Commit Graph

382 Commits

Author SHA1 Message Date
Yi Zhao
0469a69392 samba: upgrade 4.10.6 -> 4.10.7
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-29 09:06:54 -07:00
Adrian Bunk
6b41e0ad6f networkmanager: Upgrade 1.18.0 -> 1.18.2
Remove a generated file with always changing hash from LIC_FILES_CHKSUM.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-21 12:41:20 -07:00
Adrian Bunk
db9ca7d7c3 networkmanager: musl now supports secure_getenv
It is no longer necessary to introduce a potential security
vulnerability for fixing the musl build.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-18 21:47:18 -07:00
Martin Jansa
b386c97414 freeradius: add runtime dependency on perl
* fixes:
  ERROR: QA Issue: /usr/bin/radcrypt contained in package freeradius-utils requires /usr/bin/perl, but no providers found in RDEPENDS_freeradius-utils? [file-rdeps]

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-17 01:42:54 -07:00
Laszlo Toth
870571196e networkmanager: fix typo in nonarch_base_libdir
Signed-off-by: Laszlo Toth <laszlth@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-11 14:36:22 -07:00
Yi Zhao
493aa5b896 snort: upgrade 2.9.14 -> 2.9.14.1
Add volatile conf to create log directory.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-11 08:58:05 -07:00
Oleksandr Kravchuk
7202dc2675 dhcpcd: update to 8.0.2
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-05 00:38:49 -07:00
Oleksandr Kravchuk
5064a83dc0 wolfssl: update to 4.1.0
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-30 19:15:24 -07:00
Khem Raj
d31ac50253 snort: Fix build with glibc 2.30
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-30 19:15:24 -07:00
Oleksandr Kravchuk
2bdd4a5995 dhcpcd: update to 8.0.1
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-28 17:11:17 -07:00
Yi Zhao
5032f0df2e snort: upgrade 2.9.13 -> 2.9.14
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-23 09:37:22 -07:00
Oleksandr Kravchuk
74ca25227b blueman: update to 2.1.1
Removed patch was upstreamed.

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-22 09:31:46 -07:00
Khem Raj
07db1c40ee firewalld: Update to 0.6.3->0.6.4
Forward port patch to work with 0.6.4 and update the status

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-21 09:40:20 -07:00
Drew Moseley
3982dc5b19 networkmanager: Use ALTERNATIVES for resolv-conf handling.
This brings the networkmanager in sync with how systemd-resolved and connman
work. Additionally this allows it to function with a read-only rootFS.

Signed-off-by: Drew Moseley <drew.moseley@northern.tech>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-21 09:31:09 -07:00
Yi Zhao
76d12b8f00 samba: upgrade 4.10.5 -> 4.10.6
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-21 09:31:09 -07:00
Oleksandr Kravchuk
f0ed6c4e4f dhcpcd: update to 7.2.3
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-18 11:21:57 -07:00
Radovan Scasny
23be1ab16d dhcpcd: fix building with pkgconfig
PKGCONFIG was used, but not inherited

Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Radovan Scasny <radovan.scasny@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-12 11:14:37 -07:00
Zang Ruochen
826898d878 adcli: added new recipe.
-radiusclient-ng is too old. So, added a substitute.

-Has fixed the build on musl.

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-11 23:18:54 -07:00
Radovan Scasny
26361a6794 dhcpcd: enable udev by default
Signed-off-by: Radovan Scasny <radovan.scasny@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-10 09:34:20 -07:00
Oleksandr Kravchuk
b7d4d1a2ec miniupnpd: update to 2.1.20190210
License checksum changed due to modified copyright years.

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-10 09:24:33 -07:00
Changqing Li
0c9e727a28 samba: upgrade 4.8.12 -> 4.10.5
1. switch to python3, from 4.10.x, samba support both python2 and python3,
   and from 4.11.x, python2 will be dropped.
2. fix cross-compile problem caused by waf
3. disable lmdb
4. refresh patch

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-10 09:24:32 -07:00
Oleksandr Kravchuk
9bd0009b34 sethdlc: set PV in filename
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-10 09:24:32 -07:00
Adrian Bunk
5341caddb7 networkmanager: Drop bluez4 support
bluez4 was removed from meta-oe 2 years ago.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-10 09:24:32 -07:00
Adrian Bunk
f51548eff6 blueman: Enable thunar support by default but don't rdepend on it
This matches upstream default.
The no longer required bbappend in meta-xfce is also removed.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-10 09:24:32 -07:00
Yi Zhao
8cab57e4aa snort: fix compile-host-path QA issue
The Fedora 28+ does not have inbuilt SunRPC support in glibc and is
separately availble in tirpc package. So it enables tirpc checking for
fedora in configure.

Drop this piece of code since we had specify '-ltirpc' in LDFLAGS
explicitly. Otherwise it will cause a compile-host-path QA issue if the
host is Fedora 28+:
cc1: warning: include location "/usr/include/tirpc" is unsafe for
cross-compilation [-Wpoison-system-directories]

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-10 09:24:32 -07:00
Oleksandr Kravchuk
db4b115ef3 dhcpcd: update to 7.2.2
udev is now enabled by default and is always requested.

License checksum changed due to modified copyright year.

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-25 14:22:33 -07:00
Oleksandr Kravchuk
5fc4c10a19 mbedtls: update to 2.16.2
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-25 14:21:48 -07:00
Adrian Bunk
170f30b3d8 wireless-regdb: Remove, was moved to oe-core
kernel_wireless_regdb.bbclass stays here since it is only
required for kernels <= 4.14.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-19 19:59:15 -07:00
Yi Zhao
3e03fe9984 snort: upgrade 2.9.11.1 -> 2.9.13
* Add PACKAGECONFIG[appid] for application identification support.

* Set the variables 'have_daq_packet_trace' and
  'have_daq_verdict_reason' to 'no' since they are only supported in daq
  2.2.2 but not in 2.0.6.

* Cleanup snort.init script and fix the incorrect argument of mkdir

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-19 06:06:47 -07:00
Oleksandr Kravchuk
23cb89eaf8 openconnect: update to 8.03
Signed-off-by: Oleksandr Kravchuk <oleksandr.kravchuk@pelagicore.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-18 15:58:29 -07:00
Mingli Yu
57929333d9 kea: replace -Og with -O
With below logic in local.conf:
MACHINE ??= "qemumips64"
MULTILIB_GLOBAL_VARIANTS_append = " libn32"
MULTILIBS ?= "multilib:lib32 multilib:libn32"
DEFAULTTUNE_virtclass-multilib-lib32 ?= "mips"
DEFAULTTUNE_virtclass-multilib-libn32 ?= "mips64-n32"
require conf/multilib.conf
DEBUG_BUILD = "1"
 $ bitbake lib32-kea
[snip]
{standard input}: Assembler messages:
{standard input}:305030: Error: branch out of range
{standard input}:305041: Error: branch out of range
{standard input}:305432: Error: branch out of range
{standard input}:305443: Error: branch out of range
Makefile:707: recipe for target 'dhcp4_parser.lo' failed
make[6]: *** [dhcp4_parser.lo] Error 1
[snip]

When DEBUG_BUILD enabled, -Og pass to compiler,
replace -Og with -O to fix the above compile error.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-15 16:45:33 -07:00
Adrian Bunk
b4e9a646ce wireless-regdb: Upgrade 2019.03.01 -> 2019.06.03
This includes deletion of a frequency where transmission
is no longer legal in Japan.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-15 16:45:33 -07:00
Adrian Bunk
6050d95be2 samba: Upgrade 4.8.11 -> 4.8.12
The only change is the fix for CVE-2018-16860.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-15 16:45:32 -07:00
Changqing Li
8e641e28f6 samba/libldb: add rconflicts
samba have bundled libldb, so when both samba and libldb, or both pyldb \
and samba-python is installed, below error will appear:

file /usr/bin/ldbadd conflicts between attempted installs of samba-4.8.11-r0.i586 and libldb-1.4.1-r0.i586
file /usr/bin/ldbdel conflicts between attempted installs of samba-4.8.11-r0.i586 and libldb-1.4.1-r0.i586
...
file /usr/lib/python2.7/site-packages/ldb.so conflicts between attempted installs of libpyldb-util1-1.4.1-r0.i586 and samba-python-4.8.11-r0.i586

so add rconflicts for both packages

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-29 02:21:42 -07:00
Andrei Gherzan
061953143d networkmanager: Update to 1.18.0
One patch was dropped (0003-dlopen-failure.patch) as a similar one was
merged upstream. See:
bd4957fcd7

Refreshed musl patches as well.

Signed-off-by: Andrei Gherzan <andrei@gherzan.ro>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-29 02:21:42 -07:00
Mingli Yu
5c20a95fc5 kea: Upgrade to 1.5.0
* License-Update: below text added
  The ext/coroutine code is externally maintained and distributed under
  the Boost Software License, Version 1.0.  (See its accompanying file
  LICENSE_1_0.txt.)

* There is a new added logic in 1.5.0 to use AC_TRY_RUN
  to detect usable C++11 regex in below commit:
  39ab2f5d15 [5680] Added sanitizeString() function to libutil

  Use AC_COMPILE_IFELSE instead to fix below
  do_configure error:
  | checking for usuable C++11 regex... configure: error: in '/builddir/upgrade1/tmp/work/core2-64-poky-linux/kea/1.5.0-r0/build':
  | configure: error: cannot run test program while cross compiling

* Remove 0001-Fix-error-call-of-overloaded-distance-is-ambiguous.patch
  as the logic is already included in 1.5.0.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-24 10:12:12 -07:00
Adrian Bunk
bb4aa80bfb Remove ipsec-tools and umip
ipsec-tools is dead upstream and upstream recommends
against using it:
http://ipsec-tools.sourceforge.net/

More detailed explanation from the Debian maintainer:
https://bugs.debian.org/917847

umip was the only package depending on ipsec-tools.
umip is dormant upstream since 2013.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-23 08:26:14 -07:00
Martin Jansa
590663da5d umip: make MACHINE_ARCH
* Depends on ipsec-tools which is already MACHINE_ARCH (and also RRECOMMENDS kernel modules)
* Fixes:
  ERROR: umip different signature for task do_configure.sigdata between hammerhead and mako
  Hash for dependent task umip/umip_1.0.bb.do_prepare_recipe_sysroot changed from 7c74a208880f6c8a5aa46b1c8577e39b6b71429d9a379ea75f17a155ca270035 to 87c6cd438dd9645c98530e3ac1094005bace785bfd89bfe4073bc8815926abba
  Unable to find matching sigdata for /OE/build/luneos-master/webos-ports/meta-openembedded/meta-networking/recipes-connectivity/umip/umip_1.0.bb.do_prepare_recipe_sysroot with hashes 7c74a208880f6c8a5aa46b1c8577e39b6b71429d9a379ea75f17a155ca270035 or 87c6cd438dd9645c98530e3ac1094005bace785bfd89bfe4073bc8815926abba

  bitbake-diffsigs /OE/build/luneos-master/webos-ports/tmp-glibc/sstate-diff/1557963509/[hm]*/*/umip/*do_prepare*.sigdata*
  Hash for dependent task ipsec-tools/ipsec-tools_0.8.2.bb.do_populate_sysroot changed from 1100c4984d88050bb7ca154445205bac3c3ab80c3ff0aa7c9124825c9d4f6e14 to feeddbd35a8106b264c98076e21d0b3cb227ab1d209e150926112b2906273ef4
  Unable to find matching sigdata for /OE/build/luneos-master/webos-ports/meta-openembedded/meta-networking/recipes-support/ipsec-tools/ipsec-tools_0.8.2.bb.do_populate_sysroot with hashes 1100c4984d88050bb7ca154445205bac3c3ab80c3ff0aa7c9124825c9d4f6e14 or feeddbd35a8106b264c98076e21d0b3cb227ab1d209e150926112b2906273ef4

  as detected with:
  openembedded-core/scripts/sstate-diff-machines.sh --targets=world --tmpdir=tmp-glibc/ --analyze --machines="hammerhead mako qemux86"

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-18 12:42:47 -07:00
Nicolas Dechesne
1ecd8b4364 cannelloni: move from meta-oe to meta-networking
It has a dependency on lksctp-tools which is available in
meta-networking. Move the recipe to avoid dependency from meta-oe onto
meta-networking.

Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org>
Acked-by: Sean Nyekjaer <sean@geanix.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-13 20:25:49 -07:00
Johannes Pointner
11e7ffc442 samba: update to 4.8.11
* This includes security fixes that adresses the following defects:
CVE-2018-14629 (Unprivileged adding of CNAME record causing loop in AD
Internal DNS server)
CVE-2018-16841 (Double-free in Samba AD DC KDC with PKINIT)
CVE-2018-16851 (NULL pointer de-reference in Samba AD DC LDAP server)
CVE-2018-16853 (Samba AD DC S4U2Self crash in experimental MIT Kerberos
configuration (unsupported))
CVE-2019-3880 (Save registry file outside share as unprivileged user)

* Upstreamed patch removed:
0001-ldb-Refuse-to-build-Samba-against-a-newer-minor-vers.patch

* Extended PACKAGECONFIG ad-dc to be able to build MIT Kerberos
see https://bugzilla.samba.org/show_bug.cgi?id=13678

Signed-off-by: Johannes Pointner <johannes.pointner@br-automation.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-09 20:34:33 -07:00
Martin Jansa
2fc270597a miniupnpd: fix SRC_URI for multilib
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-02 14:13:57 -07:00
Wenlin Kang
8f97bb5394 samba: add PACKAGECONFIG for libunwind
Add libunwind switch, this makes it have a chance to compile
codes which are conditioned by "HAVE_LIBUNWIND_H"

Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com>
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-30 12:18:30 -07:00
Oleksandr Kravchuk
51e8a7c409 networkmanager-openvpn: update to 1.8.10
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-29 10:13:56 -07:00
Andreas Müller
6a3e1fa0de samba: rework localstatedir package split
Now that we can install smbclient without samba package e.g for gvfs there are
complains:

| gvsd: mkdir failed on directory /var/lib/samba: Permission denied

and browsing Windows network does not work anymore

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-27 10:13:07 -07:00
Andreas Müller
f066c44859 samba: install bundled libs into seperate packages
Otherwise bundled libraries find their way into samba
-> that causes several packages to rdepend on samba package
-> samba package rdepends on samba-base (and others) installing daemons
   smbd & nmbd autostarted by default. This is unwanted / not necessary:
   * NetBIOS (nmbd) can cause a security problems
   * slow boot: times reported by systemd-analyse reduced from ~16s -> ~8s

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-27 10:13:07 -07:00
Andreas Müller
fc144a1428 networkmanager: rework musl build
patches:
* Split out systemd specifics
* Simplfy patch to fix musl / linux-libc definition conflicts. This makes
  future maintenance less pain and fixes build for recipes depending on
  networkmanager.
  For further background read patch description in 0002-Fix-build-with-musl.patch

musl CFLAGS:
* -D__USE_POSIX199309 removed - could not find any trace of it
* CFLAGS_libc-musl_append -> CFLAGS_append_libc-musl

gobject-introspection:
* enable - it builds perfectly fine

Build tested (musl/glibc) with all dependents found in my layers:
* network-manager-applet
* networkmanager-openvpn
* python-networkmanager
* networkmanager-qt
* plasma-nm
* liri-networkmanager

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-11 11:30:35 -07:00
Oleksandr Kravchuk
4cf971e9a4 wolfssl: update to 4.0.0
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-09 21:31:36 -07:00
Oleksandr Kravchuk
0884fd8a01 nanomsg: update to 1.1.5
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-09 18:09:00 -07:00
Khem Raj
82b8ae6bd2 networkmanager: Fix build with clang
Detecting libdl for dlopen when failed returns
"none required", which then gets added to linker commandline
and inturn fails to link with errors obviously because "-lnone required"
is no such library.

This patch is not musl dependent, earlier patches clubbed it into musl
patch however this is needed with clang too regardless of the C library
the reason is clang automatically brings in libdl in OE and hence this
test is failing.

This is noop with gcc since the first check will pass thats why it works
in first place

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Andreas Müller <schnitzeltony@gmail.com>
2019-04-06 16:59:58 -07:00
Randy MacLeod
e57fe0b07e wolfssl: update to 3.15.8 and use github SRC_URI
The previous SRC_URI did not work for the new version and
when looking at the site, users are required to navigate
through a click-through license agreement. Also use git
repo rather than the .zip archive since the github checksum
can change from time to time.

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-06 08:22:48 -07:00