Commit Graph
518 Commits
Author SHA1 Message Date
Changqing Li 07a8af9a1b freeradius: update radiusd.service
Update radiusd.service that not run script /etc/raddb/certs/bootstrap
before start radiusd. The script makes a set of default certificates. It
should be only used for test purpose.

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-02-27 18:26:55 -08:00
Khem Raj b1ccca4bac snort: Strip out DEBUG_PREFIX_MAP options and --sysroot
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-02-17 12:21:27 -08:00
Marc Ferland f3682953ed networkmanager: fix QA issue when using modemmanager and ppp in PACKAGECONFIG
Got the following error when I activated both ppp and modemmanager
options:

ERROR: networkmanager-1.14.4-r0 do_package: QA Issue: networkmanager: Files/directories were installed but not shipped in any package:
  /usr/lib/pppd/2.4.5/nm-pppd-plugin.so
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.

Signed-off-by: Marc Ferland <ferlandm@amotus.ca>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-02-01 12:08:21 -08:00
Khem Raj 5ca9c88503 dibbler: Fix build with clang/libc++
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-02-01 06:57:14 -08:00
Adrian Bunk db13bed51c wireless-regdb: update 2018.05.31 -> 2018.10.24
Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-30 17:17:54 -08:00
Krzysztof Kozlowski f394ef48f7 civetweb: Bump to v1.11
Drop upstream accepted patch.

Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-26 11:00:07 -08:00
Stefan Agner e6836ceaef networkmanager: introduce polkit package config
Currently polkit is enabled if systemd is in package config. Those
two things are orthogonal: NetworkManager can be used with systemd
and without polkit just fine.

Introduce a new polkit package config and enable it depending on
whether polkit is in DISTRO_FEATURES.

Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-20 10:15:44 -08:00
Stefano Cappa 612128b46d dhcpcd: upgrade to dhcpcd 7.0.8
Signed-off-by: Stefano Cappa <stefano.cappa.ks89@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-13 10:33:16 -08:00
André Draszik 24af1f974c meta-networking: remove True option to getVar calls (again)
A couple have still been missed in the past despite multiple
attempts at doing so (or simply have re-appeared?).

Search & replace made using the following command:
    sed -e 's|\(d\.getVar \?\)( \?\([^,()]*\), \?True)|\1(\2)|g' \
        -i $(git grep -E 'getVar ?\( ?([^,()]*), ?True\)' \
             | cut -d':' -f1 \
             | sort -u)

Signed-off-by: André Draszik <andre.draszik@jci.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-13 10:28:01 -08:00
Khem Raj 55f2541bf6 miniupnpd: Fix cross compile on OE
genconfig script can be specified OS specs
if its not then it pokes at the build system
via uname, we add code for OE support to ensure
we pass DISTRO_VERSION as OS_VERSION

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-12-23 13:29:20 -08:00
Andrea Adami b758150d30 samba: fix build on qemumips64 with musl
There is the same issue as for libldb, the header has conflicting defs
for unitptr_t. Fix it as done for the other recipe.

Fix
 /cmocka/cmocka.h:126:28: error: conflicting types for 'uintptr_t'
    typedef unsigned int uintptr_t;
                             ^~~~~~~~~

Signed-off-by: Andrea Adami <andrea.adami@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-12-12 11:56:49 -08:00
Chris Conlon 5f9bcfcd3b wolfssl: Update version to 3.15.5
This patch updates wolfSSL to the current 3.15.5 version. It removes a previous
patch for generating cyassl/options.h, as wolfSSL proper now does that as part
of the Autoconf configure step. It also removes the ipv6 PACKAGECONFIG usage.
wolfSSL is IP neutral and the --enable-ipv6 configure option only affects
the wolfSSL example client/server. As these examples are not compiled as part
of this recipe, the PACKAGECONFIG is unnecessary.

Signed-off-by: Chris Conlon <chris@wolfssl.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-12-06 17:06:39 -08:00
André Draszik 83c38fc544 mosquitto: fully switch over to using PACKAGECONFIG_CONFARGS
Convert all other instances of explicit PACKAGECONFIG uses
to the PACKAGECONFIG_CONFARGS infrastructure.

Signed-off-by: André Draszik <andre.draszik@jci.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-12-05 10:18:59 -08:00
André Draszik e39709e381 mosquitto: fix build in systemd environments
The mosquitto systemd service file instructs systemd to wait
for mosquitto to notify systemd that mosquitto has started
correctly. This isn't working as mosquitto is not *compiled*
with systemd support enabled. As such, systemd restarts
mosquitto every few seconds.

For reference, this was introduced in commit a483d344d9
("mosquitto: Make enabling systemd also enable build dep on systemd")

Because we build mosquitto using the provided Makefile
infrastructure, the solution is to add PACKAGECONFIG_CONFARGS
to EXTRA_OEMAKE, so that the required make flags are added
to the make command line.

Signed-off-by: André Draszik <andre.draszik@jci.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-12-05 10:18:59 -08:00
Andreas Müller 331b717b86 networkmanager: move udev-rules from /usr/lib -> /lib
Seems udev-rules in /usr/lib are ignored: systemd-analayse reported >3min!
for system startup time!

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-12-02 11:05:02 -08:00
Khem Raj 4e8143007a miniupnpd: Update to 2.1.20180706
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-29 18:55:52 -08:00
Paul Eggleton b26618c971 mosquitto: update to 1.5.4
1.5.2, 1.5.3 and 1.5.4 include a number of fixes, notably for
vulnerability CVE-2018-12543 which allowed the server process to be
remotely crashed. For further information see:

  https://mosquitto.org/blog/2018/11/version-154-released/
  https://mosquitto.org/blog/2018/09/security-advisory-cve-2018-12543/
  https://mosquitto.org/blog/2018/09/version-152-released/

A build option was added to use the system version of uthash rather than
the bundled version so we no longer need the patch to do this.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-26 09:38:14 -08:00
Mark Asselstine 952d746611 networkmanager: package additional .la files
This fixes:
     ERROR: networkmanager-1.14.4-r0 do_package: QA Issue: networkmanager: Files/directories were installed but not shipped in any package:
       /usr/lib64/NetworkManager/1.14.4/libnm-settings-plugin-ifupdown.la
       /usr/lib64/NetworkManager/1.14.4/libnm-device-plugin-adsl.la
       /usr/lib64/NetworkManager/1.14.4/libnm-device-plugin-wifi.la
       /usr/lib64/NetworkManager/1.14.4/libnm-device-plugin-ovs.la
     Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
     networkmanager: 4 installed and not shipped files. [installed-vs-shipped]

As with similar changes in the past, if the distro makes use of
'remove-libtool' this issue is not seen but we should add .la files to
the -dev package when they do exist.

Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-13 12:13:26 -08:00
Khem Raj 8a88083150 networkmanager: Fix build with musl
Remove redundant header includes

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Andreas Müller <schnitzeltony@gmail.com>
2018-11-07 12:05:31 -08:00
Andreas Müller 4be3dce466 networkmanager: upgrade 1.10.10 -> 1.14.4
* License checksum: copyright year changed
* packageconfig glib: with this version (udev-)glib support hase to be enabled
  explicitly. Split this out to meta-gnome where network-manager-applet lives.
* packageconfig netconfig: This was nonsense: netconfig is a SUSE tool [1]
  which is not found in layer index. The error was detected now because
  configuration checks for presence of netconfig.
* --disable-ifnet and --disable-ifcfg-suse are gone
* musl patches were aligned but have no resources to test them

[1] https://github.com/openSUSE/sysconfig

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-02 10:05:06 -07:00
Pascal Bach b5dd6804f6 civetweb: disable tests
Tests try to download third party code and bypass the bitbake fetcher to
do that. This will not work in environments with no internet access.

Signed-off-by: Pascal Bach <pascal.bach@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-02 10:05:06 -07:00
Pascal Bach a21e2ae87d civetweb: remove redundant EXTRA_OECMAKE_class-native
They are the same as the default version.

Signed-off-by: Pascal Bach <pascal.bach@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-02 10:05:06 -07:00
Changqing Li 5cf604e136 vlan: update SRC_URI
tar on previous link checksum changed, so changed SRC_URI to
get previous tar

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-01 10:04:54 -07:00
Johannes Pointner bce1210d2e mbedtls: upgrade to 2.13.0
Signed-off-by: Johannes Pointner <johannes.pointner@br-automation.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-25 13:51:52 -07:00
Mingli Yu a9bef8df07 snort: Update SRC_URI
Update SRC_URI for snort as the previous
one is invalid.

Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-23 13:23:47 -07:00
Armin Kuster 0dfc9ab6f0 blueman: really belongs in meta-networking
it has a build dependancy on python-cython and python-pyparsing with are in
meta-python

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-12 13:08:17 -07:00
Changqing Li 9f47fcd337 freeradius: fix radiusd.service startup failed problem
during radiusd start up, it will check several CVEs of libssl,
if allow_vulnerable_openssl set to no and one of the CVEs is
matched, radiusd will not startup.

in tls.c, two CVEs's version number is wrong, and after upgrade openssl
to 1.1.1, one CVE matched, so startup failed. correct the version numner
to make radiusd startup successfully.

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-10 20:48:18 -07:00
Alex Kiernan c1b4548322 crda: Fix usrmerge install path
Set UDEV_RULE_DIR so we follow usrmerge paths, fixing:

  ERROR: QA Issue: crda package is not obeying usrmerge distro feature. /lib should be relocated to /usr. [usrmerge]

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-09 19:08:25 -07:00
Hongxu Jia 9254a77848 umip: fix recipe location typo
Since `36983fe umip: move to meta-networking' applied,
it was moved to invalid location.

Fix prior partial move to meta-networking

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-07 21:45:20 -07:00
Armin Kuster 36983fea5e umip: move to meta-networking
ERROR: Nothing PROVIDES 'radvd' (but /home/akuster/oss/maint/meta-openembedded/meta-oe/recipes-connectivity/umip/umip_1.0.bb DEPENDS on or otherwise requires it)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-01 10:16:15 -07:00
Jeroen Hofstee 4ac262cc8b mosquitto: make websockets a PACKAGECONFIG option
Signed-off-by: Jeroen Hofstee <jhofstee@victronenergy.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-26 07:35:44 -07:00
Hongxu Jia 238c1e3bee crda: use gcrypt as default crypt
As Makefile told us, if `USE_OPENSSL=1', only openssl10 works,
even though the recipe depends libgcrypt.
[Makefile snip]
|ifeq ($(USE_OPENSSL),1)
|CFLAGS += -DUSE_OPENSSL
[snip]
|else
|CFLAGS += -DUSE_GCRYPT
[Makefile snip]

The crda dpends openssl 1.0.x which there is a build failure with
openssl 1.1.x. So use gcrypt instead of openssl by default.

The idea refers:
https://bugs.chromium.org/p/chromium/issues/detail?id=735782
https://gitweb.gentoo.org/repo/gentoo.git/tree/net-wireless/crda/crda-3.18-r1.ebuild#n36

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-25 22:24:15 -07:00
Khem Raj 6e56df6868 kea: Fix build with boost 1.68+
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-09 10:46:29 -07:00
Khem Raj a483d344d9 mosquitto: Make enabling systemd also enable build dep on systemd
systemd support in mqtt needs system developement headers and libs installed in recipe sysroot

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-08 13:32:12 -07:00
Khem Raj f42e527c92 crda: Depend on openssl10
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-08 13:32:12 -07:00
Randy MacLeod f83a6cfe66 lftp: update from 4.8.3 to 4.8.4
Drop upstreamed CVE fix:
   a27e07d9 mirror: prepend ./ to rm and chmod arguments to avoid URL recognition (fix #452)

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-05 13:59:16 -07:00
Paul Eggleton 9c0243b691 mosquitto: upgrade to 1.5.1
This includes one security fix and numerous other bugfixes. MQTT version
3.1.1 is now the default protocol.

See the following for details:

https://mosquitto.org/blog/2018/08/version-151-released/
https://mosquitto.org/blog/2018/05/version-1-5-released/

Changes to the recipe:
* Drop explicit installation of the libmosquitto.a static library
  because this no longer gets built by default, and the normal
  "make install" which we are running will install it anyway if it were
  to be enabled.
* Drop our service file since there is one supplied in the source tree
* Enable systemd notify support when systemd is being used
* Update comments in the init script

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-04 11:55:21 -07:00
Yevgeny Popovych 3c6eceb941 crda: Fix 64bit builds by inheriting siteinfo class
Variables provided by siteinfo are already in use,
but the siteinfo class is not inherited for some reason.

Signed-off-by: Yevgeny Popovych <yevgenyp@pointgrab.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-30 09:20:07 -07:00
Khem Raj b3f3251273 civetweb: Fix build with clang
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-29 18:18:14 -07:00
Radek Dostal bae481e933 wireless-regdb: make wireless-regdb architecture independent
There is no compilation involved in wireless-regdb and package should
produce  the same results on all architectures => making it allarch saves
build time.

Additionally this fixes issue: "On machines where ${libdir} equals to
/usr/lib64/ regulatory.bin is not found by crda". Reason was that
crda-3.18/crda.c looks only in following paths:
  "/usr/local/lib/crda/regulatory.bin", /* Users/preloads can override */
  "/usr/lib/crda/regulatory.bin", /* General distribution package usage */
  "/lib/crda/regulatory.bin", /* alternative for distributions */

Signed-off-by: Radek Dostál <radek.dostal@streamunlimited.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-28 09:36:28 -07:00
Jagadeesh Krishnanjanappa 29158f7bde lftp: CVE-2018-10916
Affects lftp <= 4.8.3

Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-24 08:58:13 -07:00
Johannes Pointner 77966d0f3a mbedtls: upgrade to 2.12.0
Signed-off-by: Johannes Pointner <johannes.pointner@br-automation.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-24 08:58:13 -07:00
Yi Zhao c856f05705 samba: upgrade 4.8.3 -> 4.8.4
Security fixes:

CVE-2018-1139 (Weak authentication protocol allowed.)
CVE-2018-1140 (Denial of Service Attack on DNS and LDAP server.)
CVE-2018-10858 (Insufficient input validation on client directory listing in libsmbclient.)
CVE-2018-10918 (Denial of Service Attack on AD DC DRSUAPI server.)
CVE-2018-10919 (Confidential attribute disclosure from the AD LDAP server.)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-21 17:28:18 -07:00
Khem Raj 7e0fa293b7 recipes: Exclude non-buildable recipes from world for musl build
These recipes need to be fixed for musl, until they are needed
on musl lets remove them from world builds

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-20 23:58:58 -07:00
Martin Jansa 422ccc1548 daq: add dependency on bison-native
* fixes:
checking for flex 2.4 or higher... yes
checking for bison... no
configure: WARNING: don't have both flex and bison; reverting to lex/yacc
checking for capable lex... insufficient
configure: error: Your operating system's lex is insufficient to compile
         libsfbpf. You should install both bison and flex.
         flex is a lex replacement that has many advantages,
         including being able to compile libsfbpf.  For more
         information, see http://www.gnu.org/software/flex/flex.html .

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-08-19 17:10:27 -04:00
Martin Jansa ac4ad1c40f snort: add dependency on bison-native
* fixes:
   ERROR!  bison not found.
   Get it from http://www.gnu.org/software/bison/
   (You may also try byacc or yacc instead.)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-08-19 17:10:01 -04:00
Martin Jansa 408204073e inetutils: fix build with glibc-2.28
* fixes:
  ../../inetutils-1.9.4/src/uucpd.c:236: error: undefined reference to 'crypt'
  ../../inetutils-1.9.4/src/rexecd.c:378: error: undefined reference to 'crypt'

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-08-16 21:41:15 -04:00
Mingli Yu 12f45d8b00 kea: fix do_package warning
Add libdhcp_stat_cmds.a and libdhcp_ha.a to
FILES_${PN}-staticdev to fix below warning:

WARNING: kea-1.4.0-r0 do_package: QA Issue: kea: Files/directories were installed but not shipped in any package:
  /usr/lib64/hooks/libdhcp_stat_cmds.a
  /usr/lib64/hooks/libdhcp_ha.a

Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-08-13 14:29:11 -04:00
Khem Raj a001e46529 samba: Update to 4.8.3
LDB 1.4.0 breaks Samba < 4.9 therefore use internal version

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-30 01:34:10 -07:00
Changqing Li d4610b9d97 freeradius: upgrade 3.0.15 -> 3.0.17
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-27 07:19:11 -07:00