.wks  |  2 +-
 wic/tinker-board.wks   |  2 +-
 wic/vyasa-rk3288.wks   |  2 +-
 6 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/wic/firefly-rk3288.wks b/wic/firefly-rk3288.wks
index b60aa0e..da0067f 100644
--- a/wic/firefly-rk3288.wks
+++ b/wic/firefly-rk3288.wks
@@ -2,6 +2,6 @@
 # Released under the MIT license (see COPYING.MIT for the terms)
 
 include rk3288-boot.wks
-part / --align 131072 --ondisk ${RK_BOOT_DEVICE} --source rootfs --fstype=ext4 
--label root
+part / --ondisk ${RK_BOOT_DEVICE} --source rootfs --fstype=ext4 --label root
 
 bootloader --ptable gpt --append="console=tty1 console=ttyS2,115200n8 rw 
root=/dev/${RK_BOOT_DEVICE}p7 rootfstype=ext4 init=/sbin/init"
diff --git a/wic/rk3288-boot.wks b/wic/rk3288-boot.wks
index c0b7d95..e4d30cc 100644
--- a/wic/rk3288-boot.wks
+++ b/wic/rk3288-boot.wks
@@ -12,13 +12,13 @@
 #   loader2 16384   8192
 #   atf 24576   8192
 #   boot32768   229376
-#   root262144  -
+#   root262144  -   (suggested)
 #
 
-part loader1--align 32 --size 4000K--ondisk 
${RK_BOOT_DEVICE} --source rawcopy --sourceparams="file=idbloader.img"
-part reserved1  --align 4032   --size 64K  --ondisk 
${RK_BOOT_DEVICE}
-part reserved2  --align 4096   --size 4096K--ondisk 
${RK_BOOT_DEVICE}
-part loader2--align 8192   --size 4096K--ondisk 
${RK_BOOT_DEVICE} --source rawcopy --sourceparams="file=u-boot.bin"
-part atf--align 12288  --size 4096K--ondisk 
${RK_BOOT_DEVICE}
-part /boot  --align 16384  --size=114688K --active --ondisk 
${RK_BOOT_DEVICE} --source bootimg-partition --fstype=vfat --label boot 
--sourceparams="loader=u-boot"
+part loader1--offset 32 --fixed-size 4000K--ondisk 
${RK_BOOT_DEVICE} --source rawcopy --sourceparams="file=idbloader.img"
+part reserved1  --offset 4032   --fixed-size 64K  --ondisk 
${RK_BOOT_DEVICE}
+part reserved2  --offset 4096   --fixed-size 4096K--ondisk 
${RK_BOOT_DEVICE}
+part loader2--offset 8192   --fixed-size 4096K--ondisk 
${RK_BOOT_DEVICE} --source rawcopy --sourceparams="file=u-boot.bin"
+part atf--offset 12288  --fixed-size 4096K--ondisk 
${RK_BOOT_DEVICE}
+part /boot  --offset 16384  --size   114688K --active --ondisk 
${RK_BOOT_DEVICE} --source bootimg-partition --fstype=vfat --label boot 
--sourceparams="loader=u-boot"
 
diff --git a/wic/rk3399-boot.wks b/wic/rk3399-boot.wks
index 885d46b..8a65179 100644
--- a/wic/rk3399-boot.wks
+++ b/wic/rk3399-boot.wks
@@ -12,13 +12,13 @@
 #   loader2 16384   8192
 #   atf 24576   8192
 #   boot32768   229376
-#   root262144  -
+#   root262144  -   (suggested)
 #
 
-part loader1--align 32 --size 4000K--ondisk 
${RK_BOOT_DEVICE} --source rawcopy --sourceparams="file=idbloader.img"
-part reserved1  --align 4032   --size 64K  --ondisk 
${RK_BOOT_DEVICE}
-part reserved2  --align 4096   --size 4096K--ondisk 
${RK_BOOT_DEVICE}
-part loader2--align 8192   --size 4096K--ondisk 
${RK_BOOT_DEVICE} --source rawcopy --sourceparams="file=u-boot.itb"
-part atf--align 12288  --size 4096K--ondisk 
${RK_BOOT_DEVICE}
-part /boot  --align 16384  --size=114688K --active --ondisk 
${RK_BOOT_DEVICE} --source bootimg-partition --fstype=vfat --label boot 
--sourceparams="loader=u-boot"
+part loader1--offset 32 --fixed-size 4000K--ondisk 
${RK_BOOT_DEVICE} --source rawcopy --sourceparams="file=idbloader.img"
+part reserved1  --offset 4032   --fixed-size 64K  --ondisk 
${RK_BOOT_DEVICE}
+part reserved2  --offset 4096   --fixed-size 4096K--ondisk 
${RK_BOOT_DEVICE}
+part loader2--offset 8192   --fixed-size 4096K--ondisk 
${RK_BOOT_DEVICE} --source rawcopy --sourceparams="file=u-boot.itb"
+part atf--offset 12288  --fixed-size 4096K--ondisk 
${RK_BOOT_DEVICE}
+part /boot  --offset 16384  --size   114688K --active --ondisk 

[yocto] [meta-rockchip][PATCH] Use TF-A recipe from meta-arm

2020-06-12 Thread Joshua Watt
Converts the build to pull the canonical TF-A recipe from meta-arm
instead of duplicating it in this layer.

Signed-off-by: Joshua Watt 
---
 README|  4 ++
 conf/layer.conf   |  2 +-
 conf/machine/include/rk3399.inc   |  5 +--
 .../arm-trusted-firmware_2.3.bb   | 43 ---
 .../trusted-firmware-a_%.bbappend |  6 +++
 recipes-bsp/u-boot/u-boot%.bbappend   |  6 +--
 6 files changed, 16 insertions(+), 50 deletions(-)
 delete mode 100644 recipes-bsp/arm-trusted-firmware/arm-trusted-firmware_2.3.bb
 create mode 100644 recipes-bsp/trusted-firmware-a/trusted-firmware-a_%.bbappend

diff --git a/README b/README
index a97b89e..e1cfe3e 100644
--- a/README
+++ b/README
@@ -11,6 +11,10 @@ Dependencies:
layers: meta
branch: matched branches (e.g. master, sumo, ...)
 
+   URI: git://git.yoctoproject.org/meta-arm
+   layers: meta-arm
+   branch: matched branches (e.g. master, sumo, ...)
+
 Status of supported boards:
 --
builds and boots wic image:
diff --git a/conf/layer.conf b/conf/layer.conf
index 72d5366..4168391 100644
--- a/conf/layer.conf
+++ b/conf/layer.conf
@@ -15,4 +15,4 @@ BBFILE_PRIORITY_rockchip = "1"
 # cause compatibility issues with other layers
 LAYERVERSION_rockchip = "1"
 LAYERSERIES_COMPAT_rockchip = "dunfell"
-LAYERDEPENDS_rockchip = "core"
+LAYERDEPENDS_rockchip = "core meta-arm"
diff --git a/conf/machine/include/rk3399.inc b/conf/machine/include/rk3399.inc
index 1fd8fd6..4019988 100644
--- a/conf/machine/include/rk3399.inc
+++ b/conf/machine/include/rk3399.inc
@@ -13,9 +13,8 @@ KBUILD_DEFCONFIG ?= "defconfig"
 KERNEL_CLASSES = "kernel-fitimage"
 KERNEL_IMAGETYPE = "fitImage"
 
-ATF_PLATFORM ?= "rk3399"
-ATF_TARGET ?= "bl31"
-ATF_SUFFIX ?= "elf"
+TFA_PLATFORM = "rk3399"
+TFA_BUILD_TARGET = "bl31"
 
 UBOOT_SUFFIX ?= "itb"
 UBOOT_ENTRYPOINT ?= "0x0600"
diff --git a/recipes-bsp/arm-trusted-firmware/arm-trusted-firmware_2.3.bb 
b/recipes-bsp/arm-trusted-firmware/arm-trusted-firmware_2.3.bb
deleted file mode 100644
index 8d36d66..000
--- a/recipes-bsp/arm-trusted-firmware/arm-trusted-firmware_2.3.bb
+++ /dev/null
@@ -1,43 +0,0 @@
-# Copyright (C) 2019 Garmin Ltd. or its subsidaries
-# Released under the MIT license (see COPYING.MIT for the terms)
-
-SUMMARY = "Arm Trusted Firmware"
-HOMEPAGE = "https://developer.trustedfirmware.org/;
-LICENSE = "BSD-3-Clause"
-LIC_FILES_CHKSUM = 
"file://docs/license.rst;md5=189505435dbcdcc8caa63c46fe93fa89"
-
-# Rockchip RK3399 compiles some M0 firmware which requires an arm-none-eabi GCC
-# toolchain
-DEPENDS_rk3399 = "virtual/arm-none-eabi-gcc"
-
-PROVIDES = "virtual/atf"
-
-BRANCH = "master"
-SRC_URI = 
"git://git.trustedfirmware.org/TF-A/trusted-firmware-a.git;protocol=http;branch=${BRANCH}
 \
-   "
-SRCREV = "8ff55a9e14a23d7c7f89f52465bcc6307850aa33"
-
-S = "${WORKDIR}/git"
-B = "${WORKDIR}/build"
-
-inherit deploy
-
-ATF_SUFFIX ??= "bin"
-
-do_compile() {
-unset LDFLAGS
-unset CFLAGS
-unset CPPFLAGS
-
-oe_runmake -C ${S} BUILD_BASE=${B} DEBUG=0 CROSS_COMPILE=${TARGET_PREFIX} \
-PLAT=${ATF_PLATFORM} ${ATF_TARGET}
-}
-
-PACKAGE_ARCH = "${MACHINE_ARCH}"
-
-do_deploy() {
-install -m 644 
${B}/${ATF_PLATFORM}/release/${ATF_TARGET}/${ATF_TARGET}.${ATF_SUFFIX} \
-${DEPLOYDIR}/${ATF_TARGET}.${ATF_SUFFIX}
-}
-addtask deploy after do_compile
-
diff --git a/recipes-bsp/trusted-firmware-a/trusted-firmware-a_%.bbappend 
b/recipes-bsp/trusted-firmware-a/trusted-firmware-a_%.bbappend
new file mode 100644
index 000..ecde25d
--- /dev/null
+++ b/recipes-bsp/trusted-firmware-a/trusted-firmware-a_%.bbappend
@@ -0,0 +1,6 @@
+# Rockchip RK3399 compiles some M0 firmware which requires an arm-none-eabi GCC
+# toolchain
+DEPENDS_append_rk3399 = " virtual/arm-none-eabi-gcc"
+
+COMPATIBLE_MACHINE_append_rk3399 = "|rk3399"
+
diff --git a/recipes-bsp/u-boot/u-boot%.bbappend 
b/recipes-bsp/u-boot/u-boot%.bbappend
index 401d649..042507d 100644
--- a/recipes-bsp/u-boot/u-boot%.bbappend
+++ b/recipes-bsp/u-boot/u-boot%.bbappend
@@ -7,8 +7,8 @@ do_compile_append_rock2-square () {
 
 ATF_DEPENDS ??= ""
 
-EXTRA_OEMAKE_append_rk3399 = " BL31=${DEPLOY_DIR_IMAGE}/bl31.elf"
-ATF_DEPENDS_rk3399 = "virtual/atf:do_deploy"
+EXTRA_OEMAKE_append_rk3399 = " BL31=${DEPLOY_DIR_IMAGE}/bl31-rk3399.elf"
+ATF_DEPENDS_rk3399 = " virtual/trusted-firmware-a:do_deploy"
 
-do_compile[depends] += "${ATF_DEPENDS}"
+do_compile[depends] .= "${ATF_DEPENDS}"
 
-- 
2.26.2

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#49633): https://lists.yoctoproject.org/g/yocto/message/49633
Mute This Topic: https://lists.yoctoproject.org/mt/74844089/21656
Group Owner: yocto+ow...@lists.yoctoproject.org
Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


[yocto] [meta-security][PATCH 6/6] openscap: update to 1.3.3

2020-06-12 Thread akuster
Signed-off-by: Armin Kuster 
---
 .../openscap/{openscap_1.3.1.bb => openscap_1.3.3.bb} | 2 +-
 .../recipes-openscap/openscap/openscap_git.bb | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)
 rename meta-security-compliance/recipes-openscap/openscap/{openscap_1.3.1.bb 
=> openscap_1.3.3.bb} (76%)

diff --git 
a/meta-security-compliance/recipes-openscap/openscap/openscap_1.3.1.bb 
b/meta-security-compliance/recipes-openscap/openscap/openscap_1.3.3.bb
similarity index 76%
rename from meta-security-compliance/recipes-openscap/openscap/openscap_1.3.1.bb
rename to meta-security-compliance/recipes-openscap/openscap/openscap_1.3.3.bb
index ad29efd..51fa9ee 100644
--- a/meta-security-compliance/recipes-openscap/openscap/openscap_1.3.1.bb
+++ b/meta-security-compliance/recipes-openscap/openscap/openscap_1.3.3.bb
@@ -2,7 +2,7 @@ SUMARRY = "NIST Certified SCAP 1.2 toolkit"
 
 require openscap.inc
 
-SRCREV = "3a4c635691380fa990a226acc8558db35d7ebabc"
+SRCREV = "0cb55c55af6be9934d6fd0caf4563b206f289732"
 SRC_URI = "git://github.com/OpenSCAP/openscap.git;branch=maint-1.3 \
 "
 
diff --git a/meta-security-compliance/recipes-openscap/openscap/openscap_git.bb 
b/meta-security-compliance/recipes-openscap/openscap/openscap_git.bb
index 963d3de..73a4729 100644
--- a/meta-security-compliance/recipes-openscap/openscap/openscap_git.bb
+++ b/meta-security-compliance/recipes-openscap/openscap/openscap_git.bb
@@ -5,8 +5,8 @@ SUMARRY = "NIST Certified SCAP 1.2 toolkit with OE changes"
 
 include openscap.inc
 
-SRCREV = "4bbdb46ff651f809d5b38ca08d769790c4bfff90"
+SRCREV = "a85943eee400fdbe59234d1c4a02d8cf710c4625"
 SRC_URI = "git://github.com/akuster/openscap.git;branch=oe-1.3 \
 "
 
-PV = "1.3.1+git${SRCPV}"
+PV = "1.3.3+git${SRCPV}"
-- 
2.17.1

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#49632): https://lists.yoctoproject.org/g/yocto/message/49632
Mute This Topic: https://lists.yoctoproject.org/mt/74843583/21656
Group Owner: yocto+ow...@lists.yoctoproject.org
Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


[yocto] [meta-security][PATCH 3/6] tpm2-tss-engine: add branch to SRC_URI & update to tip

2020-06-12 Thread akuster
LICENSE changed to BSD 3

Signed-off-by: Armin Kuster 
---
 .../recipes-tpm2/tpm2-tss-engine/tpm2-tss-engine_1.0.1.bb | 8 
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/meta-tpm/recipes-tpm2/tpm2-tss-engine/tpm2-tss-engine_1.0.1.bb 
b/meta-tpm/recipes-tpm2/tpm2-tss-engine/tpm2-tss-engine_1.0.1.bb
index 3641b1b..ebd6d53 100644
--- a/meta-tpm/recipes-tpm2/tpm2-tss-engine/tpm2-tss-engine_1.0.1.bb
+++ b/meta-tpm/recipes-tpm2/tpm2-tss-engine/tpm2-tss-engine_1.0.1.bb
@@ -1,15 +1,15 @@
 SUMMARY = "The tpm2-tss-engine project implements a cryptographic engine for 
OpenSSL." 
 DESCRIPTION = "The tpm2-tss-engine project implements a cryptographic engine 
for OpenSSL for Trusted Platform Module (TPM 2.0) using the tpm2-tss software 
stack that follows the Trusted Computing Groups (TCG) TPM Software Stack (TSS 
2.0). It uses the Enhanced System API (ESAPI) interface of the TSS 2.0 for 
downwards communication. It supports RSA decryption and signatures as well as 
ECDSA signatures."
 
-LICENSE = "BSD-2-Clause"
-LIC_FILES_CHKSUM = "file://LICENSE;md5=7b3ab643b9ce041de515d1ed092a36d4"
+LICENSE = "BSD-3-Clause"
+LIC_FILES_CHKSUM = "file://LICENSE;md5=3fb0047fd29391478a71e8e6101c76eb"
 
 SECTION = "security/tpm"
 
 DEPENDS = "autoconf-archive-native bash-completion libtss2 libgcrypt openssl"
 
-SRCREV = "fdc8f65dfc8bad8b5a3aed181fae338267308f70"
-SRC_URI = "git://github.com/tpm2-software/tpm2-tss-engine.git"
+SRCREV = "24f1383cc6befde44d6f01a51ea653304d844ffd"
+SRC_URI = "git://github.com/tpm2-software/tpm2-tss-engine.git;branch=v1.0.x"
 
 inherit autotools-brokensep pkgconfig systemd
 
-- 
2.17.1

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#49629): https://lists.yoctoproject.org/g/yocto/message/49629
Mute This Topic: https://lists.yoctoproject.org/mt/74843580/21656
Group Owner: yocto+ow...@lists.yoctoproject.org
Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


[yocto] [meta-security][PATCH 2/6] tpm2-tss: update to 2.4.1

2020-06-12 Thread akuster
Signed-off-by: Armin Kuster 
---
 .../tpm2-tss/{tpm2-tss_2.3.2.bb => tpm2-tss_2.4.1.bb}  | 7 ++-
 1 file changed, 2 insertions(+), 5 deletions(-)
 rename meta-tpm/recipes-tpm2/tpm2-tss/{tpm2-tss_2.3.2.bb => tpm2-tss_2.4.1.bb} 
(82%)

diff --git a/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_2.3.2.bb 
b/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_2.4.1.bb
similarity index 82%
rename from meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_2.3.2.bb
rename to meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_2.4.1.bb
index 135efed..22b961d 100644
--- a/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_2.3.2.bb
+++ b/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_2.4.1.bb
@@ -9,16 +9,13 @@ DEPENDS = "autoconf-archive-native libgcrypt openssl"
 SRCREV = "a99e733ba66c359502689a9c42fd5e02ed1dd7d6"
 
 SRC_URI = 
"https://github.com/tpm2-software/${BPN}/releases/download/${PV}/${BPN}-${PV}.tar.gz;
-SRC_URI[md5sum] = "fb7e6d371959a65dc6d129af81739742"
-SRC_URI[sha256sum] = 
"82929a0611f39246e09202702a61b54c980ab694626c1f5823520ddf75024fa6"
-SRC_URI[sha1sum] = "c24ce8b20a8686ada775239389292f6d78020668"
-SRC_URI[sha384sum] = 
"a0c023c024efb6c9906df1e143d692f44433de332b616dc0584c9b4cd4fb0ad544308f291892e91c5a52ef1a4b2abf7f"
-SRC_URI[sha512sum] = 
"7b679b54f3478c3adee5b6c3135cbe491ffd9f4712991f465edbd6c7d2831e5f1537038ec36f288e9545c719d5d167b61116c924cf5d816220615d0b58a1d436"
+SRC_URI[sha256sum] = 
"58d7afcab9ff3daaafb5316e57d2c28334b470d5a5bc6ceace6f89a1e60d"
 
 inherit autotools pkgconfig systemd extrausers
 
 PACKAGECONFIG ??= ""
 PACKAGECONFIG[oxygen] = ",--disable-doxygen-doc, "
+PACKAGECONFIG[fapi] = "--enable-fapi,--disable-fapi,json-c "
 
 EXTRA_OECONF += "--enable-static 
--with-udevrulesdir=${base_prefix}/lib/udev/rules.d/"
 EXTRA_OECONF_remove = " --disable-static"
-- 
2.17.1

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#49628): https://lists.yoctoproject.org/g/yocto/message/49628
Mute This Topic: https://lists.yoctoproject.org/mt/74843577/21656
Group Owner: yocto+ow...@lists.yoctoproject.org
Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


[yocto] [meta-security][PATCH 4/6] tpm2-pkcs11: update 1.2.0

2020-06-12 Thread akuster
add yaml package
Updated LICNESE

Signed-off-by: Armin Kuster 
---
 .../{tpm2-pkcs11_0.9.9.bb => tpm2-pkcs11_1.2.0.bb}| 11 +--
 1 file changed, 5 insertions(+), 6 deletions(-)
 rename meta-tpm/recipes-tpm2/tpm2-pkcs11/{tpm2-pkcs11_0.9.9.bb => 
tpm2-pkcs11_1.2.0.bb} (67%)

diff --git a/meta-tpm/recipes-tpm2/tpm2-pkcs11/tpm2-pkcs11_0.9.9.bb 
b/meta-tpm/recipes-tpm2/tpm2-pkcs11/tpm2-pkcs11_1.2.0.bb
similarity index 67%
rename from meta-tpm/recipes-tpm2/tpm2-pkcs11/tpm2-pkcs11_0.9.9.bb
rename to meta-tpm/recipes-tpm2/tpm2-pkcs11/tpm2-pkcs11_1.2.0.bb
index 351e03e..ce2dac0 100644
--- a/meta-tpm/recipes-tpm2/tpm2-pkcs11/tpm2-pkcs11_0.9.9.bb
+++ b/meta-tpm/recipes-tpm2/tpm2-pkcs11/tpm2-pkcs11_1.2.0.bb
@@ -2,15 +2,14 @@ SUMMARY = "A PKCS#11 interface for TPM2 hardware"
 DESCRIPTION = "PKCS #11 is a Public-Key Cryptography Standard that defines a 
standard method to access cryptographic services from tokens/ devices such as 
hardware security modules (HSM), smart cards, etc. In this project we intend to 
use a TPM2 device as the cryptographic token."
 SECTION = "security/tpm"
 LICENSE = "BSD-2-Clause"
-LIC_FILES_CHKSUM = "file://LICENSE;md5=93645981214b60a02688745c14f93c95"
+LIC_FILES_CHKSUM = "file://LICENSE;md5=0fc19f620a102768d6dbd1e7166e78ab"
 
-DEPENDS = "autoconf-archive pkgconfig dstat sqlite3 openssl libtss2-dev 
tpm2-tools"
+DEPENDS = "autoconf-archive pkgconfig dstat sqlite3 openssl libtss2-dev 
tpm2-tools libyaml"
 
-SRC_URI = "git://github.com/tpm2-software/tpm2-pkcs11.git \
-   file://bootstrap_fixup.patch \
-  "
+SRC_URI = "git://github.com/tpm2-software/tpm2-pkcs11.git;branch=1.X \
+   file://bootstrap_fixup.patch "
 
-SRCREV = "6de3f6f9c6e0a4983f3fb90e35feb34906f8aea7"
+SRCREV = "8d8f137f65f1d61d66cc191947b59c378f23e97d"
 
 S = "${WORKDIR}/git"
 
-- 
2.17.1

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#49630): https://lists.yoctoproject.org/g/yocto/message/49630
Mute This Topic: https://lists.yoctoproject.org/mt/74843581/21656
Group Owner: yocto+ow...@lists.yoctoproject.org
Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


[yocto] [meta-security][PATCH 5/6] libtpm: update to 0.7.2

2020-06-12 Thread akuster
Signed-off-by: Armin Kuster 
---
 .../recipes-tpm/libtpm/{libtpm_0.7.0.bb => libtpm_0.7.2.bb}   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
 rename meta-tpm/recipes-tpm/libtpm/{libtpm_0.7.0.bb => libtpm_0.7.2.bb} (86%)

diff --git a/meta-tpm/recipes-tpm/libtpm/libtpm_0.7.0.bb 
b/meta-tpm/recipes-tpm/libtpm/libtpm_0.7.2.bb
similarity index 86%
rename from meta-tpm/recipes-tpm/libtpm/libtpm_0.7.0.bb
rename to meta-tpm/recipes-tpm/libtpm/libtpm_0.7.2.bb
index 4588c8d..0ade01d 100644
--- a/meta-tpm/recipes-tpm/libtpm/libtpm_0.7.0.bb
+++ b/meta-tpm/recipes-tpm/libtpm/libtpm_0.7.2.bb
@@ -2,8 +2,8 @@ SUMMARY = "LIBPM - Software TPM Library"
 LICENSE = "BSD-3-Clause"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=e73f0786a936da3814896df06ad225a9"
 
-SRCREV = "c26e8f7b08b19a69cea9e8f1f1e6639c7951fb01"
-SRC_URI = "git://github.com/stefanberger/libtpms.git;branch=stable-${PV}"
+SRCREV = "7325acb4777f70419fe10a1d9621c2666e977e73"
+SRC_URI = "git://github.com/stefanberger/libtpms.git;branch=stable-0.7.0"
 
 PE = "1"
 
-- 
2.17.1

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#49631): https://lists.yoctoproject.org/g/yocto/message/49631
Mute This Topic: https://lists.yoctoproject.org/mt/74843582/21656
Group Owner: yocto+ow...@lists.yoctoproject.org
Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


[yocto] Meta-security layer LTS statement

2020-06-12 Thread akuster
Hello all,

As the  maintainer for meta-security layer, I will be aligning  with the
LTS policy the Yocto Project has defined and the Dunfell branch of
meta-security will have the same life cycle of 2 years.

Best regards,
Armin
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#49626): https://lists.yoctoproject.org/g/yocto/message/49626
Mute This Topic: https://lists.yoctoproject.org/mt/74843210/21656
Group Owner: yocto+ow...@lists.yoctoproject.org
Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-