[yocto] [meta-security][PATCH] samhain: remove the path for start-stop-daemon

From: Mingli Yu Remove the absolute path for start-stop-daemon to fix samhain start-up as start-stop-daemon sometimes located in /usr/sbin, not the expected /sbin. Signed-off-by: Mingli Yu --- recipes-security/samhain/files/samhain-client.init

[yocto] [meta-openstack][PATCH] python-requests: remove PREFERRED_VERSION limit

From: Mingli Yu * Previously, add PREFERRED_VERSION for python-requests as we want to use version >=2.10.0 and the full commit message as below: commit 185eccef8964632f5b255265a0a8e59fe5858397 Author: Mark Asselstine Date: Fri

[yocto] [meta-cgl-common][PATCH 2/3] pacemaker: rework 0002-pacemaker-search-header-from-STAGING_INCDIR-to-walka.patch

From: Mingli Yu * Rework the patch as the logic is wrong previously as the STAGING_INCDIR is actually applicable in cross compiling env. Update the patch to locate the right OCF_ROOT_DIR in cross compiling env. * Add "rm -rf ${D}${localstatedir}/lib/heartbeat"

[yocto] [meta-cgl-common][PATCH 3/3] pacemaker: set OCF_ROOT_DIR to $libdir/ocf

From: Mingli Yu * Set the default OCF_ROOT_DIR to $libdir/ocf to make the resource agents components more compatible Signed-off-by: Mingli Yu --- .../pacemaker/set-OCF_ROOT_DIR-to-libdir-ocf.patch | 30 ++

[yocto] [meta-cgl-common][PATCH 1/3] pacemaker: add pacemaker-cli-utils to RDEPENDS

From: Mingli Yu * Add pacemaker-cli-utils to RDEPENDS as many cluster resource agents manager commands such as crm_mon are packed into pacemaker-cli-utils. Signed-off-by: Mingli Yu ---

[yocto] [meta-cgl-common][PATCH 0/3] pacemaker: some fix

1, Add pacemaker-cli-utils to RDEPENDS as many cluster resource agents manager commands such as crm_mon are packed into pacemaker-cli-utils. 2, Rework the patch as the logic is wrong previously as the STAGING_INCDIR is actually applicable in cross compiling env. Update the patch to

[yocto] [meta-selinux][PATCH] mcstrans: define SBINDIR to ${D}/${base_sbindir}

From: Mingli Yu Add SBINDIR=${D}/${base_sbindir} to EXTRA_OEMAKE to fix below error when usrmerge enabled in DISTRO_FEATURES. ERROR: QA Issue: mcstrans-dbg package is not obeying usrmerge distro feature. /sbin should be relocated to /usr. [usrmerge] Signed-off-by: Mingli Yu ---

[yocto] [meta-cgl][PATCH] ocfs2-tools: Fix build with glibc 2.28

From: Mingli Yu Backport two patches to fix below compile failures: 1, In file included from o2cb_abi.c:52: ../include/ocfs2/ocfs2.h:222:2: error: unknown type name 'loff_t' loff_t d_off; /* Offset of structure in the file */ ^~ 2,

[yocto] [meta-cgl][PATCH] ocfs2-tools: fix usrmerge install path

From: Mingli Yu Set prefix to fix below issue when usrmerge enabled in DISTRO_FEATURES | WARNING: ocfs2-tools-1.8.5-r0 do_package: QA Issue: ocfs2-tools: Files/directories were installed but not shipped in any package: /sbin/mount.ocfs2 /sbin/o2cb /sbin/o2cluster /sbin/mkfs.ocfs2

[yocto] [meta-selinux][PATCH] libselinux: fix usrmerge do_install

From: Mingli Yu When usrmerge enabled in DISTRO_FEATURES, the binary actually installed under ${base_sbindir}, so cannot remove ${D}${base_sbindir} when usrmerge enabled. Signed-off-by: Mingli Yu --- recipes-security/selinux/libselinux.inc | 4 +++- 1 file changed, 3 insertions(+), 1

[yocto] [meta-security][PATCH] ecryptfs-utils: fix usrmerge install path

From: Mingli Yu Update rootsbindir from /sbin to ${base_sbindir} to fix below do_install error when usrmerge enabled in DISTRO_FEATURES | chmod: cannot access '/poky-build/tmp-glibc/work/core2-64-wrs-linux/ecryptfs-utils/111-r0/image/usr/sbin/mount.ecryptfs_private': No such file or directory

[yocto] [meta-selinux][PATCH] policycoreutils: fix usrmerge install path

From: Mingli Yu Set SBINDIR to ${base_sbindir} to fix below issue when usrmerge enabled in DISTRO_FEATURES | ERROR: QA Issue: policycoreutils-dbg package is not obeying usrmerge distro feature. /sbin should be relocated to /usr. [usrmerge] | WARNING: policycoreutils-2.7-r0 do_package: QA

[yocto] [meta-security][PATCH] samhain: hash fix for aarch64 and mips64

From: Mingli Yu samhain fails on both aarch64 and mips64 targets with: | samhain[3013]: FATAL: x_dnmalloc.c: 2790: hashval < AMOUNTHASH Though there is already a patch samhain-mips64-aarch64-dnmalloc-hash-fix.patch to fix this issue, the logic is incomplete and pass -DCONFIG_ARCH_MIPS64=1 and

[yocto] [meta-selinux][PATCH 2/2] audit: use git fetcher instead of the tarball source

From: Mingli Yu Per http://people.redhat.com/sgrubb/audit/, the tarball source moves to https://github.com/linux-audit/audit-userspace, and since commit [21f84fc insane: add sanity checks to SRC_URI] applied in oe-core, do not use unstable github archive tarballs, so use git instead.

[yocto] [meta-selinux][PATCH v2 1/2] audit: upgrade 2.8.4 -> 2.8.5

From: Yi Zhao * Drop backport patch: 0001-Remove-strdupa-as-suggested-in-pull-request-25.patch * Refresh all patches. Signed-off-by: Yi Zhao --- ...e-strdupa-as-suggested-in-pull-request-25.patch | 47 -- ...bstitue-functions-for-strndupa-rawmemchr.patch} | 23

[yocto] [meta-cgl][PATCH] cluster-glue: use git fetcher instead of the tarball source

From: Mingli Yu Per http://hg.linux-ha.org/, the repo moves to https://github.com/ClusterLabs/cluster-glue and since commit [21f84fc insane: add sanity checks to SRC_URI] applied in oe-core, do not use unstable github archive tarballs, so use git instead. Signed-off-by: Mingli Yu ---

[yocto] [PATCH 2/2] nss-pam-ldapd: add required distro feature check for pam

From: Mingli Yu As nss-pam-ldapd depends on libpam, it should do required distro feature check for pam. Signed-off-by: Mingli Yu --- recipes-support/nss-pam-ldapd/nss-pam-ldapd_0.9.8.bb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git

[yocto] [PATCH 1/2] meta-cloud-services: add layer depends on networking-layer

From: Mingli Yu Since spice of meta-cloud-services depends on cyrus-sasl which comes from networking-layer, add missing layer depends back. Signed-off-by: Mingli Yu --- conf/layer.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conf/layer.conf b/conf/layer.conf index

[yocto] [meta-cloud-services][PATCH 1/2] meta-cloud-services: add layer depends on networking-layer

From: Mingli Yu Since spice of meta-cloud-services depends on cyrus-sasl which comes from networking-layer, add missing layer depends back. Signed-off-by: Mingli Yu --- conf/layer.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conf/layer.conf b/conf/layer.conf index

[yocto] [meta-cloud-services][PATCH 2/2] nss-pam-ldapd: add required distro feature check for pam

From: Mingli Yu As nss-pam-ldapd depends on libpam, it should do required distro feature check for pam. Signed-off-by: Mingli Yu --- recipes-support/nss-pam-ldapd/nss-pam-ldapd_0.9.8.bb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git

[yocto] [meta-cloud-services][PATCH] python-dateutil: Remove the bbappend

From: Mingli Yu The current bbappend only has below logic: CLEANBROKEN = "1" For python-dateutil, the distutils class is about to do a clean via "setup.py clean" as below logic in distutils class without CLEANBROKE = "1": distutils_do_configure() { if [ "${CLEANBROKEN}" != "1" ] ; then