[yocto] [sumo] [PATCH v1] systemd: fix musl compilation

2019-03-29 Thread Sinan Kaya
musl compilation has been broken since systemd: fix CVE-2018-6954. Fixing this by placing #ifdef for glob definition. Signed-off-by: Sinan Kaya --- .../systemd/0036-Fix-musl-compilation.patch | 27 +++ meta/recipes-core/systemd/systemd_237.bb | 1 + 2 files changed, 28

Re: [yocto] [meta-security][PATCH 4/5] sssd: update to 1.16.4

2019-03-29 Thread akuster
On 3/29/19 12:10 AM, Adrian Bunk wrote: > On Thu, Mar 28, 2019 at 10:28:20PM -0700, Armin Kuster wrote: >> Add systemd pkgconf via DISTRO_FEATURE >> >> Fix uid/gid of sssd.conf >> >> Signed-off-by: Armin Kuster >> ... >> -RDEPENDS_${PN} = "bind dbus samba libldb" >> +RDEPENDS_${PN} = "bind

Re: [yocto] Image introspection

2019-03-29 Thread Scott Rifenbark
Hi Dimitris, Any kind of procedures, flows, information developed that you think are useful but not in the current YP documentation can be considered to be added somewhere (manuals, wiki, etc.). Is your "small tutorial" fully captured here in your email? Or, do you have a separate document? Any

Re: [yocto] [meta-security][PATCH 3/5] sssd: fix a few runtime issues

2019-03-29 Thread akuster
On 3/28/19 11:51 PM, Adrian Bunk wrote: > On Thu, Mar 28, 2019 at 10:28:19PM -0700, Armin Kuster wrote: >> include a few more RDEPEND packages. remove init script as there really >> isn't one yet. >> >> Signed-off-by: Armin Kuster >> --- >> recipes-security/sssd/sssd_1.16.3.bb | 14

Re: [yocto] [meta-security][PATCH 2/5] libldb: work around samba libldb packaging issues

2019-03-29 Thread akuster
On 3/28/19 11:50 PM, Adrian Bunk wrote: > On Thu, Mar 28, 2019 at 10:28:18PM -0700, Armin Kuster wrote: >> Samba and libldb overlap in a few places. This is the simplest fix for >> now. > Adding a quick hack for interaction problems between two packages > that are both in meta-openembedded by

[yocto] [meta-security][v2][PATCH] suricata: add runtime testing

2019-03-29 Thread Armin Kuster
Today there are no failures so set the trigger to zero. [v2] fix match string and conditional Signed-off-by: Armin Kuster --- lib/oeqa/runtime/cases/suricata.py | 27 +++ 1 file changed, 27 insertions(+) create mode 100644 lib/oeqa/runtime/cases/suricata.py diff --git

[yocto] [meta-security][v2][PATCH 2/2] samhain: add basic runtime test

2019-03-29 Thread Armin Kuster
Signed-off-by: Armin Kuster --- lib/oeqa/runtime/cases/samhain.py | 20 1 file changed, 20 insertions(+) create mode 100644 lib/oeqa/runtime/cases/samhain.py diff --git a/lib/oeqa/runtime/cases/samhain.py b/lib/oeqa/runtime/cases/samhain.py new file mode 100644 index

[yocto] [meta-security][v2][PATCH 1/2] samhain: fix runtime error

2019-03-29 Thread Armin Kuster
fix: samhain[1652]: FATAL: x_dnmalloc.c: 2790: hashval < AMOUNTHASH Killed disable dnmalloc Signed-off-by: Armin Kuster --- recipes-security/samhain/samhain.inc | 1 + 1 file changed, 1 insertion(+) diff --git a/recipes-security/samhain/samhain.inc b/recipes-security/samhain/samhain.inc

[yocto] [meta-security][PATCH] tripwire: add runtime test

2019-03-29 Thread Armin Kuster
Signed-off-by: Armin Kuster --- lib/oeqa/runtime/cases/tripwire.py | 47 ++ 1 file changed, 47 insertions(+) create mode 100644 lib/oeqa/runtime/cases/tripwire.py diff --git a/lib/oeqa/runtime/cases/tripwire.py b/lib/oeqa/runtime/cases/tripwire.py new file mode

[yocto] [meta-security][v2][PATCH 1/2] sssd: fix a few runtime issues

2019-03-29 Thread Armin Kuster
include a few more RDEPEND packages. remove init script as there really isn't one yet. [v2] Squish build tweeking done in pkg update into this changeset Signed-off-by: Armin Kuster --- recipes-security/sssd/sssd_1.16.3.bb | 19 +-- 1 file changed, 17 insertions(+), 2

[yocto] [meta-security][v2][PATCH 2/2] sssd: update to 1.16.4

2019-03-29 Thread Armin Kuster
Add systemd pkgconf via DISTRO_FEATURE Fix uid/gid of sssd.conf [v2] drop non update related changes also, this includes CVE-2019-3811 Signed-off-by: Armin Kuster --- recipes-security/sssd/{sssd_1.16.3.bb => sssd_1.16.4.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename

[yocto] [meta-security][PATCH] suricata: add runtime testing

2019-03-29 Thread Armin Kuster
Today there are no failures so set the trigger to zero. Signed-off-by: Armin Kuster --- lib/oeqa/runtime/cases/suricata.py | 27 +++ 1 file changed, 27 insertions(+) create mode 100644 lib/oeqa/runtime/cases/suricata.py diff --git a/lib/oeqa/runtime/cases/suricata.py

Re: [yocto] Image introspection

2019-03-29 Thread Philip Balister
On 03/29/2019 05:50 AM, Dimitris Tassopoulos wrote: > Hi Alexander, > > in this case the 3g is added by default from the poky distro in > the DISTRO_FEATURES_DEFAULT var in: > *meta/conf/distro/include/default-distrovars.inc* > > And because the poky distro is the base distro for the image >

Re: [yocto] pkg-config does not find "luajit" since upgrade to sumo

2019-03-29 Thread Clemens Eisserer
Hi Burton, Indeed, the luajit package contained the luajit.pc file as expected. The issue was the _$PN appended to DEPENDS, when I removed it the build succeeded: changing DEPENDS_${PN} = "luajit" to DEPENDS = "luajit" did the trick. However, I am still puzzled what happens here and why it

Re: [yocto] [meta-security][PATCH 2/5] libldb: work around samba libldb packaging issues

2019-03-29 Thread Adrian Bunk
On Fri, Mar 29, 2019 at 08:50:14AM +0200, Adrian Bunk wrote: > On Thu, Mar 28, 2019 at 10:28:18PM -0700, Armin Kuster wrote: > > Samba and libldb overlap in a few places. This is the simplest fix for > > now. > > Adding a quick hack for interaction problems between two packages > that are both in

Re: [yocto] pkg-config does not find "luajit" since upgrade to sumo

2019-03-29 Thread Burton, Ross
On Fri, 29 Mar 2019 at 12:49, Clemens Eisserer wrote: > The issue was the _$PN appended to DEPENDS, when I removed it the build > succeeded: > changing DEPENDS_${PN} = "luajit" to DEPENDS = "luajit" did the trick. Right, DEPENDS_${PN} isn't a variable that is used. You'll most likely have got

Re: [yocto] [meta-security][PATCH 2/5] libldb: work around samba libldb packaging issues

2019-03-29 Thread Adrian Bunk
On Thu, Mar 28, 2019 at 10:28:18PM -0700, Armin Kuster wrote: > Samba and libldb overlap in a few places. This is the simplest fix for > now. Adding a quick hack for interaction problems between two packages that are both in meta-openembedded by adding a .bbappend in meta-security creates a

Re: [yocto] [meta-security][PATCH 3/5] sssd: fix a few runtime issues

2019-03-29 Thread Adrian Bunk
On Thu, Mar 28, 2019 at 10:28:19PM -0700, Armin Kuster wrote: > include a few more RDEPEND packages. remove init script as there really > isn't one yet. > > Signed-off-by: Armin Kuster > --- > recipes-security/sssd/sssd_1.16.3.bb | 14 -- > 1 file changed, 12 insertions(+), 2

Re: [yocto] [meta-security][PATCH 4/5] sssd: update to 1.16.4

2019-03-29 Thread Adrian Bunk
On Thu, Mar 28, 2019 at 10:28:20PM -0700, Armin Kuster wrote: > Add systemd pkgconf via DISTRO_FEATURE > > Fix uid/gid of sssd.conf > > Signed-off-by: Armin Kuster >... > -RDEPENDS_${PN} = "bind dbus samba libldb" > +RDEPENDS_${PN} = "bind dbus samba libldb libpam" Why is this required? And

Re: [yocto] Image introspection

2019-03-29 Thread Mikko.Rapeli
On Fri, Mar 29, 2019 at 09:50:20AM +0100, Dimitris Tassopoulos wrote: > Hi all, > > I was thinking that the mail list shouldn't be only for problems and > questions and that from time to time, it would be nice to see some guides, > tutorials or success stories from people that follow the list. >

Re: [yocto] Image introspection

2019-03-29 Thread Alexander Kanavin
You can do that using bitbake -e and looking for how DISTRO_FEATURES is formed in the output of the command. Alex On Fri, 29 Mar 2019 at 10:37, Alexander Kanavin wrote: > > On Fri, 29 Mar 2019 at 09:51, Dimitris Tassopoulos wrote: > > > To do that, add this to your build/conf/local.conf file

Re: [yocto] Image introspection

2019-03-29 Thread Alexander Kanavin
DISTRO_FEATURES_DEFAULT is set using ?= : DISTRO_FEATURES_DEFAULT ?= "acl alsa argp bluetooth ext2 ipv4 ipv6 irda largefile pcmcia usbgadget usbhost wifi xattr nfs zeroconf pci 3g nfc x11" So you can override it by setting it using =, which is also a chance to trim other unnecessary features.

Re: [yocto] Image introspection

2019-03-29 Thread Dimitris Tassopoulos
Hi Mikko, thanks for pointing out the buildhistory. I need to have a look at it also as I haven't used it yet. Also, it's very nice to see it documented so well. Thanks! On Fri, Mar 29, 2019 at 9:59 AM wrote: > On Fri, Mar 29, 2019 at 09:50:20AM +0100, Dimitris Tassopoulos wrote: > > Hi all, >

Re: [yocto] Image introspection

2019-03-29 Thread Dimitris Tassopoulos
Hi Alexander, in this case the 3g is added by default from the poky distro in the DISTRO_FEATURES_DEFAULT var in: *meta/conf/distro/include/default-distrovars.inc* And because the poky distro is the base distro for the image this is inherited. Therefore it needs to be removed with the

Re: [yocto] pkg-config does not find "luajit" since upgrade to sumo

2019-03-29 Thread Burton, Ross
All I can say is stop digging around random paths and actually ask the system the questions you need answers to. - Does my recipe depend on luajit. Check that you have DEPENDS=luajit. - What files does luajit ship. $ oe-pkgdata-util list-pkg-files -p luajit Does that include a

[yocto] Image introspection

2019-03-29 Thread Dimitris Tassopoulos
Hi all, I was thinking that the mail list shouldn't be only for problems and questions and that from time to time, it would be nice to see some guides, tutorials or success stories from people that follow the list. Anyway, a few days ago someone had an issue with one of the BSPs I'm maintaining

[yocto] [PATCH] Documentation: unify the spacing for questions in various places e.g. before the [Y/n] there should be a space, and before "?" there should be none. Unify the questions where the syste

2019-03-29 Thread Gianfranco Costamagna
Signed-off-by: Gianfranco Costamagna Signed-off-by: Gianfranco Costamagna --- documentation/kernel-dev/kernel-dev-common.xml| 2 +- documentation/sdk-manual/sdk-extensible.xml | 2 +- documentation/sdk-manual/sdk-using.xml| 2 +-

Re: [yocto] Image introspection

2019-03-29 Thread Alexander Kanavin
On Fri, 29 Mar 2019 at 09:51, Dimitris Tassopoulos wrote: > To do that, add this to your build/conf/local.conf file > >> DISTRO_FEATURES_remove = " 3g" This works around the issue after the fact. It's better to track down where 3g is added in the first place, and adjust that. Alex --

Re: [yocto] qemu segmentation fault on gobject-introspection

2019-03-29 Thread Trevor Woerner
On Wed 2019-02-20 @ 11:50:45 PM, João Gonçalves wrote: > Hello, > when trying to migrate my build to master branch of oe layers I got this > qemu segmentation fault during gobject-introspection. > Does anyone have any clue on this? > > Thank you, > João Gonçalves > > | qemu: uncaught target

[yocto] Proper way to edit bootimg - image

2019-03-29 Thread Teemu K
Hi, I have created image for x86 -based hw with Yocto 2.5. Image is using bootimg-pcbios that is then mounted to /boot when image is running. I now need to modify that bootimg that is mounted in /boot. I think it's created by scripts/lib/wic/plugins/source/bootimg-pcbios.py - script. What would