111 Commits

Author SHA1 Message Date
Yue Tao
6938319b32 strongswan: Security Advisory - strongswan - CVE-2014-2338
IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass
authentication by rekeying an IKE_SA during (1) initiation or (2)
re-authentication, which triggers the IKE_SA state to be set to
established.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2338

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-05-09 10:18:40 -04:00
Koen Kooi
b78c07ceb9 netperf: fix S!=B issues
Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-05-03 20:47:03 +02:00
Jack Mitchell
89ccf41a21 bridge-utils: apply brokensep
Signed-off-by: Jack Mitchell <jmitchell@cbnl.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-05-03 20:45:04 +02:00
Jack Mitchell
78477c8cae tcpdump: inherit brokensep
Signed-off-by: Jack Mitchell <jmitchell@cbnl.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-05-03 20:45:04 +02:00
Kai Kang
182c235bd9 ndisc6: allow the package can be empty
FILES_${PN} is set to null in original .bb file, this would cause
ndisc6 main package is missing, then one build error will happen:

ERROR: ndisc6 not found in the base feeds (qemux86 i586 x86 noarch any all).

To fix this, need to set ALLOW_EMPTY_${PN} = "1".

Signed-off-by: Xudong.zhu <xudong.zhu@windriver.com>
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-04-24 21:07:46 -04:00
Wenzong Fan
b96ae8191d ntp: fix hardcode to /usr/bin/perl
This patch properly uses the path variables and fixes ntptrace and
ntp-wait, just in case perl is not installed with the hardcode path.

Signed-off-by: Rahat Mahbub <rahat.mahbub@windriver.com>
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-04-24 21:07:46 -04:00
Christian Ziethén
365125e4da dnsmasq: update to 2.68
Fixes a bug with libvirt and DHCP, which is fixed in 2.66.

"Handle the situation where libc headers define
SO_REUSEPORT, but the kernel in use doesn't, to cope with
the introduction of this option to Linux. Thanks to Rich
Felker for the bug report."

Signed-off-by: Christian Ziethén <Christian.Ziethen@enea.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-04-24 20:39:16 -04:00
Koen Kooi
aed102ddf3 dovecot: add libcap dependency
This fixes:
	dovecot/dovecot/latest lost dependency on  libcap

Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-04-24 20:39:16 -04:00
Javier Viguera
402ac25adb stunnel: fix configure ssl parameter
'--with-ssl=DIR' configure parameter expects the location of the
libraries and include files in the sysroot. This means the directory
containing the 'lib' and 'include' subdirectories, not the include
directory itself.

This fixes an error at configure time:

checking
<local-path>/tmp/sysroots/ccimx6adpt/usr/include/include/openssl/engine.h
usability... no

(notice duplicated include entry in above line)

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-04-24 20:39:15 -04:00
Philip Balister
fdea5d0942 ntp : Add cap to default PACKAGECONFIG options.
If ntp is built without libcap, it refuses to start with the following
message:

Starting ntpd: /usr/sbin/ntpd: The ``user'' option has been disabled -- built
without --enable-clockctl or --enable-linuxcaps
ntpd - NTP daemon program - Ver. 4.2.6p5
USAGE:  ntpd [ -<flag> [<val>] | --<name>[{=| }<val>] ]...

By adding cap to the PACKAGECONFIG the default runs. In the
future, someone could add an option for using clockctl.

Signed-off-by: Philip Balister <philip@balister.org>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-04-24 20:39:15 -04:00
Paul Barker
f3cd626980 ipsec-tools: Update patch status
Signed-off-by: Paul Barker <paul@paulbarker.me.uk>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-04-20 14:51:32 +02:00
Javier Viguera
5be3c13736 stunnel: fix SRC_URI
Trying to build stunnel fails with:

  ERROR 404: Not Found.

Seems that after the new release (5.x) they have moved the old tarball
under a 'archive/4.x' subdirectory.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-04-02 11:18:54 -04:00
Hongxu Jia
a600fe808a netcf: fix gnulib not found in sysroots while using a shared sstate cache
...
./bootstrap: Bootstrapping from checked-out netcf sources...
./bootstrap: consider installing git-merge-changelog from gnulib
./bootstrap: line 641:
tmp/sysroots/qemux86/usr/share/gnulib/gnulib-tool: No such file or
directory
...

The gnulib source was incorrectly populated to ${STAGING_DATADIR}.
While the build shared an existed sstate cache, the gnulib's
${SYSROOT_DESTDIR} was empty, the gnulib source code was not
found in sysroots.

We should use do_install task to install them to ${D}, and the
default do_populate_sysroot task will populate them to
${STAGING_DATADIR}.

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Joe MacDonald <joe.macdonald@windriver.com>
2014-03-27 15:41:13 -04:00
Robert Yang
d9f21ab787 traceroute: filter-out patches dir
The $(subdirs) contains all the dirs under the ${B}, and this one:

do_unpack[cleandirs] = "${S}/patches"

will create a "patches" dir, then there will be compile errors, filter
out the patches will fix the problem.

Note: poky doesn't have this problem since it separates the ${S} and
${B}

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Joe MacDonald <joe.macdonald@windriver.com>
2014-03-27 15:41:13 -04:00
Joe Slater
61d573ad7c traceroute: fix alternate name
traceroute6 for the name is misleading and will interfere
with traceroute6 in iputils making an alternate link to
the traceroute6 binary, so we change the name to traceroute.

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Joe MacDonald <joe.macdonald@windriver.com>
2014-03-27 15:41:13 -04:00
Paul Barker
20ec38b3aa ipsec-tools: Don't link against libfl
We can remove all references to yywrap by adding "%option noyywrap" statements
to each flex source file which doesn't override yywrap. After this, we no longer
need to link against libfl and so no longer get errors about undefined
references to yylex.

Also change the dependency on flex to flex-native as we no longer need libfl
compiled for the target - the lexer is now self-contained.

Signed-off-by: Paul Barker <paul@paulbarker.me.uk>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-03-14 08:51:45 -04:00
Xufeng Zhang
ed0a2852ec ntp: Moving relevant files from /usr/bin to /usr/sbin
"--with-binsubdir" controls whether we use bin_PROGRAMS or
sbin_PROGRAMS while installing executable files in ntp
Makefile, in order to install all the relevant files in
/usr/sbin instead of /usr/bin, we can pass "--with-binsubdir=sbin"
in ntp configure cmdline.
Accordingly, updating the path for the files which are
contained in rpm packages.

Signed-off-by: Xufeng Zhang <xufeng.zhang@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-03-14 08:51:45 -04:00
Xufeng Zhang
7601d0a551 ntp: Running ntpd daemon as ntp:ntp
Adding ntp:ntp(user:group) to system and running
ntpd dameon as ntp:ntp.

Signed-off-by: Xufeng Zhang <xufeng.zhang@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-03-14 08:51:45 -04:00
Jackie Huang
238093bf8c strongswan: update verion to 5.1.1
* Add a patch to fix the function parameter.
* Add PACKAGECONFIG for optional packages instead of explicitly
  disable, and set sqlite and curl as default.
* Remove the split package strongswan-plugins.
* Add configure option --without-lib-prefix so it doesn't
  search for libraries in includedir and libdir to avoid QA error.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-03-14 08:51:45 -04:00
Hongxu Jia
60c4964055 netcf: fix offline rebuilding failed
The netcf downloaded gnulib source to ${S} at the configure time,
while the network disconnected, if sstate cache was cleaned, the
netcf rebuilding failed.

Added a new recipe named 'gnulib' to download gnulib source to
${GITDIR} and populate it to the staging data dir.

So netcf could specify this local directory where gnulib sources
reside to save the bandwidth downloading.

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-03-14 08:51:44 -04:00
Roy Li
42da6554d8 bridge-utils: fix the no brctl error when enable multilib
update-alternatives.bbclass does not create the brctl symbolic links for
multilib, since the wrong use of PN generates
/usr/sbin/brctl.lib32-bridge-utils, not /usr/sbin/brctl.bridge-utils;

In fact, no need to rename brctl by calling mv, since update-alternatives
will handle it

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-03-14 08:21:43 -04:00
Robert Yang
54378cb305 dovecot: fix the DEPENDS on lzma
DEPENDS on lzma should be xz

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-03-11 14:58:51 +01:00
Matthieu CRAPET
c95e155780 recipes: convert remaining SUMMARY/DESCRIPTION cosmetic issues
Changes:
- rename SUMMARY with length > 80 to DESCRIPTION
- rename DESCRIPTION with length < 80 to (non present tag) SUMMARY
- drop final point character at the end of SUMMARY string
- remove trailing whitespace of SUMMARY line

Note: don't bump PR

Signed-off-by: Matthieu Crapet <Matthieu.Crapet@ingenico.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-02-23 23:20:02 +01:00
Ting Liu
3c96399c76 netcf: hardcode --with-driver=redhat for target build
The configure script of netcf checks the HOST setup to identify the
network interface. This means it checks for Red Hat, SuSE, debian,
Ubuntu, etc. As this is an embedded cross build, it doesn't seem to
make sense to check the HOST in the first place to determine info for
the TARGET.

Signed-off-by: Ting Liu <b28495@freescale.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-01-22 12:22:37 +01:00
Ting Liu
cdf5ba8c0f ipsec-tools: fix unrecognised --without-gssapi option
Signed-off-by: Ting Liu <b28495@freescale.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-01-22 12:22:37 +01:00
Stefan Herbrechtsmeier
d096e77a36 ntp: Fix the installed but not shipped issue of a systemd units file
We will get the following ERROR/WARN if we enable systemd and
the installed-vs-shipped check in QA:

ERROR: QA Issue: ntp: Files/directories were installed but not shipped
  /lib/systemd/ntp-units.d
  /lib/systemd/ntp-units.d/60-ntpd.list

Signed-off-by: Stefan Herbrechtsmeier <stefan@herbrechtsmeier.net>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-01-22 12:22:34 +01:00
Koen Kooi
9402e8cc96 dovecot: add 2.2.10
Dovecot is an IMAP server.

Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-01-15 18:02:33 +01:00
Koen Kooi
670e8f6412 fetchmail: add 6.3.26
Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-01-15 18:02:33 +01:00
Roy Li
bee67b5084 nis: inherit pkgconfig
nis needs pkgconfig to check some dependencies, like DBUS

Signed-off-by: Roy Li <rongqing.li@windriver.com>
2014-01-10 15:08:07 +00:00
ulf@emagii.com
a350707870 curlpp add package with c++ curl bindings
Signed-off-by: Ulf Samuelsson <ulf@emagii.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2013-12-21 19:16:52 +01:00
Joe MacDonald
b2c0f57f01 ntpd: update config file comments
The default ntp.conf file does the right thing but one of the comments is
a bit misleading based on the active parts of the file changing a few
times.  Update the comment to accurately describe what is happening in the
configuration file and what a user should do next.

Signed-off-by: Joe MacDonald <joe@deserted.net>
2013-11-29 11:00:34 -05:00
Roy Li
03e758cd67 ntp: comment out the invalid server
When ntpd starts, it will create a daemon to connect this invalid server,
and fail, then ntpd will create other daemon to connect the local-only
(127.127.1.0) server.

The users should be aware that they need to configure the correct ntp
servers, a invalid server will lead to a redundant daemon, so it is better
to comment this example server to wait user to configure

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2013-11-29 10:56:31 -05:00
Joe MacDonald
e09cd61957 tcpdump: correct QA issue (unrecognized configure option)
WARNING: QA Issue: tcpdump: configure was passed unrecognised options: --disable-rpath

Signed-off-by: Joe MacDonald <joe@deserted.net>
2013-11-28 10:59:35 -05:00
Zongchun Yu
0501fa0f0b tcpreplay: add recipe
tcpreplay - a suite of GPLv3 licensed tools for UNIX operating systems
which gives you the ability to use previously captured traffic in libpcap
format to test a variety of network devices.

Signed-off-by: Zongchun Yu <Zongchun.Yu@freescale.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2013-11-28 10:35:00 -05:00
Zongchun Yu
d62fe9254a tcpdump: move from meta-oe to meta-networking
Signed-off-by: Zongchun Yu <Zongchun.Yu@freescale.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2013-11-28 10:35:00 -05:00
Qiang Chen
5f8ef9cfb2 ntpd: make start-stop-daemon command available for ntpd
If ntpd script is being called by a non-root user using sudo,
it will fail as follows:

/etc/init.d/ntpd restart
Stopping ntpd: /etc/init.d/ntpd: line 29: start-stop-daemon:
command not found
done
Starting ntpd: /etc/init.d/ntpd: line 24: start-stop-daemon:
command not found
done

This is because /etc/init.d/ntpd calls start-stop-daemon which
is in /sbin (not in the default path for non-root users)

Explicitly configure the PATH to include /sbin.

Signed-off-by: Qiang Chen <qiang.chen@windriver.com>
Signed-off-by: Jeff Polk <jeff.polk@windriver.com>

Reworked to set PATH instead of hardcode the location of start-stop-daemon

Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2013-11-26 09:28:33 -05:00
Roy Li
ba4f5a82bb ntp: fix 60-ntpd.list path
60-ntpd.list should be installed into the same path as ntp systemd service
file, like Fedora core; Orignal path refers
http://www.freedesktop.org/wiki/Software/systemd/timedated/, but where
systemd_unitdir is assumed as /usr/lib/systemd, not /lib/systemd

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2013-11-26 09:24:28 -05:00
Paul Eggleton
09b6cc4639 lowpan-tools: fix do_install failure
We don't have a proper help2man so building the manpages fails; just
disable building them to fix this as we do elsewhere.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2013-11-25 21:52:42 -05:00
Bruce Ashfield
ffb5434823 dnsmasq: uprev to 2.6.3
A minimum dnsmasq version of 2.5.9 is required deal with IPv6 link local
addresses. So instead of just going to the minimum version, we can go
all the way to 2.6.3.

As part of this update, the following changes have been made in addition to
the pure version update:

  - PR is dropped in favour of PRSERVER functionality
  - dhcp_release is added to the default build, since it is used in the
    cleanup phase for virtual machines.

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2013-11-06 15:12:45 -05:00
Bruce Ashfield
a1b14825aa netcf: move from meta-virtualization to meta-networking
netcf was orginally introduced in meta-virtualization, since it provides
functionality required by libvirt, but it is otherwise not bound to
virtualization.

So we can move it to meta-networking, and in the process uprev to the
the latest 0.2.3 functinality.

Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2013-11-06 15:12:45 -05:00
Martin Jansa
4d62e7f575 recipes: Remove PR = r0 from all recipes
* Remove all PR = "r0" from all .bb files in meta-oe repo. This was done
  with the command sed -e '/^PR.*=.*r0\"/d' meta*/recipes*/*/*.bb -i

* We've switching to the PR server, PR bumps are no longer needed and
  this saves people either accidentally bumping them or forgetting to
  remove the lines (r0 is the default anyway).

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2013-11-01 15:33:16 +01:00
Martin Jansa
13729091f9 cifs-utils: Add PACKAGECONFIG for cifscreds, cifsupcall
* make files in bindir/sbindir a bit more deterministic

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2013-11-01 10:21:11 -04:00
Chen Qi
fe0c58ddd2 bridge-utils: inherit update-alternatives to avoid duplicate code
Inherit update-alternatives to avoid duplicate code.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2013-10-31 13:00:48 -04:00
Chen Qi
edd499dfdb ndisc6: chmod in do_install and remove unnecessary pkg_postinst
We can use chmod to set the SUID bit for applications in the do_install
task. If we do so, the pkg_postinsts are no longer needed.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2013-10-31 13:00:48 -04:00
Roy Li
f855787fb3 lowpan-tools: configure python files installation path
configure python files installation path or else it will use the
default value /usr/lib/python*, which is wrong on 64bit and multilibs
enabled system

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2013-10-29 10:39:07 -04:00
Roy Li
71b4f7524a macchanger: fix PN -> BPN in FILES_${PN} for multilibs
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2013-10-25 10:24:30 -04:00
Robert Yang
2e4b24dad5 cifs-utils: add --ignore-fail-on-non-empty for rmdir
Add --ignore-fail-on-non-empty for rmdir in case there are files in the
directories.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2013-10-24 14:05:35 -04:00
Ting Liu
d79d4b3403 netperf: set _FILE_OFFSET_BITS to 64 to support large files
Without this patch, netperf2.6 can only
support files smaller than 2GB with TCP_SENDFILE item.

Signed-off-by: Ting Liu <b28495@freescale.com>
Tested-by: Jianhua Xie<jianhua.xie@freescale.com>
Reviewed-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2013-10-09 09:57:21 -04:00
Paul Eggleton
7e0bdfc5ec lowpan-tools: add git version
The 0.3 release was a year ago and git HEAD contains fixes to make it
work with contiki, so build from git instead of backporting all of the
patches.

Based on a patch by Koen Kooi <koen@dominion.thruhere.net>

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2013-09-24 09:04:55 -04:00
Martin Jansa
4e396e43d1 libmemcached: Add PACKAGECONFIG for sasl
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2013-09-17 19:17:38 +02:00