OK, I'll merge current batch of pending changes and before next build I'll
include
conf/distro/include/security_flags.inc

Is that all I need to do?

On Fri, Jul 14, 2017 at 6:49 PM, Khem Raj <raj.k...@gmail.com> wrote:

> Hi Martin
>
> On Fri, Jul 14, 2017 at 9:43 AM, Martin Jansa <martin.ja...@gmail.com>
> wrote:
> > http://www.openembedded.org/wiki/Bitbake_World_Status
> >
>
> The results looks good. I wanted to suggest to start building with
> hardening flags on if possible. I have ensured that there are no
> regressions with hardening flags. It would be good to keep that up
>
> > == Number of issues - stats ==
> > {| class='wikitable'
> > !|Date     !!colspan='3'|Failed tasks    !!|Signatures
> > !!colspan='14'|QA !!Comment
> > |-
> > || ||qemuarm ||qemux86 ||qemux86_64 ||all
> > ||already-stripped ||libdir ||textrel ||build-deps ||file-rdeps
> ||version-going-backwards ||host-user-contaminated ||installed-vs-shipped
> ||unknown-configure-option ||symlink-to-sysroot ||invalid-pkgconfig
> ||pkgname ||ldflags ||compile-host-path ||
> > |-
> >
> > ||2017-07-13 ||1 ||1 ||1 ||0 ||0 ||1 ||4 ||0 ||0 ||21 ||0 ||0 ||0 ||0
> ||0 ||0 ||0 ||0 ||
> > |}
> >
> > == Failed tasks 2017-07-13 ==
> >
> > INFO: jenkins-job.sh-1.8.24 Complete log available at
> > http://logs.nslu2-linux.org/buildlogs/oe/world/rocko/log.
> report.20170714_064216.log
> >
> > === common (1) ===
> >     *
> > openembedded-core/meta/recipes-devtools/systemd-
> bootchart/systemd-bootchart_231.bb:do_compile
> >
> > === common-x86 (0) ===
> >
> > === qemuarm (0) ===
> >
> > === qemux86 (0) ===
> >
> > === qemux86_64 (0) ===
> >
> > === Number of failed tasks (3) ===
> > {| class=wikitable
> >
> > |-
> > || qemuarm || 1 ||
> > http://logs.nslu2-linux.org/buildlogs/oe/world/rocko/log.
> world.qemuarm.20170711_225251.log/
> > || http://errors.yoctoproject.org/Errors/Build/41116/
> > |-
> > || qemux86 || 1 ||
> > http://logs.nslu2-linux.org/buildlogs/oe/world/rocko/log.
> world.qemux86.20170711_225251.log/
> > || http://errors.yoctoproject.org/Errors/Build/41118/
> > |-
> > || qemux86_64 || 1 ||
> > http://logs.nslu2-linux.org/buildlogs/oe/world/rocko/log.
> world.qemux86-64.20170713_081929.log/
> > || http://errors.yoctoproject.org/Errors/Build/41231/
> > |}
> >
> > === PNBLACKLISTs (14) ===
> >
> > === QA issues (26) ===
> > {| class=wikitable
> > !| Count ||Issue
> > |-
> > ||0 ||already-stripped
> > |-
> > ||0 ||build-deps
> > |-
> > ||0 ||compile-host-path
> > |-
> > ||0 ||file-rdeps
> > |-
> > ||0 ||host-user-contaminated
> > |-
> > ||0 ||installed-vs-shipped
> > |-
> > ||0 ||invalid-pkgconfig
> > |-
> > ||0 ||ldflags
> > |-
> > ||0 ||pkgname
> > |-
> > ||0 ||symlink-to-sysroot
> > |-
> > ||0 ||unknown-configure-option
> > |-
> > ||1 ||libdir
> > |-
> > ||21 ||version-going-backwards
> > |-
> > ||4 ||textrel
> > |}
> >
> >
> >
> > === Incorrect PACKAGE_ARCH or sstate signatures (0) ===
> >
> > Complete log:
> > http://logs.nslu2-linux.org/buildlogs/oe/world/rocko/log.
> signatures.20170712_200847.log/
> >
> > No issues detected
> >
> >
> > PNBLACKLISTs:
> >
> > openembedded-core/:
> > meta-browser:
> > meta-openembedded:
> > meta-networking/recipes-support/lksctp-tools/lksctp-tools_1.0.17.bb:
> PNBLACKLIST[lksctp-tools]
> > ?= "${@bb.utils.contains('DISTRO_FEATURES', 'ld-is-gold', "BROKEN:
> fails to
> > link against sctp_connectx symbol", '', d)}"
> > meta-oe/recipes-connectivity/bluez/bluez-hcidump_2.5.bb:PNB
> LACKLIST[bluez-hcidump]
> > ?= "${@bb.utils.contains('DISTRO_FEATURES', 'bluez5', 'bluez5 conflicts
> with
> > bluez4 and bluez5 is selected in DISTRO_FEATURES', '', d)}"
> > meta-oe/recipes-connectivity/bluez/bluez4_4.101.bb:PNBLACKLIST[bluez4]
> ?=
> > "${@bb.utils.contains('DISTRO_FEATURES', 'bluez5', 'bluez5 conflicts
> with
> > bluez4 and bluez5 is selected in DISTRO_FEATURES', '', d)}"
> > meta-oe/recipes-connectivity/bluez/gst-plugin-bluetooth_4.101.bb:
> PNBLACKLIST[gst-plugin-bluetooth]
> > ?= "${@bb.utils.contains('DISTRO_FEATURES', 'bluez5', 'bluez5 conflicts
> with
> > bluez4 and bluez5 is selected in DISTRO_FEATURES', '', d)}"
> > meta-oe/recipes-graphics/libsexy/libsexy_0.1.11.bb:PNBLACKLIST[libsexy]
> ?=
> > "Fails to build with RSS
> > http://errors.yoctoproject.org/Errors/Details/130607/ - the recipe will
> be
> > removed on 2017-09-01 unless the issue is fixed"
> > meta-oe/recipes-graphics/xorg-driver/xf86-video-geode_2.11.16.bb:
> PNBLACKLIST[xf86-video-geode]
> > ?= "BROKEN, fails to build - the recipe will be removed on 2017-09-01
> unless
> > the issue is fixed"
> > meta-oe/recipes-navigation/foxtrotgps/foxtrotgps_1.1.1.
> bb:PNBLACKLIST[foxtrotgps]
> > ?= "${@bb.utils.contains('DISTRO_FEATURES', 'bluez5', 'bluez5 conflicts
> with
> > bluez4 and bluez5 is selected in DISTRO_FEATURES', '', d)}"
> > meta-oe/recipes-navigation/gypsy/gypsy.inc:PNBLACKLIST[gypsy] ?=
> > "${@bb.utils.contains('DISTRO_FEATURES', 'bluez5', 'bluez5 conflicts
> with
> > bluez4 and bluez5 is selected in DISTRO_FEATURES', '', d)}"
> > meta-oe/recipes-navigation/navit/navit.inc:PNBLACKLIST[navit] ?=
> > "${@bb.utils.contains('DISTRO_FEATURES', 'bluez5', 'bluez5 conflicts
> with
> > bluez4 and bluez5 is selected in DISTRO_FEATURES', '', d)}"
> > meta-oe/recipes-support/opensync/libsyncml_0.5.4.bb:PN
> BLACKLIST[libsyncml]
> > ?= "${@bb.utils.contains('DISTRO_FEATURES', 'bluez5', 'bluez5 conflicts
> with
> > bluez4 and bluez5 is selected in DISTRO_FEATURES', '', d)}"
> > meta-qt5:
> > meta-smartphone:
> > meta-shr/recipes-shr/3rdparty/libsensmon_git.bb:PNBLACKLIST[libsensmon]
> ?=
> > "BROKEN: not compatible with newer vala,
> > http://errors.yoctoproject.org/Errors/Details/143058/";
> > meta-shr/recipes-shr/3rdparty/omhacks_git.bb:PNBLACKLIST[omhacks] ?=
> "Not
> > compatible with gcc7 - the recipe will be removed on 2017-09-01 unless
> the
> > issue is fixed"
> > meta-webos-ports:
> > meta-luneos/recipes-luneos/luna-webappmanager/luna-webappmanager.bb:
> PNBLACKLIST[luna-webappmanager]
> > ?= "BROKEN: needs to be adapted to new qt-5.7"
> > meta-luneui/recipes-luneui/luna-next/luna-next.bb:PNBLACKLIST[luna-next]
> ?=
> > "BROKEN: needs to be adapted to new qtwayland-5.7"
> > PNBLACKLIST[android-system] = "depends on lxc from meta-virtualiazation
> > which isn't included in my world builds"
> > PNBLACKLIST[bigbuckbunny-1080p] = "big and doesn't really need to be
> tested
> > so much"
> > PNBLACKLIST[bigbuckbunny-480p] = "big and doesn't really need to be
> tested
> > so much"
> > PNBLACKLIST[bigbuckbunny-720p] = "big and doesn't really need to be
> tested
> > so much"
> > PNBLACKLIST[bigbuckbunny-720p] = "big and doesn't really need to be
> tested
> > so much"
> > PNBLACKLIST[tearsofsteel-1080p] = "big and doesn't really need to be
> tested
> > so much"
> > PNBLACKLIST[build-appliance-image] = "tries to include whole downloads
> > directory in /home/builder/poky :/"
> > PNBLACKLIST[linux-yocto-tiny-kexecboot] = "does weird sh!t breaking
> other
> > kernels and modules - broken for years"
> > PNBLACKLIST[linux-yocto-tiny] = "does weird sh!t breaking other kernels
> and
> > modules - broken for years"
> >
> >
> > QA issues by type:
> > count: 0 issue: already-stripped
> >
> >
> > count: 1 issue: libdir
> > qwt-qt5-6.1.3: qwt-qt5-dbg: found library in wrong location:
> > /usr/plugins/designer/.debug/libqwt_designer_plugin.so [libdir]
> >
> >
> > count: 4 issue: textrel
> > chromium-54.0.2810.2: ELF binary
> > '/tmp/work/i586-oe-linux/chromium/54.0.2810.2-r0/
> packages-split/chromium/usr/bin/chromium/chrome'
> > has relocations in .text [textrel]
> > chromium-wayland-53.0.2785.143: ELF binary
> > '/tmp/work/i586-oe-linux/chromium-wayland/53.0.2785.
> 143-r0/packages-split/chromium-wayland/usr/bin/chromium/chrome'
> > has relocations in .text [textrel]
> > corosync-2.4.2: ELF binary
> > '/tmp/work/core2-64-oe-linux/corosync/2.4.2-r0/packages-
> split/corosync/usr/sbin/corosync'
> > has relocations in .text [textrel]
> > x264-r2731+gitAUTOINC+2b741f81e5: ELF binary
> > '/tmp/work/i586-oe-linux/x264/r2731+gitAUTOINC+2b741f81e5-
> r0/packages-split/x264/usr/lib/libx264.so.148'
> > has relocations in .text [textrel]
> >
> >
> > count: 0 issue: build-deps
> >
> >
> > count: 0 issue: file-rdeps
> >
> >
> > count: 21 issue: version-going-backwards
> > rsyslog-8.22.0: Package version for package rsyslog-dbg went backwards
> which
> > would break package feeds from (0:8.22.0-r0.30 to 0:8.22.0-r0.0)
> > [version-going-backwards]
> > rsyslog-8.22.0: Package version for package rsyslog-dbg went backwards
> which
> > would break package feeds from (0:8.22.0-r0.37 to 0:8.22.0-r0.0)
> > [version-going-backwards]
> > rsyslog-8.22.0: Package version for package rsyslog-dev went backwards
> which
> > would break package feeds from (0:8.22.0-r0.30 to 0:8.22.0-r0.0)
> > [version-going-backwards]
> > rsyslog-8.22.0: Package version for package rsyslog-dev went backwards
> which
> > would break package feeds from (0:8.22.0-r0.37 to 0:8.22.0-r0.0)
> > [version-going-backwards]
> > rsyslog-8.22.0: Package version for package rsyslog-doc went backwards
> which
> > would break package feeds from (0:8.22.0-r0.30 to 0:8.22.0-r0.0)
> > [version-going-backwards]
> > rsyslog-8.22.0: Package version for package rsyslog-doc went backwards
> which
> > would break package feeds from (0:8.22.0-r0.37 to 0:8.22.0-r0.0)
> > [version-going-backwards]
> > rsyslog-8.22.0: Package version for package rsyslog-locale went backwards
> > which would break package feeds from (0:8.22.0-r0.30 to 0:8.22.0-r0.0)
> > [version-going-backwards]
> > rsyslog-8.22.0: Package version for package rsyslog-locale went backwards
> > which would break package feeds from (0:8.22.0-r0.37 to 0:8.22.0-r0.0)
> > [version-going-backwards]
> > rsyslog-8.22.0: Package version for package rsyslog-ptest went backwards
> > which would break package feeds from (0:8.22.0-r0.30 to 0:8.22.0-r0.0)
> > [version-going-backwards]
> > rsyslog-8.22.0: Package version for package rsyslog-ptest went backwards
> > which would break package feeds from (0:8.22.0-r0.37 to 0:8.22.0-r0.0)
> > [version-going-backwards]
> > rsyslog-8.22.0: Package version for package rsyslog-staticdev went
> backwards
> > which would break package feeds from (0:8.22.0-r0.30 to 0:8.22.0-r0.0)
> > [version-going-backwards]
> > rsyslog-8.22.0: Package version for package rsyslog-staticdev went
> backwards
> > which would break package feeds from (0:8.22.0-r0.37 to 0:8.22.0-r0.0)
> > [version-going-backwards]
> > rsyslog-8.22.0: Package version for package rsyslog went backwards which
> > would break package feeds from (0:8.22.0-r0.30 to 0:8.22.0-r0.0)
> > [version-going-backwards]
> > rsyslog-8.22.0: Package version for package rsyslog went backwards which
> > would break package feeds from (0:8.22.0-r0.37 to 0:8.22.0-r0.0)
> > [version-going-backwards]
> > valgrind-3.12.0: Package version for package valgrind-dbg went backwards
> > which would break package feeds from (0:3.12.0-r0.34 to 0:3.12.0-r0.0)
> > [version-going-backwards]
> > valgrind-3.12.0: Package version for package valgrind-dev went backwards
> > which would break package feeds from (0:3.12.0-r0.34 to 0:3.12.0-r0.0)
> > [version-going-backwards]
> > valgrind-3.12.0: Package version for package valgrind-doc went backwards
> > which would break package feeds from (0:3.12.0-r0.34 to 0:3.12.0-r0.0)
> > [version-going-backwards]
> > valgrind-3.12.0: Package version for package valgrind-locale went
> backwards
> > which would break package feeds from (0:3.12.0-r0.34 to 0:3.12.0-r0.0)
> > [version-going-backwards]
> > valgrind-3.12.0: Package version for package valgrind-ptest went
> backwards
> > which would break package feeds from (0:3.12.0-r0.34 to 0:3.12.0-r0.0)
> > [version-going-backwards]
> > valgrind-3.12.0: Package version for package valgrind-staticdev went
> > backwards which would break package feeds from (0:3.12.0-r0.34 to
> > 0:3.12.0-r0.0) [version-going-backwards]
> > valgrind-3.12.0: Package version for package valgrind went backwards
> which
> > would break package feeds from (0:3.12.0-r0.34 to 0:3.12.0-r0.0)
> > [version-going-backwards]
> >
> >
> > count: 0 issue: host-user-contaminated
> >
> >
> > count: 0 issue: installed-vs-shipped
> >
> >
> > count: 0 issue: unknown-configure-option
> >
> >
> > count: 0 issue: symlink-to-sysroot
> >
> >
> > count: 0 issue: invalid-pkgconfig
> >
> >
> > count: 0 issue: pkgname
> >
> >
> > count: 0 issue: ldflags
> >
> >
> > count: 0 issue: compile-host-path
> >
> >
> >
> > == Tested changes (not included in master yet) - bitbake ==
> >
> > latest upstream commit:
> > 4a14b44 knotty: Drop task prefix of PLAIN log messages
> > not included in master yet:
> > dda3a10 world-image: add extra target
> >
> > == Tested changes (not included in master yet) - openembedded-core ==
> > latest upstream commit:
> > b1c4661 libiconv: remove
> > 0001-Fix-link-error-when-compiling-with-gcc-O0.patch
> > not included in master yet:
> > dd1b5e7 report-error: Allow to upload reports automatically
> > 7fdb805 buildhistory.bbclass: metadata-revs show repo parent
> > 9b6fe73 metadata-revs: provide more information
> > 2cd822c qemux86: Add identical qemux86copy variant for tests
> > db1b8cf valgrind: fix link failure with gold
> >
> > == Tested changes (not included in master yet) - meta-openembedded ==
> >
> > latest upstream commit:
> > 66b88f7 hwloc: Inherit pkgconfig
> > not included in master yet:
> > 9340320 dnsmasq: disable the service by default
> > d1fca80 rdate: Fix build with hardening
> > 96fd8e1 strongswan: Include stdint.h for uintptr_t
> > 961797e netkit-rpc: Fix build with hardening flags
> > b1fb0ad netkit-telnet: Fix build with hardening
> > ed9432c ncftp: Upgrade to 3.2.6
> > 2531f3e ippool: Fix build errors found with hardening flags
> > 5963598 gflags: update SRC_URI with git fetcher
> > 1a3966a unionfs-fuse: 0.26 -> 2.0
> > 39502f2 autofs: Add build dependency on libnsl2
> > b73b2f4 gst-plugins-gl_0.10.3.bb: Fix build on rpi/userland
> > 5ed1dba librcf: fix mips/mips64 build
> > b02be7a freerdp: Fix build on mips
> > 6869684 gegl: Upgrade to 0.3.18
> > 6cbe8e8 babl: Upgrade to 0.1.28
> > a57a2ed gimp: Upgrade to 2.8.22
> > 8ddbec6 fluentbit: Fix parallel build race
> > 73ccbee dietsplash: Fix build on mips
> > 17afe08 libsrtp: Fix build on mips
> > e6ffb3c assimp: Upgrade to 3.3.1 release
> > 14c5780 synergy: Update to 1.8.8 release
> > bf198f6 kodi: Update to 17.3
> > 220ffd8 libtorrent: Implement 64bit atomics for mips32
> > d1c5c69 rtorrent: Add and enable ipv6 packageconfig based on
> DISTRO_FEATURES
> > b7dac59 uim: Add support for aarch64
> > d855e3d openhpi: Fix build on 64bit platforms e.g. aarch64
> > 553ca7d meson: Port pkgconfig-native patch to 0.40.1
> > 160c92f tinymembench: Disable on mips64
> > b952200 ltrace: Add mips64 support
> > 78c68a2 libtorrent: Link in 64bit atomics for ppc
> > 339f975 librcf: Define byteorder for powerpc machines
> > d6871e9 gperftools: Fix build on ppc
> > 116273f crossguid: Add recipe
> > 5b24757 kodi: User external crossguid
> > 7798745 ser2net: upgrade to version 3.4
> > fba5745 multipath-tools: 0.6.4 -> 0.7.1
> > 576007b python-pytest: update to version 3.1.3
> > ab2195a python-pytest: remove fetch during do_compile phase
> > 8253d8c libtinyxml2: upgrade to 5.0.1
> > e5d13e0 gnome-common: Add recipe (from oe-core)
> > 2c09550 webrtc-audio-processing: initial recipe
> > 3e83a12 libdbus-c++: Fix build with gcc7 and unblacklist
> > a9b421b security_flags.inc: Delete
> > 21ac7ab ltrace: Fix build on musl
> > 9f59778 pptp-linux: Upgrade to 1.9.0
> > 011d175 kodi: Fix build on powerpc
> > 96ddef1 meta-python: Add Protobuf and gRPC Python recipes
> > 6978c6c meta-python: Add pybluez recipe
> > 5fc3a7b meta-python: Add python-daemon recipe and its dependencies
> > b234cb7 udisks2: update 2.1.7 -> 2.1.8
> > 6351d5d gvfs: update 1.28.3 -> 1.32.1
> > 072a282 garcon: update 0.4.0 -> 0.6.1
> > 4ae21b2 gparted: update 0.27.0 -> 0.28.1
> > 85f9438 abiword: update 3.0.1 -> 3.0.2
> > f180ebe faac: update 1.28 -> 1.29
> > d4373e3 libdbus-c++: Add -pthread to linker flags
> > 216bf8b klibc: Fix build with musl
> > ac04fc6 ubi-utils-klibc: Pass TUNE_CCARGS into CFLAGS
> > 225e21d kodi: Fix build on arm
> > 5cce369 fluentbit: fix SYSTEMD_SERVICE name
> > 626a865 Intel: remove license file
> > 7fdf736 proj: update to 4.9.3
> > ef59094 klibc: Fix linking by using bfd linker when default linker is
> gold
> > 9b2852b libsombok3: add recipe
> > 20b186c libmime-charset-perl: add recipe
> > 3ccb597 libterm-readkey-perl: add recipe
> > 91736f5 liblocale-gettext-perl: add recipe
> > 9dfe3e1 libtext-charwidth-perl: add recipe
> > f5158f7 libtext-wrapi18n-perl: add recipe
> > 247aec7 libunicode-linebreak-perl: add recipe
> > 131de8c po4a: add full functionalities
> > 1815d4e ebtables: replace ebtables-save perl script with bash rewrite
> > 8fc200c recipes: remove blacklisted recipes
> >
> > == Tested changes (not included in master yet) - meta-qt5 ==
> > latest upstream commit:
> > 2940d84 Revert "qttools: DEPENDS on icu"
> > not included in master yet:
> > 800d4c1 libconnman-qt5: update to 1.1.10
> > 428be3c qtwebengine: add PACKAGECONFIG for webrtc
> > 05455e6 qt5: add qt5-ptest.inc
> > ec8c62e qtxmlpatterns: add ptest
> > 1eac990 qtdeclarative: add ptest
> > 2c1d6b1 qtquick1: add ptest
> > aa0605d qtquickcontrols2: fix compilation of examples/texteditor
> > 00d72cd qwt-qt5: Fix rpath issues
> > c2768bd qtwebengine: fix build with gcc7
> > 932515a qt5-ptest.inc: append do_populate_sysroot only for target
> > bf7cdd9 qtbase-native: Fix qdbuscpp2xml segfault
> >
> > == Tested changes (not included in master yet) - meta-browser ==
> >
> > latest upstream commit:
> > d822031 Merge pull request #49 from kraj/kraj/master
> > not included in master yet:
> > 6f790a0 gnome-settings-daemon: remove the bbappend for removed recipe
> >
> > == Tested changes (not included in master yet) - meta-webos-ports ==
> >
> > latest upstream commit:
> > 9545fb6 packagegroup-luneos-extended: drop qtscenegraph-adaptation
> > not included in master yet:
> >
> > == Tested changes (not included in master yet) - meta-smartphone ==
> > latest upstream commit:
> > 80b8107 android-system-image-tenderloin: Fix checksums
> > not included in master yet:
> > e523b07 meta-shr, meta-fso: remove blacklisted recipes
> >
> >
> >
> > --
> > _______________________________________________
> > Openembedded-core mailing list
> > openembedded-c...@lists.openembedded.org
> > http://lists.openembedded.org/mailman/listinfo/openembedded-core
> >
>
-- 
_______________________________________________
Openembedded-devel mailing list
Openembedded-devel@lists.openembedded.org
http://lists.openembedded.org/mailman/listinfo/openembedded-devel

Reply via email to