AUH itself already has an option to include the link into
its email reports; the option just needs to be enabled.
[YOCTO #15103]
Signed-off-by: Alexander Kanavin
---
config.json| 2 +-
scripts/auh-config/upgrade-helper.conf | 2 +-
scripts/run-auh
Martin,
Thanks for the pointer, I manged to get the recipe working with your help.
For anyone else looking at this the issue was resolved with this (
https://github.com/linux4sam/meta-atmel/pull/247/commits/353dcfe62bbc4b6a10eb5926b7c87cc2f4774a1b
).
Hope it helps someone else!
Owen
Can someone with knowledge of pseudo and fakeroot please shed some light on
this issue? Is there a reason that system calls are not being intercepted
correctly by pseudo/fakeroot to look up appropriate UIDs and GIDs to apply
to the migrated files? Is this due to Python shutil.chown?
On Mon, Jun
This is the first series of patches intended to help get patchtest up
and running again. Specifically, these make core-image-patchtest
build and run again (although one of the initscripts still shuts the
image down shortly after boot, so testing it may seem confusing).
In the longer-term,
Signed-off-by: Trevor Gamblin
---
.../recipes-core/initscripts/initscripts_1.0.bbappend | 8
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/meta-patchtest/recipes-core/initscripts/initscripts_1.0.bbappend
Signed-off-by: Trevor Gamblin
---
meta-patchtest/recipes-core/initscripts/initscripts/patchtest | 1 +
1 file changed, 1 insertion(+)
diff --git a/meta-patchtest/recipes-core/initscripts/initscripts/patchtest
b/meta-patchtest/recipes-core/initscripts/initscripts/patchtest
index
Signed-off-by: Trevor Gamblin
---
meta-patchtest/recipes-kernel/linux/linux-yocto_4.%.bbappend | 2 --
meta-patchtest/recipes-kernel/linux/linux-yocto_6.%.bbappend | 2 ++
2 files changed, 2 insertions(+), 2 deletions(-)
delete mode 100644
Signed-off-by: Trevor Gamblin
---
.../recipes-devtools/qemu/qemu-system-native_%.bbappend | 1 +
1 file changed, 1 insertion(+)
create mode 100644
meta-patchtest/recipes-devtools/qemu/qemu-system-native_%.bbappend
diff --git
Signed-off-by: Trevor Gamblin
---
README | 1 +
1 file changed, 1 insertion(+)
diff --git a/README b/README
index 8e0ae71..b978855 100644
--- a/README
+++ b/README
@@ -44,6 +44,7 @@ Maintenance
Maintainers:
Paul Barker
+Trevor Gamblin
Links
-
--
2.40.0
Signed-off-by: Trevor Gamblin
---
meta-patchtest/recipes-devtools/qemu/qemu_%.bbappend | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta-patchtest/recipes-devtools/qemu/qemu_%.bbappend
b/meta-patchtest/recipes-devtools/qemu/qemu_%.bbappend
index 3ad9f03..4e5918b 100644
Signed-off-by: Trevor Gamblin
---
meta-patchtest/recipes-devtools/python/python3-pylint_1.6.5.bb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta-patchtest/recipes-devtools/python/python3-pylint_1.6.5.bb
b/meta-patchtest/recipes-devtools/python/python3-pylint_1.6.5.bb
Don't build man as it needs pandoc
Signed-off-by: Armin Kuster
---
.../{fscryptctl_1.0.0.bb => fscryptctl_1.1.0.bb} | 7 ++-
1 file changed, 6 insertions(+), 1 deletion(-)
rename recipes-security/fscryptctl/{fscryptctl_1.0.0.bb =>
fscryptctl_1.1.0.bb} (84%)
diff --git
Hi all!
We are happy to have an in-person Dev Day again, colocated with the EOSS in
Prague. It will take place on Monday June 26th, and it... (wait for it)...
needs YOU!
Specifically, it needs your ideas, your experience, your stories. Shared
them! The CFP is open now, use those cold and rainy
This series of patches fixes the current support for IMA and EVM
by removing outdated patches for example and adding kernel config
options. I have tried out these patches with OpenBMC where the
appraisal policy now enforces signed executables and libraries.
Stefan
Stefan Berger (8):
ima:
For shorted file signatures use EC keys rather than RSA keys.
Document the debug keys and their purpose.
Adapt the scripts for creating these types of keys to now
create EC keys.
Signed-off-by: Stefan Berger
---
meta-integrity/data/debug-keys/README.md | 17
The IMA policy will be specified using the IMA_EVM_POLICY variable since
systemd will not be involved in loading the policy but the init script will
load it.
Signed-off-by: Stefan Berger
---
meta-integrity/README.md | 2 +-
meta-integrity/classes/ima-evm-rootfs.bbclass | 4
Signed-off-by: Stefan Berger
---
meta-integrity/classes/ima-evm-rootfs.bbclass | 25 +++
1 file changed, 20 insertions(+), 5 deletions(-)
diff --git a/meta-integrity/classes/ima-evm-rootfs.bbclass
b/meta-integrity/classes/ima-evm-rootfs.bbclass
index 6902d69..98c4bc1 100644
---
Add a temporary patch that resolves a file change notification issue
with overlayfs where IMA did not become aware of the file changes
since the 'lower' inode's i_version had not changed. The issue will be
resolved in later kernels with the following patch that builds on
newly addd feature
Signed-off-by: Stefan Berger
---
...ation-using-ioctl-when-evm_portable-.patch | 35 +++
...-evm-utils_1.4.bb => ima-evm-utils_1.5.bb} | 9 +++--
2 files changed, 42 insertions(+), 2 deletions(-)
create mode 100644
Fix the ima_policy_appraise_all policy to appraise all executables
and libraries. Also update the list of files that are not appraised to not
appraise cgroup related files.
Signed-off-by: Stefan Berger
---
.../files/ima_policy_appraise_all| 9 -
1 file changed, 8
Fix the IMA kernel feature. Remove outdated patches and add ima.cfg holding
kernel configuration options for IMA and EVM.
Signed-off-by: Stefan Berger
---
meta-integrity/classes/ima-evm-rootfs.bbclass | 5 +-
.../0001-ima-fix-ima_inode_post_setattr.patch | 51 ---
On 4/28/23 08:48, Mikko Rapeli wrote:
Hi,
On Fri, Apr 28, 2023 at 08:23:15AM -0400, Stefan Berger wrote:
Add a temporary patch that resolves a file change notification issue
with overlayfs where IMA did not become aware of the file changes
since the 'lower' inode's i_version had not changed.
Hi All,
QA for yocto-4.2.rc3 is completed. This is the full report for this release:
https://git.yoctoproject.org/cgit/cgit.cgi/yocto-testresults-contrib/tree/?h=intel-yocto-testresults
=== Summary
No high milestone defects.
No new issue found.
Thanks,
Jing Hui
>
Additional maintainer entries should be added to ones provided by oe-core,
but not be replacing them, as that breaks oe-core tests.
Another option is to place them directly into recipes.
Signed-off-by: Alexander Kanavin
---
.../include/{maintainers.inc => maintainers-meta-security.inc}| 0
Signed-off-by: Armin Kuster
---
recipes-ids/ossec/ossec-hids_3.7.0.bb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/recipes-ids/ossec/ossec-hids_3.7.0.bb
b/recipes-ids/ossec/ossec-hids_3.7.0.bb
index c211f03..55c10fa 100644
--- a/recipes-ids/ossec/ossec-hids_3.7.0.bb
+++
Signed-off-by: Armin Kuster
---
recipes-ids/suricata/{libhtp_0.5.42.bb => libhtp_0.5.43.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename recipes-ids/suricata/{libhtp_0.5.42.bb => libhtp_0.5.43.bb} (91%)
diff --git a/recipes-ids/suricata/libhtp_0.5.42.bb
Signed-off-by: Armin Kuster
---
recipes-ids/suricata/{suricata_6.0.10.bb => suricata_6.0.11.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename recipes-ids/suricata/{suricata_6.0.10.bb => suricata_6.0.11.bb} (98%)
diff --git a/recipes-ids/suricata/suricata_6.0.10.bb
> I added the directory common/m4
Did you clone common git repo or just created empty directory?
Most gstreamer recipes were fetching common submodule during do_configure
which doesn't work with new kirkstone which prevents network access from
tasks which shouldn't access it, so you need to add
Hi,
On Fri, Apr 28, 2023 at 08:23:15AM -0400, Stefan Berger wrote:
> Add a temporary patch that resolves a file change notification issue
> with overlayfs where IMA did not become aware of the file changes
> since the 'lower' inode's i_version had not changed. The issue will be
> resolved in
Hello all,
I'm moving my build from Dunfell to Kirkstone & an issue with
gstreamer1.0-plugins-hantro (
https://github.com/linux4sam/meta-atmel/tree/kirkstone/recipes-multimedia/gstreamer1.0-plugins
) has cropped up. This recipe inherits autotools-brokensep.
During the build I initially got:
Hi Bruce,
Please help to merge these patches into our linux-yocto repo.
repo:
linux-yocto
branch:
v5.15/standard/preempt-rt/cn-sdkv5.4/octeon
Thanks,
Ruiqiang
The following changes since commit 27ce0c445507e848b9ed5de6a0d6b02d2510e12c:
Merge branch
Hi Bruce,
Please help to merge these patches into our linux-yocto repo.
repo:
linux-yocto
branch:
v5.15/standard/cn-sdkv5.4/octeon
Thanks,
Ruiqiang
The following changes since commit 2d0d753026e95a7a3984d58fa600f8383dd2fbc8:
Merge branch 'v5.15/standard/base'
Hi Bruce,
Sorry, my branch name in the above email is incorrect, please merge into
follow branch.
repo:
linux-yocto
branch:
v5.15/standard/preempt-rt/cn-sdkv5.15/octeon
Thanks,
Ruiqiang
From: linux-yocto@lists.yoctoproject.org
on
Hi Bruce,
Sorry, my branch name in the above email is incorrect, please merge into
follow branch.
repo:
linux-yocto
branch:
v5.15/standard/cn-sdkv5.15/octeon
Thanks,
Ruiqiang
From: linux-yocto@lists.yoctoproject.org
on behalf of
I am trying to copy a script to /etc/init.d/S90start_inv and create a soft link
to /etc/rc5.d/S90start. The aim is to start few services at the startup my
custom board. But I am facing the following error: *
Error:*
startup-1.0-r0 do_package_qa: QA Issue: /etc/init.d/S90start_inv contained in
From: Quanyang Wang
Drop the obsolete options and add CONFIG_USB_ULPI_BUS because it is
required by dwc3 usb driver.
Signed-off-by: Quanyang Wang
---
Hi Bruce,
Would you please help merge this patch to the branch:
yocto-6.1
Thanks,
Quanyang
---
bsp/xilinx-zynqmp/xilinx-zynqmp.cfg | 5
[Edited Message Follows]
I am trying to copy a script to /etc/init.d/S90start_inv and create a soft link
to it at /etc/rc5.d/S90start. The aim is to start few services in the startup.
But I am facing the following error: *
Error:*
startup-1.0-r0 do_package_qa: QA Issue:
[Edited Message Follows]
I am trying to copy a script to /etc/init.d/S90start_inv and create a soft link
to it at /etc/rc5.d/S90start. The aim is to start few services in the startup.
But I am facing the following error: *
Error:*
startup-1.0-r0 do_package_qa: QA Issue:
When reading link status, the request size is 13, but this real return
size from ls1028 dp firmware is 10, they don't match with each other.
So, getting training status operation is failed, and cause the whole
display driver initializes failed. This issue is introduced by commit
When running suspend/resume test on nxp ls1028 platform, there is below
warning trace
Call trace:
mdio_bus_phy_resume+0xa8/0x128
dpm_run_callback+0x4c/0x184
device_resume+0x9c/0x1f0
dpm_resume+0x114/0x340
dpm_resume_end+0x24/0x3c
suspend_devices_and_enter+0x1e0/0x810
pm_suspend+0x288/0x330
When running qbv test of TSN feature in RT kernel, there is below call trace
BUG: sleeping function called from invalid context at
include/linux/sched/mm.h:229
in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 502, name: tsntool
preempt_count: 0, expected: 0
RCU nest depth: 1, expected: 0
When testing FMI feature with below command
tsntool qcifmiget --device eth0 --index 2
There is a memory leak occurring as below
unreferenced object 0x0047e200 (size 128):
comm "tsntool", pid 444, jiffies 4294931230 (age 17.688s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00
When testing FMI feature with below command
tsntool qcisfiget --device eth0 --index 2
There is a memory leak occurring as below
unreferenced object 0x00402000 (size 128):
comm "tsntool", pid 445, jiffies 4294959297 (age 25.588s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00
From: Limeng
Hi Bruce,
The 5 patches are used to fix issues for NXP ls1028 BSP
So, could you please help merge these patches into linux-ycoto kernel, both
below 2 branchs?
v6.1/standard/nxp-sdk-6.1/nxp-soc
v6.1/standard/preempt-rt/nxp-sdk-6.1/nxp-soc
diffstat info as below:
From: Limeng
Hi Bruce,
Recently, I am working on nxp ls1028 SoC BSP, and want to add scc and cfg files
for this BSP in kernel-cache.
Could you please help to merge this patch into yocto-kernel-cache, branch is
only yocto-6.1?
diffstat info as below:
nxp-ls1028-preempt-rt.scc |8 +
Refer to scc and cfg files on branch yocto-5.15, add new scc and cfg
files for BSP nxp-ls1028 on branch yocto-6.1.
Signed-off-by: Meng Li
---
bsp/nxp-ls1028/nxp-ls1028-preempt-rt.scc | 8 +
bsp/nxp-ls1028/nxp-ls1028-standard.scc | 9 +
bsp/nxp-ls1028/nxp-ls1028.cfg| 250
46 matches
Mail list logo