Re: [yocto] liblzma: memory allocation failed

On 09/16/2018 04:40 PM, Peter Bergin wrote: Hi, during the task do_package_write_rpm I get the error "liblzma: Memory allocation failed". It happens during packaging of binary RPM packages. The root cause seems to be the host environment that is used in our project. We run our builds on a

Re: [yocto] Building, Using SDK

On 09/13/2018 10:18 PM, Dudziak Krzysztof wrote: Hi, Alex González elaborates in his book Embedded Linux Development Using Yocto Projets (2nd Edition) SDK-related questions – basics, building, usage (chapter 4). 1. Downloading then installing precompiled SDK was one of all available

[yocto] liblzma: memory allocation failed

Hi, during the task do_package_write_rpm I get the error "liblzma: Memory allocation failed". It happens during packaging of binary RPM packages. The root cause seems to be the host environment that is used in our project. We run our builds on a big server with 32 cores and 256GB of physical

[yocto] [meta-security][PATCH] keyutils: Fix build with usrmerge

Update BINDIR and SBINDIR so keyutils builds with usrmerge ERROR: keyutils-1.5.10-r0 do_package: QA Issue: keyutils: Files/directories were installed but not shipped in any package: /sbin/key.dns_resolver /sbin/request-key /bin/keyctl Please set FILES such that these items are packaged.

[yocto] [meta-security][PATCH 25/25] forensics: drop all un supported pacakges

Signed-off-by: Armin Kuster --- recipes-forensic/afflib/afflib_3.6.6.bb | 30 -- .../afflib/files/configure_rm_ms_flags.patch | 18 --- recipes-forensic/libewf/files/gcc5_fix.patch | 22 - recipes-forensic/libewf/libewf_20140608.bb| 24

[yocto] [meta-security][PATCH 24/25] lynis: update to 2.6.8

Signed-off-by: Armin Kuster --- .../recipes-auditors/lynis/{lynis_2.5.1.bb => lynis_2.6.8.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta-security-compliance/recipes-auditors/lynis/{lynis_2.5.1.bb => lynis_2.6.8.bb} (89%) diff --git

[yocto] [meta-security][PATCH 23/25] aircrack: update to 1.3

remove unneeded patch. minor cleanups Signed-off-by: Armin Kuster --- ...{aircrack-ng_1.2.bb => aircrack-ng_1.3.bb} | 11 +++- .../aircrack-ng/files/fixup_cflags.patch | 28 --- 2 files changed, 4 insertions(+), 35 deletions(-) rename

[yocto] [meta-security][PATCH 22/25] swtpm: update to tip for openssl 1.1 support

Signed-off-by: Armin Kuster --- meta-tpm/recipes-tpm/swtpm/swtpm_1.0.bb | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/meta-tpm/recipes-tpm/swtpm/swtpm_1.0.bb b/meta-tpm/recipes-tpm/swtpm/swtpm_1.0.bb index 7476020..e0c5ffe 100644 ---

[yocto] [meta-security][PATCH 20/25] openssl-tpm-engine: update SRC_URI and update to 0.5.0

change to a fork that is being maintained and that enabled openssl 1.1 Refresh patches Drop one no longer needed Signed-off-by: Armin Kuster --- ...pm-key-support-well-known-key-option.patch | 24 +-- .../0002-libtpm-support-env-TPM_SRK_PW.patch | 14 +++

[yocto] [meta-security][PATCH 21/25] libtpm: update to tip

LIC_FILES_CHKSUM changed do to "Extend license texts with TPM 2 specifics" Signed-off-by: Armin Kuster --- meta-tpm/recipes-tpm/libtpm/libtpm_1.0.bb | 8 +++- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/meta-tpm/recipes-tpm/libtpm/libtpm_1.0.bb

[yocto] [meta-security][PATCH 18/25] tor: remove not used

Signed-off-by: Armin Kuster --- recipes-browers/tor/tor_6.5.2.bb | 7 --- 1 file changed, 7 deletions(-) delete mode 100644 recipes-browers/tor/tor_6.5.2.bb diff --git a/recipes-browers/tor/tor_6.5.2.bb b/recipes-browers/tor/tor_6.5.2.bb deleted file mode 100644 index 1e3a812..000 ---

[yocto] [meta-security][PATCH 19/25] pcr-extend: fix building with openssl 1.1

Signed-off-by: Armin Kuster --- .../files/fix_openssl11_build.patch | 45 +++ .../recipes-tpm/pcr-extend/pcr-extend_git.bb | 3 +- 2 files changed, 47 insertions(+), 1 deletion(-) create mode 100644 meta-tpm/recipes-tpm/pcr-extend/files/fix_openssl11_build.patch

[yocto] [meta-security][PATCH 15/25] tpm-tools: update to latest 1.3.9.1

refresh patch backport debian fixes Fix additional openssl 1.1 issue Signed-off-by: Armin Kuster --- .../tpm-tools/files/04-fix-FTBFS-clang.patch | 56 + .../files/05-openssl1.1_fix_data_mgmt.patch | 110 ++ .../tpm-tools/files/openssl1.1_fix.patch | 18 +++

[yocto] [meta-security][PATCH 17/25] packagegroup-core-security: change scapy to python name

Signed-off-by: Armin Kuster --- recipes-security/packagegroup/packagegroup-core-security.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-security/packagegroup/packagegroup-core-security.bb b/recipes-security/packagegroup/packagegroup-core-security.bb index

[yocto] [meta-security][PATCH 12/25] meta-tpm: bump layer priority

Signed-off-by: Armin Kuster --- meta-tpm/conf/layer.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-tpm/conf/layer.conf b/meta-tpm/conf/layer.conf index 6f57e2e..55bbe98 100644 --- a/meta-tpm/conf/layer.conf +++ b/meta-tpm/conf/layer.conf @@ -6,7 +6,7 @@ BBFILES +=

[yocto] [meta-security][PATCH 13/25] meta-security-compliance: bump layer priority

Signed-off-by: Armin Kuster --- meta-security-compliance/conf/layer.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-security-compliance/conf/layer.conf b/meta-security-compliance/conf/layer.conf index 6068990..c8d5357 100644 ---

[yocto] [meta-security][PATCH 11/25] tpm2-abrmd: update to 2.0.1

Signed-off-by: Armin Kuster --- .../{tpm2-abrmd_1.2.0.bb => tpm2-abrmd_2.0.1.bb} | 8 1 file changed, 4 insertions(+), 4 deletions(-) rename meta-tpm/recipes-tpm/tpm2-abrmd/{tpm2-abrmd_1.2.0.bb => tpm2-abrmd_2.0.1.bb} (87%) diff --git

[yocto] [meta-security][PATCH 10/25] tpm2.0-tools: update to 3.1.2

Signed-off-by: Armin Kuster --- .../{tpm2.0-tools_git.bb => tpm2.0-tools_3.1.2.bb} | 7 ++- 1 file changed, 2 insertions(+), 5 deletions(-) rename meta-tpm/recipes-tpm/tpm2.0-tools/{tpm2.0-tools_git.bb => tpm2.0-tools_3.1.2.bb} (73%) diff --git

[yocto] [meta-security][PATCH 08/25] tpm2.0: update to 2.0.1

Signed-off-by: Armin Kuster --- .../tpm2.0-tss/tpm2.0-tss_1.3.0.bb| 99 --- .../tpm2.0-tss/tpm2.0-tss_2.0.1.bb| 93 + 2 files changed, 93 insertions(+), 99 deletions(-) delete mode 100644 meta-tpm/recipes-tpm/tpm2.0-tss/tpm2.0-tss_1.3.0.bb

[yocto] [meta-security][PATCH 09/25] layer_conf: increase priority

Signed-off-by: Armin Kuster --- conf/layer.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conf/layer.conf b/conf/layer.conf index efc426e..f8bbe57 100644 --- a/conf/layer.conf +++ b/conf/layer.conf @@ -7,7 +7,7 @@ BBFILES += "${LAYERDIR}/recipes-*/*/*.bb \

[yocto] [meta-security][PATCH 07/25] openscap-daemon: update to 1.10

Signed-off-by: Armin Kuster --- .../{openscap-daemon_0.1.6.bb => openscap-daemon_0.1.10.bb} | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) rename meta-security-compliance/recipes-openscap/openscap-daemon/{openscap-daemon_0.1.6.bb => openscap-daemon_0.1.10.bb} (86%) diff --git

[yocto] [meta-security][PATCH 04/25] fscryptctl: update to tip

fix mkfs.ext4 invocation Signed-off-by: Armin Kuster --- recipes-security/fscryptctl/fscryptctl_0.1.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-security/fscryptctl/fscryptctl_0.1.0.bb b/recipes-security/fscryptctl/fscryptctl_0.1.0.bb index 4f0b12c..8847a0f

[yocto] [meta-security][PATCH 06/25] openscap: update 1.2.17

Signed-off-by: Armin Kuster --- .../openscap/{openscap_1.2.15.bb => openscap_1.2.17.bb}| 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) rename meta-security-compliance/recipes-openscap/openscap/{openscap_1.2.15.bb => openscap_1.2.17.bb} (96%) diff --git

[yocto] [meta-security][PATCH 05/25] apparmor: update to 2.12

Signed-off-by: Armin Kuster --- .../AppArmor/{apparmor_2.11.0.bb => apparmor_2.12.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename recipes-security/AppArmor/{apparmor_2.11.0.bb => apparmor_2.12.bb} (97%) diff --git a/recipes-security/AppArmor/apparmor_2.11.0.bb

[yocto] [meta-security][PATCH 02/25] fail2ban: update to 10.3.1

covert to python package standard Signed-off-by: Armin Kuster --- .../{fail2ban_0.10.2.bb => python-fail2ban.inc} | 11 ++- recipes-security/fail2ban/python-fail2ban_0.10.3.1.bb | 2 ++ .../fail2ban/python3-fail2ban_0.10.3.1.bb | 2 ++ 3 files changed, 10

[yocto] [meta-security][PATCH 03/25] scapy: update to 2.4.0 and covert

convert package to python standard Signed-off-by: Armin Kuster --- .../scapy/{scapy => files}/run-ptest | 0 .../scapy/{scapy_2.3.3.bb => python-scapy.inc} | 16 ++-- recipes-security/scapy/python-scapy_2.4.0.bb | 6 ++

[yocto] [meta-security][PATCH 01/25] sssd: update to 1.16.3

Includes: CVE-2018-10852 see: https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_3.html Signed-off-by: Armin Kuster --- recipes-security/sssd/{sssd_1.16.0.bb => sssd_1.16.3.bb} | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) rename recipes-security/sssd/{sssd_1.16.0.bb =>

[yocto] TUNE_PKGARCH vs MACHINE_ARCH

Hello, I’m trying to understand what the “normal” package arch should be when using yocto to build for a specific SoC. In my local.conf file I set my MACHINE value to “xSoc”. Because of that I see RPM files being generated with arch “xSoC” (as well as “aarch64”). I forgot to mention in my