Commit Graph
294 Commits
Author SHA1 Message Date
Mingli Yu a9bef8df07 snort: Update SRC_URI
Update SRC_URI for snort as the previous
one is invalid.

Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-23 13:23:47 -07:00
Armin Kuster 0dfc9ab6f0 blueman: really belongs in meta-networking
it has a build dependancy on python-cython and python-pyparsing with are in
meta-python

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-12 13:08:17 -07:00
Changqing Li 9f47fcd337 freeradius: fix radiusd.service startup failed problem
during radiusd start up, it will check several CVEs of libssl,
if allow_vulnerable_openssl set to no and one of the CVEs is
matched, radiusd will not startup.

in tls.c, two CVEs's version number is wrong, and after upgrade openssl
to 1.1.1, one CVE matched, so startup failed. correct the version numner
to make radiusd startup successfully.

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-10 20:48:18 -07:00
Alex Kiernan c1b4548322 crda: Fix usrmerge install path
Set UDEV_RULE_DIR so we follow usrmerge paths, fixing:

  ERROR: QA Issue: crda package is not obeying usrmerge distro feature. /lib should be relocated to /usr. [usrmerge]

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-09 19:08:25 -07:00
Hongxu Jia 9254a77848 umip: fix recipe location typo
Since `36983fe umip: move to meta-networking' applied,
it was moved to invalid location.

Fix prior partial move to meta-networking

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-07 21:45:20 -07:00
Armin Kuster 36983fea5e umip: move to meta-networking
ERROR: Nothing PROVIDES 'radvd' (but /home/akuster/oss/maint/meta-openembedded/meta-oe/recipes-connectivity/umip/umip_1.0.bb DEPENDS on or otherwise requires it)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-01 10:16:15 -07:00
Jeroen Hofstee 4ac262cc8b mosquitto: make websockets a PACKAGECONFIG option
Signed-off-by: Jeroen Hofstee <jhofstee@victronenergy.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-26 07:35:44 -07:00
Hongxu Jia 238c1e3bee crda: use gcrypt as default crypt
As Makefile told us, if `USE_OPENSSL=1', only openssl10 works,
even though the recipe depends libgcrypt.
[Makefile snip]
|ifeq ($(USE_OPENSSL),1)
|CFLAGS += -DUSE_OPENSSL
[snip]
|else
|CFLAGS += -DUSE_GCRYPT
[Makefile snip]

The crda dpends openssl 1.0.x which there is a build failure with
openssl 1.1.x. So use gcrypt instead of openssl by default.

The idea refers:
https://bugs.chromium.org/p/chromium/issues/detail?id=735782
https://gitweb.gentoo.org/repo/gentoo.git/tree/net-wireless/crda/crda-3.18-r1.ebuild#n36

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-25 22:24:15 -07:00
Khem Raj 6e56df6868 kea: Fix build with boost 1.68+
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-09 10:46:29 -07:00
Khem Raj a483d344d9 mosquitto: Make enabling systemd also enable build dep on systemd
systemd support in mqtt needs system developement headers and libs installed in recipe sysroot

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-08 13:32:12 -07:00
Khem Raj f42e527c92 crda: Depend on openssl10
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-08 13:32:12 -07:00
Randy MacLeod f83a6cfe66 lftp: update from 4.8.3 to 4.8.4
Drop upstreamed CVE fix:
   a27e07d9 mirror: prepend ./ to rm and chmod arguments to avoid URL recognition (fix #452)

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-05 13:59:16 -07:00
Paul Eggleton 9c0243b691 mosquitto: upgrade to 1.5.1
This includes one security fix and numerous other bugfixes. MQTT version
3.1.1 is now the default protocol.

See the following for details:

https://mosquitto.org/blog/2018/08/version-151-released/
https://mosquitto.org/blog/2018/05/version-1-5-released/

Changes to the recipe:
* Drop explicit installation of the libmosquitto.a static library
  because this no longer gets built by default, and the normal
  "make install" which we are running will install it anyway if it were
  to be enabled.
* Drop our service file since there is one supplied in the source tree
* Enable systemd notify support when systemd is being used
* Update comments in the init script

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-04 11:55:21 -07:00
Yevgeny Popovych 3c6eceb941 crda: Fix 64bit builds by inheriting siteinfo class
Variables provided by siteinfo are already in use,
but the siteinfo class is not inherited for some reason.

Signed-off-by: Yevgeny Popovych <yevgenyp@pointgrab.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-30 09:20:07 -07:00
Khem Raj b3f3251273 civetweb: Fix build with clang
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-29 18:18:14 -07:00
Radek Dostal bae481e933 wireless-regdb: make wireless-regdb architecture independent
There is no compilation involved in wireless-regdb and package should
produce  the same results on all architectures => making it allarch saves
build time.

Additionally this fixes issue: "On machines where ${libdir} equals to
/usr/lib64/ regulatory.bin is not found by crda". Reason was that
crda-3.18/crda.c looks only in following paths:
  "/usr/local/lib/crda/regulatory.bin", /* Users/preloads can override */
  "/usr/lib/crda/regulatory.bin", /* General distribution package usage */
  "/lib/crda/regulatory.bin", /* alternative for distributions */

Signed-off-by: Radek Dostál <radek.dostal@streamunlimited.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-28 09:36:28 -07:00
Jagadeesh Krishnanjanappa 29158f7bde lftp: CVE-2018-10916
Affects lftp <= 4.8.3

Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-24 08:58:13 -07:00
Johannes Pointner 77966d0f3a mbedtls: upgrade to 2.12.0
Signed-off-by: Johannes Pointner <johannes.pointner@br-automation.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-24 08:58:13 -07:00
Yi Zhao c856f05705 samba: upgrade 4.8.3 -> 4.8.4
Security fixes:

CVE-2018-1139 (Weak authentication protocol allowed.)
CVE-2018-1140 (Denial of Service Attack on DNS and LDAP server.)
CVE-2018-10858 (Insufficient input validation on client directory listing in libsmbclient.)
CVE-2018-10918 (Denial of Service Attack on AD DC DRSUAPI server.)
CVE-2018-10919 (Confidential attribute disclosure from the AD LDAP server.)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-21 17:28:18 -07:00
Khem Raj 7e0fa293b7 recipes: Exclude non-buildable recipes from world for musl build
These recipes need to be fixed for musl, until they are needed
on musl lets remove them from world builds

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-20 23:58:58 -07:00
Martin Jansa 422ccc1548 daq: add dependency on bison-native
* fixes:
checking for flex 2.4 or higher... yes
checking for bison... no
configure: WARNING: don't have both flex and bison; reverting to lex/yacc
checking for capable lex... insufficient
configure: error: Your operating system's lex is insufficient to compile
         libsfbpf. You should install both bison and flex.
         flex is a lex replacement that has many advantages,
         including being able to compile libsfbpf.  For more
         information, see http://www.gnu.org/software/flex/flex.html .

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-08-19 17:10:27 -04:00
Martin Jansa ac4ad1c40f snort: add dependency on bison-native
* fixes:
   ERROR!  bison not found.
   Get it from http://www.gnu.org/software/bison/
   (You may also try byacc or yacc instead.)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-08-19 17:10:01 -04:00
Martin Jansa 408204073e inetutils: fix build with glibc-2.28
* fixes:
  ../../inetutils-1.9.4/src/uucpd.c:236: error: undefined reference to 'crypt'
  ../../inetutils-1.9.4/src/rexecd.c:378: error: undefined reference to 'crypt'

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-08-16 21:41:15 -04:00
Mingli Yu 12f45d8b00 kea: fix do_package warning
Add libdhcp_stat_cmds.a and libdhcp_ha.a to
FILES_${PN}-staticdev to fix below warning:

WARNING: kea-1.4.0-r0 do_package: QA Issue: kea: Files/directories were installed but not shipped in any package:
  /usr/lib64/hooks/libdhcp_stat_cmds.a
  /usr/lib64/hooks/libdhcp_ha.a

Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-08-13 14:29:11 -04:00
Khem Raj a001e46529 samba: Update to 4.8.3
LDB 1.4.0 breaks Samba < 4.9 therefore use internal version

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-30 01:34:10 -07:00
Changqing Li d4610b9d97 freeradius: upgrade 3.0.15 -> 3.0.17
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-27 07:19:11 -07:00
Yi Zhao 6d960cf729 snort: upgrade 2.9.7.5 -> 2.9.11.1
* Update SRC_URI

* Drop 0001-fix-do_package-failed-since-snort-2.9.7.0.patch since the
  issue had been fixed upstream.

* Drop the following patches and merge their modifications to
  disable-run-test-program-while-cross-compiling.patch:
    disable-dap-address-space-id.patch
    disable-daq-flow-id.patch
    disable-daq-verdict-retry.patch
    disable-inaddr-none.patch

* Add disable-run-test-program-while-cross-compiling.patch to fix
  configure error: cannot run test program while cross compiling.

  The variables have_daq_real_addresses, have_daq_ext_modflow,
  have_daq_queryflow, have_daq_data_channel_flags and
  have_daq_data_channel_separate_ip_versions are set to no since they
  are for daq 2.2.2 but we have daq 2.0.6 in meta-networking layer.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-26 20:10:07 -07:00
leimaohui d75280b749 samba: Delete remain of LSB.
Signed-off-by: Lei Maohui <leimaohui@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-21 00:26:49 -07:00
Carlos Rafael Giani 2de6f8d1b4 nanomsg: add recipe
nanomsg is a socket library that provides several common communication
patterns. It is a rewrite of the ZeroMQ library. For differences between
ZeroMQ and nanomsg, consult https://nanomsg.org/documentation-zeromq.html

Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-15 11:58:02 -07:00
Khem Raj f8904d0a6a mbedtls: Upgrade to 2.11.0
- Use libs section, libdevel is not common

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-14 15:50:14 -07:00
Krzysztof Kozlowski 8603b7643b kernel_wireless_regdb: Add class for embedding regulatory data into older kernel
Linux kernels before v4.15, allowed to be compiled with static
regulatory database if it was put under net/wireless/db.txt.

Add kernel_wireless_regdb class which allows in such cases to embed the
wireless regulatory database directly in the Linux kernel during build
process.

Usage:
1. The class should be inherited by kernel recipe (e.g. in
   linux-yocto_%.bbappend).
2. For Linux kernels up to v4.14, build kernel with CONFIG_EXPERT and
   CONFIG_CFG80211_INTERNAL_REGDB.

Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-05 17:51:16 -07:00
Krzysztof Kozlowski 20e3c3e2e4 wireless-regdb: Add wireless-regdb-static package with static regulatory data
Small embedded systems might:
1. Want to get rid of daemons as much as possible (therefore be built
   without CRDA),
2. Not receive user-space incremental updates but an entire system
   upgrade (with kernel).

Linux kernel since v4.15 allows loading static regulatory data from
/lib/firmware/regulatory.db.

Add additional package to wireless-regdb recipe which provides such
static data.

Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-05 17:51:16 -07:00
Krzysztof Kozlowski e5b5114177 wireless-regdb: Bump version to latest upstream 2018.05.31
Bump the wireless-regdb recipe to use newest wireless regulatory
database.

Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-05 17:51:15 -07:00
Yi Zhao 476d08c49e networkmanager-openvpn: upgrade 1.2.8 -> 1.2.10
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-03 17:42:25 -07:00
Yi Zhao b80f1d7710 NetworkManager: upgrade 1.10.6 -> 1.10.10
License-Update: update GTK-Doc from 1.27 to 1.28 to generate license.html

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-03 17:42:25 -07:00
Yi Zhao 703aa8c1f9 samba: upgrade 4.7.6 -> 4.7.8
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-03 17:42:25 -07:00
Khem Raj f6c7adbccc kea: Upgrade to 1.4.0 release
Licence-Update:
* Co-routines are now used from external boost
* ISC Copyright years are updated to 2018
* Support for Google Benchmark has been added under Apache-2.0

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-06-29 00:35:46 -07:00
Andre McCurdy d56219b411 mosquitto: minor recipe cleanups
- Passing prefix, mandir and localedir via the Make command line
   allows patching of config.mk to be dropped.

 - The variable PREFIX isn't used anywhere in the mosquitto 1.4.15
   Makefiles, so doesn't need to be passed on the Make command line.
   That means the default do_compile() from base.bbclass can be used
   and the recipe specific do_compile() can be dropped.

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-06-27 22:17:33 -07:00
Khem Raj badb14da16 civetweb: Fix paths to librt and libm, use -l linker option
Fixes build where it pokes for libraries on host system

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-06-24 23:04:04 -07:00
Rémi Rérolle 5ebc5d2b74 samba: add dynamic packages regexp for auth and pdb modules
Since those modules are dynamically split into sub-packages, they need
a regexp added to PACKAGES_DYNAMIC in order for the samba recipe to
RPROVIDE those packages. Without that, those packages are only known as
RRECOMMENDS for samba-base, which can be an issue when building an image
with NO_RECOMMENDATIONS = "1".

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-06-14 08:57:14 -07:00
Johannes Pointner 3db24e50ea mbedtls: update to 2.9.0
Mbed TLS 2.9.0 maintains source code and binary compatibility with the last
minor version, Mbed TLS 2.8.0, but extends the interface with additional
capabilities.

* Detail release note:
  - https://tls.mbed.org/tech-updates/releases/mbedtls-2.9.0-2.7.3-and-2.1.12-released

Signed-off-by: Johannes Pointner <johannes.pointner@br-automation.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-06-08 00:57:29 -07:00
Nicola Lunghi 101af9d652 mosquitto: add default configuration file
the mosquitto recipe doesn't add a mosquitto configuration file
add it from the mosquitto.conf.example file

Signed-off-by: Nicola Lunghi <nicola.lunghi@jci.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-06-05 18:17:21 -07:00
Nicola Lunghi 8576a857be mosquitto: add mosquitto-examples package
the mosquitto install populate some .example files in
/etc/mosquitto. move thise example files in a separate package

The PACKAGE_BEFORE_PN is needed because otherwise those examples
end in the base mosquitto package

Signed-off-by: Nicola Lunghi <nicola.lunghi@jci.com>
Acked-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-06-05 18:17:21 -07:00
Paul Eggleton e46a11d92a mosquitto: upgrade to 1.4.15
Security update - fixes CVE-2017-7651 and CVE-2017-7652, as well as a
number of other non-security issues.

For more details see the release announcement:

  https://mosquitto.org/blog/2018/02/security-advisory-cve-2017-7651-cve-2017-7652/

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-05-31 21:55:00 -07:00
Pablo Saavedra 2560ea4544 Fixed an install error in Samba with LSB distros
An error in the Samba installation occurs with distros LSB:

    install: cannot stat 'packaging/LSB/samba.sh': No such
    file or directory
    exit 1 from 'install -m 0755 packaging/LSB/samba.sh

LSB packaging directory was removed in Samba 4.7:

  commit 0a23cde8efea06f81c6d34227b71dab627cc87b9
  Author: Andreas Schneider <asn@samba.org>
  Date:   Tue May 9 15:48:09 2017 +0200

      packaging: Remove LSB packaging

      This hasn't been touched since 2001.

      Signed-off-by: Andreas Schneider <asn@samba.org>
      Reviewed-by: David Disseldorp <ddiss@samba.org>

This patch removes the conditional 'if' and uses always
compatible sysv script.

Signed-off-by: Pablo Saavedra <psaavedra@igalia.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-05-31 21:53:52 -07:00
Yi Zhao 8521600e1a snort: add UPSTREAM_CHECK_URI
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-05-30 12:40:10 -07:00
Yi Zhao 7ddbea7a94 libdnet: add UPSTREAM_CHECK_GITTAGREGEX
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-05-30 12:33:26 -07:00
Yi Zhao bf70a8d596 vlan: add UPSTREAM_CHECK_URI
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-05-29 12:57:23 -07:00
Yi Zhao c32ef17ca0 rdist: add UPSTREAM_CHECK_URI
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-05-29 12:57:23 -07:00
Krzysztof Kozlowski ba53d1341b civetweb: Add new recipe with git-based version
Add recipe for CivetWeb: easy to use, powerful, C/C++ embeddable web
server with optional CGI, SSL and Lua support, under MIT license.

CivetWeb provides C and C++ libraries and a standalone server binary.

Choose specific post-v1.10 git revision b8148afe8fa4 which has a fixed
SSL support (depending on OpenSSL v1.0.2).

Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-05-29 12:56:19 -07:00