Re: [OE-core] [PATCH 1/2] tcf-agent: upgrade to the latest stable revision 0.0+svnr1855
Saul Wold wrote on 2011-07-22: > There seems to be a compile issue with this patch. > > For an X86 Build > fatal error: uuid/uuid.h: No such file or directory | compilation Hi Saul, Sorry! We didn't do enough test... Lianhao and I have got the causes of the failures. This uuid.h issue is due to the lackness of util-linux in DEPENDS -- the new tcf-agent code introduces the dependency. > And then for an ARM build: > > services/dwarfframe.c | In file included from framework/cpudefs.c:33:0: > | ././machine/cpudefs-ext.h:23:26: fatal error: cpudefs-mdep.h: No | > such file or directory | compilation terminated. | make: *** The new tcf-agent code by default enables some services we don't actually need, and the they cause the ARM build failure. We added the following to fix the issue: +CFLAGS += "-DSERVICE_RunControl=0 -DSERVICE_Breakpoints=0 \ +-DSERVICE_Memory=0 -DSERVICE_Registers=0 -DSERVICE_MemoryMap=0 \ +-DSERVICE_StackTrace=0 -DSERVICE_Symbols=0 -DSERVICE_LineNumbers=0 \ +-DSERVICE_Expressions=0" Below is the new commit(in the same branch dcui/tcf-agent) http://git.pokylinux.org/cgit/cgit.cgi/poky-contrib/commit/?h=dcui/tcf-agent&id=ba36534bfc048d7bd2b15dc55ba253cc98c3e037 Currently Lianhao and I are doing more testing and will report back asap. Thanks, -- Dexuan ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 1/2] tcf-agent: upgrade to the latest stable revision 0.0+svnr1855
Dexuan, There seems to be a compile issue with this patch. For an X86 Build | ccache i586-poky-linux-gcc -march=i586 --sysroot=/vol/1/sgw/autobuilder/poky-slave/poky-full-ia/build/build/tmp/sysroots/qemux86 -O2 -pipe -g -feliminate-unused-debug-types -g -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_GNU_SOURCE -Wall -Wmissing-prototypes -I./. -I./system/GNU/Linux -I./machine/i686 -c -o obj/GNU/Linux/i686/Debug/services/discovery.o services/discovery.c | ccache i586-poky-linux-gcc -march=i586 --sysroot=/vol/1/sgw/autobuilder/poky-slave/poky-full-ia/build/build/tmp/sysroots/qemux86 -O2 -pipe -g -feliminate-unused-debug-types -g -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_GNU_SOURCE -Wall -Wmissing-prototypes -I./. -I./system/GNU/Linux -I./machine/i686 -c -o obj/GNU/Linux/i686/Debug/services/diagnostics.o services/diagnostics.c | ccache i586-poky-linux-gcc -march=i586 --sysroot=/vol/1/sgw/autobuilder/poky-slave/poky-full-ia/build/build/tmp/sysroots/qemux86 -O2 -pipe -g -feliminate-unused-debug-types -g -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_GNU_SOURCE -Wall -Wmissing-prototypes -I./. -I./system/GNU/Linux -I./machine/i686 -c -o obj/GNU/Linux/i686/Debug/services/breakpoints.o services/breakpoints.c | ccache i586-poky-linux-gcc -march=i586 --sysroot=/vol/1/sgw/autobuilder/poky-slave/poky-full-ia/build/build/tmp/sysroots/qemux86 -O2 -pipe -g -feliminate-unused-debug-types -g -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_GNU_SOURCE -Wall -Wmissing-prototypes -I./. -I./system/GNU/Linux -I./machine/i686 -c -o obj/GNU/Linux/i686/Debug/services/dwarfcache.o services/dwarfcache.c | ccache i586-poky-linux-gcc -march=i586 --sysroot=/vol/1/sgw/autobuilder/poky-slave/poky-full-ia/build/build/tmp/sysroots/qemux86 -O2 -pipe -g -feliminate-unused-debug-types -g -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_GNU_SOURCE -Wall -Wmissing-prototypes -I./. -I./system/GNU/Linux -I./machine/i686 -c -o obj/GNU/Linux/i686/Debug/services/discovery_udp.o services/discovery_udp.c | ccache i586-poky-linux-gcc -march=i586 --sysroot=/voERROR: Function 'do_compile' failed (see /vol/1/sgw/autobuilder/poky-slave/poky-full-ia/build/build/tmp/work/i586-poky-linux/tcf-agent-0.0+svnr1855-r0/temp/log.do_compile.21419 for further information) | l/1/sgw/autobuilder/poky-slave/poky-full-ia/build/build/tmp/sysroots/qemux86 -O2 -pipe -g -feliminate-unused-debug-types -g -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_GNU_SOURCE -Wall -Wmissing-prototypes -I./. -I./system/GNU/Linux -I./machine/i686 -c -o obj/GNU/Linux/i686/Debug/services/dwarfexpr.o services/dwarfexpr.c | ccache i586-poky-linux-gcc -march=i586 --sysroot=/vol/1/sgw/autobuilder/poky-slave/poky-full-ia/build/build/tmp/sysroots/qemux86 -O2 -pipe -g -feliminate-unused-debug-types -g -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_GNU_SOURCE -Wall -Wmissing-prototypes -I./. -I./system/GNU/Linux -I./machine/i686 -c -o obj/GNU/Linux/i686/Debug/services/dwarfframe.o services/dwarfframe.c | ccache i586-poky-linux-gcc -march=i586 --sysroot=/vol/1/sgw/autobuilder/poky-slave/poky-full-ia/build/build/tmp/sysroots/qemux86 -O2 -pipe -g -feliminate-unused-debug-types -g -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_GNU_SOURCE -Wall -Wmissing-prototypes -I./. -I./system/GNU/Linux -I./machine/i686 -c -o obj/GNU/Linux/i686/Debug/services/dwarfio.o services/dwarfio.c | framework/channel_tcp.c:34:27: fatal error: openssl/ssl.h: No such file or directory | compilation terminated. | ccache i586-poky-linux-gcc -march=i586 --sysroot=/vol/1/sgw/autobuilder/poky-slave/poky-full-ia/build/build/tmp/sysroots/qemux86 -O2 -pipe -g -feliminate-unused-debug-types -g -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_GNU_SOURCE -Wall -Wmissing-prototypes -I./. -I./system/GNU/Linux -I./machine/i686 -c -o obj/GNU/Linux/i686/Debug/services/expressions.o services/expressions.c | ccache i586-poky-linux-gcc -march=i586 --sysroot=/vol/1/sgw/autobuilder/poky-slave/poky-full-ia/build/build/tmp/sysroots/qemux86 -O2 -pipe -g -feliminate-unused-debug-types -g -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_GNU_SOURCE -Wall -Wmissing-prototypes -I./. -I./system/GNU/Linux -I./machine/i686 -c -o obj/GNU/Linux/i686/Debug/services/dwarfreloc.o services/dwarfreloc.c | make: *** [obj/GNU/Linux/i686/Debug/framework/channel_tcp.o] Error 1 | make: *** Waiting for unfinished jobs | framework/mdep.c:1137:23: fatal error: uuid/uuid.h: No such file or directory | compilation terminated. | make: *** [obj/GNU/Linux/i686/Debug/framework/mdep.o] Error 1 | services/dwarfcache.c: In function 'load_pub_names': | services/dwarfcache.c:442:14: warning: variable 'unit_size' set but not used [-Wunused-but-set-variable] | services/expressions.c: In function 'set_int_value': | services/expressions.c:138:5: warning: dereferencing type-punned pointer will break strict-aliasing rules [-Wstrict-aliasing] | services/expressions.c:139:5: warning: dereferencing type-punned pointer will break strict-alia
[OE-core] [PATCH 1/2] python: fix security vulnerability
From: Nitin A Kamble This Fixes bug: [Yocto #1254] http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1015 Issue #2254: Fix CGIHTTPServer information disclosure. Relative paths are now collapsed within the url properly before looking in cgi_directories. Signed-off-by: Nitin A Kamble --- meta/recipes-devtools/python/python.inc|2 +- .../python/python/security_issue_2254_fix.patch| 184 meta/recipes-devtools/python/python_2.6.6.bb |3 +- 3 files changed, 187 insertions(+), 2 deletions(-) create mode 100644 meta/recipes-devtools/python/python/security_issue_2254_fix.patch diff --git a/meta/recipes-devtools/python/python.inc b/meta/recipes-devtools/python/python.inc index 25a458e..a6cc917 100644 --- a/meta/recipes-devtools/python/python.inc +++ b/meta/recipes-devtools/python/python.inc @@ -3,7 +3,7 @@ HOMEPAGE = "http://www.python.org"; LICENSE = "PSF" SECTION = "devel/python" # bump this on every change in contrib/python/generate-manifest-2.6.py -INC_PR = "nk2" +INC_PR = "r2" DEFAULT_PREFERENCE = "-26" diff --git a/meta/recipes-devtools/python/python/security_issue_2254_fix.patch b/meta/recipes-devtools/python/python/security_issue_2254_fix.patch new file mode 100644 index 000..f032858 --- /dev/null +++ b/meta/recipes-devtools/python/python/security_issue_2254_fix.patch @@ -0,0 +1,184 @@ +Upstream-Status: Backport +http://svn.python.org/view?view=revision&revision=71303 + +Issue #2254: Fix CGIHTTPServer information disclosure. Relative paths are + now collapsed within the url properly before looking in cgi_directories. +Signed-Off-By: Nitin A Kamble +2011/07/19 + +Index: Python-2.6.6/Lib/CGIHTTPServer.py +=== +--- Python-2.6.6.orig/Lib/CGIHTTPServer.py Python-2.6.6/Lib/CGIHTTPServer.py +@@ -70,27 +70,20 @@ class CGIHTTPRequestHandler(SimpleHTTPSe + return SimpleHTTPServer.SimpleHTTPRequestHandler.send_head(self) + + def is_cgi(self): +-"""Test whether self.path corresponds to a CGI script, +-and return a boolean. ++"""Test whether self.path corresponds to a CGI script. + +-This function sets self.cgi_info to a tuple (dir, rest) +-when it returns True, where dir is the directory part before +-the CGI script name. Note that rest begins with a +-slash if it is not empty. +- +-The default implementation tests whether the path +-begins with one of the strings in the list +-self.cgi_directories (and the next character is a '/' +-or the end of the string). ++Returns True and updates the cgi_info attribute to the tuple ++(dir, rest) if self.path requires running a CGI script. ++Returns False otherwise. ++ ++The default implementation tests whether the normalized url ++path begins with one of the strings in self.cgi_directories ++(and the next character is a '/' or the end of the string). + """ +- +-path = self.path +- +-for x in self.cgi_directories: +-i = len(x) +-if path[:i] == x and (not path[i:] or path[i] == '/'): +-self.cgi_info = path[:i], path[i+1:] +-return True ++splitpath = _url_collapse_path_split(self.path) ++if splitpath[0] in self.cgi_directories: ++self.cgi_info = splitpath ++return True + return False + + cgi_directories = ['/cgi-bin', '/htbin'] +@@ -299,6 +292,46 @@ class CGIHTTPRequestHandler(SimpleHTTPSe + self.log_message("CGI script exited OK") + + ++# TODO(gregory.p.smith): Move this into an appropriate library. ++def _url_collapse_path_split(path): ++""" ++Given a URL path, remove extra '/'s and '.' path elements and collapse ++any '..' references. ++ ++Implements something akin to RFC-2396 5.2 step 6 to parse relative paths. ++ ++Returns: A tuple of (head, tail) where tail is everything after the final / ++and head is everything before it. Head will always start with a '/' and, ++if it contains anything else, never have a trailing '/'. ++ ++Raises: IndexError if too many '..' occur within the path. ++""" ++# Similar to os.path.split(os.path.normpath(path)) but specific to URL ++# path semantics rather than local operating system semantics. ++path_parts = [] ++for part in path.split('/'): ++if part == '.': ++path_parts.append('') ++else: ++path_parts.append(part) ++# Filter out blank non trailing parts before consuming the '..'. ++path_parts = [part for part in path_parts[:-1] if part] + path_parts[-1:] ++if path_parts: ++tail_part = path_parts.pop() ++else: ++tail_part = '' ++head_parts = [] ++for part in path_parts: ++if part == '..': ++head_parts.pop() ++else: ++he
[OE-core] [PATCH 2/2] fix Upstream-Status line for few patches
From: Nitin A Kamble Signed-off-by: Nitin A Kamble --- .../btrfs-tools/btrfs-tools/fix_use_of_gcc.patch |2 +- .../dosfstools/dosfstools-2.10-kernel-2.6.patch|2 +- .../elfutils/elfutils/fix_for_gcc-4.7.patch|2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/meta/recipes-devtools/btrfs-tools/btrfs-tools/fix_use_of_gcc.patch b/meta/recipes-devtools/btrfs-tools/btrfs-tools/fix_use_of_gcc.patch index 0a5fb34..2d5315f 100644 --- a/meta/recipes-devtools/btrfs-tools/btrfs-tools/fix_use_of_gcc.patch +++ b/meta/recipes-devtools/btrfs-tools/btrfs-tools/fix_use_of_gcc.patch @@ -1,5 +1,5 @@ Nitin A Kamble 2011/06/09 -UpstreamStatus: Pending +Upstream-Status: Pending Avoid these kinds of errors while doing cross build: diff --git a/meta/recipes-devtools/dosfstools/dosfstools/dosfstools-2.10-kernel-2.6.patch b/meta/recipes-devtools/dosfstools/dosfstools/dosfstools-2.10-kernel-2.6.patch index 3ecafc3..0c9230f 100644 --- a/meta/recipes-devtools/dosfstools/dosfstools/dosfstools-2.10-kernel-2.6.patch +++ b/meta/recipes-devtools/dosfstools/dosfstools/dosfstools-2.10-kernel-2.6.patch @@ -2,7 +2,7 @@ Submitted By: Jim Gifford (jim at linuxfromscratch dot org) Date: 2004-02-09 Initial Package Version: 2.6 Origin: Jim Gifford -Upstream Status: Accepted +Upstream-Status: Accepted Description: Fixes Compile Issues with the 2.6 Kernel --- dosfstools-2.10/dosfsck/common.h.orig 2004-02-09 18:37:59.056737458 + diff --git a/meta/recipes-devtools/elfutils/elfutils/fix_for_gcc-4.7.patch b/meta/recipes-devtools/elfutils/elfutils/fix_for_gcc-4.7.patch index bd22eef..bd634b4 100644 --- a/meta/recipes-devtools/elfutils/elfutils/fix_for_gcc-4.7.patch +++ b/meta/recipes-devtools/elfutils/elfutils/fix_for_gcc-4.7.patch @@ -1,4 +1,4 @@ -UpstreamStatus: pending +Upstream-Status: pending gcc 4.7 does not like pointer conversion, so have a void * tmp var to work around following compilation issue. -- 1.7.6 ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 0/2] Misc Fixes
From: Nitin A Kamble The following changes since commit 8bd302b16dbd708fb9446fdc534ac64d873a34f5: glib-2.0: fix a compilation issue due to dtrace (2011-07-21 14:01:33 -0700) are available in the git repository at: git://git.pokylinux.org/poky-contrib nitin/misc http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=nitin/misc Nitin A Kamble (2): python: fix security vulnerability fix Upstream-Status line for few patches .../btrfs-tools/btrfs-tools/fix_use_of_gcc.patch |2 +- .../dosfstools/dosfstools-2.10-kernel-2.6.patch|2 +- .../elfutils/elfutils/fix_for_gcc-4.7.patch|2 +- meta/recipes-devtools/python/python.inc|2 +- .../python/python/security_issue_2254_fix.patch| 184 meta/recipes-devtools/python/python_2.6.6.bb |3 +- 6 files changed, 190 insertions(+), 5 deletions(-) create mode 100644 meta/recipes-devtools/python/python/security_issue_2254_fix.patch -- 1.7.6 ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 1/2] python: fix security vulnerability
> devtools/python/python/security_issue_2254_fix.patch > > @@ -0,0 +1,184 @@ > > +UpstreamStatus: Backport > > This should be Upstream-Status I guess to match other patches that > said there are few more anomalies > > meta/recipes-devtools/dosfstools/dosfstools/dosfstools-2.10-kernel- > 2.6.patch: > "Upstream Status" > meta/recipes-devtools/btrfs-tools/btrfs- > tools/fix_use_of_gcc.patch:UpstreamStatus: > Pending > meta/recipes-devtools/elfutils/elfutils/fix_for_gcc- > 4.7.patch:UpstreamStatus: > pending > Thanks Khem for catching these. I have sending fixes for these. Nitin ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 04/10] polkit: Support PAM
On 2011年07月21日 17:59, Koen Kooi wrote: Op 21 jul. 2011, om 11:49 heeft Kang Kai het volgende geschreven: On 2011年07月21日 16:59, Koen Kooi wrote: Op 21 jul. 2011, om 10:00 heeft Kang Kai het volgende geschreven: From: Xiaofeng Yan Modify configuration "polkit-1" in /etc/pam.d/ for supporting pam. Signed-off-by: Xiaofeng Yan --- .../polkit/polkit-0.101/polkit-1_pam.patch | 23 meta/recipes-extended/polkit/polkit_0.101.bb |6 +++- 2 files changed, 27 insertions(+), 2 deletions(-) create mode 100644 meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch diff --git a/meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch b/meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch new file mode 100644 index 000..fa145ac --- /dev/null +++ b/meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch @@ -0,0 +1,23 @@ +polkit: No system-auth in poky, we can use common-* in place of it. Poky or oe-core? And can we provide system-auth instead of patching the world? system-auth is the Fedora common pam configure file and auto generated by command authconfig. It contains all 4 types(auth, account, password and session) default config. But in Yocto Hmm, poky, oe-core or yocto? Which is it :) Sorry, I will care that :) we follow Debian/Ubuntu with separated files for default config: common-auth, common-account etc. So that we didn't import the system-auth file . + +Upstream-Status:Inappropriate [configuration] + +Signed-off-by: Xiaofeng Yan + +--- a/configure.ac 2011-03-04 02:26:20.0 +0800 b/configure.ac.new 2011-07-18 10:14:12.516818852 +0800 +@@ -350,10 +350,10 @@ + PAM_FILE_INCLUDE_PASSWORD=system + PAM_FILE_INCLUDE_SESSION=system + else +- PAM_FILE_INCLUDE_AUTH=system-auth +- PAM_FILE_INCLUDE_ACCOUNT=system-auth +- PAM_FILE_INCLUDE_PASSWORD=system-auth +- PAM_FILE_INCLUDE_SESSION=system-auth ++ PAM_FILE_INCLUDE_AUTH=common-auth ++ PAM_FILE_INCLUDE_ACCOUNT=common-account ++ PAM_FILE_INCLUDE_PASSWORD=common-password ++ PAM_FILE_INCLUDE_SESSION=common-session + fi + + AC_SUBST(PAM_FILE_INCLUDE_AUTH) diff --git a/meta/recipes-extended/polkit/polkit_0.101.bb b/meta/recipes-extended/polkit/polkit_0.101.bb index 6769914..da1d581 100644 --- a/meta/recipes-extended/polkit/polkit_0.101.bb +++ b/meta/recipes-extended/polkit/polkit_0.101.bb @@ -7,8 +7,10 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=155db86cdbafa7532b41f390409283eb \ file://docs/polkit/html/license.html;md5=07ddbf5f29e44c80c99be19c1690ec1f" SRC_URI = "http://hal.freedesktop.org/releases/polkit-${PV}.tar.gz \ - file://introspection.patch" -PR = "r0" + file://introspection.patch \ + file://polkit-1_pam.patch" + +PR = "r1" DEPENDS = "libpam expat dbus-glib eggdbus intltool" RDEPENDS_${PN} = "libpam" EXTRA_OECONF = "--with-authfw=pam --with-os-type=moblin --disable-man-pages --disable-gtk-doc --disable-introspection" -- 1.7.5.1.300.gc565c ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 09/10] shadow: update pam related configure files
On 2011年07月21日 16:58, Koen Kooi wrote: Op 21 jul. 2011, om 10:00 heeft Kang Kai het volgende geschreven: From: Kang Kai add shadow-update-pam-conf.patch to update the pam related configure files in Yocto way rather than Fedora. I'm not entirely sure, but do the updated conf files need something like http://cgit.openembedded.org/cgit.cgi/openembedded-core/commit/?id=b90e9c2318fc421f37c57788ece54ce791a90b62 as well? ok, I'll check the commits for module selinux Signed-off-by: Kang Kai --- .../shadow/files/shadow-update-pam-conf.patch | 175 meta/recipes-extended/shadow/shadow_4.1.4.3.bb |5 +- 2 files changed, 178 insertions(+), 2 deletions(-) create mode 100644 meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch diff --git a/meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch b/meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch new file mode 100644 index 000..33789f5 --- /dev/null +++ b/meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch @@ -0,0 +1,175 @@ +The system-auth in the configure files is from Fedora which put all the 4 pam type rules +in one file. +In yocto it obey the way with Debian/Ubuntu, and the names are common-auth, common-account, +common-password and common-session. +So update them in Yocto way. + +Upstream-Status: Pending + +Signed-off-by: Kang Kai + +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chage shadow-4.1.4.3/etc/pam.d/chage +--- shadow-4.1.4.3/etc/pam.d.orig/chage2011-07-20 19:02:27.384844958 +0800 shadow-4.1.4.3/etc/pam.d/chage 2011-07-20 19:03:08.964844958 +0800 +@@ -1,4 +1,4 @@ + #%PAM-1.0 + auth sufficient pam_rootok.so + account requiredpam_permit.so +-password include system-auth ++password include common-password +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chfn shadow-4.1.4.3/etc/pam.d/chfn +--- shadow-4.1.4.3/etc/pam.d.orig/chfn 2011-07-20 19:02:27.384844958 +0800 shadow-4.1.4.3/etc/pam.d/chfn 2011-07-20 19:03:17.804844958 +0800 +@@ -1,4 +1,4 @@ + #%PAM-1.0 + auth sufficient pam_rootok.so + account requiredpam_permit.so +-password include system-auth ++password include common-password +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chgpasswd shadow-4.1.4.3/etc/pam.d/chgpasswd +--- shadow-4.1.4.3/etc/pam.d.orig/chgpasswd2011-07-20 19:02:27.384844958 +0800 shadow-4.1.4.3/etc/pam.d/chgpasswd 2011-07-20 19:03:26.544844958 +0800 +@@ -1,4 +1,4 @@ + #%PAM-1.0 + auth sufficient pam_rootok.so + account requiredpam_permit.so +-password include system-auth ++password include common-password +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chpasswd shadow-4.1.4.3/etc/pam.d/chpasswd +--- shadow-4.1.4.3/etc/pam.d.orig/chpasswd 2011-07-20 19:02:27.384844958 +0800 shadow-4.1.4.3/etc/pam.d/chpasswd 2011-07-20 19:03:42.724844958 +0800 +@@ -1,4 +1,4 @@ + #%PAM-1.0 + auth sufficient pam_rootok.so + account requiredpam_permit.so +-password include system-auth ++password include common-password +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chsh shadow-4.1.4.3/etc/pam.d/chsh +--- shadow-4.1.4.3/etc/pam.d.orig/chsh 2011-07-20 19:02:27.384844958 +0800 shadow-4.1.4.3/etc/pam.d/chsh 2011-07-20 19:03:51.524844958 +0800 +@@ -1,4 +1,4 @@ + #%PAM-1.0 + auth sufficient pam_rootok.so + account requiredpam_permit.so +-password include system-auth ++password include common-password +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/groupadd shadow-4.1.4.3/etc/pam.d/groupadd +--- shadow-4.1.4.3/etc/pam.d.orig/groupadd 2011-07-20 19:02:27.384844958 +0800 shadow-4.1.4.3/etc/pam.d/groupadd 2011-07-20 19:04:08.124844958 +0800 +@@ -1,4 +1,4 @@ + #%PAM-1.0 + auth sufficient pam_rootok.so + account requiredpam_permit.so +-password include system-auth ++password include common-password +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/groupdel shadow-4.1.4.3/etc/pam.d/groupdel +--- shadow-4.1.4.3/etc/pam.d.orig/groupdel 2011-07-20 19:02:27.384844958 +0800 shadow-4.1.4.3/etc/pam.d/groupdel 2011-07-20 19:04:26.114844958 +0800 +@@ -1,4 +1,4 @@ + #%PAM-1.0 + auth sufficient pam_rootok.so + account requiredpam_permit.so +-password include system-auth ++password include common-password +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/groupmems shadow-4.1.4.3/etc/pam.d/groupmems +--- shadow-4.1.4.3/etc/pam.d.orig/groupmems2011-07-20 19:02:27.384844958 +0800 shadow-4.1.4.3/etc/pam.d/groupmems 2011-07-20 19:04:35.074844958 +0800 +@@ -1,4 +1,4 @@ + #%PAM-1.0 + auth sufficient pam_rootok.so + account requiredpam_permit.s
[OE-core] [PATCH] tclibc-uclibc: Fix TARGET_OS for powerpc
1a9ae8ea8c0540d41b8ff4d95c0420d6df754634 removed -uclibc hence it got all wrong for powerpc. uclibc TARGET_OS for classic ppc is linux-uclibc and for ppc w/ SPE its linux-uclibcspe Signed-off-by: Khem Raj --- meta/conf/distro/include/tclibc-uclibc.inc |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/meta/conf/distro/include/tclibc-uclibc.inc b/meta/conf/distro/include/tclibc-uclibc.inc index 2ccda5b..7c06654 100644 --- a/meta/conf/distro/include/tclibc-uclibc.inc +++ b/meta/conf/distro/include/tclibc-uclibc.inc @@ -5,7 +5,7 @@ TARGET_OS = "linux-uclibc" TARGET_OS_arm = "linux-uclibceabi" TARGET_OS_armeb = "linux-uclibceabi" -TARGET_OS_powerpc = "linux${@['','-gnuspe'][bb.data.getVar('TARGET_FPU',d,1) in ['ppc-efd', 'ppc-efs']]}" +TARGET_OS_powerpc = "linux-uclibc${@['','spe'][bb.data.getVar('TARGET_FPU',d,1) in ['ppc-efd', 'ppc-efs']]}" # Add uclibc overrides to the overrides. OVERRIDES =. "libc-uclibc:" -- 1.7.4.1 ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 00/10] works of adding packages pam support
On 2011年07月22日 11:10, Saul Wold wrote: On 07/21/2011 07:18 PM, Kang Kai wrote: On 2011年07月22日 01:02, Saul Wold wrote: On 07/21/2011 01:00 AM, Kang Kai wrote: From: Kang Kai Hi Scott, This is the current work of adding pam supports. After update libpam to 1.1.4, we enable the packages pam support. And if the pacakge doesn't have a pam configure file, import from Fedora. Kai, Thanks for this work, you have already gotten some feedback, I have a few general comments to add that are across many of these patches, so I will note them here. Whitespace: you seem to be using tabs instead of spaces, please check that you have spaces and your items are lined up. Yocto uses 4 spaces for python and bb recipes and tabs for shell scripts and shell functions in bb recipes. As has already been noted in a couple of places, ensure that you only install things pam specific when the pam DISTRO_FEATURE is enabled, there are multiple places that need this (not just the ones already noted). Worth noting here also make sure you check all your PR bumps are correct. Hi Saul, We will check the commits and send them again. Thanks for you comments. Commit messages and comments for things to oe-core should talk about oe-core not yocto or poky as this upsets people ;-) I am a little confused about this. Do you mean the commits about packages under directory meta/ should use word "oe-core" rather than Yocto? Would you like to tell me that how do you merge the commits, merge the commits to the oe-core master first and then merge the oe-core master to Yocto master or some branch? Yocto uses oe-core, so it's merged to oe-core and the the Yocto pulls from oe-core. For 1.2, we will have layering scripts that do some of this. Thanks, I got it. At the same time, tests we did are based on core-image-sato/lsb. Should we test them again base on the image create by oe-core? No need. your testing agains core-image-sato / lsb is fine. Sau! I am going to hold of on taking this series until you fix it up. Sau! Regards, Kai The following changes since commit fa4bcfdb73167f8159b88e5a4d711c0d37627a70: bb-matrix: correct BB and PM number canonicalization (2011-07-14 22:23:09 +0100) are available in the git repository at: git://git.pokylinux.org/poky-contrib kangkai/distro http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/pam-commits Kang Kai (5): libpam: update to 1.1.4 and add subpackage xtests cups: add pam support screen: add pam support sudo: add pam support shadow: update pam related configure files Wenzong Fan (2): cronie: enable PAM support for cronie at: enable pam support Xiaofeng Yan (3): dropbear: Support PAM openssh: Support PAM polkit: Support PAM .../openssh/openssh-5.8p2/sshd | 10 + meta/recipes-connectivity/openssh/openssh_5.8p2.bb | 7 +- meta/recipes-core/dropbear/dropbear.inc | 6 +- .../dropbear/dropbear/dropbear-enable-pam.patch | 21 +++ .../at/at-3.1.12/configure-add-enable-pam.patch | 23 +++ meta/recipes-extended/at/at-3.1.12/pam.conf.patch | 16 ++ meta/recipes-extended/at/at_3.1.12.bb | 13 +- .../cronie/cronie/crond_pam_config.patch | 13 ++ meta/recipes-extended/cronie/cronie_1.4.7.bb | 9 +- meta/recipes-extended/cups/cups_1.4.6.bb | 8 +- .../pam/libpam/libpam-xtests.patch | 35 .../pam/{libpam_1.1.3.bb => libpam_1.1.4.bb} | 14 +- .../polkit/polkit-0.101/polkit-1_pam.patch | 23 +++ meta/recipes-extended/polkit/polkit_0.101.bb | 6 +- .../screen/screen-4.0.3/screen.pamd | 2 + meta/recipes-extended/screen/screen_4.0.3.bb | 14 +- .../shadow/files/shadow-update-pam-conf.patch | 175 meta/recipes-extended/shadow/shadow_4.1.4.3.bb | 5 +- meta/recipes-extended/sudo/files/sudo.pamd | 6 + meta/recipes-extended/sudo/sudo_1.8.1p2.bb | 11 +- 20 files changed, 389 insertions(+), 28 deletions(-) create mode 100644 meta/recipes-connectivity/openssh/openssh-5.8p2/sshd create mode 100644 meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch create mode 100644 meta/recipes-extended/at/at-3.1.12/configure-add-enable-pam.patch create mode 100644 meta/recipes-extended/at/at-3.1.12/pam.conf.patch create mode 100644 meta/recipes-extended/cronie/cronie/crond_pam_config.patch create mode 100644 meta/recipes-extended/pam/libpam/libpam-xtests.patch rename meta/recipes-extended/pam/{libpam_1.1.3.bb => libpam_1.1.4.bb} (85%) create mode 100644 meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch create mode 100644 meta/recipes-extended/screen/screen-4.0.3/screen.pamd create mode 100644 meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch create mode 100644 meta/recipes-extended/sudo/files/sudo.pamd ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 00/10] works of adding packages pam support
On 07/21/2011 07:18 PM, Kang Kai wrote: On 2011年07月22日 01:02, Saul Wold wrote: On 07/21/2011 01:00 AM, Kang Kai wrote: From: Kang Kai Hi Scott, This is the current work of adding pam supports. After update libpam to 1.1.4, we enable the packages pam support. And if the pacakge doesn't have a pam configure file, import from Fedora. Kai, Thanks for this work, you have already gotten some feedback, I have a few general comments to add that are across many of these patches, so I will note them here. Whitespace: you seem to be using tabs instead of spaces, please check that you have spaces and your items are lined up. Yocto uses 4 spaces for python and bb recipes and tabs for shell scripts and shell functions in bb recipes. As has already been noted in a couple of places, ensure that you only install things pam specific when the pam DISTRO_FEATURE is enabled, there are multiple places that need this (not just the ones already noted). Worth noting here also make sure you check all your PR bumps are correct. Hi Saul, We will check the commits and send them again. Thanks for you comments. Commit messages and comments for things to oe-core should talk about oe-core not yocto or poky as this upsets people ;-) I am a little confused about this. Do you mean the commits about packages under directory meta/ should use word "oe-core" rather than Yocto? Would you like to tell me that how do you merge the commits, merge the commits to the oe-core master first and then merge the oe-core master to Yocto master or some branch? Yocto uses oe-core, so it's merged to oe-core and the the Yocto pulls from oe-core. For 1.2, we will have layering scripts that do some of this. At the same time, tests we did are based on core-image-sato/lsb. Should we test them again base on the image create by oe-core? No need. your testing agains core-image-sato / lsb is fine. Sau! I am going to hold of on taking this series until you fix it up. Sau! Regards, Kai The following changes since commit fa4bcfdb73167f8159b88e5a4d711c0d37627a70: bb-matrix: correct BB and PM number canonicalization (2011-07-14 22:23:09 +0100) are available in the git repository at: git://git.pokylinux.org/poky-contrib kangkai/distro http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/pam-commits Kang Kai (5): libpam: update to 1.1.4 and add subpackage xtests cups: add pam support screen: add pam support sudo: add pam support shadow: update pam related configure files Wenzong Fan (2): cronie: enable PAM support for cronie at: enable pam support Xiaofeng Yan (3): dropbear: Support PAM openssh: Support PAM polkit: Support PAM .../openssh/openssh-5.8p2/sshd | 10 + meta/recipes-connectivity/openssh/openssh_5.8p2.bb | 7 +- meta/recipes-core/dropbear/dropbear.inc | 6 +- .../dropbear/dropbear/dropbear-enable-pam.patch | 21 +++ .../at/at-3.1.12/configure-add-enable-pam.patch | 23 +++ meta/recipes-extended/at/at-3.1.12/pam.conf.patch | 16 ++ meta/recipes-extended/at/at_3.1.12.bb | 13 +- .../cronie/cronie/crond_pam_config.patch | 13 ++ meta/recipes-extended/cronie/cronie_1.4.7.bb | 9 +- meta/recipes-extended/cups/cups_1.4.6.bb | 8 +- .../pam/libpam/libpam-xtests.patch | 35 .../pam/{libpam_1.1.3.bb => libpam_1.1.4.bb} | 14 +- .../polkit/polkit-0.101/polkit-1_pam.patch | 23 +++ meta/recipes-extended/polkit/polkit_0.101.bb | 6 +- .../screen/screen-4.0.3/screen.pamd | 2 + meta/recipes-extended/screen/screen_4.0.3.bb | 14 +- .../shadow/files/shadow-update-pam-conf.patch | 175 meta/recipes-extended/shadow/shadow_4.1.4.3.bb | 5 +- meta/recipes-extended/sudo/files/sudo.pamd | 6 + meta/recipes-extended/sudo/sudo_1.8.1p2.bb | 11 +- 20 files changed, 389 insertions(+), 28 deletions(-) create mode 100644 meta/recipes-connectivity/openssh/openssh-5.8p2/sshd create mode 100644 meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch create mode 100644 meta/recipes-extended/at/at-3.1.12/configure-add-enable-pam.patch create mode 100644 meta/recipes-extended/at/at-3.1.12/pam.conf.patch create mode 100644 meta/recipes-extended/cronie/cronie/crond_pam_config.patch create mode 100644 meta/recipes-extended/pam/libpam/libpam-xtests.patch rename meta/recipes-extended/pam/{libpam_1.1.3.bb => libpam_1.1.4.bb} (85%) create mode 100644 meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch create mode 100644 meta/recipes-extended/screen/screen-4.0.3/screen.pamd create mode 100644 meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch create mode 100644 meta/recipes-extended/sudo/files/sudo.pamd ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 02/10] dropbear: Support PAM
On 2011年07月22日 10:49, Khem Raj wrote: On Thu, Jul 21, 2011 at 7:41 PM, Kang Kai wrote: On 2011年07月22日 03:10, Khem Raj wrote: On Thu, Jul 21, 2011 at 1:54 AM, Koen Kooi wrote: Op 21 jul. 2011, om 10:00 heeft Kang Kai het volgende geschreven: From: Xiaofeng Yan I make a patch and some changes in dropbear.inc for supporting pam. - Enable pam in configure - Modify file option.h to open pam supporting Signed-off-by: Xiaofeng Yan --- meta/recipes-core/dropbear/dropbear.inc|6 - .../dropbear/dropbear/dropbear-enable-pam.patch| 21 2 files changed, 26 insertions(+), 1 deletions(-) create mode 100644 meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch diff --git a/meta/recipes-core/dropbear/dropbear.inc b/meta/recipes-core/dropbear/dropbear.inc index 1b51e1a..48cefb6 100644 --- a/meta/recipes-core/dropbear/dropbear.inc +++ b/meta/recipes-core/dropbear/dropbear.inc @@ -9,13 +9,15 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3a5b0c2f0d0c49dfde9558ae2036683c" DEPENDS = "zlib" RPROVIDES = "ssh sshd" +DEPENDS += "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}" SRC_URI = "http://matt.ucc.asn.au/dropbear/releases/dropbear-${PV}.tar.gz \ file://urandom-xauth-changes-to-options.h.patch \ file://configure.patch \ file://fix-2kb-keys.patch \ file://allow-nopw.patch;apply=no \ - file://init" + file://init \ + file://dropbear-enable-pam.patch " inherit autotools update-rc.d @@ -28,6 +30,8 @@ LD = "${CC}" SBINCOMMANDS = "dropbear dropbearkey dropbearconvert" BINCOMMANDS = "dbclient ssh scp" EXTRA_OEMAKE = 'MULTI=1 SCPPROGRESS=1 PROGRAMS="${SBINCOMMANDS} ${BINCOMMANDS}"' +EXTRA_OECONF += "\ + ${@base_contains('DISTRO_FEATURES', 'pam', '--enable-pam', '--disable-pam', d)}" DISTRO_TYPE = "${@base_contains("IMAGE_FEATURES", "debug-tweaks", "debug", "",d)}" That one is missing a PR bump And does this mean that it also needs libpam in DEPENDS ? Yes, I think so. So add the +DEPENDS += "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}" and to all recipes which are modified ok, I'll check all the modified recipes. ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 02/10] dropbear: Support PAM
On Thu, Jul 21, 2011 at 7:41 PM, Kang Kai wrote: > On 2011年07月22日 03:10, Khem Raj wrote: >> >> On Thu, Jul 21, 2011 at 1:54 AM, Koen Kooi >> wrote: >>> >>> Op 21 jul. 2011, om 10:00 heeft Kang Kai het volgende geschreven: >>> From: Xiaofeng Yan I make a patch and some changes in dropbear.inc for supporting pam. - Enable pam in configure - Modify file option.h to open pam supporting Signed-off-by: Xiaofeng Yan --- meta/recipes-core/dropbear/dropbear.inc | 6 - .../dropbear/dropbear/dropbear-enable-pam.patch | 21 2 files changed, 26 insertions(+), 1 deletions(-) create mode 100644 meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch diff --git a/meta/recipes-core/dropbear/dropbear.inc b/meta/recipes-core/dropbear/dropbear.inc index 1b51e1a..48cefb6 100644 --- a/meta/recipes-core/dropbear/dropbear.inc +++ b/meta/recipes-core/dropbear/dropbear.inc @@ -9,13 +9,15 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3a5b0c2f0d0c49dfde9558ae2036683c" DEPENDS = "zlib" RPROVIDES = "ssh sshd" +DEPENDS += "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}" SRC_URI = "http://matt.ucc.asn.au/dropbear/releases/dropbear-${PV}.tar.gz \ file://urandom-xauth-changes-to-options.h.patch \ file://configure.patch \ file://fix-2kb-keys.patch \ file://allow-nopw.patch;apply=no \ - file://init" + file://init \ + file://dropbear-enable-pam.patch " inherit autotools update-rc.d @@ -28,6 +30,8 @@ LD = "${CC}" SBINCOMMANDS = "dropbear dropbearkey dropbearconvert" BINCOMMANDS = "dbclient ssh scp" EXTRA_OEMAKE = 'MULTI=1 SCPPROGRESS=1 PROGRAMS="${SBINCOMMANDS} ${BINCOMMANDS}"' +EXTRA_OECONF += "\ + ${@base_contains('DISTRO_FEATURES', 'pam', '--enable-pam', '--disable-pam', d)}" DISTRO_TYPE = "${@base_contains("IMAGE_FEATURES", "debug-tweaks", "debug", "",d)}" >>> >>> That one is missing a PR bump >> >> And does this mean that it also needs libpam in DEPENDS ? > > Yes, I think so. So add the > > +DEPENDS += "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}" and to all recipes which are modified > > >>> ___ >>> Openembedded-core mailing list >>> Openembedded-core@lists.openembedded.org >>> http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core >>> >> ___ >> Openembedded-core mailing list >> Openembedded-core@lists.openembedded.org >> http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core > > > ___ > Openembedded-core mailing list > Openembedded-core@lists.openembedded.org > http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core > ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 02/10] dropbear: Support PAM
On 2011年07月22日 03:10, Khem Raj wrote: On Thu, Jul 21, 2011 at 1:54 AM, Koen Kooi wrote: Op 21 jul. 2011, om 10:00 heeft Kang Kai het volgende geschreven: From: Xiaofeng Yan I make a patch and some changes in dropbear.inc for supporting pam. - Enable pam in configure - Modify file option.h to open pam supporting Signed-off-by: Xiaofeng Yan --- meta/recipes-core/dropbear/dropbear.inc|6 - .../dropbear/dropbear/dropbear-enable-pam.patch| 21 2 files changed, 26 insertions(+), 1 deletions(-) create mode 100644 meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch diff --git a/meta/recipes-core/dropbear/dropbear.inc b/meta/recipes-core/dropbear/dropbear.inc index 1b51e1a..48cefb6 100644 --- a/meta/recipes-core/dropbear/dropbear.inc +++ b/meta/recipes-core/dropbear/dropbear.inc @@ -9,13 +9,15 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3a5b0c2f0d0c49dfde9558ae2036683c" DEPENDS = "zlib" RPROVIDES = "ssh sshd" +DEPENDS += "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}" SRC_URI = "http://matt.ucc.asn.au/dropbear/releases/dropbear-${PV}.tar.gz \ file://urandom-xauth-changes-to-options.h.patch \ file://configure.patch \ file://fix-2kb-keys.patch \ file://allow-nopw.patch;apply=no \ - file://init" + file://init \ + file://dropbear-enable-pam.patch " inherit autotools update-rc.d @@ -28,6 +30,8 @@ LD = "${CC}" SBINCOMMANDS = "dropbear dropbearkey dropbearconvert" BINCOMMANDS = "dbclient ssh scp" EXTRA_OEMAKE = 'MULTI=1 SCPPROGRESS=1 PROGRAMS="${SBINCOMMANDS} ${BINCOMMANDS}"' +EXTRA_OECONF += "\ + ${@base_contains('DISTRO_FEATURES', 'pam', '--enable-pam', '--disable-pam', d)}" DISTRO_TYPE = "${@base_contains("IMAGE_FEATURES", "debug-tweaks", "debug", "",d)}" That one is missing a PR bump And does this mean that it also needs libpam in DEPENDS ? Yes, I think so. So add the +DEPENDS += "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}" ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 00/10] works of adding packages pam support
On 2011年07月22日 01:02, Saul Wold wrote: On 07/21/2011 01:00 AM, Kang Kai wrote: From: Kang Kai Hi Scott, This is the current work of adding pam supports. After update libpam to 1.1.4, we enable the packages pam support. And if the pacakge doesn't have a pam configure file, import from Fedora. Kai, Thanks for this work, you have already gotten some feedback, I have a few general comments to add that are across many of these patches, so I will note them here. Whitespace: you seem to be using tabs instead of spaces, please check that you have spaces and your items are lined up. Yocto uses 4 spaces for python and bb recipes and tabs for shell scripts and shell functions in bb recipes. As has already been noted in a couple of places, ensure that you only install things pam specific when the pam DISTRO_FEATURE is enabled, there are multiple places that need this (not just the ones already noted). Worth noting here also make sure you check all your PR bumps are correct. Hi Saul, We will check the commits and send them again. Thanks for you comments. Commit messages and comments for things to oe-core should talk about oe-core not yocto or poky as this upsets people ;-) I am a little confused about this. Do you mean the commits about packages under directory meta/ should use word "oe-core" rather than Yocto? Would you like to tell me that how do you merge the commits, merge the commits to the oe-core master first and then merge the oe-core master to Yocto master or some branch? At the same time, tests we did are based on core-image-sato/lsb. Should we test them again base on the image create by oe-core? I am going to hold of on taking this series until you fix it up. Sau! Regards, Kai The following changes since commit fa4bcfdb73167f8159b88e5a4d711c0d37627a70: bb-matrix: correct BB and PM number canonicalization (2011-07-14 22:23:09 +0100) are available in the git repository at: git://git.pokylinux.org/poky-contrib kangkai/distro http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/pam-commits Kang Kai (5): libpam: update to 1.1.4 and add subpackage xtests cups: add pam support screen: add pam support sudo: add pam support shadow: update pam related configure files Wenzong Fan (2): cronie: enable PAM support for cronie at: enable pam support Xiaofeng Yan (3): dropbear: Support PAM openssh: Support PAM polkit: Support PAM .../openssh/openssh-5.8p2/sshd | 10 + meta/recipes-connectivity/openssh/openssh_5.8p2.bb | 7 +- meta/recipes-core/dropbear/dropbear.inc | 6 +- .../dropbear/dropbear/dropbear-enable-pam.patch | 21 +++ .../at/at-3.1.12/configure-add-enable-pam.patch | 23 +++ meta/recipes-extended/at/at-3.1.12/pam.conf.patch | 16 ++ meta/recipes-extended/at/at_3.1.12.bb | 13 +- .../cronie/cronie/crond_pam_config.patch | 13 ++ meta/recipes-extended/cronie/cronie_1.4.7.bb | 9 +- meta/recipes-extended/cups/cups_1.4.6.bb | 8 +- .../pam/libpam/libpam-xtests.patch | 35 .../pam/{libpam_1.1.3.bb => libpam_1.1.4.bb} | 14 +- .../polkit/polkit-0.101/polkit-1_pam.patch | 23 +++ meta/recipes-extended/polkit/polkit_0.101.bb | 6 +- .../screen/screen-4.0.3/screen.pamd | 2 + meta/recipes-extended/screen/screen_4.0.3.bb | 14 +- .../shadow/files/shadow-update-pam-conf.patch | 175 meta/recipes-extended/shadow/shadow_4.1.4.3.bb | 5 +- meta/recipes-extended/sudo/files/sudo.pamd | 6 + meta/recipes-extended/sudo/sudo_1.8.1p2.bb | 11 +- 20 files changed, 389 insertions(+), 28 deletions(-) create mode 100644 meta/recipes-connectivity/openssh/openssh-5.8p2/sshd create mode 100644 meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch create mode 100644 meta/recipes-extended/at/at-3.1.12/configure-add-enable-pam.patch create mode 100644 meta/recipes-extended/at/at-3.1.12/pam.conf.patch create mode 100644 meta/recipes-extended/cronie/cronie/crond_pam_config.patch create mode 100644 meta/recipes-extended/pam/libpam/libpam-xtests.patch rename meta/recipes-extended/pam/{libpam_1.1.3.bb => libpam_1.1.4.bb} (85%) create mode 100644 meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch create mode 100644 meta/recipes-extended/screen/screen-4.0.3/screen.pamd create mode 100644 meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch create mode 100644 meta/recipes-extended/sudo/files/sudo.pamd ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [RFC][PATCH 4/4] site/powerpc*-linux: refactor needed options that are common
On 07/21/2011 03:30 PM, Kumar Gala wrote: > Pulled common options that are needed for powerpc64-linux to build > out of powerpc32-linux and put them into powerpc-linux. > > Signed-off-by: Kumar Gala NAK. Almost all of the stuff going into powerpc-linux really belongs in common-linux or common-glibc. Some other tasks held me up here but I plan to post the series moving these bits over and dropping them from the arch files tomorrow. Rest of the series looks good tho -- Tom Rini Mentor Graphics Corporation ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] siteinfo split between powerpc-common & powerpc-linux
On Jul 21, 2011, at 1:24 PM, Tom Rini wrote: > On 07/21/2011 11:20 AM, Khem Raj wrote: >> On Thu, Jul 21, 2011 at 10:05 AM, Tom Rini wrote: >>> On 07/21/2011 09:48 AM, Khem Raj wrote: On Thu, Jul 21, 2011 at 5:17 AM, Kumar Gala wrote: > Why do we have a split between powerpc-common & powerpc-linux? > > I assume powerpc-linux is used and picked up for powerpc-linux-uclibc in > addition to normal powerpc-linux. > > I'm looking at adding powerpc64 support and powerpc-common is all kinda > of broken for it. I'd like to just merge powerpc-common & powerpc-linux > (as powerpc-linux 32-bit) for now and start a new powerpc-common that > refactors 32/64 commonalities. > > Unless someone says otherwise about the meaning of these files. powerpc-common is shared between uclibc and eglibc at present and may be shared with other OSes that may build with OE in future. traditionally powerpc-common implicitly implied 32bit so I am not surprised if its broken for ppc64. You could add powerpc64-common and leave 32bit alone. See how its done for mips64 in oe.dev http://git.openembedded.org/cgit.cgi/openembedded/tree/site >>> >>> I'd argue that what we do for mips today is also wrong and I'm going to >>> try and fix it as soon as I can. In these cases we should have: >>> common, common-linux, common-$libc, mips-common, mips-linux, >>> mips64-linux and if needed mips64-linux-libc. >> >> yes that structure would be desirable. It would need a bit of overhaul >> and lot of testing. >> since you have something setup for your import from oe stuff for same. >> may be you can take a stab at it > > Yeah, it's on my list now that the first step is really in :) I hope to > get the obvious bits rebased and tested and posted today at least, and > then get to finishing the obvious bits and start trying the less obvious > ones. Glad you fixed uclibc, btw, that had me scratching my head on a > few things we do today :) Started an initial attempt at this for PPC and posted some RFC patches. Take a look and we can go from there. - k ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [RFC][PATCH 4/4] site/powerpc*-linux: refactor needed options that are common
Pulled common options that are needed for powerpc64-linux to build out of powerpc32-linux and put them into powerpc-linux. Signed-off-by: Kumar Gala --- meta/site/powerpc-linux | 24 meta/site/powerpc32-linux | 19 --- 2 files changed, 24 insertions(+), 19 deletions(-) diff --git a/meta/site/powerpc-linux b/meta/site/powerpc-linux index e69de29..9498b8a 100644 --- a/meta/site/powerpc-linux +++ b/meta/site/powerpc-linux @@ -0,0 +1,24 @@ +ac_cv_func_getpgrp_void=yes +ac_cv_func_setpgrp_void=yes +ac_cv_func_setgrent_void=yes +ac_cv_func_posix_getpwuid_r=${ac_cv_func_posix_getpwuid_r=yes} +ac_cv_func_posix_getgrgid_r=${ac_cv_func_posix_getgrgid_r=yes} + +# bash +bash_cv_have_mbstate_t=${bash_cv_have_mbstate_t=yes} + +# startup-notification +lf_cv_sane_realloc=yes + +# flex +ac_cv_func_realloc_works=${ac_cv_func_realloc_works=yes} +ac_cv_func_realloc_0_nonnull=${ac_cv_func_realloc_0_nonnull=yes} + +# glib +glib_cv_stack_grows=${glib_cv_stack_grows=no} +glib_cv_uscore=${glib_cv_uscore=no} +ac_cv_func_getpwuid_r=${ac_cv_func_getpwuid_r=yes} + +# popt/rpm +ac_cv_va_copy=${ac_cv_va_copy=yes} +ac_cv___va_copy=${ac_cv___va_copy=yes} diff --git a/meta/site/powerpc32-linux b/meta/site/powerpc32-linux index bd45ea6..33ad786 100644 --- a/meta/site/powerpc32-linux +++ b/meta/site/powerpc32-linux @@ -1,10 +1,5 @@ -ac_cv_func_getpgrp_void=yes -ac_cv_func_setpgrp_void=yes -ac_cv_func_setgrent_void=yes ac_cv_func_malloc_0_nonnull=yes ac_cv_func_malloc_works=yes -ac_cv_func_posix_getgrgid_r=${ac_cv_func_posix_getgrgid_r=yes} -ac_cv_func_posix_getpwuid_r=${ac_cv_func_posix_getpwuid_r=yes} ac_cv_func_setvbuf_reversed=no ac_cv_sizeof___int64=${ac_cv_sizeof___int64=0} ac_cv_sizeof_bool=${ac_cv_sizeof_bool=1} @@ -128,20 +123,16 @@ am_cv_func_working_getline=${am_cv_func_working_getline=yes} # glib glib_cv_sizeof_gmutex=${glib_cv_sizeof_gmutex=24} glib_cv_sizeof_system_thread=${glib_cv_sizeof_system_thread=4} -glib_cv_stack_grows=${glib_cv_stack_grows=no} -glib_cv_uscore=${glib_cv_uscore=no} glib_cv_use_pid_surrogate=${glib_cv_use_pid_surrogate=yes} glib_cv_has__inline=${glib_cv_has__inline=yes} glib_cv_has__inline__=${glib_cv_has__inline__=yes} glib_cv_hasinline=${glib_cv_hasinline=yes} glib_cv_sane_realloc=${glib_cv_sane_realloc=yes} glib_cv_sizeof_gmutex=${glib_cv_sizeof_gmutex=24} -glib_cv_uscore=${glib_cv_uscore=no} glib_cv_va_copy=${glib_cv_va_copy=no} glib_cv_va_val_copy=${glib_cv_va_val_copy=yes} glib_cv___va_copy=${glib_cv___va_copy=yes} glib_cv_rtldglobal_broken=${glib_cv_rtldglobal_broken=no} -ac_cv_func_getpwuid_r=${ac_cv_func_getpwuid_r=yes} glib_cv_sys_pthread_mutex_trylock_posix=${glib_cv_sys_pthread_mutex_trylock_posix=yes} glib_cv_sys_pthread_getspecific_posix=${glib_cv_sys_pthread_getspecific_posix=yes} glib_cv_sys_pthread_cond_timedwait_posix=${glib_cv_sys_pthread_cond_timedwait_posix=yes} @@ -187,14 +178,9 @@ compat_cv_func_dirname_works=${compat_cv_func_dirname_works=no} slrn_cv___va_copy=${slrn_cv___va_copy=yes} slrn_cv_va_copy=${slrn_cv_va_copy=no} slrn_cv_va_val_copy=${slrn_cv_va_val_copy=yes} -ac_cv_func_realloc_works=${ac_cv_func_realloc_works=yes} -ac_cv_func_realloc_0_nonnull=${ac_cv_func_realloc_0_nonnull=yes} ac_cv_func_malloc_works=${ac_cv_func_malloc_works=yes} ac_cv_func_malloc_0_nonnull=${ac_cv_func_malloc_0_nonnull=yes} -# startup-notification -lf_cv_sane_realloc=yes - # libidl libIDL_cv_long_long_format=${libIDL_cv_long_long_format=ll} @@ -218,7 +204,6 @@ cvs_cv_func_printf_ptr=${cvs_cv_func_printf_ptr=yes} # bash ac_cv_c_long_double=${ac_cv_c_long_double=yes} -bash_cv_have_mbstate_t=${bash_cv_have_mbstate_t=yes} bash_cv_func_sigsetjmp=${bash_cv_func_sigsetjmp=missing} bash_cv_must_reinstall_sighandlers=${bash_cv_must_reinstall_sighandlers=no} bash_cv_func_strcoll_broken=${bash_cv_func_strcoll_broken=no} @@ -341,7 +326,3 @@ libc_cv_ppc_machine=${libc_cv_ppc_machine=yes} libc_cv_mlong_double_128ibm=${libc_cv_mlong_double_128ibm=yes} libc_cv_mabi_ibmlongdouble=${libc_cv_mabi_ibmlongdouble=yes} libc_cv_mlong_double_128=${libc_cv_mlong_double_128=yes} - -# popt -ac_cv_va_copy=${ac_cv_va_copy=yes} -ac_cv___va_copy=${ac_cv___va_copy=yes} -- 1.7.3.4 ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [RFC][PATCH 2/4] site/powerpc32-linux: Update with ac_cv_sizeof_* from eglibc
Signed-off-by: Kumar Gala --- meta/site/powerpc32-linux | 17 + 1 files changed, 13 insertions(+), 4 deletions(-) diff --git a/meta/site/powerpc32-linux b/meta/site/powerpc32-linux index 433ccef..bd45ea6 100644 --- a/meta/site/powerpc32-linux +++ b/meta/site/powerpc32-linux @@ -9,21 +9,30 @@ ac_cv_func_setvbuf_reversed=no ac_cv_sizeof___int64=${ac_cv_sizeof___int64=0} ac_cv_sizeof_bool=${ac_cv_sizeof_bool=1} ac_cv_sizeof_char=${ac_cv_sizeof_char=1} +ac_cv_sizeof_char_p=${ac_cv_sizeof_char_p=4} ac_cv_sizeof_double=${ac_cv_sizeof_double=8} +ac_cv_sizeof_float=${ac_cv_sizeof_float=4} ac_cv_sizeof_int=${ac_cv_sizeof_int=4} ac_cv_sizeof_int_p=${ac_cv_sizeof_int_p=4} -ac_cv_sizeof_float=${ac_cv_sizeof_float=4} ac_cv_sizeof_long=${ac_cv_sizeof_long=4} +ac_cv_sizeof_long_p=${ac_cv_sizeof_long_p=4} +ac_cv_sizeof_long_double=${ac_cv_sizeof_long_double=16} ac_cv_sizeof_long_int=${ac_cv_sizeof_long_int=4} ac_cv_sizeof_long_long=${ac_cv_sizeof_long_long=8} +ac_cv_sizeof_long_long_int=${ac_cv_sizeof_long_long_int=8} ac_cv_sizeof_short=${ac_cv_sizeof_short=2} -ac_cv_sizeof_unsigned_char=${ac_cv_sizeof_unsigned_char=1} ac_cv_sizeof_short_int=${ac_cv_sizeof_short_int=2} +ac_cv_sizeof_signed_char=${ac_cv_sizeof_signed_char=1} ac_cv_sizeof_size_t=${ac_cv_sizeof_size_t=4} +ac_cv_sizeof_unsigned_char=${ac_cv_sizeof_unsigned_char=1} +ac_cv_sizeof_unsigned_int=${ac_cv_sizeof_unsigned_int=4} +ac_cv_sizeof_unsigned_long=${ac_cv_sizeof_unsigned_long=4} +ac_cv_sizeof_unsigned_long_int=${ac_cv_sizeof_unsigned_long_int=4} +ac_cv_sizeof_unsigned_long_long_int=${ac_cv_sizeof_unsigned_long_long_int=8} +ac_cv_sizeof_unsigned_short=${ac_cv_sizeof_unsigned_short=2} +ac_cv_sizeof_unsigned_short_int=${ac_cv_sizeof_unsigned_short_int=2} ac_cv_sizeof_void_p=${ac_cv_sizeof_void_p=4} -ac_cv_sizeof_long_p=${ac_cv_sizeof_long_p=4} ac_cv_sizeof_wchar_t=${ac_cv_sizeof_wchar_t=4} -ac_cv_sizeof_long_double=${ac_cv_sizeof_long_double=8} ac_cv_sys_restartable_syscalls=yes ac_cv_type___int64=${ac_cv_type___int64=no} ac_cv_type_size_t=${ac_cv_type_size_t=yes} -- 1.7.3.4 ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [RFC][PATCH 3/4] site/powerpc64-linux: Start initial site config
Use ac_cv_sizeof_* from eglibc as starting point for powerpc64-linux site info. We will refactor common bits that are needed out of powerpc32-linux based on build issues. Signed-off-by: Kumar Gala --- meta/site/powerpc64-linux | 21 + 1 files changed, 21 insertions(+), 0 deletions(-) create mode 100644 meta/site/powerpc64-linux diff --git a/meta/site/powerpc64-linux b/meta/site/powerpc64-linux new file mode 100644 index 000..9430ea1 --- /dev/null +++ b/meta/site/powerpc64-linux @@ -0,0 +1,21 @@ +ac_cv_sizeof_char=${ac_cv_sizeof_char=1} +ac_cv_sizeof_char_p=${ac_cv_sizeof_char_p=8} +ac_cv_sizeof_double=${ac_cv_sizeof_double=8} +ac_cv_sizeof_float=${ac_cv_sizeof_float=4} +ac_cv_sizeof_int=${ac_cv_sizeof_int=4} +ac_cv_sizeof_long=${ac_cv_sizeof_long=8} +ac_cv_sizeof_long_double=${ac_cv_sizeof_long_double=16} +ac_cv_sizeof_long_int=${ac_cv_sizeof_long_int=8} +ac_cv_sizeof_long_long=${ac_cv_sizeof_long_long=8} +ac_cv_sizeof_long_long_int=${ac_cv_sizeof_long_long_int=8} +ac_cv_sizeof_short=${ac_cv_sizeof_short=2} +ac_cv_sizeof_short_int=${ac_cv_sizeof_short_int=2} +ac_cv_sizeof_signed_char=${ac_cv_sizeof_signed_char=1} +ac_cv_sizeof_unsigned_char=${ac_cv_sizeof_unsigned_char=1} +ac_cv_sizeof_unsigned_int=${ac_cv_sizeof_unsigned_int=4} +ac_cv_sizeof_unsigned_long=${ac_cv_sizeof_unsigned_long=8} +ac_cv_sizeof_unsigned_long_int=${ac_cv_sizeof_unsigned_long_int=8} +ac_cv_sizeof_unsigned_long_long_int=${ac_cv_sizeof_unsigned_long_long_int=8} +ac_cv_sizeof_unsigned_short=${ac_cv_sizeof_unsigned_short=2} +ac_cv_sizeof_unsigned_short_int=${ac_cv_sizeof_unsigned_short_int=2} +ac_cv_sizeof_void_p=${ac_cv_sizeof_void_p=8} -- 1.7.3.4 ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [RFC][PATCH 1/4] site/powerpc: Pull all powerpc config options into powerpc32-linux
powerpc-common was really Linux PPC32 specific. So move all the options in it to powerpc32-linux and we can refactor out common bits shared between into powerpc-linux and powerpc-common. Signed-off-by: Kumar Gala --- meta/classes/siteinfo.bbclass |4 +- meta/site/powerpc-common | 328 --- meta/site/powerpc-linux |9 - meta/site/powerpc32-linux | 338 + 4 files changed, 340 insertions(+), 339 deletions(-) create mode 100644 meta/site/powerpc32-linux diff --git a/meta/classes/siteinfo.bbclass b/meta/classes/siteinfo.bbclass index ff9fd0d..d0d405a 100644 --- a/meta/classes/siteinfo.bbclass +++ b/meta/classes/siteinfo.bbclass @@ -33,10 +33,10 @@ def siteinfo_data(d): "mips64": "endian-big bit-64 mips64-common", "mips64el": "endian-little bit-64 mips64-common", "mipsel": "endian-little bit-32 mips-common", -"powerpc": "endian-big bit-32 powerpc-common", +"powerpc": "endian-big bit-32 powerpc-common powerpc32-linux", "nios2": "endian-little bit-32 nios2-common", "powerpc64": "endian-big bit-64 powerpc-common powerpc64-linux", -"ppc": "endian-big bit-32 powerpc-common", +"ppc": "endian-big bit-32 powerpc-common powerpc32-linux", "ppc64": "endian-big bit-64 powerpc-common powerpc64-linux", "sh3": "endian-little bit-32 sh-common", "sh4": "endian-little bit-32 sh-common", diff --git a/meta/site/powerpc-common b/meta/site/powerpc-common index 4d0378b..e69de29 100644 --- a/meta/site/powerpc-common +++ b/meta/site/powerpc-common @@ -1,328 +0,0 @@ -ac_cv_func_getpgrp_void=yes -ac_cv_func_setpgrp_void=yes -ac_cv_func_setgrent_void=yes -ac_cv_func_malloc_0_nonnull=yes -ac_cv_func_malloc_works=yes -ac_cv_func_posix_getgrgid_r=${ac_cv_func_posix_getgrgid_r=yes} -ac_cv_func_posix_getpwuid_r=${ac_cv_func_posix_getpwuid_r=yes} -ac_cv_func_setvbuf_reversed=no -ac_cv_sizeof___int64=${ac_cv_sizeof___int64=0} -ac_cv_sizeof_bool=${ac_cv_sizeof_bool=1} -ac_cv_sizeof_char=${ac_cv_sizeof_char=1} -ac_cv_sizeof_double=${ac_cv_sizeof_double=8} -ac_cv_sizeof_int=${ac_cv_sizeof_int=4} -ac_cv_sizeof_int_p=${ac_cv_sizeof_int_p=4} -ac_cv_sizeof_float=${ac_cv_sizeof_float=4} -ac_cv_sizeof_long=${ac_cv_sizeof_long=4} -ac_cv_sizeof_long_int=${ac_cv_sizeof_long_int=4} -ac_cv_sizeof_long_long=${ac_cv_sizeof_long_long=8} -ac_cv_sizeof_short=${ac_cv_sizeof_short=2} -ac_cv_sizeof_unsigned_char=${ac_cv_sizeof_unsigned_char=1} -ac_cv_sizeof_short_int=${ac_cv_sizeof_short_int=2} -ac_cv_sizeof_size_t=${ac_cv_sizeof_size_t=4} -ac_cv_sizeof_void_p=${ac_cv_sizeof_void_p=4} -ac_cv_sizeof_long_p=${ac_cv_sizeof_long_p=4} -ac_cv_sizeof_wchar_t=${ac_cv_sizeof_wchar_t=4} -ac_cv_sizeof_long_double=${ac_cv_sizeof_long_double=8} -ac_cv_sys_restartable_syscalls=yes -ac_cv_type___int64=${ac_cv_type___int64=no} -ac_cv_type_size_t=${ac_cv_type_size_t=yes} -ac_cv_type_void_p=${ac_cv_type_void_p=yes} -ac_cv_uchar=${ac_cv_uchar=no} -ac_cv_uint=${ac_cv_uint=yes} -ac_cv_ulong=${ac_cv_ulong=yes} -ac_cv_ushort=${ac_cv_ushort=yes} -ac_cv_time_r_type=${ac_cv_time_r_type=POSIX} -cookie_io_functions_use_off64_t=${cookie_io_functions_use_off64_t=yes} - - -# apache -ac_cv_func_pthread_key_delete=${ac_cv_func_pthread_key_delete=yes} -apr_cv_process_shared_works=${apr_cv_process_shared_works=no} -ac_cv_sizeof_ssize_t=${ac_cv_sizeof_ssize_t=4} - -ac_cv_header_netinet_sctp_h=${ac_cv_header_netinet_sctp_h=no} -ac_cv_header_netinet_sctp_uio_h=${ac_cv_header_netinet_sctp_uio_h=no} -ac_cv_sctp=${ac_cv_sctp=no} - -# ssh -ac_cv_have_space_d_name_in_struct_dirent=${ac_cv_dirent_have_space_d_name=yes} -ac_cv_have_broken_snprintf=${ac_cv_have_broken_snprintf=no} -ac_cv_have_accrights_in_msghdr=${ac_cv_have_accrights_in_msghdr=no} -ac_cv_have_control_in_msghdr=${ac_cv_have_control_in_msghdr=yes} -ac_cv_type_struct_timespec=${ac_cv_type_struct_timespec=yes} -ac_cv_have_openpty_ctty_bug=${ac_cv_have_openpty_ctty_bug=yes} - -# coreutils -utils_cv_sys_open_max=${utils_cv_sys_open_max=1019} - -# libpcap -ac_cv_linux_vers=${ac_cv_linux_vers=2} - -# nano -ac_cv_regexec_segfault_emptystr=${ac_cv_regexec_segfault_emptystr=no} -nano_cv_func_regexec_segv_emptystr=${nano_cv_func_regexec_segv_emptystr=no} - - -# libnet -ac_libnet_have_packet_socket=${ac_libnet_have_packet_socket=yes} - -# screen -screen_cv_sys_bcopy_overlap=${screen_cv_sys_bcopy_overlap=no} -screen_cv_sys_memcpy_overlap=${screen_cv_sys_memcpy_overlap=no} -screen_cv_sys_memmove_overlap=${screen_cv_sys_memmove_overlap=no} -screen_cv_sys_fifo_broken_impl=${screen_cv_sys_fifo_broken_impl=yes} -screen_cv_sys_fifo_usable=${screen_cv_sys_fifo_usable=yes} -screen_cv_sys_select_broken_retval=${screen_cv_sys_select_broken_retval=no} -screen_cv_sys_sockets_nofs=${screen_cv_sys_sockets_nofs=no} -screen_cv_sys_sockets_usable=${screen_cv_sys_sockets_usable=yes} -screen_cv_sys_terminfo_used=${screen_cv_sys_terminfo_used=yes} - -ac_cv_func_lstat_deref
Re: [OE-core] [PATCH 00/10] Small fixes
On Thu, 2011-07-21 at 09:44 -0700, Khem Raj wrote: > On Thu, Jul 21, 2011 at 2:39 AM, Richard Purdie > wrote: > > On Thu, 2011-07-21 at 08:11 +0200, Martin Jansa wrote: > >> On Wed, Jul 20, 2011 at 05:54:55PM -0700, Tom Rini wrote: > >> > On 07/20/2011 05:18 PM, Khem Raj wrote: > >> > > On 07/20/2011 02:06 PM, Martin Jansa wrote: > >> > >> Fixes for recipes using intltool, distributions not having locales > >> > >> support in libc and distutils fix > >> > >> > >> > >> The following changes since commit > >> > >> 0d03800caffc2341b74190d38f7a372223c89f4c: > >> > >> > >> > >>lsbsetup_1.0.bb: Change the hardcoded /usr/lib to support multilib > >> > >> (2011-07-20 15:43:43 +0100) > >> > >> > >> > >> are available in the git repository at: > >> > >>git://git.openembedded.org/openembedded-core-contrib jansa/pull > >> > >> > >> > >> http://cgit.openembedded.org/cgit.cgi/openembedded-core-contrib/log/?h=jansa/pull > >> > >> > >> > >> > >> > >> Martin Jansa (10): > >> > >>tcmode-default: set preferred version also for (e)glibc-locale > >> > >>eglibc-package: don't fail without localedef/gconv > >> > >>intltool: inherit perlnative > >> > >>polkit: inherit perlnative > >> > >>shared-mime-info: inherit perlnative > >> > >>xkeyboard-config: inherit perlnative > >> > >>avahi: inherit perlnative > >> > >>vte: inherit perlnative > >> > > > >> > > I guess all inherit perlnative patches can me squashed into one > >> > > >> > Or not done? :) > >> > >> I still see this issue, with > >> http://patches.openembedded.org/patch/8069/ > >> applied. > > > > I'm wondering if a better approach to fixing this might be to change > > intltool.m4 so where it says AC_PATH_PROG(INTLTOOL_PERL, perl), it says > > AC_PATH_PROG(INTLTOOL_PERL, nativeperl) instead, at least in the > > sysroot. > > > > yeah though it wont work for folks who would want to use intltool on the > target > unless nativeperl is installed on target too Well, this change should only affect the sysroot install, not the target device. Cheers, Richard ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH v2] libiconv: Fix build failure on 1.13.1
On Thu, 2011-07-21 at 14:23 -0700, Khem Raj wrote: > It needs a different patch for 1.13.1 for autoconf'ing > Rename files to libiconv-1.11.1 and have a separate > directory for libiconv-1.13.1 > > Signed-off-by: Khem Raj > --- > .../{files => libiconv-1.11.1}/autoconf.patch |0 > .../shared_preloadable_libiconv_linux.patch|0 > .../{files => libiconv-1.13.1}/autoconf.patch | 32 > ++-- > meta/recipes-support/libiconv/libiconv_1.13.1.bb |3 +- > 4 files changed, 17 insertions(+), 18 deletions(-) > copy meta/recipes-support/libiconv/{files => libiconv-1.11.1}/autoconf.patch > (100%) > rename meta/recipes-support/libiconv/{files => > libiconv-1.11.1}/shared_preloadable_libiconv_linux.patch (100%) > rename meta/recipes-support/libiconv/{files => > libiconv-1.13.1}/autoconf.patch (57%) Merged to master, thanks. Richard ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [CONSOLIDATED PULL 14/20] Make intltool use perlnative instead of perl on host
On Thu, 2011-07-21 at 11:57 -0700, Tom Rini wrote: > On 07/21/2011 11:47 AM, Khem Raj wrote: > > On Thu, Jul 21, 2011 at 12:53 AM, Saul Wold wrote: > >> > >> -inherit autotools pkgconfig > >> +inherit autotools pkgconfig perlnative > >> > >> export PERL_virtclass-native = "/usr/bin/env perl" > > > > is the above line still needed > > It's actively wrong now and needs to be /usr/bin/env nativeperl (which > is a wrapper script to get to perl-native/perl). Patch please :) Cheers, Richard ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH v2] libiconv: Fix build failure on 1.13.1
It needs a different patch for 1.13.1 for autoconf'ing Rename files to libiconv-1.11.1 and have a separate directory for libiconv-1.13.1 Signed-off-by: Khem Raj --- .../{files => libiconv-1.11.1}/autoconf.patch |0 .../shared_preloadable_libiconv_linux.patch|0 .../{files => libiconv-1.13.1}/autoconf.patch | 32 ++-- meta/recipes-support/libiconv/libiconv_1.13.1.bb |3 +- 4 files changed, 17 insertions(+), 18 deletions(-) copy meta/recipes-support/libiconv/{files => libiconv-1.11.1}/autoconf.patch (100%) rename meta/recipes-support/libiconv/{files => libiconv-1.11.1}/shared_preloadable_libiconv_linux.patch (100%) rename meta/recipes-support/libiconv/{files => libiconv-1.13.1}/autoconf.patch (57%) diff --git a/meta/recipes-support/libiconv/files/autoconf.patch b/meta/recipes-support/libiconv/libiconv-1.11.1/autoconf.patch similarity index 100% copy from meta/recipes-support/libiconv/files/autoconf.patch copy to meta/recipes-support/libiconv/libiconv-1.11.1/autoconf.patch diff --git a/meta/recipes-support/libiconv/files/shared_preloadable_libiconv_linux.patch b/meta/recipes-support/libiconv/libiconv-1.11.1/shared_preloadable_libiconv_linux.patch similarity index 100% rename from meta/recipes-support/libiconv/files/shared_preloadable_libiconv_linux.patch rename to meta/recipes-support/libiconv/libiconv-1.11.1/shared_preloadable_libiconv_linux.patch diff --git a/meta/recipes-support/libiconv/files/autoconf.patch b/meta/recipes-support/libiconv/libiconv-1.13.1/autoconf.patch similarity index 57% rename from meta/recipes-support/libiconv/files/autoconf.patch rename to meta/recipes-support/libiconv/libiconv-1.13.1/autoconf.patch index 3cbf549..5d34ce7 100644 --- a/meta/recipes-support/libiconv/files/autoconf.patch +++ b/meta/recipes-support/libiconv/libiconv-1.13.1/autoconf.patch @@ -1,33 +1,33 @@ It adds the variables that are needed -for autoconf 2.65 to reconfigure libiconv and defines the m4 macros +for autoconf 2.65 to reconfigure libiconv and delete the m4 macros directory. Its imported from OE. Upstream-Status: Pending Signed-off-by: Khem Raj -Index: libiconv-1.11.1/configure.ac +Index: libiconv-1.13.1/configure.ac === libiconv-1.11.1.orig/configure.ac -+++ libiconv-1.11.1/configure.ac -@@ -23,7 +23,7 @@ AC_CONFIG_AUX_DIR(build-aux) - AM_INIT_AUTOMAKE(libiconv, 1.11) - AC_CONFIG_HEADERS(config.h lib/config.h) +--- libiconv-1.13.1.orig/configure.ac libiconv-1.13.1/configure.ac +@@ -23,7 +23,7 @@ AC_CONFIG_AUX_DIR([build-aux]) + AM_INIT_AUTOMAKE([libiconv], [1.13.1]) + AC_CONFIG_HEADERS([config.h lib/config.h]) AC_PROG_MAKE_SET - +AC_CONFIG_MACRO_DIR([m4]) dnl checks for basic programs AC_PROG_CC -Index: libiconv-1.11.1/libcharset/configure.ac +Index: libiconv-1.13.1/libcharset/configure.ac === libiconv-1.11.1.orig/libcharset/configure.ac -+++ libiconv-1.11.1/libcharset/configure.ac +--- libiconv-1.13.1.orig/libcharset/configure.ac libiconv-1.13.1/libcharset/configure.ac @@ -16,17 +16,17 @@ dnl along with the GNU CHARSET Library; dnl write to the Free Software Foundation, Inc., 51 Franklin Street, dnl Fifth Floor, Boston, MA 02110-1301, USA. --AC_PREREQ(2.13) +-AC_PREREQ([2.13]) +AC_PREREQ(2.61) +AC_INIT([libcharset],[1.4] ) +AC_CONFIG_SRCDIR([lib/localcharset.c]) @@ -35,12 +35,12 @@ Index: libiconv-1.11.1/libcharset/configure.ac -PACKAGE=libcharset -VERSION=1.4 - --AC_INIT(lib/localcharset.c) - AC_CONFIG_AUX_DIR(build-aux) - AC_CONFIG_HEADER(config.h) +-AC_INIT([lib/localcharset.c]) + AC_CONFIG_AUX_DIR([build-aux]) + AC_CONFIG_HEADER([config.h]) AC_PROG_MAKE_SET --AC_SUBST(PACKAGE) --AC_SUBST(VERSION) +-AC_SUBST([PACKAGE]) +-AC_SUBST([VERSION]) +dnl AC_SUBST(PACKAGE) +dnl AC_SUBST(VERSION) + diff --git a/meta/recipes-support/libiconv/libiconv_1.13.1.bb b/meta/recipes-support/libiconv/libiconv_1.13.1.bb index 026f530..6471e32 100644 --- a/meta/recipes-support/libiconv/libiconv_1.13.1.bb +++ b/meta/recipes-support/libiconv/libiconv_1.13.1.bb @@ -11,7 +11,6 @@ LIC_FILES_CHKSUM = "file://COPYING.LIB;md5=9f604d8a4f8e74f4f5140845a21b6674 \ SRC_URI = "${GNU_MIRROR}/${BPN}/${BPN}-${PV}.tar.gz \ file://autoconf.patch \ - file://shared_preloadable_libiconv_linux.patch \ " SRC_URI[md5sum] = "7ab33ebd26687c744a37264a330bbe9a" @@ -26,5 +25,5 @@ EXTRA_OECONF += "--enable-shared --enable-static --enable-relocatable" LEAD_SONAME = "libiconv.so" do_configure_prepend () { - rm -f m4/libtool.m4 libcharset/m4/libtool.m4 + rm -f m4/libtool.m4 m4/ltoptions.m4 m4/ltsugar.m4 m4/ltversion.m4 m4/lt~obsolete.m4 libcharset/m4/libtool.m4 libcharset/m4/ltoptions.m4 libcharset/m4/ltsugar.m4 libcharset/m4/ltversion.m4 libcharset/m4/lt~obsolete.m4 } -- 1.7.4.1 ___ Openemb
Re: [OE-core] [CONSOLIDATED PULL 00/20] July 21, 2011
On Thu, 2011-07-21 at 00:52 -0700, Saul Wold wrote: > Review and tested, the inherit perlnatives are needed. > > The following changes since commit 0d03800caffc2341b74190d38f7a372223c89f4c: > > lsbsetup_1.0.bb: Change the hardcoded /usr/lib to support multilib > (2011-07-20 15:43:43 +0100) > > are available in the git repository at: > git://git.openembedded.org/openembedded-core-contrib sgw/stage > > http://cgit.openembedded.org/cgit.cgi/openembedded-core-contrib/log/?h=sgw/stage > > Martin Jansa (9): > tcmode-default: set preferred version also for (e)glibc-locale > eglibc-package: don't fail without localedef/gconv > python: save Makefile.sysroot in do_compile > python: add patch to fix cross compilation on host with linux-3.0 > polkit: inherit perlnative > shared-mime-info: inherit perlnative > xkeyboard-config: inherit perlnative > avahi: inherit perlnative > vte: inherit perlnative > > Matthew McClintock (2): > Add endianess macros used by previous endian-ness_handling.patch > Make intltool use perlnative instead of perl on host > > Saul Wold (2): > clutter-box2d: fix isfinite.patch > gettext: Add depends to gettext to avoid host contamination > > Tom Rini (7): > python-native: Mangle scripts to use /usr/bin/env python, bump PR > gnome-doc-utils: Use /usr/bin/env python in xml2po, bump PR > perl-native: Add a perl-native wrapper in the normal bindir > cpan.bbclass: Perform more mangling for perl path > icon-naming-utils-native: Fix long path to perl in icon-name-mapping > siteinfo.bbclass: Port over oe.dev logic for site files > local.conf.sample: Add a note about ASSUME_PROVIDED for help2man Thanks Saul, I merged this minus the perlnative pieces since I think we might be able to solve this in a better way and we should at least discuss that. Cheers, Richard ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] kernels
On 21 jul 2011, at 19:36, "Bruce Ashfield" wrote: > On Thu, Jul 21, 2011 at 1:23 PM, Anders Darander > wrote: >> >> On 20 jul 2011, at 22:18, "Bruce Ashfield" wrote: >> >>> On Wed, Jul 20, 2011 at 11:45 AM, Koen Kooi >>> wrote: Op 20 jul 2011, om 17:42 heeft Bruce Ashfield het volgende geschreven: > On Fri, Jul 15, 2011 at 11:36 AM, Bruce Ashfield > wrote: >> On Fri, Jul 15, 2011 at 11:02 AM, Phil Blundell wrote: >>> On Fri, 2011-07-15 at 09:51 -0400, Bruce Ashfield wrote: On Fri, Jul 15, 2011 at 9:21 AM, Phil Blundell wrote: > The other day I was working on a BSP layer for a fairly generic i586 > system and I was struck by the fact that we don't appear to have any > vanilla kernel recipes in oe-core. I had sort of expected that, to > get > a standard bzImage out, I would just need to ship an appropriate > defconfig in my layer and everything else would "just work". Hmm. Perhaps it isn't documented clearly enough as such, but the linux-yocto kernel base can work in this mode, since that was a design goal of 1.0. You pick a branch, throw in a config fragment (or defconfig if you really want) and build. The base branches in the tree are generic enough to sort a range of boards out of the box, and should form a base. >>> >>> Okay, cool. I'll give it a go and see how I get on. >>> >>> Is there a description anywhere of what the functional differences are >>> between the code in linux-yocto git and the upstream kernel.org tree? >> >> It varies, and the variables are many, so I can answer this in several >> ways. > > Following up on my own email. I'm just about to push out the 3.0 > kernel support / changes, so I'm seeing the light at the end of the tunnel > and recalled that this is still hanging a bit. > > Is there anything tangible you wanted me to do here ? Create an example ? > Write a short howto .. or something else ? A guide to make your own setup that isn't based on linux-yocto but which does work with the linux-yocto bbclass? >>> >>> That's reasonable. Once I get the imminent kernel uprev out the door, I'll >>> focus on something along these lines. >> >> That sounds good. Upon re-reading the email, I wasn't really sure if the >> intent was a guide on how to supply your own configuration, or whether it >> was intended to be about how to integrate a custom BSP-kernel (preferably >> both tarball and directly from a local git repo). If it was the first, then >> I hope that later on we'll be able to derive a guide for developing a custom >> BSP-layer (it's the kernel part I'm interested in). > > It was more the first in this case, but it can actually encompass the > second. What would be covered here would be a special case of developing > a custom layer. Taking some arbitrary source, configuration, patches, git > trees > and creating a kernel repo that would work with the linux-yocto tools and > recipes. > > The second topic of creating a custom BSP layer, doesn't (and shouldn't > normally) have to go so far. A simple branch reference, or reference to > a tree based on a known linux-yocto is all you need to build with linux-yocto > for most custom BSPs. As for the source of that custom BSP (tarball or > git) that would be covered in how to create that custom branch reference. > >> >> Preferably first a guide on how to get a custom BSP kernel built from git, >> and later on, when there both are time available as well as some more >> stabilization, how to base my own BSP kernel on linux-yocto (eg. using >> linux-yocto as the upstream repo). It's unfortunately not always that likely >> that the BSP for some products will be mainlined... > > I experience this every day as well .. bsp patches that will largely > live forever, so > I completely understand. The structure of the repos is created to manage just > this sort of nagging patch and any crimes they may have committed. So this > topic can be explicitly called out and worked on. > > The basics are covered in the existing guides, but it sounds like some end > to end use cases might be in order. Sounds good. I'll try to have a new look at the existing guides in a few weeks, but I guess that some end-to-end use cases would be helpful. Not least when it comes to try to combine a custom git repo based both on a custom BSP and linux-yocto (at least trying to sync it up to linux-yocto). I guess that I'm not alone in that I've not yet converted our old Linux recipes from oe-dev to be based on Linux-yocto (otoh, our developers are still working on our oe-dev based tree), so I'm not in a real hurry. Cheers, Anders ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org
Re: [OE-core] [CONSOLIDATED PULL 14/20] Make intltool use perlnative instead of perl on host
On 07/21/2011 11:47 AM, Khem Raj wrote: > On Thu, Jul 21, 2011 at 12:53 AM, Saul Wold wrote: >> >> -inherit autotools pkgconfig >> +inherit autotools pkgconfig perlnative >> >> export PERL_virtclass-native = "/usr/bin/env perl" > > is the above line still needed It's actively wrong now and needs to be /usr/bin/env nativeperl (which is a wrapper script to get to perl-native/perl). -- Tom Rini Mentor Graphics Corporation ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 02/10] dropbear: Support PAM
On Thu, Jul 21, 2011 at 1:54 AM, Koen Kooi wrote: > > Op 21 jul. 2011, om 10:00 heeft Kang Kai het volgende geschreven: > >> From: Xiaofeng Yan >> >> I make a patch and some changes in dropbear.inc for supporting pam. >> - Enable pam in configure >> - Modify file option.h to open pam supporting >> >> Signed-off-by: Xiaofeng Yan >> --- >> meta/recipes-core/dropbear/dropbear.inc | 6 - >> .../dropbear/dropbear/dropbear-enable-pam.patch | 21 >> >> 2 files changed, 26 insertions(+), 1 deletions(-) >> create mode 100644 >> meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch >> >> diff --git a/meta/recipes-core/dropbear/dropbear.inc >> b/meta/recipes-core/dropbear/dropbear.inc >> index 1b51e1a..48cefb6 100644 >> --- a/meta/recipes-core/dropbear/dropbear.inc >> +++ b/meta/recipes-core/dropbear/dropbear.inc >> @@ -9,13 +9,15 @@ LIC_FILES_CHKSUM = >> "file://LICENSE;md5=3a5b0c2f0d0c49dfde9558ae2036683c" >> >> DEPENDS = "zlib" >> RPROVIDES = "ssh sshd" >> +DEPENDS += "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}" >> >> SRC_URI = "http://matt.ucc.asn.au/dropbear/releases/dropbear-${PV}.tar.gz \ >> file://urandom-xauth-changes-to-options.h.patch \ >> file://configure.patch \ >> file://fix-2kb-keys.patch \ >> file://allow-nopw.patch;apply=no \ >> - file://init" >> + file://init \ >> + file://dropbear-enable-pam.patch " >> >> inherit autotools update-rc.d >> >> @@ -28,6 +30,8 @@ LD = "${CC}" >> SBINCOMMANDS = "dropbear dropbearkey dropbearconvert" >> BINCOMMANDS = "dbclient ssh scp" >> EXTRA_OEMAKE = 'MULTI=1 SCPPROGRESS=1 PROGRAMS="${SBINCOMMANDS} >> ${BINCOMMANDS}"' >> +EXTRA_OECONF += "\ >> + ${@base_contains('DISTRO_FEATURES', 'pam', '--enable-pam', >> '--disable-pam', d)}" >> >> DISTRO_TYPE = "${@base_contains("IMAGE_FEATURES", "debug-tweaks", "debug", >> "",d)}" > > That one is missing a PR bump And does this mean that it also needs libpam in DEPENDS ? > ___ > Openembedded-core mailing list > Openembedded-core@lists.openembedded.org > http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core > ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 1/2] python: fix security vulnerability
On Thu, Jul 21, 2011 at 2:29 AM, wrote: > From: Nitin A Kamble > > This Fixes bug: [Yocto #1254] > > http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1015 > > Issue #2254: Fix CGIHTTPServer information disclosure. Relative paths are > now collapsed within the url properly before looking in cgi_directories. > > Signed-off-by: Nitin A Kamble > --- > meta/recipes-devtools/python/python.inc | 2 +- > .../python/python/security_issue_2254_fix.patch | 184 > > meta/recipes-devtools/python/python_2.6.6.bb | 3 +- > 3 files changed, 187 insertions(+), 2 deletions(-) > create mode 100644 > meta/recipes-devtools/python/python/security_issue_2254_fix.patch > > diff --git a/meta/recipes-devtools/python/python.inc > b/meta/recipes-devtools/python/python.inc > index 25a458e..a6cc917 100644 > --- a/meta/recipes-devtools/python/python.inc > +++ b/meta/recipes-devtools/python/python.inc > @@ -3,7 +3,7 @@ HOMEPAGE = "http://www.python.org"; > LICENSE = "PSF" > SECTION = "devel/python" > # bump this on every change in contrib/python/generate-manifest-2.6.py > -INC_PR = "nk2" > +INC_PR = "r2" > > DEFAULT_PREFERENCE = "-26" > > diff --git > a/meta/recipes-devtools/python/python/security_issue_2254_fix.patch > b/meta/recipes-devtools/python/python/security_issue_2254_fix.patch > new file mode 100644 > index 000..0d2274a > --- /dev/null > +++ b/meta/recipes-devtools/python/python/security_issue_2254_fix.patch > @@ -0,0 +1,184 @@ > +UpstreamStatus: Backport This should be Upstream-Status I guess to match other patches that said there are few more anomalies meta/recipes-devtools/dosfstools/dosfstools/dosfstools-2.10-kernel-2.6.patch: "Upstream Status" meta/recipes-devtools/btrfs-tools/btrfs-tools/fix_use_of_gcc.patch:UpstreamStatus: Pending meta/recipes-devtools/elfutils/elfutils/fix_for_gcc-4.7.patch:UpstreamStatus: pending > +http://svn.python.org/view?view=revision&revision=71303 > + > +Issue #2254: Fix CGIHTTPServer information disclosure. Relative paths are > + now collapsed within the url properly before looking in cgi_directories. > +Signed-Off-By: Nitin A Kamble > +2011/07/19 > + > +Index: Python-2.6.6/Lib/CGIHTTPServer.py > +=== > +--- Python-2.6.6.orig/Lib/CGIHTTPServer.py > Python-2.6.6/Lib/CGIHTTPServer.py > +@@ -70,27 +70,20 @@ class CGIHTTPRequestHandler(SimpleHTTPSe > + return SimpleHTTPServer.SimpleHTTPRequestHandler.send_head(self) > + > + def is_cgi(self): > +- """Test whether self.path corresponds to a CGI script, > +- and return a boolean. > ++ """Test whether self.path corresponds to a CGI script. > + > +- This function sets self.cgi_info to a tuple (dir, rest) > +- when it returns True, where dir is the directory part before > +- the CGI script name. Note that rest begins with a > +- slash if it is not empty. > +- > +- The default implementation tests whether the path > +- begins with one of the strings in the list > +- self.cgi_directories (and the next character is a '/' > +- or the end of the string). > ++ Returns True and updates the cgi_info attribute to the tuple > ++ (dir, rest) if self.path requires running a CGI script. > ++ Returns False otherwise. > ++ > ++ The default implementation tests whether the normalized url > ++ path begins with one of the strings in self.cgi_directories > ++ (and the next character is a '/' or the end of the string). > + """ > +- > +- path = self.path > +- > +- for x in self.cgi_directories: > +- i = len(x) > +- if path[:i] == x and (not path[i:] or path[i] == '/'): > +- self.cgi_info = path[:i], path[i+1:] > +- return True > ++ splitpath = _url_collapse_path_split(self.path) > ++ if splitpath[0] in self.cgi_directories: > ++ self.cgi_info = splitpath > ++ return True > + return False > + > + cgi_directories = ['/cgi-bin', '/htbin'] > +@@ -299,6 +292,46 @@ class CGIHTTPRequestHandler(SimpleHTTPSe > + self.log_message("CGI script exited OK") > + > + > ++# TODO(gregory.p.smith): Move this into an appropriate library. > ++def _url_collapse_path_split(path): > ++ """ > ++ Given a URL path, remove extra '/'s and '.' path elements and collapse > ++ any '..' references. > ++ > ++ Implements something akin to RFC-2396 5.2 step 6 to parse relative > paths. > ++ > ++ Returns: A tuple of (head, tail) where tail is everything after the > final / > ++ and head is everything before it. Head will always start with a '/' > and, > ++ if it contains anything else, never have a trailing '/'. > ++ > ++ Raises: IndexError if too many '..' occur within the path. > ++ """ > ++ # Similar to os.path.split(os.path.normpath(path)) but specific to
Re: [OE-core] [CONSOLIDATED PULL 14/20] Make intltool use perlnative instead of perl on host
On Thu, Jul 21, 2011 at 12:53 AM, Saul Wold wrote: > > -inherit autotools pkgconfig > +inherit autotools pkgconfig perlnative > > export PERL_virtclass-native = "/usr/bin/env perl" is the above line still needed > BBCLASSEXTEND = "native" > ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] siteinfo split between powerpc-common & powerpc-linux
On 07/21/2011 11:20 AM, Khem Raj wrote: > On Thu, Jul 21, 2011 at 10:05 AM, Tom Rini wrote: >> On 07/21/2011 09:48 AM, Khem Raj wrote: >>> On Thu, Jul 21, 2011 at 5:17 AM, Kumar Gala >>> wrote: Why do we have a split between powerpc-common & powerpc-linux? I assume powerpc-linux is used and picked up for powerpc-linux-uclibc in addition to normal powerpc-linux. I'm looking at adding powerpc64 support and powerpc-common is all kinda of broken for it. I'd like to just merge powerpc-common & powerpc-linux (as powerpc-linux 32-bit) for now and start a new powerpc-common that refactors 32/64 commonalities. Unless someone says otherwise about the meaning of these files. >>> >>> powerpc-common is shared between uclibc and eglibc at present and may >>> be shared with other OSes that may build with OE in future. >>> traditionally powerpc-common implicitly implied 32bit so I am not >>> surprised if its broken for ppc64. You could add powerpc64-common >>> and leave 32bit alone. See how its done for mips64 in oe.dev >>> >>> http://git.openembedded.org/cgit.cgi/openembedded/tree/site >> >> I'd argue that what we do for mips today is also wrong and I'm going to >> try and fix it as soon as I can. In these cases we should have: >> common, common-linux, common-$libc, mips-common, mips-linux, >> mips64-linux and if needed mips64-linux-libc. > > yes that structure would be desirable. It would need a bit of overhaul > and lot of testing. > since you have something setup for your import from oe stuff for same. > may be you can take a stab at it Yeah, it's on my list now that the first step is really in :) I hope to get the obvious bits rebased and tested and posted today at least, and then get to finishing the obvious bits and start trying the less obvious ones. Glad you fixed uclibc, btw, that had me scratching my head on a few things we do today :) -- Tom Rini Mentor Graphics Corporation ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] siteinfo split between powerpc-common & powerpc-linux
On Thu, Jul 21, 2011 at 10:05 AM, Tom Rini wrote: > On 07/21/2011 09:48 AM, Khem Raj wrote: >> On Thu, Jul 21, 2011 at 5:17 AM, Kumar Gala >> wrote: >>> Why do we have a split between powerpc-common & powerpc-linux? >>> >>> I assume powerpc-linux is used and picked up for powerpc-linux-uclibc in >>> addition to normal powerpc-linux. >>> >>> I'm looking at adding powerpc64 support and powerpc-common is all kinda of >>> broken for it. I'd like to just merge powerpc-common & powerpc-linux (as >>> powerpc-linux 32-bit) for now and start a new powerpc-common that refactors >>> 32/64 commonalities. >>> >>> Unless someone says otherwise about the meaning of these files. >> >> powerpc-common is shared between uclibc and eglibc at present and may >> be shared with other OSes that may build with OE in future. >> traditionally powerpc-common implicitly implied 32bit so I am not >> surprised if its broken for ppc64. You could add powerpc64-common >> and leave 32bit alone. See how its done for mips64 in oe.dev >> >> http://git.openembedded.org/cgit.cgi/openembedded/tree/site > > I'd argue that what we do for mips today is also wrong and I'm going to > try and fix it as soon as I can. In these cases we should have: > common, common-linux, common-$libc, mips-common, mips-linux, > mips64-linux and if needed mips64-linux-libc. yes that structure would be desirable. It would need a bit of overhaul and lot of testing. since you have something setup for your import from oe stuff for same. may be you can take a stab at it > > But I suspect some of the above won't exist, and that's OK. > > -- > Tom Rini > Mentor Graphics Corporation > > ___ > Openembedded-core mailing list > Openembedded-core@lists.openembedded.org > http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core > ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 1/4] linux-yocto: kernel-3.0 support recipe
On 07/21/2011 10:16 AM, Bruce Ashfield wrote: > Establish the infrastructure to start more comprehensive linux-3.0 > testing. With this in place, the populated linux-yocto 3.0 can > optionally be built for supported machines. > > Note: this commit does not change the default for any targets and > as such, it would need to be explicitly set as the preferred version > to be built. The staged introduction allows some remaining issues to > be solved, while making this available. Subsequent commits will be > done to switch qemu machines ones they have been validated. If the > default for a machine is not this kernel, consider it best effort. > > Signed-off-by: Bruce Ashfield Acked-by: Darren Hart > --- > meta/recipes-kernel/linux/linux-yocto_3.0.bb | 47 > ++ > 1 files changed, 47 insertions(+), 0 deletions(-) > create mode 100644 meta/recipes-kernel/linux/linux-yocto_3.0.bb > > diff --git a/meta/recipes-kernel/linux/linux-yocto_3.0.bb > b/meta/recipes-kernel/linux/linux-yocto_3.0.bb > new file mode 100644 > index 000..342993f > --- /dev/null > +++ b/meta/recipes-kernel/linux/linux-yocto_3.0.bb > @@ -0,0 +1,47 @@ > +inherit kernel > +require recipes-kernel/linux/linux-yocto.inc > + > +KMACHINE = "yocto/standard/base" > +KMACHINE_qemux86 = "yocto/standard/common-pc/base" > +KMACHINE_qemux86-64 = "yocto/standard/common-pc-64/base" > +KMACHINE_qemuppc = "yocto/standard/qemu-ppc32" > +KMACHINE_qemumips = "yocto/standard/mti-malta32-be" > +KMACHINE_qemuarm = "yocto/standard/arm-versatile-926ejs" > + > +KBRANCH = ${KMACHINE} > +KMETA = meta > + > +LINUX_VERSION ?= "3.0" > +LINUX_VERSION_EXTENSION ?= "-yocto-${LINUX_KERNEL_TYPE}" > + > +SRCREV_machine_qemuarm = "021129d0ad7dd63cbe68c9a1d369519a9e5e8440" > +SRCREV_machine_qemumips = "e86282b3085c5310d1c43af66242845ddadd49b6" > +SRCREV_machine_qemuppc = "f4ce805d0b74f9f32b6455730485120e27a4711e" > +SRCREV_machine_qemux86 = "3216e7d5c3cada16161481826cdb39c930457587" > +SRCREV_machine_qemux86-64 = "3216e7d5c3cada16161481826cdb39c930457587" > +SRCREV_machine = "3216e7d5c3cada16161481826cdb39c930457587" > +SRCREV_meta = "9010d1cbef2633dac7e559a7705c326b7601dd4c" > + > +PR = "r0" > +PV = "${LINUX_VERSION}+git${SRCPV}" > +SRCREV_FORMAT = "meta_machine" > + > +SRC_URI = > "git://git.pokylinux.org/linux-yocto-3.0;protocol=git;nocheckout=1;branch=${KBRANCH},meta;name=machine,meta" > + > +COMPATIBLE_MACHINE = "(qemuarm|qemux86|qemuppc|qemumips|qemux86-64)" > + > +# Functionality flags > +KERNEL_REVISION_CHECKING ?= "t" > +KERNEL_FEATURES="features/netfilter" > +KERNEL_FEATURES_append=" features/taskstats" > +KERNEL_FEATURES_append_qemux86=" cfg/sound" > +KERNEL_FEATURES_append_qemux86-64=" cfg/sound" > + > +YOCTO_KERNEL_META_DATA=t > + > +# extra tasks > +addtask kernel_link_vmlinux after do_compile before do_install > +addtask validate_branches before do_patch after do_kernel_checkout > +addtask kernel_configcheck after do_configure before do_compile > + > +require linux-tools.inc -- Darren Hart Intel Open Source Technology Center Yocto Project - Linux Kernel ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 2/4] kernel: copy defconfig to {B} vs {S}
On 07/21/2011 10:16 AM, Bruce Ashfield wrote: > For kernel's that use a split source/object build the copy > of defconfig to {S} in the base kernel class is problematic. > The previous solution for this was to override the do_configure > of the base kernel class in a subclass. While this is still > a viable/valid option, it does mean that changes to the base > do_configure will be missed. > > The solution to this is to copy a defconfig to {B} which is > typically the same as {S}, so most kernel recipes won't see or > care about this change. > > With this change in place, linux-yocto.bbclass can drop its > override of do_configure. > > Tested with linux-yocto and oe linux recipes. > > Signed-off-by: Bruce Ashfield Acked-by: Darren Hart > --- > meta/classes/kernel-yocto.bbclass |6 -- > meta/classes/kernel.bbclass |4 ++-- > 2 files changed, 2 insertions(+), 8 deletions(-) > > diff --git a/meta/classes/kernel-yocto.bbclass > b/meta/classes/kernel-yocto.bbclass > index 98272fc..a374df1 100644 > --- a/meta/classes/kernel-yocto.bbclass > +++ b/meta/classes/kernel-yocto.bbclass > @@ -118,12 +118,6 @@ python do_kernel_configcheck() { > bb.plain( "%s" % result ) > } > > -# overrides the base kernel_do_configure, since we don't want all the > -# defconfig processing in there > -kernel_do_configure() { > -yes '' | oe_runmake oldconfig > -} > - > > # Ensure that the branches (BSP and meta) are on the locatios specified by > # their SRCREV values. If they are NOT on the right commits, the branches > diff --git a/meta/classes/kernel.bbclass b/meta/classes/kernel.bbclass > index 2e36e86..9c492a3 100644 > --- a/meta/classes/kernel.bbclass > +++ b/meta/classes/kernel.bbclass > @@ -181,8 +181,8 @@ sysroot_stage_all_append() { > kernel_do_configure() { > # Copy defconfig to .config if .config does not exist. This allows > # recipes to manage the .config themselves in do_configure_prepend(). > - if [ -f "${WORKDIR}/defconfig" ] && [ ! -f "${S}/.config" ]; then > - cp "${WORKDIR}/defconfig" "${S}/.config" > + if [ -f "${WORKDIR}/defconfig" ] && [ ! -f "${B}/.config" ]; then > + cp "${WORKDIR}/defconfig" "${B}/.config" > fi > yes '' | oe_runmake oldconfig > -- Darren Hart Intel Open Source Technology Center Yocto Project - Linux Kernel ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 4/4] kern-tools: update SRCREV
On 07/21/2011 10:16 AM, Bruce Ashfield wrote: > Fixes [YOCTO #1261] > > Updating the SRCREV to pickup some branch creation fixes that > were causing an invalid branch name to be used on a repository > that couldn't support it (i.e. standard/base on a 2.6.34). > > With this the 2.6.34 and 3.0 -rt branches will build. > > Signed-off-by: Bruce Ashfield Acked-by: Darren Hart > --- > .../kern-tools/kern-tools-native_git.bb|2 +- > 1 files changed, 1 insertions(+), 1 deletions(-) > > diff --git a/meta/recipes-kernel/kern-tools/kern-tools-native_git.bb > b/meta/recipes-kernel/kern-tools/kern-tools-native_git.bb > index f7600ca..1fbb1f7 100644 > --- a/meta/recipes-kernel/kern-tools/kern-tools-native_git.bb > +++ b/meta/recipes-kernel/kern-tools/kern-tools-native_git.bb > @@ -4,7 +4,7 @@ LIC_FILES_CHKSUM = > "file://git/tools/kgit;beginline=5;endline=9;md5=e2bf4415f3d8 > > DEPENDS = "git-native guilt-native" > > -SRCREV = "f8eb067b023d590b6cd8deddf6f96d6a820997af" > +SRCREV = "f5a915c277a37ba5949b4c0778356189e7dd9ec0" > PR = r10 > PV = "0.1+git${SRCPV}" > -- Darren Hart Intel Open Source Technology Center Yocto Project - Linux Kernel ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 3/4] linux-yocto: update LICENSE to GPLv2
Ahh, /me deletes this from his list of things he isn't getting to... On 07/21/2011 10:16 AM, Bruce Ashfield wrote: > As reported by Koen Kooi, the LICENSE for linux-yocto can be tightened > up to specifiy the particular version of the GPL. > > cc: Koen Kooi > Signed-off-by: Bruce Ashfield Acked-by: Darren Hart > --- > meta/recipes-kernel/linux/linux-yocto.inc |2 +- > 1 files changed, 1 insertions(+), 1 deletions(-) > > diff --git a/meta/recipes-kernel/linux/linux-yocto.inc > b/meta/recipes-kernel/linux/linux-yocto.inc > index c304d00..595795b 100644 > --- a/meta/recipes-kernel/linux/linux-yocto.inc > +++ b/meta/recipes-kernel/linux/linux-yocto.inc > @@ -1,6 +1,6 @@ > DESCRIPTION = "Yocto Kernel" > SECTION = "kernel" > -LICENSE = "GPL" > +LICENSE = "GPLv2" > > LIC_FILES_CHKSUM = "file://COPYING;md5=d7810fab7487fb0aad327b76f1be7cd7" > -- Darren Hart Intel Open Source Technology Center Yocto Project - Linux Kernel ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] kernels
On Thu, Jul 21, 2011 at 1:23 PM, Anders Darander wrote: > > On 20 jul 2011, at 22:18, "Bruce Ashfield" wrote: > >> On Wed, Jul 20, 2011 at 11:45 AM, Koen Kooi >> wrote: >>> >>> Op 20 jul 2011, om 17:42 heeft Bruce Ashfield het volgende geschreven: >>> On Fri, Jul 15, 2011 at 11:36 AM, Bruce Ashfield wrote: > On Fri, Jul 15, 2011 at 11:02 AM, Phil Blundell wrote: >> On Fri, 2011-07-15 at 09:51 -0400, Bruce Ashfield wrote: >>> On Fri, Jul 15, 2011 at 9:21 AM, Phil Blundell wrote: The other day I was working on a BSP layer for a fairly generic i586 system and I was struck by the fact that we don't appear to have any vanilla kernel recipes in oe-core. I had sort of expected that, to get a standard bzImage out, I would just need to ship an appropriate defconfig in my layer and everything else would "just work". >>> >>> Hmm. Perhaps it isn't documented clearly enough as such, but the >>> linux-yocto >>> kernel base can work in this mode, since that was a design goal of >>> 1.0. >>> >>> You pick a branch, throw in a config fragment (or defconfig if you >>> really >>> want) and build. The base branches in the tree are generic enough to >>> sort a range of boards out of the box, and should form a base. >> >> Okay, cool. I'll give it a go and see how I get on. >> >> Is there a description anywhere of what the functional differences are >> between the code in linux-yocto git and the upstream kernel.org tree? > > It varies, and the variables are many, so I can answer this in several > ways. Following up on my own email. I'm just about to push out the 3.0 kernel support / changes, so I'm seeing the light at the end of the tunnel and recalled that this is still hanging a bit. Is there anything tangible you wanted me to do here ? Create an example ? Write a short howto .. or something else ? >>> >>> A guide to make your own setup that isn't based on linux-yocto but which >>> does work with the linux-yocto bbclass? >> >> That's reasonable. Once I get the imminent kernel uprev out the door, I'll >> focus on something along these lines. > > That sounds good. Upon re-reading the email, I wasn't really sure if the > intent was a guide on how to supply your own configuration, or whether it was > intended to be about how to integrate a custom BSP-kernel (preferably both > tarball and directly from a local git repo). If it was the first, then I hope > that later on we'll be able to derive a guide for developing a custom > BSP-layer (it's the kernel part I'm interested in). It was more the first in this case, but it can actually encompass the second. What would be covered here would be a special case of developing a custom layer. Taking some arbitrary source, configuration, patches, git trees and creating a kernel repo that would work with the linux-yocto tools and recipes. The second topic of creating a custom BSP layer, doesn't (and shouldn't normally) have to go so far. A simple branch reference, or reference to a tree based on a known linux-yocto is all you need to build with linux-yocto for most custom BSPs. As for the source of that custom BSP (tarball or git) that would be covered in how to create that custom branch reference. > > Preferably first a guide on how to get a custom BSP kernel built from git, > and later on, when there both are time available as well as some more > stabilization, how to base my own BSP kernel on linux-yocto (eg. using > linux-yocto as the upstream repo). It's unfortunately not always that likely > that the BSP for some products will be mainlined... I experience this every day as well .. bsp patches that will largely live forever, so I completely understand. The structure of the repos is created to manage just this sort of nagging patch and any crimes they may have committed. So this topic can be explicitly called out and worked on. The basics are covered in the existing guides, but it sounds like some end to end use cases might be in order. Bruce > > Cheers, > Anders > > > > ___ > Openembedded-core mailing list > Openembedded-core@lists.openembedded.org > http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core > -- "Thou shalt not follow the NULL pointer, for chaos and madness await thee at its end" ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 1/1] glib-2.0: fix a compilation issue due to dtrace
From: Nitin A Kamble With multilib & x32 builds dtrace is getting turned-on by the glib-2.0 configure, which causes following compilation failure. | x86_64-linux-libtool: link: ccache gcc -isystem/disk0/pokybuild/build-multilib/tmp/sysroots/x86_64-linux/usr/include -O2 -pipe -Wall -Wl,-rpath-link -Wl,/disk0/pokybuild/build-multilib/tmp/sysroots/x86_64-linux/usr/lib -Wl,-rpath -Wl,/disk0/pokybuild/build-multilib/tmp/sysroots/x86_64-linux/usr/lib -Wl,-O1 -o .libs/gtester gtester.o -L/disk0/pokybuild/build-multilib/tmp/sysroots/x86_64-linux/usr/lib ./.libs/libglib-2.0.so -lrt -Wl,-rpath -Wl,/disk0/pokybuild/build-multilib/tmp/sysroots/x86_64-linux/usr/lib | ./.libs/libglib-2.0.so: undefined reference to `GLIB_SLICE_ALLOC' | ./.libs/libglib-2.0.so: undefined reference to `GLIB_MEM_REALLOC' | ./.libs/libglib-2.0.so: undefined reference to `GLIB_SLICE_FREE' | ./.libs/libglib-2.0.so: undefined reference to `GLIB_MEM_ALLOC' | ./.libs/libglib-2.0.so: undefined reference to `GLIB_MEM_FREE' | ./.libs/libglib-2.0.so: undefined reference to `GLIB_QUARK_NEW' | collect2: ld returned 1 exit status | make[4]: *** [gtester] Error 1 Signed-off-by: Nitin A Kamble --- meta/recipes-core/glib-2.0/glib-2.0_2.27.5.bb |2 +- meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb |3 ++- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/meta/recipes-core/glib-2.0/glib-2.0_2.27.5.bb b/meta/recipes-core/glib-2.0/glib-2.0_2.27.5.bb index 0b30d17..26fc8fb 100644 --- a/meta/recipes-core/glib-2.0/glib-2.0_2.27.5.bb +++ b/meta/recipes-core/glib-2.0/glib-2.0_2.27.5.bb @@ -1,6 +1,6 @@ require glib.inc -PR = "r5" +PR = "r6" SRC_URI = "${GNOME_MIRROR}/glib/2.27/glib-${PV}.tar.bz2 \ file://configure-libtool.patch \ diff --git a/meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb b/meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb index a2e609f..dce6802 100644 --- a/meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb +++ b/meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb @@ -1,6 +1,6 @@ require glib.inc -PR = "r2" +PR = "r3" PE = "1" SRC_URI = "${GNOME_MIRROR}/glib/2.28/glib-${PV}.tar.bz2 \ @@ -20,3 +20,4 @@ SRC_URI[sha256sum] = "222f3055d6c413417b50901008c654865e5a311c73f0ae918b0a9978d1 BBCLASSEXTEND = "native" +EXTRA_OECONF_append = " --enable-dtrace=no" -- 1.7.6 ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 0/1] redo the glib-2.0 fix
From: Nitin A Kamble The following changes since commit db0eff4b964055b18ca5f91e55b7cf0d4a55c832: python: fix security vulnerability (2011-07-21 02:23:27 -0700) are available in the git repository at: git://git.pokylinux.org/poky-contrib nitin/misc http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=nitin/misc Nitin A Kamble (1): glib-2.0: fix a compilation issue due to dtrace meta/recipes-core/glib-2.0/glib-2.0_2.27.5.bb |2 +- meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb |3 ++- 2 files changed, 3 insertions(+), 2 deletions(-) -- 1.7.6 ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 4/4] kern-tools: update SRCREV
Fixes [YOCTO #1261] Updating the SRCREV to pickup some branch creation fixes that were causing an invalid branch name to be used on a repository that couldn't support it (i.e. standard/base on a 2.6.34). With this the 2.6.34 and 3.0 -rt branches will build. Signed-off-by: Bruce Ashfield --- .../kern-tools/kern-tools-native_git.bb|2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/meta/recipes-kernel/kern-tools/kern-tools-native_git.bb b/meta/recipes-kernel/kern-tools/kern-tools-native_git.bb index f7600ca..1fbb1f7 100644 --- a/meta/recipes-kernel/kern-tools/kern-tools-native_git.bb +++ b/meta/recipes-kernel/kern-tools/kern-tools-native_git.bb @@ -4,7 +4,7 @@ LIC_FILES_CHKSUM = "file://git/tools/kgit;beginline=5;endline=9;md5=e2bf4415f3d8 DEPENDS = "git-native guilt-native" -SRCREV = "f8eb067b023d590b6cd8deddf6f96d6a820997af" +SRCREV = "f5a915c277a37ba5949b4c0778356189e7dd9ec0" PR = r10 PV = "0.1+git${SRCPV}" -- 1.7.4.1 ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] kernels
On 20 jul 2011, at 22:18, "Bruce Ashfield" wrote: > On Wed, Jul 20, 2011 at 11:45 AM, Koen Kooi > wrote: >> >> Op 20 jul 2011, om 17:42 heeft Bruce Ashfield het volgende geschreven: >> >>> On Fri, Jul 15, 2011 at 11:36 AM, Bruce Ashfield >>> wrote: On Fri, Jul 15, 2011 at 11:02 AM, Phil Blundell wrote: > On Fri, 2011-07-15 at 09:51 -0400, Bruce Ashfield wrote: >> On Fri, Jul 15, 2011 at 9:21 AM, Phil Blundell wrote: >>> The other day I was working on a BSP layer for a fairly generic i586 >>> system and I was struck by the fact that we don't appear to have any >>> vanilla kernel recipes in oe-core. I had sort of expected that, to get >>> a standard bzImage out, I would just need to ship an appropriate >>> defconfig in my layer and everything else would "just work". >> >> Hmm. Perhaps it isn't documented clearly enough as such, but the >> linux-yocto >> kernel base can work in this mode, since that was a design goal of >> 1.0. >> >> You pick a branch, throw in a config fragment (or defconfig if you really >> want) and build. The base branches in the tree are generic enough to >> sort a range of boards out of the box, and should form a base. > > Okay, cool. I'll give it a go and see how I get on. > > Is there a description anywhere of what the functional differences are > between the code in linux-yocto git and the upstream kernel.org tree? It varies, and the variables are many, so I can answer this in several ways. >>> >>> Following up on my own email. I'm just about to push out the 3.0 >>> kernel support / changes, so I'm seeing the light at the end of the tunnel >>> and recalled that this is still hanging a bit. >>> >>> Is there anything tangible you wanted me to do here ? Create an example ? >>> Write a short howto .. or something else ? >> >> A guide to make your own setup that isn't based on linux-yocto but which >> does work with the linux-yocto bbclass? > > That's reasonable. Once I get the imminent kernel uprev out the door, I'll > focus on something along these lines. That sounds good. Upon re-reading the email, I wasn't really sure if the intent was a guide on how to supply your own configuration, or whether it was intended to be about how to integrate a custom BSP-kernel (preferably both tarball and directly from a local git repo). If it was the first, then I hope that later on we'll be able to derive a guide for developing a custom BSP-layer (it's the kernel part I'm interested in). Preferably first a guide on how to get a custom BSP kernel built from git, and later on, when there both are time available as well as some more stabilization, how to base my own BSP kernel on linux-yocto (eg. using linux-yocto as the upstream repo). It's unfortunately not always that likely that the BSP for some products will be mainlined... Cheers, Anders ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 2/4] kernel: copy defconfig to {B} vs {S}
For kernel's that use a split source/object build the copy of defconfig to {S} in the base kernel class is problematic. The previous solution for this was to override the do_configure of the base kernel class in a subclass. While this is still a viable/valid option, it does mean that changes to the base do_configure will be missed. The solution to this is to copy a defconfig to {B} which is typically the same as {S}, so most kernel recipes won't see or care about this change. With this change in place, linux-yocto.bbclass can drop its override of do_configure. Tested with linux-yocto and oe linux recipes. Signed-off-by: Bruce Ashfield --- meta/classes/kernel-yocto.bbclass |6 -- meta/classes/kernel.bbclass |4 ++-- 2 files changed, 2 insertions(+), 8 deletions(-) diff --git a/meta/classes/kernel-yocto.bbclass b/meta/classes/kernel-yocto.bbclass index 98272fc..a374df1 100644 --- a/meta/classes/kernel-yocto.bbclass +++ b/meta/classes/kernel-yocto.bbclass @@ -118,12 +118,6 @@ python do_kernel_configcheck() { bb.plain( "%s" % result ) } -# overrides the base kernel_do_configure, since we don't want all the -# defconfig processing in there -kernel_do_configure() { -yes '' | oe_runmake oldconfig -} - # Ensure that the branches (BSP and meta) are on the locatios specified by # their SRCREV values. If they are NOT on the right commits, the branches diff --git a/meta/classes/kernel.bbclass b/meta/classes/kernel.bbclass index 2e36e86..9c492a3 100644 --- a/meta/classes/kernel.bbclass +++ b/meta/classes/kernel.bbclass @@ -181,8 +181,8 @@ sysroot_stage_all_append() { kernel_do_configure() { # Copy defconfig to .config if .config does not exist. This allows # recipes to manage the .config themselves in do_configure_prepend(). - if [ -f "${WORKDIR}/defconfig" ] && [ ! -f "${S}/.config" ]; then - cp "${WORKDIR}/defconfig" "${S}/.config" + if [ -f "${WORKDIR}/defconfig" ] && [ ! -f "${B}/.config" ]; then + cp "${WORKDIR}/defconfig" "${B}/.config" fi yes '' | oe_runmake oldconfig -- 1.7.4.1 ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 0/4] kernel: consolidated pull request
Richard/Saul, What follows is a set of kernel changes that have been brewing for a while now: 294170 kern-tools: update SRCREV 65d8b50 linux-yocto: update LICENSE to GPLv2 069e9d9 kernel: copy defconfig to {B} vs {S} 6796e11 linux-yocto: kernel-3.0 support recipe The patches are pretty self explanitory, but a few comments follow. The kern-tools tweak Fixes [YOCTO #1261], which allows both the 2.6.34 and 3.0 based -rt kernels to build again. The next two changes are small cleanups and a allow linux-yocto to inherit changes to the base kernel class' do_configure(). And finally, we create the 3.0 base recipe. A few notes about this are: - it is a carry forward of the immediately available 2.6.37 (and before) functionality - it has an audit and cleanup of the config fragments, which was one of the 1.1 deliverables - it has been built for all core arches, and (attempted) boot tested on them as well. - it is not the default for any target at the moment, this needs more testing, and there are two known issues I'm tracking a qemumips boot failure that snuck in during the 3.0 -rc cycle (it did boot) and qemuppc interrupts being lost. I'll update the preferred versions as targets are validated. - I've built and booted the core-images on them, but functionality like graphics, etc, still needs to be tested. There's only so much I can do :) - the -rt branch is populated with tglx's recent update of -rt! - separate patches will go out for other layers (meta-kernel-dev, meta-rt, meta-yocto, etc) shortly. ** This obviously builds on the other hard work done to get userspace and tools ready for the 3.0 kernel version change. Many thanks for that, since it allowed me to focus on the kernel only. Patches are welcome for any misbehaving boards or qemu targets : cc: Darren Hart cc: Tom Zanussi The following changes since commit 1df5ab5ee285b3220348ce0cf371b81446d55832: parse/ConfHandler: Fix multiline variable corruption (2011-07-21 11:09:47 +0100) are available in the git repository at: git://git.pokylinux.org/poky-contrib zedd/kernel http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=zedd/kernel Bruce Ashfield (4): linux-yocto: kernel-3.0 support recipe kernel: copy defconfig to {B} vs {S} linux-yocto: update LICENSE to GPLv2 kern-tools: update SRCREV meta/classes/kernel-yocto.bbclass |6 --- meta/classes/kernel.bbclass|4 +- .../kern-tools/kern-tools-native_git.bb|2 +- meta/recipes-kernel/linux/linux-yocto.inc |2 +- meta/recipes-kernel/linux/linux-yocto_3.0.bb | 47 5 files changed, 51 insertions(+), 10 deletions(-) create mode 100644 meta/recipes-kernel/linux/linux-yocto_3.0.bb -- 1.7.4.1 ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 3/4] linux-yocto: update LICENSE to GPLv2
As reported by Koen Kooi, the LICENSE for linux-yocto can be tightened up to specifiy the particular version of the GPL. cc: Koen Kooi Signed-off-by: Bruce Ashfield --- meta/recipes-kernel/linux/linux-yocto.inc |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto.inc b/meta/recipes-kernel/linux/linux-yocto.inc index c304d00..595795b 100644 --- a/meta/recipes-kernel/linux/linux-yocto.inc +++ b/meta/recipes-kernel/linux/linux-yocto.inc @@ -1,6 +1,6 @@ DESCRIPTION = "Yocto Kernel" SECTION = "kernel" -LICENSE = "GPL" +LICENSE = "GPLv2" LIC_FILES_CHKSUM = "file://COPYING;md5=d7810fab7487fb0aad327b76f1be7cd7" -- 1.7.4.1 ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 1/4] linux-yocto: kernel-3.0 support recipe
Establish the infrastructure to start more comprehensive linux-3.0 testing. With this in place, the populated linux-yocto 3.0 can optionally be built for supported machines. Note: this commit does not change the default for any targets and as such, it would need to be explicitly set as the preferred version to be built. The staged introduction allows some remaining issues to be solved, while making this available. Subsequent commits will be done to switch qemu machines ones they have been validated. If the default for a machine is not this kernel, consider it best effort. Signed-off-by: Bruce Ashfield --- meta/recipes-kernel/linux/linux-yocto_3.0.bb | 47 ++ 1 files changed, 47 insertions(+), 0 deletions(-) create mode 100644 meta/recipes-kernel/linux/linux-yocto_3.0.bb diff --git a/meta/recipes-kernel/linux/linux-yocto_3.0.bb b/meta/recipes-kernel/linux/linux-yocto_3.0.bb new file mode 100644 index 000..342993f --- /dev/null +++ b/meta/recipes-kernel/linux/linux-yocto_3.0.bb @@ -0,0 +1,47 @@ +inherit kernel +require recipes-kernel/linux/linux-yocto.inc + +KMACHINE = "yocto/standard/base" +KMACHINE_qemux86 = "yocto/standard/common-pc/base" +KMACHINE_qemux86-64 = "yocto/standard/common-pc-64/base" +KMACHINE_qemuppc = "yocto/standard/qemu-ppc32" +KMACHINE_qemumips = "yocto/standard/mti-malta32-be" +KMACHINE_qemuarm = "yocto/standard/arm-versatile-926ejs" + +KBRANCH = ${KMACHINE} +KMETA = meta + +LINUX_VERSION ?= "3.0" +LINUX_VERSION_EXTENSION ?= "-yocto-${LINUX_KERNEL_TYPE}" + +SRCREV_machine_qemuarm = "021129d0ad7dd63cbe68c9a1d369519a9e5e8440" +SRCREV_machine_qemumips = "e86282b3085c5310d1c43af66242845ddadd49b6" +SRCREV_machine_qemuppc = "f4ce805d0b74f9f32b6455730485120e27a4711e" +SRCREV_machine_qemux86 = "3216e7d5c3cada16161481826cdb39c930457587" +SRCREV_machine_qemux86-64 = "3216e7d5c3cada16161481826cdb39c930457587" +SRCREV_machine = "3216e7d5c3cada16161481826cdb39c930457587" +SRCREV_meta = "9010d1cbef2633dac7e559a7705c326b7601dd4c" + +PR = "r0" +PV = "${LINUX_VERSION}+git${SRCPV}" +SRCREV_FORMAT = "meta_machine" + +SRC_URI = "git://git.pokylinux.org/linux-yocto-3.0;protocol=git;nocheckout=1;branch=${KBRANCH},meta;name=machine,meta" + +COMPATIBLE_MACHINE = "(qemuarm|qemux86|qemuppc|qemumips|qemux86-64)" + +# Functionality flags +KERNEL_REVISION_CHECKING ?= "t" +KERNEL_FEATURES="features/netfilter" +KERNEL_FEATURES_append=" features/taskstats" +KERNEL_FEATURES_append_qemux86=" cfg/sound" +KERNEL_FEATURES_append_qemux86-64=" cfg/sound" + +YOCTO_KERNEL_META_DATA=t + +# extra tasks +addtask kernel_link_vmlinux after do_compile before do_install +addtask validate_branches before do_patch after do_kernel_checkout +addtask kernel_configcheck after do_configure before do_compile + +require linux-tools.inc -- 1.7.4.1 ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 00/10] works of adding packages pam support
On 07/21/2011 01:00 AM, Kang Kai wrote: From: Kang Kai Hi Scott, This is the current work of adding pam supports. After update libpam to 1.1.4, we enable the packages pam support. And if the pacakge doesn't have a pam configure file, import from Fedora. Kai, Thanks for this work, you have already gotten some feedback, I have a few general comments to add that are across many of these patches, so I will note them here. Whitespace: you seem to be using tabs instead of spaces, please check that you have spaces and your items are lined up. Yocto uses 4 spaces for python and bb recipes and tabs for shell scripts and shell functions in bb recipes. As has already been noted in a couple of places, ensure that you only install things pam specific when the pam DISTRO_FEATURE is enabled, there are multiple places that need this (not just the ones already noted). Worth noting here also make sure you check all your PR bumps are correct. Commit messages and comments for things to oe-core should talk about oe-core not yocto or poky as this upsets people ;-) I am going to hold of on taking this series until you fix it up. Sau! The following changes since commit fa4bcfdb73167f8159b88e5a4d711c0d37627a70: bb-matrix: correct BB and PM number canonicalization (2011-07-14 22:23:09 +0100) are available in the git repository at: git://git.pokylinux.org/poky-contrib kangkai/distro http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/pam-commits Kang Kai (5): libpam: update to 1.1.4 and add subpackage xtests cups: add pam support screen: add pam support sudo: add pam support shadow: update pam related configure files Wenzong Fan (2): cronie: enable PAM support for cronie at: enable pam support Xiaofeng Yan (3): dropbear: Support PAM openssh: Support PAM polkit: Support PAM .../openssh/openssh-5.8p2/sshd | 10 + meta/recipes-connectivity/openssh/openssh_5.8p2.bb |7 +- meta/recipes-core/dropbear/dropbear.inc|6 +- .../dropbear/dropbear/dropbear-enable-pam.patch| 21 +++ .../at/at-3.1.12/configure-add-enable-pam.patch| 23 +++ meta/recipes-extended/at/at-3.1.12/pam.conf.patch | 16 ++ meta/recipes-extended/at/at_3.1.12.bb | 13 +- .../cronie/cronie/crond_pam_config.patch | 13 ++ meta/recipes-extended/cronie/cronie_1.4.7.bb |9 +- meta/recipes-extended/cups/cups_1.4.6.bb |8 +- .../pam/libpam/libpam-xtests.patch | 35 .../pam/{libpam_1.1.3.bb => libpam_1.1.4.bb} | 14 +- .../polkit/polkit-0.101/polkit-1_pam.patch | 23 +++ meta/recipes-extended/polkit/polkit_0.101.bb |6 +- .../screen/screen-4.0.3/screen.pamd|2 + meta/recipes-extended/screen/screen_4.0.3.bb | 14 +- .../shadow/files/shadow-update-pam-conf.patch | 175 meta/recipes-extended/shadow/shadow_4.1.4.3.bb |5 +- meta/recipes-extended/sudo/files/sudo.pamd |6 + meta/recipes-extended/sudo/sudo_1.8.1p2.bb | 11 +- 20 files changed, 389 insertions(+), 28 deletions(-) create mode 100644 meta/recipes-connectivity/openssh/openssh-5.8p2/sshd create mode 100644 meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch create mode 100644 meta/recipes-extended/at/at-3.1.12/configure-add-enable-pam.patch create mode 100644 meta/recipes-extended/at/at-3.1.12/pam.conf.patch create mode 100644 meta/recipes-extended/cronie/cronie/crond_pam_config.patch create mode 100644 meta/recipes-extended/pam/libpam/libpam-xtests.patch rename meta/recipes-extended/pam/{libpam_1.1.3.bb => libpam_1.1.4.bb} (85%) create mode 100644 meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch create mode 100644 meta/recipes-extended/screen/screen-4.0.3/screen.pamd create mode 100644 meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch create mode 100644 meta/recipes-extended/sudo/files/sudo.pamd ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] siteinfo split between powerpc-common & powerpc-linux
On 07/21/2011 09:48 AM, Khem Raj wrote: > On Thu, Jul 21, 2011 at 5:17 AM, Kumar Gala wrote: >> Why do we have a split between powerpc-common & powerpc-linux? >> >> I assume powerpc-linux is used and picked up for powerpc-linux-uclibc in >> addition to normal powerpc-linux. >> >> I'm looking at adding powerpc64 support and powerpc-common is all kinda of >> broken for it. I'd like to just merge powerpc-common & powerpc-linux (as >> powerpc-linux 32-bit) for now and start a new powerpc-common that refactors >> 32/64 commonalities. >> >> Unless someone says otherwise about the meaning of these files. > > powerpc-common is shared between uclibc and eglibc at present and may > be shared with other OSes that may build with OE in future. > traditionally powerpc-common implicitly implied 32bit so I am not > surprised if its broken for ppc64. You could add powerpc64-common > and leave 32bit alone. See how its done for mips64 in oe.dev > > http://git.openembedded.org/cgit.cgi/openembedded/tree/site I'd argue that what we do for mips today is also wrong and I'm going to try and fix it as soon as I can. In these cases we should have: common, common-linux, common-$libc, mips-common, mips-linux, mips64-linux and if needed mips64-linux-libc. But I suspect some of the above won't exist, and that's OK. -- Tom Rini Mentor Graphics Corporation ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] siteinfo split between powerpc-common & powerpc-linux
On Thu, Jul 21, 2011 at 5:17 AM, Kumar Gala wrote: > Why do we have a split between powerpc-common & powerpc-linux? > > I assume powerpc-linux is used and picked up for powerpc-linux-uclibc in > addition to normal powerpc-linux. > > I'm looking at adding powerpc64 support and powerpc-common is all kinda of > broken for it. I'd like to just merge powerpc-common & powerpc-linux (as > powerpc-linux 32-bit) for now and start a new powerpc-common that refactors > 32/64 commonalities. > > Unless someone says otherwise about the meaning of these files. powerpc-common is shared between uclibc and eglibc at present and may be shared with other OSes that may build with OE in future. traditionally powerpc-common implicitly implied 32bit so I am not surprised if its broken for ppc64. You could add powerpc64-common and leave 32bit alone. See how its done for mips64 in oe.dev http://git.openembedded.org/cgit.cgi/openembedded/tree/site > > - k > ___ > Openembedded-core mailing list > Openembedded-core@lists.openembedded.org > http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core > ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 00/10] Small fixes
On Thu, Jul 21, 2011 at 2:39 AM, Richard Purdie wrote: > On Thu, 2011-07-21 at 08:11 +0200, Martin Jansa wrote: >> On Wed, Jul 20, 2011 at 05:54:55PM -0700, Tom Rini wrote: >> > On 07/20/2011 05:18 PM, Khem Raj wrote: >> > > On 07/20/2011 02:06 PM, Martin Jansa wrote: >> > >> Fixes for recipes using intltool, distributions not having locales >> > >> support in libc and distutils fix >> > >> >> > >> The following changes since commit >> > >> 0d03800caffc2341b74190d38f7a372223c89f4c: >> > >> >> > >> lsbsetup_1.0.bb: Change the hardcoded /usr/lib to support multilib >> > >> (2011-07-20 15:43:43 +0100) >> > >> >> > >> are available in the git repository at: >> > >> git://git.openembedded.org/openembedded-core-contrib jansa/pull >> > >> >> > >> http://cgit.openembedded.org/cgit.cgi/openembedded-core-contrib/log/?h=jansa/pull >> > >> >> > >> >> > >> Martin Jansa (10): >> > >> tcmode-default: set preferred version also for (e)glibc-locale >> > >> eglibc-package: don't fail without localedef/gconv >> > >> intltool: inherit perlnative >> > >> polkit: inherit perlnative >> > >> shared-mime-info: inherit perlnative >> > >> xkeyboard-config: inherit perlnative >> > >> avahi: inherit perlnative >> > >> vte: inherit perlnative >> > > >> > > I guess all inherit perlnative patches can me squashed into one >> > >> > Or not done? :) >> >> I still see this issue, with >> http://patches.openembedded.org/patch/8069/ >> applied. > > I'm wondering if a better approach to fixing this might be to change > intltool.m4 so where it says AC_PATH_PROG(INTLTOOL_PERL, perl), it says > AC_PATH_PROG(INTLTOOL_PERL, nativeperl) instead, at least in the > sysroot. > yeah though it wont work for folks who would want to use intltool on the target unless nativeperl is installed on target too > Another option would be a class that did: > > DEPENDS =+ "intltool" > export INTLTOOL_PERL = "nativeperl" this might work well. > > although I think I prefer correcting the intltool m4 macro slightly > more. Or do we just add the export to the core in bitbake.conf or > autotools.bbclass?... > > Cheers, > > Richard > > > > ___ > Openembedded-core mailing list > Openembedded-core@lists.openembedded.org > http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core > ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 2/2] glib-2.0: fix a compilation issue due to dtrace
> -Original Message- > From: openembedded-core-boun...@lists.openembedded.org > [mailto:openembedded-core-boun...@lists.openembedded.org] On Behalf Of > Phil Blundell > Sent: Thursday, July 21, 2011 9:00 AM > To: Patches and discussions about the oe-core layer > Subject: Re: [OE-core] [PATCH 2/2] glib-2.0: fix a compilation issue > due to dtrace > > On Thu, 2011-07-21 at 02:29 -0700, nitin.a.kam...@intel.com wrote: > > From: Nitin A Kamble > > > > Signed-off-by: Nitin A Kamble > > Could you add some text to the commit message explaining what the > compilation issue was and under what circumstances it occurred? It > might also be good to know why bumping PR isn't necessary. > Phil, I felt the PR bump was not necessary, as it was fixing the compilation issue. I will add more information to the commit and resend it. > Also: > > > diff --git a/meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb > b/meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb > > index a2e609f..7d095c1 100644 > > --- a/meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb > > +++ b/meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb > > @@ -19,4 +19,3 @@ SRC_URI[md5sum] = > "789e7520f71c6a4bf08bc683ec764d24" > > SRC_URI[sha256sum] = > "222f3055d6c413417b50901008c654865e5a311c73f0ae918b0a9978d1f9466f" > > > > BBCLASSEXTEND = "native" > > - > > ... I guess this part of the patch can be omitted. Noted down. Thanks, Nitin > > p. > > > > ___ > Openembedded-core mailing list > Openembedded-core@lists.openembedded.org > http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 1/2] python: fix security vulnerability
From: Nitin A Kamble This Fixes bug: [Yocto #1254] http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1015 Issue #2254: Fix CGIHTTPServer information disclosure. Relative paths are now collapsed within the url properly before looking in cgi_directories. Signed-off-by: Nitin A Kamble --- meta/recipes-devtools/python/python.inc|2 +- .../python/python/security_issue_2254_fix.patch| 184 meta/recipes-devtools/python/python_2.6.6.bb |3 +- 3 files changed, 187 insertions(+), 2 deletions(-) create mode 100644 meta/recipes-devtools/python/python/security_issue_2254_fix.patch diff --git a/meta/recipes-devtools/python/python.inc b/meta/recipes-devtools/python/python.inc index 25a458e..a6cc917 100644 --- a/meta/recipes-devtools/python/python.inc +++ b/meta/recipes-devtools/python/python.inc @@ -3,7 +3,7 @@ HOMEPAGE = "http://www.python.org"; LICENSE = "PSF" SECTION = "devel/python" # bump this on every change in contrib/python/generate-manifest-2.6.py -INC_PR = "nk2" +INC_PR = "r2" DEFAULT_PREFERENCE = "-26" diff --git a/meta/recipes-devtools/python/python/security_issue_2254_fix.patch b/meta/recipes-devtools/python/python/security_issue_2254_fix.patch new file mode 100644 index 000..0d2274a --- /dev/null +++ b/meta/recipes-devtools/python/python/security_issue_2254_fix.patch @@ -0,0 +1,184 @@ +UpstreamStatus: Backport +http://svn.python.org/view?view=revision&revision=71303 + +Issue #2254: Fix CGIHTTPServer information disclosure. Relative paths are + now collapsed within the url properly before looking in cgi_directories. +Signed-Off-By: Nitin A Kamble +2011/07/19 + +Index: Python-2.6.6/Lib/CGIHTTPServer.py +=== +--- Python-2.6.6.orig/Lib/CGIHTTPServer.py Python-2.6.6/Lib/CGIHTTPServer.py +@@ -70,27 +70,20 @@ class CGIHTTPRequestHandler(SimpleHTTPSe + return SimpleHTTPServer.SimpleHTTPRequestHandler.send_head(self) + + def is_cgi(self): +-"""Test whether self.path corresponds to a CGI script, +-and return a boolean. ++"""Test whether self.path corresponds to a CGI script. + +-This function sets self.cgi_info to a tuple (dir, rest) +-when it returns True, where dir is the directory part before +-the CGI script name. Note that rest begins with a +-slash if it is not empty. +- +-The default implementation tests whether the path +-begins with one of the strings in the list +-self.cgi_directories (and the next character is a '/' +-or the end of the string). ++Returns True and updates the cgi_info attribute to the tuple ++(dir, rest) if self.path requires running a CGI script. ++Returns False otherwise. ++ ++The default implementation tests whether the normalized url ++path begins with one of the strings in self.cgi_directories ++(and the next character is a '/' or the end of the string). + """ +- +-path = self.path +- +-for x in self.cgi_directories: +-i = len(x) +-if path[:i] == x and (not path[i:] or path[i] == '/'): +-self.cgi_info = path[:i], path[i+1:] +-return True ++splitpath = _url_collapse_path_split(self.path) ++if splitpath[0] in self.cgi_directories: ++self.cgi_info = splitpath ++return True + return False + + cgi_directories = ['/cgi-bin', '/htbin'] +@@ -299,6 +292,46 @@ class CGIHTTPRequestHandler(SimpleHTTPSe + self.log_message("CGI script exited OK") + + ++# TODO(gregory.p.smith): Move this into an appropriate library. ++def _url_collapse_path_split(path): ++""" ++Given a URL path, remove extra '/'s and '.' path elements and collapse ++any '..' references. ++ ++Implements something akin to RFC-2396 5.2 step 6 to parse relative paths. ++ ++Returns: A tuple of (head, tail) where tail is everything after the final / ++and head is everything before it. Head will always start with a '/' and, ++if it contains anything else, never have a trailing '/'. ++ ++Raises: IndexError if too many '..' occur within the path. ++""" ++# Similar to os.path.split(os.path.normpath(path)) but specific to URL ++# path semantics rather than local operating system semantics. ++path_parts = [] ++for part in path.split('/'): ++if part == '.': ++path_parts.append('') ++else: ++path_parts.append(part) ++# Filter out blank non trailing parts before consuming the '..'. ++path_parts = [part for part in path_parts[:-1] if part] + path_parts[-1:] ++if path_parts: ++tail_part = path_parts.pop() ++else: ++tail_part = '' ++head_parts = [] ++for part in path_parts: ++if part == '..': ++head_parts.pop() ++else: ++hea
Re: [OE-core] [PATCH 2/2] glib-2.0: fix a compilation issue due to dtrace
On Thu, 2011-07-21 at 02:29 -0700, nitin.a.kam...@intel.com wrote: > From: Nitin A Kamble > > Signed-off-by: Nitin A Kamble Could you add some text to the commit message explaining what the compilation issue was and under what circumstances it occurred? It might also be good to know why bumping PR isn't necessary. Also: > diff --git a/meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb > b/meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb > index a2e609f..7d095c1 100644 > --- a/meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb > +++ b/meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb > @@ -19,4 +19,3 @@ SRC_URI[md5sum] = "789e7520f71c6a4bf08bc683ec764d24" > SRC_URI[sha256sum] = > "222f3055d6c413417b50901008c654865e5a311c73f0ae918b0a9978d1f9466f" > > BBCLASSEXTEND = "native" > - ... I guess this part of the patch can be omitted. p. ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 2/2] perl-dynloader.patch: Fix libdir issue for multilib
> -Original Message- > From: Mei, Lei > Sent: Thursday, July 21, 2011 12:54 AM > To: Patches and discussions about the oe-core layer > Cc: Kamble, Nitin A > Subject: RE: [OE-core] [PATCH 2/2] perl-dynloader.patch: Fix libdir > issue for multilib > > > > >-Original Message- > >From: openembedded-core-boun...@lists.openembedded.org > >[mailto:openembedded-core-boun...@lists.openembedded.org] On Behalf Of > >Richard Purdie > >Sent: Wednesday, July 20, 2011 10:34 PM > >To: Patches and discussions about the oe-core layer > >Subject: Re: [OE-core] [PATCH 2/2] perl-dynloader.patch: Fix libdir > issue for > >multilib > > > >On Wed, 2011-07-20 at 16:48 +0800, Mei Lei wrote: > >> The perl-dynloader.patch can't support /usr/lib64, change the > regular > >expression to support multilib. > >> > >> Signed-off-by: Mei Lei > >> --- > >> .../perl/perl-5.12.3/perl-dynloader.patch |2 +- > >> 1 files changed, 1 insertions(+), 1 deletions(-) > >> > >> diff --git a/meta/recipes-devtools/perl/perl-5.12.3/perl- > dynloader.patch > >b/meta/recipes-devtools/perl/perl-5.12.3/perl-dynloader.patch > >> index d5ea00f..a45af91 100644 > >> --- a/meta/recipes-devtools/perl/perl-5.12.3/perl-dynloader.patch > >> +++ b/meta/recipes-devtools/perl/perl-5.12.3/perl-dynloader.patch > >> @@ -19,7 +19,7 @@ Update by Nitin A Kamble > > >2011/04/21 > >> +{ > >> +my $hostlib = $ENV{PERLHOSTLIB}; > >> +print STDERR "*** Module name IN: $modlibname\n"; > >> -+($p1, $p2, $p3, $p4, $p5) = $modlibname =~ > >m/(^(.*lib\/)?)((perl\/[0-9\.]*\/)?)(.*)$/; > >> ++($p1, $p2, $p3, $p4, $p5) = $modlibname =~ > >m/(^(.*lib[0-9]*\/)?)((perl\/[0-9\.]*\/)?)(.*)$/; > >> +print STDERR "*** p1: $p1 p3: $p3 p5: $p5\n"; > >> +if ( $p1 ne "" ) { > >> +$modlibname = $hostlib.$p5; > > > >We might need to relax this a little further since we might want > things > >like libx32 to work in future? > > Hi Nitin, > I am not sure what is the perl work style under libx32, can you > supply some information about it? > > Thanks > Lei Hi Lei, x32 would use libx32 as the lib dirname. Thanks, Nitin > > > > > >Cheers, > > > >Richard > > > > > > > >___ > >Openembedded-core mailing list > >Openembedded-core@lists.openembedded.org > >http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 2/2] glib-2.0: fix a compilation issue due to dtrace
Op 21 jul. 2011, om 11:29 heeft nitin.a.kam...@intel.com het volgende geschreven: > From: Nitin A Kamble > > Signed-off-by: Nitin A Kamble > --- > meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb |1 - > meta/recipes-core/glib-2.0/glib.inc |2 +- > 2 files changed, 1 insertions(+), 2 deletions(-) > > diff --git a/meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb > b/meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb > index a2e609f..7d095c1 100644 > --- a/meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb > +++ b/meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb > @@ -19,4 +19,3 @@ SRC_URI[md5sum] = "789e7520f71c6a4bf08bc683ec764d24" > SRC_URI[sha256sum] = > "222f3055d6c413417b50901008c654865e5a311c73f0ae918b0a9978d1f9466f" > > BBCLASSEXTEND = "native" > - Missing PR bump > diff --git a/meta/recipes-core/glib-2.0/glib.inc > b/meta/recipes-core/glib-2.0/glib.inc > index e25db3d..9768284 100644 > --- a/meta/recipes-core/glib-2.0/glib.inc > +++ b/meta/recipes-core/glib-2.0/glib.inc > @@ -25,7 +25,7 @@ inherit autotools pkgconfig gettext > > S = "${WORKDIR}/glib-${PV}" > > -EXTRA_OECONF = "--disable-debug --enable-included-printf=no" > +EXTRA_OECONF = "--disable-debug --enable-included-printf=no > --enable-dtrace=no" > EXTRA_OECONF_virtclass-native = "" > EXTRA_OECONF_linuxstdbase = "--enable-included-printf=no" > > -- > 1.7.6 > > > ___ > Openembedded-core mailing list > Openembedded-core@lists.openembedded.org > http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 2/2] glib-2.0: fix a compilation issue due to dtrace
From: Nitin A Kamble Signed-off-by: Nitin A Kamble --- meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb |1 - meta/recipes-core/glib-2.0/glib.inc |2 +- 2 files changed, 1 insertions(+), 2 deletions(-) diff --git a/meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb b/meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb index a2e609f..7d095c1 100644 --- a/meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb +++ b/meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb @@ -19,4 +19,3 @@ SRC_URI[md5sum] = "789e7520f71c6a4bf08bc683ec764d24" SRC_URI[sha256sum] = "222f3055d6c413417b50901008c654865e5a311c73f0ae918b0a9978d1f9466f" BBCLASSEXTEND = "native" - diff --git a/meta/recipes-core/glib-2.0/glib.inc b/meta/recipes-core/glib-2.0/glib.inc index e25db3d..9768284 100644 --- a/meta/recipes-core/glib-2.0/glib.inc +++ b/meta/recipes-core/glib-2.0/glib.inc @@ -25,7 +25,7 @@ inherit autotools pkgconfig gettext S = "${WORKDIR}/glib-${PV}" -EXTRA_OECONF = "--disable-debug --enable-included-printf=no" +EXTRA_OECONF = "--disable-debug --enable-included-printf=no --enable-dtrace=no" EXTRA_OECONF_virtclass-native = "" EXTRA_OECONF_linuxstdbase = "--enable-included-printf=no" -- 1.7.6 ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 0/2] Misc Fixes
From: Nitin A Kamble The following changes since commit 35f20c5aacc9b23affe0380e8451ccc41cbc1799: eglibc: Tighten LICENSE Fields (2011-07-19 17:34:21 +0100) are available in the git repository at: git://git.pokylinux.org/poky-contrib nitin/misc http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=nitin/misc Nitin A Kamble (2): python: fix security vulnerability glib-2.0: fix a compilation issue due to dtrace meta/recipes-core/glib-2.0/glib-2.0_2.28.8.bb |1 - meta/recipes-core/glib-2.0/glib.inc|2 +- meta/recipes-devtools/python/python.inc|2 +- .../python/python/security_issue_2254_fix.patch| 184 meta/recipes-devtools/python/python_2.6.6.bb |3 +- 5 files changed, 188 insertions(+), 4 deletions(-) create mode 100644 meta/recipes-devtools/python/python/security_issue_2254_fix.patch -- 1.7.6 ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 3/6] libiconv: Fix build failure on 1.13.1
On Thu, Jul 21, 2011 at 1:12 AM, Henning Heinold wrote: > Hi Khem, > > what was the reason to patch out the libtool-macros instead of deleting them? > That would be > reduce the changelines a lot. I had some problems building but it was long time ago when I did that patch. I can try and see if that helps. It certainly would be better. ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 00/10] Small fixes
On 07/21/2011 07:53 AM, Martin Jansa wrote: > On Thu, Jul 21, 2011 at 07:28:36AM -0700, Tom Rini wrote: >> On 07/20/2011 11:11 PM, Martin Jansa wrote: >>> On Wed, Jul 20, 2011 at 05:54:55PM -0700, Tom Rini wrote: On 07/20/2011 05:18 PM, Khem Raj wrote: > On 07/20/2011 02:06 PM, Martin Jansa wrote: >> Fixes for recipes using intltool, distributions not having locales >> support in libc and distutils fix >> >> The following changes since commit >> 0d03800caffc2341b74190d38f7a372223c89f4c: >> >>lsbsetup_1.0.bb: Change the hardcoded /usr/lib to support multilib >> (2011-07-20 15:43:43 +0100) >> >> are available in the git repository at: >>git://git.openembedded.org/openembedded-core-contrib jansa/pull >> >> http://cgit.openembedded.org/cgit.cgi/openembedded-core-contrib/log/?h=jansa/pull >> >> >> Martin Jansa (10): >>tcmode-default: set preferred version also for (e)glibc-locale >>eglibc-package: don't fail without localedef/gconv >>intltool: inherit perlnative >>polkit: inherit perlnative >>shared-mime-info: inherit perlnative >>xkeyboard-config: inherit perlnative >>avahi: inherit perlnative >>vte: inherit perlnative > > I guess all inherit perlnative patches can me squashed into one Or not done? :) >>> >>> I still see this issue, with >>> http://patches.openembedded.org/patch/8069/ >>> applied. >> >> That's not enough. You then need the cpan mangling patch applied on top. > > I had both.. I guess we need to go down the path Richard was suggesting then, as I think he's not a fan of making perl-native be an explicit depend so much. -- Tom Rini Mentor Graphics Corporation ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 00/10] Small fixes
On Thu, Jul 21, 2011 at 07:28:36AM -0700, Tom Rini wrote: > On 07/20/2011 11:11 PM, Martin Jansa wrote: > > On Wed, Jul 20, 2011 at 05:54:55PM -0700, Tom Rini wrote: > >> On 07/20/2011 05:18 PM, Khem Raj wrote: > >>> On 07/20/2011 02:06 PM, Martin Jansa wrote: > Fixes for recipes using intltool, distributions not having locales > support in libc and distutils fix > > The following changes since commit > 0d03800caffc2341b74190d38f7a372223c89f4c: > > lsbsetup_1.0.bb: Change the hardcoded /usr/lib to support multilib > (2011-07-20 15:43:43 +0100) > > are available in the git repository at: > git://git.openembedded.org/openembedded-core-contrib jansa/pull > > http://cgit.openembedded.org/cgit.cgi/openembedded-core-contrib/log/?h=jansa/pull > > > Martin Jansa (10): > tcmode-default: set preferred version also for (e)glibc-locale > eglibc-package: don't fail without localedef/gconv > intltool: inherit perlnative > polkit: inherit perlnative > shared-mime-info: inherit perlnative > xkeyboard-config: inherit perlnative > avahi: inherit perlnative > vte: inherit perlnative > >>> > >>> I guess all inherit perlnative patches can me squashed into one > >> > >> Or not done? :) > > > > I still see this issue, with > > http://patches.openembedded.org/patch/8069/ > > applied. > > That's not enough. You then need the cpan mangling patch applied on top. I had both.. -- Martin 'JaMa' Jansa jabber: martin.ja...@gmail.com signature.asc Description: Digital signature ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 00/10] Small fixes
On 07/20/2011 11:11 PM, Martin Jansa wrote: > On Wed, Jul 20, 2011 at 05:54:55PM -0700, Tom Rini wrote: >> On 07/20/2011 05:18 PM, Khem Raj wrote: >>> On 07/20/2011 02:06 PM, Martin Jansa wrote: Fixes for recipes using intltool, distributions not having locales support in libc and distutils fix The following changes since commit 0d03800caffc2341b74190d38f7a372223c89f4c: lsbsetup_1.0.bb: Change the hardcoded /usr/lib to support multilib (2011-07-20 15:43:43 +0100) are available in the git repository at: git://git.openembedded.org/openembedded-core-contrib jansa/pull http://cgit.openembedded.org/cgit.cgi/openembedded-core-contrib/log/?h=jansa/pull Martin Jansa (10): tcmode-default: set preferred version also for (e)glibc-locale eglibc-package: don't fail without localedef/gconv intltool: inherit perlnative polkit: inherit perlnative shared-mime-info: inherit perlnative xkeyboard-config: inherit perlnative avahi: inherit perlnative vte: inherit perlnative >>> >>> I guess all inherit perlnative patches can me squashed into one >> >> Or not done? :) > > I still see this issue, with > http://patches.openembedded.org/patch/8069/ > applied. That's not enough. You then need the cpan mangling patch applied on top. -- Tom Rini Mentor Graphics Corporation ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 1/2] tcf-agent: upgrade to the latest stable revision 0.0+svnr1855
Signed-off-by: Lianhao Lu Signed-off-by: Dexuan Cui --- .../tcf-agent/tcf-agent/fix_ranlib.patch | 14 + .../tcf-agent/tcf-agent/fix_tcf-agent.init.patch | 14 +- .../tcf-agent/tcf-agent/terminals_agent.patch | 1027 meta/recipes-devtools/tcf-agent/tcf-agent_svn.bb | 21 +- 4 files changed, 34 insertions(+), 1042 deletions(-) create mode 100644 meta/recipes-devtools/tcf-agent/tcf-agent/fix_ranlib.patch delete mode 100644 meta/recipes-devtools/tcf-agent/tcf-agent/terminals_agent.patch diff --git a/meta/recipes-devtools/tcf-agent/tcf-agent/fix_ranlib.patch b/meta/recipes-devtools/tcf-agent/tcf-agent/fix_ranlib.patch new file mode 100644 index 000..5d70456 --- /dev/null +++ b/meta/recipes-devtools/tcf-agent/tcf-agent/fix_ranlib.patch @@ -0,0 +1,14 @@ +Upstream-Status: Inappropriate [poky-specific fix] + +--- a/Makefile.inc b/Makefile.inc +@@ -57,6 +57,9 @@ + ifeq ($(NO_UUID),) + LIBS += -luuid + endif ++ ifneq ($(RANLIB),) ++RANLIB += $@ ++ endif + endif + + ifneq ($(OPSYS),Windows) diff --git a/meta/recipes-devtools/tcf-agent/tcf-agent/fix_tcf-agent.init.patch b/meta/recipes-devtools/tcf-agent/tcf-agent/fix_tcf-agent.init.patch index 60b0b27..fefaf04 100644 --- a/meta/recipes-devtools/tcf-agent/tcf-agent/fix_tcf-agent.init.patch +++ b/meta/recipes-devtools/tcf-agent/tcf-agent/fix_tcf-agent.init.patch @@ -2,15 +2,15 @@ Upstream-Status: Inappropriate [poky-specific script] --- a/Makefile +++ b/Makefile -@@ -32,7 +32,7 @@ - install -d -m 755 $(INSTALLROOT)$(SBIN) - install -d -m 755 $(INSTALLROOT)$(INIT) +@@ -64,7 +64,7 @@ + install -d -m 755 $(INSTALLROOT)$(INCLUDE)/tcf/services install -c $(BINDIR)/agent -m 755 $(INSTALLROOT)$(SBIN)/tcf-agent -- install -c $(TCF_AGENT_DIR)/main/tcf-agent.init -m 755 $(INSTALLROOT)$(INIT)/tcf-agent + install -c $(BINDIR)/client -m 755 $(INSTALLROOT)$(SBIN)/tcf-client +- install -c main/tcf-agent.init -m 755 $(INSTALLROOT)$(INIT)/tcf-agent + install -c tcf-agent.init -m 755 $(INSTALLROOT)$(INIT)/tcf-agent - - clean: - rm -rf $(BINDIR) + install -c config.h -m 755 $(INSTALLROOT)$(INCLUDE)/tcf/config.h + install -c -t $(INSTALLROOT)$(INCLUDE)/tcf/framework -m 644 framework/*.h + install -c -t $(INSTALLROOT)$(INCLUDE)/tcf/services -m 644 services/*.h --- /dev/null +++ b/tcf-agent.init @@ -0,0 +1,78 @@ diff --git a/meta/recipes-devtools/tcf-agent/tcf-agent/terminals_agent.patch b/meta/recipes-devtools/tcf-agent/tcf-agent/terminals_agent.patch deleted file mode 100644 index aed62fa..000 --- a/meta/recipes-devtools/tcf-agent/tcf-agent/terminals_agent.patch +++ /dev/null @@ -1,1027 +0,0 @@ -Upstream-Status: Inappropriate [source code; we'll remove it when upgrading tcf-agent in future] - -Index: org.eclipse.tm.tcf.terminals.agent/terminals.c -=== org.eclipse.tm.tcf.terminals.agent/terminals.c (revision 0) -+++ org.eclipse.tm.tcf.terminals.agent/terminals.c (revision 0) -@@ -0,0 +1,846 @@ -+/*** -+ * Copyright (c) 2008 Wind River Systems, Inc. and others. -+ * All rights reserved. This program and the accompanying materials -+ * are made available under the terms of the Eclipse Public License v1.0 -+ * and Eclipse Distribution License v1.0 which accompany this distribution. -+ * The Eclipse Public License is available at -+ * http://www.eclipse.org/legal/epl-v10.html -+ * and the Eclipse Distribution License is available at -+ * http://www.eclipse.org/org/documents/edl-v10.php. -+ * -+ * Contributors: -+ * Wind River Systems - initial API and implementation -+ ***/ -+ -+/* -+ * Sample TCF service implementation. -+ */ -+ -+#include -+#include -+#include -+#include -+#include -+#include -+#include -+#include -+#include -+#ifndef TIOCGWINSZ -+#include -+#endif -+#include -+#include -+#include -+#include -+#include -+#include -+#include -+#include -+#include -+#include -+#include -+ -+#define TERMINALS_DEBUG 1 -+ -+#define TERMINALS_NO_LOGIN 0 -+ -+static const char * TERMINALS = "Terminals"; -+ -+#if defined(WIN32) -+# include -+# ifdef _MSC_VER -+#pragma warning(disable:4201) /* nonstandard extension used : nameless struct/union (in winternl.h) */ -+#include -+# else -+#include -+# endif -+# ifndef STATUS_INFO_LENGTH_MISMATCH -+# define STATUS_INFO_LENGTH_MISMATCH ((NTSTATUS)0xC004L) -+# endif -+# ifndef SystemHandleInformation -+#define SystemHandleInformation 16 -+# endif -+# error("unsupported WIN32!") -+#elif defined(_WRS_KERNEL) -+# include -+# include -+# include -+# include -+# include -+# error("unsupported WRS!") -+#else -+# include -+# include -+# include -+# if TERMINALS_NO_LOGIN -+# define TERM_LAUNCH_EX
[OE-core] [PATCH 2/2] distro_tracking_fields.inc: update the info for tcf-agent
Signed-off-by: Dexuan Cui --- .../conf/distro/include/distro_tracking_fields.inc | 12 ++-- 1 files changed, 6 insertions(+), 6 deletions(-) diff --git a/meta/conf/distro/include/distro_tracking_fields.inc b/meta/conf/distro/include/distro_tracking_fields.inc index efb4c0b..4de543e 100644 --- a/meta/conf/distro/include/distro_tracking_fields.inc +++ b/meta/conf/distro/include/distro_tracking_fields.inc @@ -2781,17 +2781,17 @@ RECIPE_MAINTAINER_pn-latencytop = "Dexuan Cui " RECIPE_STATUS_pn-tcf-agent = "green" DISTRO_PN_ALIAS_pn-tcf-agent = "WindRiver upstream=http://www.eclipse.org/dsdp/tm/"; RECIPE_DEPENDENCY_CHECK_pn-tcf-agent = "not done" -RECIPE_LATEST_VERSION_pn-tcf-agent = "0.3.0+svnr1078" -RECIPE_MANUAL_CHECK_DATE_pn-tcf-agent = "June 29, 2011" -RECIPE_NO_UPDATE_REASON_pn-tcf-agent = "Do not upgrade to version: (998)? because upstraem hasn't defined a formal release tag." +RECIPE_LATEST_VERSION_pn-tcf-agent = "0.0+svnr1855" +RECIPE_MANUAL_CHECK_DATE_pn-tcf-agent = "Jul 21, 2011" +RECIPE_NO_UPDATE_REASON_pn-tcf-agent = "1855 is the latest stable revision" RECIPE_NO_OF_PATCHES_pn-tcf-agent = "2" -RECIPE_PATCH_pn-tcf-agent+terminals_agent = "we might get the patch from git://git.yoctoproject.org/eclipse-poky.git in future" RECIPE_PATCH_pn-tcf-agent+fix_tcf-agent.init = "a proper script /etc/init.d/tcf-agent" +RECIPE_PATCH_pn-tcf-agent+fix_ranlib = "need to pass arguments to RANLIB" RECIPE_INTEL_SECTION_pn-tcf-agent = "sdk-tools" RECIPE_TIME_BETWEEN_LAST_TWO_RELEASES_pn-tcf-agent = "1+ years" -RECIPE_LATEST_RELEASE_DATE_pn-tcf-agent = "07/2010" +RECIPE_LATEST_RELEASE_DATE_pn-tcf-agent = "Jul 07, 2011" RECIPE_COMMENTS_pn-tcf-agent = "" -RECIPE_LAST_UPDATE_pn-tcf-agent = "Jul 23, 2010" +RECIPE_LAST_UPDATE_pn-tcf-agent = "Jul 21, 2011" RECIPE_MAINTAINER_pn-tcf-agent = "Dexuan Cui " RECIPE_STATUS_pn-liburcu = "green" -- 1.7.6 ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 0/2] upgrade tcf-agent to the latest stable revision 0.0+svnr1855
The following changes since commit 068839698fe192d8846c0ed4db65861448e8e524: eglibc: fix runtime assertion failure (2011-07-13 12:34:30 +0100) are available in the git repository at: git://git.pokylinux.org/poky-contrib dcui/tcf-agent http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=dcui/tcf-agent Dexuan Cui (2): tcf-agent: upgrade to the latest stable revision 0.0+svnr1855 distro_tracking_fields.inc: update the info for tcf-agent .../conf/distro/include/distro_tracking_fields.inc | 12 +- .../tcf-agent/tcf-agent/fix_ranlib.patch | 14 + .../tcf-agent/tcf-agent/fix_tcf-agent.init.patch | 14 +- .../tcf-agent/tcf-agent/terminals_agent.patch | 1027 meta/recipes-devtools/tcf-agent/tcf-agent_svn.bb | 21 +- 5 files changed, 40 insertions(+), 1048 deletions(-) create mode 100644 meta/recipes-devtools/tcf-agent/tcf-agent/fix_ranlib.patch delete mode 100644 meta/recipes-devtools/tcf-agent/tcf-agent/terminals_agent.patch -- 1.7.6 ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] siteinfo split between powerpc-common & powerpc-linux
Kumar, On Thu, Jul 21, 2011 at 2:17 PM, Kumar Gala wrote: > Why do we have a split between powerpc-common & powerpc-linux? > > I assume powerpc-linux is used and picked up for powerpc-linux-uclibc in > addition to normal powerpc-linux. > > I'm looking at adding powerpc64 support and powerpc-common is all kinda of > broken for it. I'd like to just merge powerpc-common & powerpc-linux (as > powerpc-linux 32-bit) for now and start a new powerpc-common that refactors > 32/64 commonalities. > > Unless someone says otherwise about the meaning of these files. > Good fine, go ahead, I think these are left-overs from long ago. Regards, -- Leon ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] siteinfo split between powerpc-common & powerpc-linux
Why do we have a split between powerpc-common & powerpc-linux? I assume powerpc-linux is used and picked up for powerpc-linux-uclibc in addition to normal powerpc-linux. I'm looking at adding powerpc64 support and powerpc-common is all kinda of broken for it. I'd like to just merge powerpc-common & powerpc-linux (as powerpc-linux 32-bit) for now and start a new powerpc-common that refactors 32/64 commonalities. Unless someone says otherwise about the meaning of these files. - k ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 04/10] polkit: Support PAM
Op 21 jul. 2011, om 11:49 heeft Kang Kai het volgende geschreven: > On 2011年07月21日 16:59, Koen Kooi wrote: >> Op 21 jul. 2011, om 10:00 heeft Kang Kai het volgende geschreven: >> >>> From: Xiaofeng Yan >>> >>> Modify configuration "polkit-1" in /etc/pam.d/ for supporting pam. >>> >>> Signed-off-by: Xiaofeng Yan >>> --- >>> .../polkit/polkit-0.101/polkit-1_pam.patch | 23 >>> >>> meta/recipes-extended/polkit/polkit_0.101.bb |6 +++- >>> 2 files changed, 27 insertions(+), 2 deletions(-) >>> create mode 100644 >>> meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch >>> >>> diff --git a/meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch >>> b/meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch >>> new file mode 100644 >>> index 000..fa145ac >>> --- /dev/null >>> +++ b/meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch >>> @@ -0,0 +1,23 @@ >>> +polkit: No system-auth in poky, we can use common-* in place of it. >> Poky or oe-core? And can we provide system-auth instead of patching the >> world? > > system-auth is the Fedora common pam configure file and auto generated by > command authconfig. It contains all 4 types(auth, account, password and > session) default config. But in Yocto Hmm, poky, oe-core or yocto? Which is it :) > we follow Debian/Ubuntu with separated files for default config: common-auth, > common-account etc. > So that we didn't import the system-auth file . > >> >> >>> + >>> +Upstream-Status:Inappropriate [configuration] >>> + >>> +Signed-off-by: Xiaofeng Yan >>> + >>> +--- a/configure.ac 2011-03-04 02:26:20.0 +0800 >>> b/configure.ac.new 2011-07-18 10:14:12.516818852 +0800 >>> +@@ -350,10 +350,10 @@ >>> + PAM_FILE_INCLUDE_PASSWORD=system >>> + PAM_FILE_INCLUDE_SESSION=system >>> + else >>> +- PAM_FILE_INCLUDE_AUTH=system-auth >>> +- PAM_FILE_INCLUDE_ACCOUNT=system-auth >>> +- PAM_FILE_INCLUDE_PASSWORD=system-auth >>> +- PAM_FILE_INCLUDE_SESSION=system-auth >>> ++ PAM_FILE_INCLUDE_AUTH=common-auth >>> ++ PAM_FILE_INCLUDE_ACCOUNT=common-account >>> ++ PAM_FILE_INCLUDE_PASSWORD=common-password >>> ++ PAM_FILE_INCLUDE_SESSION=common-session >>> + fi >>> + >>> + AC_SUBST(PAM_FILE_INCLUDE_AUTH) >>> diff --git a/meta/recipes-extended/polkit/polkit_0.101.bb >>> b/meta/recipes-extended/polkit/polkit_0.101.bb >>> index 6769914..da1d581 100644 >>> --- a/meta/recipes-extended/polkit/polkit_0.101.bb >>> +++ b/meta/recipes-extended/polkit/polkit_0.101.bb >>> @@ -7,8 +7,10 @@ LIC_FILES_CHKSUM = >>> "file://COPYING;md5=155db86cdbafa7532b41f390409283eb \ >>> >>> file://docs/polkit/html/license.html;md5=07ddbf5f29e44c80c99be19c1690ec1f" >>> >>> SRC_URI = "http://hal.freedesktop.org/releases/polkit-${PV}.tar.gz \ >>> - file://introspection.patch" >>> -PR = "r0" >>> + file://introspection.patch \ >>> + file://polkit-1_pam.patch" >>> + >>> +PR = "r1" >>> DEPENDS = "libpam expat dbus-glib eggdbus intltool" >>> RDEPENDS_${PN} = "libpam" >>> EXTRA_OECONF = "--with-authfw=pam --with-os-type=moblin --disable-man-pages >>> --disable-gtk-doc --disable-introspection" >>> -- >>> 1.7.5.1.300.gc565c >>> >>> >>> ___ >>> Openembedded-core mailing list >>> Openembedded-core@lists.openembedded.org >>> http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core >> >> ___ >> Openembedded-core mailing list >> Openembedded-core@lists.openembedded.org >> http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core > > > ___ > Openembedded-core mailing list > Openembedded-core@lists.openembedded.org > http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 00/10] works of adding packages pam support
Yes, that'd be awesome Op 21 jul. 2011, om 11:41 heeft Kang Kai het volgende geschreven: > On 2011年07月21日 16:53, Koen Kooi wrote: >> Op 21 jul. 2011, om 10:05 heeft Kang Kai het volgende geschreven: >> >>> On 2011年07月21日 16:00, Kang Kai wrote: From: Kang Kai Hi Scott, This is the current work of adding pam supports. After update libpam to 1.1.4, we enable the packages pam support. And if the pacakge doesn't have a pam configure file, import from Fedora. The following changes since commit fa4bcfdb73167f8159b88e5a4d711c0d37627a70: bb-matrix: correct BB and PM number canonicalization (2011-07-14 22:23:09 +0100) are available in the git repository at: git://git.pokylinux.org/poky-contrib kangkai/distro http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/pam-commits >>> sorry, the branch info is wrong, should be >>> >>> http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/distro >> Is that against oe-core or against poky? If it's against poky please rebase >> it against oe-core since that make it possible to test it. > > Koen, > > I rebase against oe-core and push to > > http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai%2Fpam-rebase-oe-core > > Is that what you want? > > Regards, > Kai > ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 1/1] dhcp: Fix libdir issue for multilib
On Thu, 2011-07-21 at 16:59 +0800, Mei Lei wrote: > -+ $(libbind)/lib/libdns.a $(libbind)/lib/libisc.a > ++ $(libbind)/libdns.a $(libbind)/libisc.a I wonder if you could just replace all this craziness with "-lbind" and let the linker find the library in the usual way. p. ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 04/10] polkit: Support PAM
On 2011年07月21日 16:59, Koen Kooi wrote: Op 21 jul. 2011, om 10:00 heeft Kang Kai het volgende geschreven: From: Xiaofeng Yan Modify configuration "polkit-1" in /etc/pam.d/ for supporting pam. Signed-off-by: Xiaofeng Yan --- .../polkit/polkit-0.101/polkit-1_pam.patch | 23 meta/recipes-extended/polkit/polkit_0.101.bb |6 +++- 2 files changed, 27 insertions(+), 2 deletions(-) create mode 100644 meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch diff --git a/meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch b/meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch new file mode 100644 index 000..fa145ac --- /dev/null +++ b/meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch @@ -0,0 +1,23 @@ +polkit: No system-auth in poky, we can use common-* in place of it. Poky or oe-core? And can we provide system-auth instead of patching the world? system-auth is the Fedora common pam configure file and auto generated by command authconfig. It contains all 4 types(auth, account, password and session) default config. But in Yocto we follow Debian/Ubuntu with separated files for default config: common-auth, common-account etc. So that we didn't import the system-auth file . + +Upstream-Status:Inappropriate [configuration] + +Signed-off-by: Xiaofeng Yan + +--- a/configure.ac 2011-03-04 02:26:20.0 +0800 b/configure.ac.new 2011-07-18 10:14:12.516818852 +0800 +@@ -350,10 +350,10 @@ + PAM_FILE_INCLUDE_PASSWORD=system + PAM_FILE_INCLUDE_SESSION=system + else +- PAM_FILE_INCLUDE_AUTH=system-auth +- PAM_FILE_INCLUDE_ACCOUNT=system-auth +- PAM_FILE_INCLUDE_PASSWORD=system-auth +- PAM_FILE_INCLUDE_SESSION=system-auth ++ PAM_FILE_INCLUDE_AUTH=common-auth ++ PAM_FILE_INCLUDE_ACCOUNT=common-account ++ PAM_FILE_INCLUDE_PASSWORD=common-password ++ PAM_FILE_INCLUDE_SESSION=common-session + fi + + AC_SUBST(PAM_FILE_INCLUDE_AUTH) diff --git a/meta/recipes-extended/polkit/polkit_0.101.bb b/meta/recipes-extended/polkit/polkit_0.101.bb index 6769914..da1d581 100644 --- a/meta/recipes-extended/polkit/polkit_0.101.bb +++ b/meta/recipes-extended/polkit/polkit_0.101.bb @@ -7,8 +7,10 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=155db86cdbafa7532b41f390409283eb \ file://docs/polkit/html/license.html;md5=07ddbf5f29e44c80c99be19c1690ec1f" SRC_URI = "http://hal.freedesktop.org/releases/polkit-${PV}.tar.gz \ - file://introspection.patch" -PR = "r0" + file://introspection.patch \ + file://polkit-1_pam.patch" + +PR = "r1" DEPENDS = "libpam expat dbus-glib eggdbus intltool" RDEPENDS_${PN} = "libpam" EXTRA_OECONF = "--with-authfw=pam --with-os-type=moblin --disable-man-pages --disable-gtk-doc --disable-introspection" -- 1.7.5.1.300.gc565c ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 07/10] sudo: add pam support
On 2011年07月21日 17:06, Phil Blundell wrote: On Thu, 2011-07-21 at 16:00 +0800, Kang Kai wrote: +do_install_append () { + install -D -m 664 ${WORKDIR}/sudo.pamd ${D}/${sysconfdir}/pam.d/sudo +} As with openssh, you don't want to install and ship this file if pam isn't enabled. p. ok, we'll try to do that. Thanks, Kai ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 00/10] works of adding packages pam support
On 2011年07月21日 16:53, Koen Kooi wrote: Op 21 jul. 2011, om 10:05 heeft Kang Kai het volgende geschreven: On 2011年07月21日 16:00, Kang Kai wrote: From: Kang Kai Hi Scott, This is the current work of adding pam supports. After update libpam to 1.1.4, we enable the packages pam support. And if the pacakge doesn't have a pam configure file, import from Fedora. The following changes since commit fa4bcfdb73167f8159b88e5a4d711c0d37627a70: bb-matrix: correct BB and PM number canonicalization (2011-07-14 22:23:09 +0100) are available in the git repository at: git://git.pokylinux.org/poky-contrib kangkai/distro http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/pam-commits sorry, the branch info is wrong, should be http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/distro Is that against oe-core or against poky? If it's against poky please rebase it against oe-core since that make it possible to test it. Koen, I rebase against oe-core and push to http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai%2Fpam-rebase-oe-core Is that what you want? Regards, Kai ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 00/10] Small fixes
On Thu, 2011-07-21 at 08:11 +0200, Martin Jansa wrote: > On Wed, Jul 20, 2011 at 05:54:55PM -0700, Tom Rini wrote: > > On 07/20/2011 05:18 PM, Khem Raj wrote: > > > On 07/20/2011 02:06 PM, Martin Jansa wrote: > > >> Fixes for recipes using intltool, distributions not having locales > > >> support in libc and distutils fix > > >> > > >> The following changes since commit > > >> 0d03800caffc2341b74190d38f7a372223c89f4c: > > >> > > >>lsbsetup_1.0.bb: Change the hardcoded /usr/lib to support multilib > > >> (2011-07-20 15:43:43 +0100) > > >> > > >> are available in the git repository at: > > >>git://git.openembedded.org/openembedded-core-contrib jansa/pull > > >> > > >> http://cgit.openembedded.org/cgit.cgi/openembedded-core-contrib/log/?h=jansa/pull > > >> > > >> > > >> Martin Jansa (10): > > >>tcmode-default: set preferred version also for (e)glibc-locale > > >>eglibc-package: don't fail without localedef/gconv > > >>intltool: inherit perlnative > > >>polkit: inherit perlnative > > >>shared-mime-info: inherit perlnative > > >>xkeyboard-config: inherit perlnative > > >>avahi: inherit perlnative > > >>vte: inherit perlnative > > > > > > I guess all inherit perlnative patches can me squashed into one > > > > Or not done? :) > > I still see this issue, with > http://patches.openembedded.org/patch/8069/ > applied. I'm wondering if a better approach to fixing this might be to change intltool.m4 so where it says AC_PATH_PROG(INTLTOOL_PERL, perl), it says AC_PATH_PROG(INTLTOOL_PERL, nativeperl) instead, at least in the sysroot. Another option would be a class that did: DEPENDS =+ "intltool" export INTLTOOL_PERL = "nativeperl" although I think I prefer correcting the intltool m4 macro slightly more. Or do we just add the export to the core in bitbake.conf or autotools.bbclass?... Cheers, Richard ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 03/10] openssh: Support PAM
On Thu, 2011-07-21 at 16:00 +0800, Kang Kai wrote: > do_install_append () { > install -d ${D}${sysconfdir}/init.d > + install -d ${D}${sysconfdir}/pam.d > install -m 0755 ${WORKDIR}/init ${D}${sysconfdir}/init.d/sshd > + install -m 0755 ${WORKDIR}/sshd ${D}${sysconfdir}/pam.d/sshd I think this should be conditional on pam in DISTRO_FEATURES. p. ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 07/10] sudo: add pam support
On Thu, 2011-07-21 at 16:00 +0800, Kang Kai wrote: > +do_install_append () { > + install -D -m 664 ${WORKDIR}/sudo.pamd ${D}/${sysconfdir}/pam.d/sudo > +} As with openssh, you don't want to install and ship this file if pam isn't enabled. p. ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 03/10] openssh: Support PAM
Op 21 jul. 2011, om 10:00 heeft Kang Kai het volgende geschreven: > From: Xiaofeng Yan > > Adding configuration file "sshd" in /etc/pam.d/ for supporting pam. Where did this file come from and why isn't openssh providing it on its own? > > Signed-off-by: Xiaofeng Yan > --- > .../openssh/openssh-5.8p2/sshd | 10 ++ > meta/recipes-connectivity/openssh/openssh_5.8p2.bb |7 +-- > 2 files changed, 15 insertions(+), 2 deletions(-) > create mode 100644 meta/recipes-connectivity/openssh/openssh-5.8p2/sshd > > diff --git a/meta/recipes-connectivity/openssh/openssh-5.8p2/sshd > b/meta/recipes-connectivity/openssh/openssh-5.8p2/sshd > new file mode 100644 > index 000..4882e58 > --- /dev/null > +++ b/meta/recipes-connectivity/openssh/openssh-5.8p2/sshd > @@ -0,0 +1,10 @@ > +#%PAM-1.0 > + > +auth include common-auth > +accountrequired pam_nologin.so > +accountinclude common-account > +password include common-password > +sessionoptional pam_keyinit.so force revoke > +sessioninclude common-session > +sessionrequired pam_loginuid.so > + > diff --git a/meta/recipes-connectivity/openssh/openssh_5.8p2.bb > b/meta/recipes-connectivity/openssh/openssh_5.8p2.bb > index e23069c..e0da936 100644 > --- a/meta/recipes-connectivity/openssh/openssh_5.8p2.bb > +++ b/meta/recipes-connectivity/openssh/openssh_5.8p2.bb > @@ -7,7 +7,7 @@ SECTION = "console/network" > LICENSE = "BSD" > LIC_FILES_CHKSUM = "file://LICENCE;md5=bae9a689be41581503bcf95d8fb42c4e" > > -PR = "r0" > +PR = "r1" > > DEPENDS = "zlib openssl" > DEPENDS += "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}" > @@ -23,6 +23,7 @@ SRC_URI = > "ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-${PV}.tar. >file://sshd_config \ >file://ssh_config \ >file://init \ > + file://sshd \ > " > SRC_URI[md5sum] = "0541579adf9d55abb15ef927048d372e" > SRC_URI[sha256sum] = > "5c35ec7c966ce05cc4497ac59c0b54a556e55ae7368165cc8c4129694654f314" > @@ -59,7 +60,9 @@ do_compile_append () { > > do_install_append () { > install -d ${D}${sysconfdir}/init.d > + install -d ${D}${sysconfdir}/pam.d > install -m 0755 ${WORKDIR}/init ${D}${sysconfdir}/init.d/sshd > + install -m 0755 ${WORKDIR}/sshd ${D}${sysconfdir}/pam.d/sshd > mv ${D}${bindir}/scp ${D}${bindir}/scp.${PN} > mv ${D}${bindir}/ssh ${D}${bindir}/ssh.${PN} > rm -f ${D}${bindir}/slogin ${D}${datadir}/Ssh.bin > @@ -71,7 +74,7 @@ ALLOW_EMPTY_${PN} = "1" > PACKAGES =+ "${PN}-keygen ${PN}-scp ${PN}-ssh ${PN}-sshd ${PN}-sftp > ${PN}-misc ${PN}-sftp-server" > FILES_${PN}-scp = "${bindir}/scp.${PN}" > FILES_${PN}-ssh = "${bindir}/ssh.${PN} ${sysconfdir}/ssh/ssh_config" > -FILES_${PN}-sshd = "${sbindir}/sshd ${sysconfdir}/init.d/sshd" > +FILES_${PN}-sshd = "${sbindir}/sshd ${sysconfdir}/init.d/sshd > ${sysconfdir}/pam.d/sshd" > FILES_${PN}-sshd += "${sysconfdir}/ssh/moduli ${sysconfdir}/ssh/sshd_config" > FILES_${PN}-sftp = "${bindir}/sftp" > FILES_${PN}-sftp-server = "${libexecdir}/sftp-server" > -- > 1.7.5.1.300.gc565c > > > ___ > Openembedded-core mailing list > Openembedded-core@lists.openembedded.org > http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 04/10] polkit: Support PAM
Op 21 jul. 2011, om 10:00 heeft Kang Kai het volgende geschreven: > From: Xiaofeng Yan > > Modify configuration "polkit-1" in /etc/pam.d/ for supporting pam. > > Signed-off-by: Xiaofeng Yan > --- > .../polkit/polkit-0.101/polkit-1_pam.patch | 23 > meta/recipes-extended/polkit/polkit_0.101.bb |6 +++- > 2 files changed, 27 insertions(+), 2 deletions(-) > create mode 100644 > meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch > > diff --git a/meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch > b/meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch > new file mode 100644 > index 000..fa145ac > --- /dev/null > +++ b/meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch > @@ -0,0 +1,23 @@ > +polkit: No system-auth in poky, we can use common-* in place of it. Poky or oe-core? And can we provide system-auth instead of patching the world? > + > +Upstream-Status:Inappropriate [configuration] > + > +Signed-off-by: Xiaofeng Yan > + > +--- a/configure.ac 2011-03-04 02:26:20.0 +0800 > b/configure.ac.new 2011-07-18 10:14:12.516818852 +0800 > +@@ -350,10 +350,10 @@ > + PAM_FILE_INCLUDE_PASSWORD=system > + PAM_FILE_INCLUDE_SESSION=system > + else > +- PAM_FILE_INCLUDE_AUTH=system-auth > +- PAM_FILE_INCLUDE_ACCOUNT=system-auth > +- PAM_FILE_INCLUDE_PASSWORD=system-auth > +- PAM_FILE_INCLUDE_SESSION=system-auth > ++ PAM_FILE_INCLUDE_AUTH=common-auth > ++ PAM_FILE_INCLUDE_ACCOUNT=common-account > ++ PAM_FILE_INCLUDE_PASSWORD=common-password > ++ PAM_FILE_INCLUDE_SESSION=common-session > + fi > + > + AC_SUBST(PAM_FILE_INCLUDE_AUTH) > diff --git a/meta/recipes-extended/polkit/polkit_0.101.bb > b/meta/recipes-extended/polkit/polkit_0.101.bb > index 6769914..da1d581 100644 > --- a/meta/recipes-extended/polkit/polkit_0.101.bb > +++ b/meta/recipes-extended/polkit/polkit_0.101.bb > @@ -7,8 +7,10 @@ LIC_FILES_CHKSUM = > "file://COPYING;md5=155db86cdbafa7532b41f390409283eb \ > > file://docs/polkit/html/license.html;md5=07ddbf5f29e44c80c99be19c1690ec1f" > > SRC_URI = "http://hal.freedesktop.org/releases/polkit-${PV}.tar.gz \ > - file://introspection.patch" > -PR = "r0" > + file://introspection.patch \ > + file://polkit-1_pam.patch" > + > +PR = "r1" > DEPENDS = "libpam expat dbus-glib eggdbus intltool" > RDEPENDS_${PN} = "libpam" > EXTRA_OECONF = "--with-authfw=pam --with-os-type=moblin --disable-man-pages > --disable-gtk-doc --disable-introspection" > -- > 1.7.5.1.300.gc565c > > > ___ > Openembedded-core mailing list > Openembedded-core@lists.openembedded.org > http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 09/10] shadow: update pam related configure files
Op 21 jul. 2011, om 10:00 heeft Kang Kai het volgende geschreven: > From: Kang Kai > > add shadow-update-pam-conf.patch to update the pam related configure files > in Yocto way rather than Fedora. I'm not entirely sure, but do the updated conf files need something like http://cgit.openembedded.org/cgit.cgi/openembedded-core/commit/?id=b90e9c2318fc421f37c57788ece54ce791a90b62 as well? > > Signed-off-by: Kang Kai > --- > .../shadow/files/shadow-update-pam-conf.patch | 175 > meta/recipes-extended/shadow/shadow_4.1.4.3.bb |5 +- > 2 files changed, 178 insertions(+), 2 deletions(-) > create mode 100644 > meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch > > diff --git a/meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch > b/meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch > new file mode 100644 > index 000..33789f5 > --- /dev/null > +++ b/meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch > @@ -0,0 +1,175 @@ > +The system-auth in the configure files is from Fedora which put all the 4 > pam type rules > +in one file. > +In yocto it obey the way with Debian/Ubuntu, and the names are common-auth, > common-account, > +common-password and common-session. > +So update them in Yocto way. > + > +Upstream-Status: Pending > + > +Signed-off-by: Kang Kai > + > +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chage shadow-4.1.4.3/etc/pam.d/chage > +--- shadow-4.1.4.3/etc/pam.d.orig/chage 2011-07-20 19:02:27.384844958 > +0800 > shadow-4.1.4.3/etc/pam.d/chage 2011-07-20 19:03:08.964844958 +0800 > +@@ -1,4 +1,4 @@ > + #%PAM-1.0 > + authsufficient pam_rootok.so > + account requiredpam_permit.so > +-passwordinclude system-auth > ++passwordinclude common-password > +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chfn shadow-4.1.4.3/etc/pam.d/chfn > +--- shadow-4.1.4.3/etc/pam.d.orig/chfn 2011-07-20 19:02:27.384844958 > +0800 > shadow-4.1.4.3/etc/pam.d/chfn2011-07-20 19:03:17.804844958 +0800 > +@@ -1,4 +1,4 @@ > + #%PAM-1.0 > + authsufficient pam_rootok.so > + account requiredpam_permit.so > +-passwordinclude system-auth > ++passwordinclude common-password > +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chgpasswd > shadow-4.1.4.3/etc/pam.d/chgpasswd > +--- shadow-4.1.4.3/etc/pam.d.orig/chgpasswd 2011-07-20 19:02:27.384844958 > +0800 > shadow-4.1.4.3/etc/pam.d/chgpasswd 2011-07-20 19:03:26.544844958 > +0800 > +@@ -1,4 +1,4 @@ > + #%PAM-1.0 > + authsufficient pam_rootok.so > + account requiredpam_permit.so > +-passwordinclude system-auth > ++passwordinclude common-password > +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chpasswd > shadow-4.1.4.3/etc/pam.d/chpasswd > +--- shadow-4.1.4.3/etc/pam.d.orig/chpasswd 2011-07-20 19:02:27.384844958 > +0800 > shadow-4.1.4.3/etc/pam.d/chpasswd2011-07-20 19:03:42.724844958 > +0800 > +@@ -1,4 +1,4 @@ > + #%PAM-1.0 > + authsufficient pam_rootok.so > + account requiredpam_permit.so > +-passwordinclude system-auth > ++passwordinclude common-password > +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chsh shadow-4.1.4.3/etc/pam.d/chsh > +--- shadow-4.1.4.3/etc/pam.d.orig/chsh 2011-07-20 19:02:27.384844958 > +0800 > shadow-4.1.4.3/etc/pam.d/chsh2011-07-20 19:03:51.524844958 +0800 > +@@ -1,4 +1,4 @@ > + #%PAM-1.0 > + authsufficient pam_rootok.so > + account requiredpam_permit.so > +-passwordinclude system-auth > ++passwordinclude common-password > +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/groupadd > shadow-4.1.4.3/etc/pam.d/groupadd > +--- shadow-4.1.4.3/etc/pam.d.orig/groupadd 2011-07-20 19:02:27.384844958 > +0800 > shadow-4.1.4.3/etc/pam.d/groupadd2011-07-20 19:04:08.124844958 > +0800 > +@@ -1,4 +1,4 @@ > + #%PAM-1.0 > + authsufficient pam_rootok.so > + account requiredpam_permit.so > +-passwordinclude system-auth > ++passwordinclude common-password > +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/groupdel > shadow-4.1.4.3/etc/pam.d/groupdel > +--- shadow-4.1.4.3/etc/pam.d.orig/groupdel 2011-07-20 19:02:27.384844958 > +0800 > shadow-4.1.4.3/etc/pam.d/groupdel2011-07-20 19:04:26.114844958 > +0800 > +@@ -1,4 +1,4 @@ > + #%PAM-1.0 > + authsufficient pam_rootok.so > + account requiredpam_permit.so > +-passwordinclude system-auth > ++passwordinclude common-password > +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/groupmems > shadow-4.1.4.3/etc/pam.d/groupmems > +--- shadow-4.1.4.3/etc/pam.d.orig/groupmems 2011-07-20 19:02:27.384844958 > +0800 > shadow-4.1.4.3/etc/pam.d/groupm
Re: [OE-core] [PATCH 02/10] dropbear: Support PAM
Op 21 jul. 2011, om 10:00 heeft Kang Kai het volgende geschreven: > From: Xiaofeng Yan > > I make a patch and some changes in dropbear.inc for supporting pam. > - Enable pam in configure > - Modify file option.h to open pam supporting > > Signed-off-by: Xiaofeng Yan > --- > meta/recipes-core/dropbear/dropbear.inc|6 - > .../dropbear/dropbear/dropbear-enable-pam.patch| 21 > 2 files changed, 26 insertions(+), 1 deletions(-) > create mode 100644 > meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch > > diff --git a/meta/recipes-core/dropbear/dropbear.inc > b/meta/recipes-core/dropbear/dropbear.inc > index 1b51e1a..48cefb6 100644 > --- a/meta/recipes-core/dropbear/dropbear.inc > +++ b/meta/recipes-core/dropbear/dropbear.inc > @@ -9,13 +9,15 @@ LIC_FILES_CHKSUM = > "file://LICENSE;md5=3a5b0c2f0d0c49dfde9558ae2036683c" > > DEPENDS = "zlib" > RPROVIDES = "ssh sshd" > +DEPENDS += "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}" > > SRC_URI = "http://matt.ucc.asn.au/dropbear/releases/dropbear-${PV}.tar.gz \ >file://urandom-xauth-changes-to-options.h.patch \ >file://configure.patch \ >file://fix-2kb-keys.patch \ >file://allow-nopw.patch;apply=no \ > - file://init" > + file://init \ > + file://dropbear-enable-pam.patch " > > inherit autotools update-rc.d > > @@ -28,6 +30,8 @@ LD = "${CC}" > SBINCOMMANDS = "dropbear dropbearkey dropbearconvert" > BINCOMMANDS = "dbclient ssh scp" > EXTRA_OEMAKE = 'MULTI=1 SCPPROGRESS=1 PROGRAMS="${SBINCOMMANDS} > ${BINCOMMANDS}"' > +EXTRA_OECONF += "\ > + ${@base_contains('DISTRO_FEATURES', 'pam', '--enable-pam', > '--disable-pam', d)}" > > DISTRO_TYPE = "${@base_contains("IMAGE_FEATURES", "debug-tweaks", "debug", > "",d)}" That one is missing a PR bump ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 0/1]dhcp: Fix hard coded libdir issue for multilib
This pull request fixes some hard coded /usr/lib path issues, please review it. Thanks, Lei The following changes since commit 8af286885353d5740971f137f8c1ada2b43dd2a8: Paul Eggleton (1): README.hardware: update MPC8315E-RDB instructions are available in the git repository at: git://git.pokylinux.org/poky-contrib lmei3/multilib-lsb-v2 http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=lmei3/multilib-lsb-v2 Mei Lei (1): dhcp: Fix libdir issue for multilib .../dhcp/dhcp-4.2.0/fix-external-bind.patch| 14 +++--- meta/recipes-connectivity/dhcp/dhcp4.inc |2 +- 2 files changed, 8 insertions(+), 8 deletions(-) ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 00/10] works of adding packages pam support
Op 21 jul. 2011, om 10:05 heeft Kang Kai het volgende geschreven: > On 2011年07月21日 16:00, Kang Kai wrote: >> From: Kang Kai >> >> >> Hi Scott, >> >> This is the current work of adding pam supports. >> >> After update libpam to 1.1.4, we enable the packages pam support. And if the >> pacakge >> doesn't have a pam configure file, import from Fedora. >> >> The following changes since commit fa4bcfdb73167f8159b88e5a4d711c0d37627a70: >> >> bb-matrix: correct BB and PM number canonicalization (2011-07-14 22:23:09 >> +0100) >> >> are available in the git repository at: >> git://git.pokylinux.org/poky-contrib kangkai/distro >> >> http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/pam-commits > > sorry, the branch info is wrong, should be > > http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/distro Is that against oe-core or against poky? If it's against poky please rebase it against oe-core since that make it possible to test it. ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 1/1] dhcp: Fix libdir issue for multilib
Signed-off-by: Mei Lei --- .../dhcp/dhcp-4.2.0/fix-external-bind.patch| 14 +++--- meta/recipes-connectivity/dhcp/dhcp4.inc |2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/meta/recipes-connectivity/dhcp/dhcp-4.2.0/fix-external-bind.patch b/meta/recipes-connectivity/dhcp/dhcp-4.2.0/fix-external-bind.patch index f03936d..4f11655 100644 --- a/meta/recipes-connectivity/dhcp/dhcp-4.2.0/fix-external-bind.patch +++ b/meta/recipes-connectivity/dhcp/dhcp-4.2.0/fix-external-bind.patch @@ -28,7 +28,7 @@ index 77ed055..5a77f2d 100644 scripts/solaris scripts/openwrt dhclient_LDADD = ../common/libdhcp.a ../omapip/libomapi.a \ - ../bind/lib/libdns.a ../bind/lib/libisc.a -+ $(libbind)/lib/libdns.a $(libbind)/lib/libisc.a ++ $(libbind)/libdns.a $(libbind)/libisc.a man_MANS = dhclient.8 dhclient-script.8 dhclient.conf.5 dhclient.leases.5 EXTRA_DIST = $(man_MANS) @@ -53,7 +53,7 @@ index 61049be..85aefa3 100644 omshell_SOURCES = omshell.c omshell_LDADD = libdhcpctl.a ../common/libdhcp.a ../omapip/libomapi.a \ - ../bind/lib/libdns.a ../bind/lib/libisc.a -+ $(libbind)/lib/libdns.a $(libbind)/lib/libisc.a ++ $(libbind)/libdns.a $(libbind)/libisc.a libdhcpctl_a_SOURCES = dhcpctl.c callback.c remote.c @@ -61,7 +61,7 @@ index 61049be..85aefa3 100644 cltest_LDADD = libdhcpctl.a ../common/libdhcp.a ../omapip/libomapi.a \ - ../bind/lib/libdns.a ../bind/lib/libisc.a \ No newline at end of file -+ $(libbind)/lib/libdns.a $(libbind)/lib/libisc.a ++ $(libbind)/libdns.a $(libbind)/libisc.a diff --git a/omapip/Makefile.am b/omapip/Makefile.am index 595950a..17f2233 100644 --- a/omapip/Makefile.am @@ -71,7 +71,7 @@ index 595950a..17f2233 100644 svtest_SOURCES = test.c -svtest_LDADD = libomapi.a ../bind/lib/libdns.a ../bind/lib/libisc.a -+svtest_LDADD = libomapi.a $(libbind)/lib/libdns.a $(libbind)/lib/libisc.a ++svtest_LDADD = libomapi.a $(libbind)/libdns.a $(libbind)/libisc.a diff --git a/relay/Makefile.am b/relay/Makefile.am index d8757ca..a7885da 100644 @@ -82,7 +82,7 @@ index d8757ca..a7885da 100644 dhcrelay_SOURCES = dhcrelay.c dhcrelay_LDADD = ../common/libdhcp.a ../omapip/libomapi.a \ - ../bind/lib/libdns.a ../bind/lib/libisc.a -+ $(libbind)/lib/libdns.a $(libbind)/lib/libisc.a ++ $(libbind)/libdns.a $(libbind)/libisc.a man_MANS = dhcrelay.8 EXTRA_DIST = $(man_MANS) @@ -96,8 +96,8 @@ index cdfaf47..d2c254b 100644 dhcpd_LDADD = ../common/libdhcp.a ../omapip/libomapi.a \ -../dhcpctl/libdhcpctl.a ../bind/lib/libdns.a \ -../bind/lib/libisc.a -+../dhcpctl/libdhcpctl.a $(libbind)/lib/libdns.a \ -+$(libbind)/lib/libisc.a ++../dhcpctl/libdhcpctl.a $(libbind)/libdns.a \ ++$(libbind)/libisc.a man_MANS = dhcpd.8 dhcpd.conf.5 dhcpd.leases.5 EXTRA_DIST = $(man_MANS) diff --git a/meta/recipes-connectivity/dhcp/dhcp4.inc b/meta/recipes-connectivity/dhcp/dhcp4.inc index 885cc19..bdaa5e9 100644 --- a/meta/recipes-connectivity/dhcp/dhcp4.inc +++ b/meta/recipes-connectivity/dhcp/dhcp4.inc @@ -25,7 +25,7 @@ EXTRA_OECONF = "--with-srv-lease-file=${localstatedir}/lib/dhcp/dhcpd.leases \ --with-srv6-lease-file=${localstatedir}/lib/dhcp/dhcpd6.leases \ --with-cli-lease-file=${localstatedir}/lib/dhcp/dhclient.leases \ --with-cli6-lease-file=${localstatedir}/lib/dhcp/dhclient6.leases \ ---with-libbind=${STAGING_LIBDIR}/.. \ +--with-libbind=${STAGING_LIBDIR}/ \ " do_compile_prepend () { -- 1.6.3.3 ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 3/6] libiconv: Fix build failure on 1.13.1
Hi Khem, what was the reason to patch out the libtool-macros instead of deleting them? That would be reduce the changelines a lot. Bye henning ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 09/10] shadow: update pam related configure files
From: Kang Kai add shadow-update-pam-conf.patch to update the pam related configure files in Yocto way rather than Fedora. Signed-off-by: Kang Kai --- .../shadow/files/shadow-update-pam-conf.patch | 175 meta/recipes-extended/shadow/shadow_4.1.4.3.bb |5 +- 2 files changed, 178 insertions(+), 2 deletions(-) create mode 100644 meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch diff --git a/meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch b/meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch new file mode 100644 index 000..33789f5 --- /dev/null +++ b/meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch @@ -0,0 +1,175 @@ +The system-auth in the configure files is from Fedora which put all the 4 pam type rules +in one file. +In yocto it obey the way with Debian/Ubuntu, and the names are common-auth, common-account, +common-password and common-session. +So update them in Yocto way. + +Upstream-Status: Pending + +Signed-off-by: Kang Kai + +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chage shadow-4.1.4.3/etc/pam.d/chage +--- shadow-4.1.4.3/etc/pam.d.orig/chage2011-07-20 19:02:27.384844958 +0800 shadow-4.1.4.3/etc/pam.d/chage 2011-07-20 19:03:08.964844958 +0800 +@@ -1,4 +1,4 @@ + #%PAM-1.0 + auth sufficient pam_rootok.so + account requiredpam_permit.so +-password include system-auth ++password include common-password +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chfn shadow-4.1.4.3/etc/pam.d/chfn +--- shadow-4.1.4.3/etc/pam.d.orig/chfn 2011-07-20 19:02:27.384844958 +0800 shadow-4.1.4.3/etc/pam.d/chfn 2011-07-20 19:03:17.804844958 +0800 +@@ -1,4 +1,4 @@ + #%PAM-1.0 + auth sufficient pam_rootok.so + account requiredpam_permit.so +-password include system-auth ++password include common-password +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chgpasswd shadow-4.1.4.3/etc/pam.d/chgpasswd +--- shadow-4.1.4.3/etc/pam.d.orig/chgpasswd2011-07-20 19:02:27.384844958 +0800 shadow-4.1.4.3/etc/pam.d/chgpasswd 2011-07-20 19:03:26.544844958 +0800 +@@ -1,4 +1,4 @@ + #%PAM-1.0 + auth sufficient pam_rootok.so + account requiredpam_permit.so +-password include system-auth ++password include common-password +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chpasswd shadow-4.1.4.3/etc/pam.d/chpasswd +--- shadow-4.1.4.3/etc/pam.d.orig/chpasswd 2011-07-20 19:02:27.384844958 +0800 shadow-4.1.4.3/etc/pam.d/chpasswd 2011-07-20 19:03:42.724844958 +0800 +@@ -1,4 +1,4 @@ + #%PAM-1.0 + auth sufficient pam_rootok.so + account requiredpam_permit.so +-password include system-auth ++password include common-password +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/chsh shadow-4.1.4.3/etc/pam.d/chsh +--- shadow-4.1.4.3/etc/pam.d.orig/chsh 2011-07-20 19:02:27.384844958 +0800 shadow-4.1.4.3/etc/pam.d/chsh 2011-07-20 19:03:51.524844958 +0800 +@@ -1,4 +1,4 @@ + #%PAM-1.0 + auth sufficient pam_rootok.so + account requiredpam_permit.so +-password include system-auth ++password include common-password +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/groupadd shadow-4.1.4.3/etc/pam.d/groupadd +--- shadow-4.1.4.3/etc/pam.d.orig/groupadd 2011-07-20 19:02:27.384844958 +0800 shadow-4.1.4.3/etc/pam.d/groupadd 2011-07-20 19:04:08.124844958 +0800 +@@ -1,4 +1,4 @@ + #%PAM-1.0 + auth sufficient pam_rootok.so + account requiredpam_permit.so +-password include system-auth ++password include common-password +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/groupdel shadow-4.1.4.3/etc/pam.d/groupdel +--- shadow-4.1.4.3/etc/pam.d.orig/groupdel 2011-07-20 19:02:27.384844958 +0800 shadow-4.1.4.3/etc/pam.d/groupdel 2011-07-20 19:04:26.114844958 +0800 +@@ -1,4 +1,4 @@ + #%PAM-1.0 + auth sufficient pam_rootok.so + account requiredpam_permit.so +-password include system-auth ++password include common-password +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/groupmems shadow-4.1.4.3/etc/pam.d/groupmems +--- shadow-4.1.4.3/etc/pam.d.orig/groupmems2011-07-20 19:02:27.384844958 +0800 shadow-4.1.4.3/etc/pam.d/groupmems 2011-07-20 19:04:35.074844958 +0800 +@@ -1,4 +1,4 @@ + #%PAM-1.0 + auth sufficient pam_rootok.so + account requiredpam_permit.so +-password include system-auth ++password include common-password +diff -Nur shadow-4.1.4.3/etc/pam.d.orig/groupmod shadow-4.1.4.3/etc/pam.d/groupmod +--- shadow-4.1.4.3/etc/pam.d.orig/groupmod 2011-07-20 19:02:27.384844958 +0800 shadow-4.1.4.3/etc/pam.d/groupmod 2011-07-20 19:04:44.864844958 +0800 +@@ -1
Re: [OE-core] [PATCH 00/10] works of adding packages pam support
On 2011?07?21? 16:00, Kang Kai wrote: From: Kang Kai Hi Scott, This is the current work of adding pam supports. After update libpam to 1.1.4, we enable the packages pam support. And if the pacakge doesn't have a pam configure file, import from Fedora. The following changes since commit fa4bcfdb73167f8159b88e5a4d711c0d37627a70: bb-matrix: correct BB and PM number canonicalization (2011-07-14 22:23:09 +0100) are available in the git repository at: git://git.pokylinux.org/poky-contrib kangkai/distro http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/pam-commits sorry, the branch info is wrong, should be *http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/distro* Kang Kai (5): libpam: update to 1.1.4 and add subpackage xtests cups: add pam support screen: add pam support sudo: add pam support shadow: update pam related configure files Wenzong Fan (2): cronie: enable PAM support for cronie at: enable pam support Xiaofeng Yan (3): dropbear: Support PAM openssh: Support PAM polkit: Support PAM .../openssh/openssh-5.8p2/sshd | 10 + meta/recipes-connectivity/openssh/openssh_5.8p2.bb |7 +- meta/recipes-core/dropbear/dropbear.inc|6 +- .../dropbear/dropbear/dropbear-enable-pam.patch| 21 +++ .../at/at-3.1.12/configure-add-enable-pam.patch| 23 +++ meta/recipes-extended/at/at-3.1.12/pam.conf.patch | 16 ++ meta/recipes-extended/at/at_3.1.12.bb | 13 +- .../cronie/cronie/crond_pam_config.patch | 13 ++ meta/recipes-extended/cronie/cronie_1.4.7.bb |9 +- meta/recipes-extended/cups/cups_1.4.6.bb |8 +- .../pam/libpam/libpam-xtests.patch | 35 .../pam/{libpam_1.1.3.bb => libpam_1.1.4.bb} | 14 +- .../polkit/polkit-0.101/polkit-1_pam.patch | 23 +++ meta/recipes-extended/polkit/polkit_0.101.bb |6 +- .../screen/screen-4.0.3/screen.pamd|2 + meta/recipes-extended/screen/screen_4.0.3.bb | 14 +- .../shadow/files/shadow-update-pam-conf.patch | 175 meta/recipes-extended/shadow/shadow_4.1.4.3.bb |5 +- meta/recipes-extended/sudo/files/sudo.pamd |6 + meta/recipes-extended/sudo/sudo_1.8.1p2.bb | 11 +- 20 files changed, 389 insertions(+), 28 deletions(-) create mode 100644 meta/recipes-connectivity/openssh/openssh-5.8p2/sshd create mode 100644 meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch create mode 100644 meta/recipes-extended/at/at-3.1.12/configure-add-enable-pam.patch create mode 100644 meta/recipes-extended/at/at-3.1.12/pam.conf.patch create mode 100644 meta/recipes-extended/cronie/cronie/crond_pam_config.patch create mode 100644 meta/recipes-extended/pam/libpam/libpam-xtests.patch rename meta/recipes-extended/pam/{libpam_1.1.3.bb => libpam_1.1.4.bb} (85%) create mode 100644 meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch create mode 100644 meta/recipes-extended/screen/screen-4.0.3/screen.pamd create mode 100644 meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch create mode 100644 meta/recipes-extended/sudo/files/sudo.pamd ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 05/10] cups: add pam support
From: Kang Kai According to distro_feature then add pam support for cups or not. Signed-off-by: Kang Kai --- meta/recipes-extended/cups/cups_1.4.6.bb |8 +--- 1 files changed, 5 insertions(+), 3 deletions(-) diff --git a/meta/recipes-extended/cups/cups_1.4.6.bb b/meta/recipes-extended/cups/cups_1.4.6.bb index 86b5340..fd20dcc 100644 --- a/meta/recipes-extended/cups/cups_1.4.6.bb +++ b/meta/recipes-extended/cups/cups_1.4.6.bb @@ -1,7 +1,8 @@ require cups14.inc -PR = "r0" -DEPENDS += "libusb" +PR = "r1" +DEPENDS += "libusb \ + ${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}" LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=956e7600195e6139f12de8c2a5bbefa9" SRC_URI += " \ @@ -12,6 +13,7 @@ SRC_URI += " \ SRC_URI[md5sum] = "de8fb5a29c36554925c0c6a6e2c0dae1" SRC_URI[sha256sum] = "f08711702a77b52c7150f96fe1f45482f6151cb95ef601268c528607fe6ad514" -EXTRA_OECONF += " --disable-gssapi --enable-debug --disable-relro --enable-libusb" +EXTRA_OECONF += " --disable-gssapi --enable-debug --disable-relro --enable-libusb \ + ${@base_contains('DISTRO_FEATURES', 'pam', '--enable-pam', '--disable-pam', d)}" CONFFILES_${PN} += "${sysconfdir}/cups/cupsd.conf" -- 1.7.5.1.300.gc565c ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [CONSOLIDATED PULL 05/20] cpan.bbclass: Perform more mangling for perl path
From: Tom Rini On hosts where we may already be past the #! limit this is required and this is safe on the target as well. This is be7fe31 in oe.dev. Related to this we now bump all PRs for recipes that inherit cpan. Note that in oe.dev we mangle for perl but here we use the new nativeperl script. Signed-off-by: Tom Rini --- meta/classes/cpan.bbclass |3 +++ meta/recipes-devtools/perl/liburi-perl_1.58.bb |2 +- .../perl/libxml-parser-perl_2.40.bb|2 +- meta/recipes-devtools/perl/libxml-perl_0.08.bb |2 +- .../perl/libxml-simple-perl_2.18.bb|2 +- .../sgmlspl/sgmlspl-native_1.03ii.bb |2 +- .../perl/libconvert-asn1-perl_0.22.bb |2 +- .../recipes-extended/perl/libtimedate-perl_1.20.bb |2 +- .../perl/libxml-namespacesupport-perl_1.11.bb |2 +- meta/recipes-extended/perl/libxml-sax-perl_0.96.bb |2 +- 10 files changed, 12 insertions(+), 9 deletions(-) diff --git a/meta/classes/cpan.bbclass b/meta/classes/cpan.bbclass index cbf428d..cb1c2f4 100644 --- a/meta/classes/cpan.bbclass +++ b/meta/classes/cpan.bbclass @@ -35,6 +35,9 @@ cpan_do_compile () { cpan_do_install () { oe_runmake DESTDIR="${D}" install_vendor + for PERLSCRIPT in `grep -rIEl '#!${bindir}/perl-native.*/perl' ${D}`; do + sed -i -e 's|^#!${bindir}/perl-native.*/perl|#!/usr/bin/env nativeperl|' $PERLSCRIPT + done } EXPORT_FUNCTIONS do_configure do_compile do_install diff --git a/meta/recipes-devtools/perl/liburi-perl_1.58.bb b/meta/recipes-devtools/perl/liburi-perl_1.58.bb index 76a1231..ebb4911 100644 --- a/meta/recipes-devtools/perl/liburi-perl_1.58.bb +++ b/meta/recipes-devtools/perl/liburi-perl_1.58.bb @@ -4,7 +4,7 @@ and manipulate the various components that make up these strings." SECTION = "libs" LICENSE = "Artistic | GPLv1+" -PR = "r0" +PR = "r1" LIC_FILES_CHKSUM = "file://README;beginline=26;endline=30;md5=6c33ae5c87fd1c4897714e122dd9c23d" diff --git a/meta/recipes-devtools/perl/libxml-parser-perl_2.40.bb b/meta/recipes-devtools/perl/libxml-parser-perl_2.40.bb index 3f1a0ad..1d1593b 100644 --- a/meta/recipes-devtools/perl/libxml-parser-perl_2.40.bb +++ b/meta/recipes-devtools/perl/libxml-parser-perl_2.40.bb @@ -5,7 +5,7 @@ LIC_FILES_CHKSUM = "file://README;beginline=2;endline=6;md5=c8767d7516229f07b26e DEPENDS += "expat expat-native" -PR = "r3" +PR = "r4" SRC_URI = "http://www.cpan.org/modules/by-module/XML/XML-Parser-${PV}.tar.gz"; SRC_URI[md5sum] = "c66e9adba003d0667cc40115ccd837a5" diff --git a/meta/recipes-devtools/perl/libxml-perl_0.08.bb b/meta/recipes-devtools/perl/libxml-perl_0.08.bb index 9c74cdb..fb637a8 100644 --- a/meta/recipes-devtools/perl/libxml-perl_0.08.bb +++ b/meta/recipes-devtools/perl/libxml-perl_0.08.bb @@ -5,7 +5,7 @@ XML::Grove and others." SUMMARY = "Collection of Perl modules for working with XML." SECTION = "libs" LICENSE = "Artistic | GPLv1+" -PR = "r0" +PR = "r1" LIC_FILES_CHKSUM = "file://README;beginline=33;endline=35;md5=1705549eef7577a3d6ba71123a1f0ce8" diff --git a/meta/recipes-devtools/perl/libxml-simple-perl_2.18.bb b/meta/recipes-devtools/perl/libxml-simple-perl_2.18.bb index 89b65b2..3a50d7f 100644 --- a/meta/recipes-devtools/perl/libxml-simple-perl_2.18.bb +++ b/meta/recipes-devtools/perl/libxml-simple-perl_2.18.bb @@ -2,7 +2,7 @@ SECTION = "libs" LICENSE = "Artistic" LIC_FILES_CHKSUM = "file://README;beginline=70;md5=94aa5d46682b411a53a5494cfb22640e" DEPENDS += "libxml-parser-perl" -PR = "r2" +PR = "r3" SRC_URI = "http://www.cpan.org/modules/by-module/XML/XML-Simple-${PV}.tar.gz"; diff --git a/meta/recipes-devtools/sgmlspl/sgmlspl-native_1.03ii.bb b/meta/recipes-devtools/sgmlspl/sgmlspl-native_1.03ii.bb index 4e01f17..28e0e9f 100644 --- a/meta/recipes-devtools/sgmlspl/sgmlspl-native_1.03ii.bb +++ b/meta/recipes-devtools/sgmlspl/sgmlspl-native_1.03ii.bb @@ -4,7 +4,7 @@ HOMEPAGE = "http://search.cpan.org/src/DMEGG/SGMLSpm-1.03ii/DOC/HTML/SGMLSpm/sgm SECTION = "libs" LICENSE = "GPLv2+" LIC_FILES_CHKSUM = "file://COPYING;md5=18810669f13b87348459e611d31ab760" -PR = "r1" +PR = "r2" SRC_URI = "http://www.cpan.org/authors/id/D/DM/DMEGG/SGMLSpm-${PV}.tar.gz \ file://combined.patch" diff --git a/meta/recipes-extended/perl/libconvert-asn1-perl_0.22.bb b/meta/recipes-extended/perl/libconvert-asn1-perl_0.22.bb index fc77b75..48e107c 100644 --- a/meta/recipes-extended/perl/libconvert-asn1-perl_0.22.bb +++ b/meta/recipes-extended/perl/libconvert-asn1-perl_0.22.bb @@ -2,7 +2,7 @@ DESCRIPTION = "Convert::ASN1 - ASN.1 Encode/Decode library" SECTION = "libs" LICENSE = "Artistic|GPLv1+" LIC_FILES_CHKSUM = "file://README;beginline=10;endline=12;md5=a64b291b13ffddeef33b14f047ee8b26" -PR = "r1" +PR = "r2" SRC_URI = "http://search.cpan.org/CPAN/authors/id/G/GB/GBARR/Convert-ASN1-${PV}.tar.gz"; diff --git a/meta/recipes-extended/perl/libtimedate-perl_1.20.bb b/meta/r
[OE-core] [PATCH 10/10] at: enable pam support
From: Wenzong Fan add patches to make at enable pam support Signed-off-by: Wenzong Fan --- .../at/at-3.1.12/configure-add-enable-pam.patch| 23 meta/recipes-extended/at/at-3.1.12/pam.conf.patch | 16 + meta/recipes-extended/at/at_3.1.12.bb | 13 +++--- 3 files changed, 48 insertions(+), 4 deletions(-) create mode 100644 meta/recipes-extended/at/at-3.1.12/configure-add-enable-pam.patch create mode 100644 meta/recipes-extended/at/at-3.1.12/pam.conf.patch diff --git a/meta/recipes-extended/at/at-3.1.12/configure-add-enable-pam.patch b/meta/recipes-extended/at/at-3.1.12/configure-add-enable-pam.patch new file mode 100644 index 000..1f73cdd --- /dev/null +++ b/meta/recipes-extended/at/at-3.1.12/configure-add-enable-pam.patch @@ -0,0 +1,23 @@ +--- at-3.1.12/configure.ac 2011-06-23 14:51:03.653572945 +0800 at-3.1.12/configure.ac.new 2011-06-27 16:12:14.903572945 +0800 +@@ -81,10 +81,18 @@ + AC_FUNC_VPRINTF + AC_FUNC_GETLOADAVG + AC_CHECK_FUNCS(getcwd mktime strftime setreuid setresuid sigaction waitpid) ++ ++AC_ARG_WITH([pam], ++ [AS_HELP_STRING([--without-pam], [without PAM support])]) ++ ++if test "x$with_pam" != xno; then + AC_CHECK_HEADERS(security/pam_appl.h, [ + PAMLIB="-lpam" +- AC_DEFINE(HAVE_PAM, 1, [Define to 1 for PAM support]) +-]) ++ AC_DEFINE(HAVE_PAM, 1, [Define to 1 for PAM support])], ++ [if test "x$with_pam" = xyes; then ++ AC_MSG_ERROR([PAM selected but security/pam_misc.h not found]) ++ fi]) ++fi + + dnl Checking for programs + diff --git a/meta/recipes-extended/at/at-3.1.12/pam.conf.patch b/meta/recipes-extended/at/at-3.1.12/pam.conf.patch new file mode 100644 index 000..4a80bbf --- /dev/null +++ b/meta/recipes-extended/at/at-3.1.12/pam.conf.patch @@ -0,0 +1,16 @@ +--- at-3.1.12/pam.conf.orig2009-11-23 23:11:52.0 +0800 at-3.1.12/pam.conf 2011-07-15 11:14:04.132818950 +0800 +@@ -2,8 +2,8 @@ + # The PAM configuration file for the at daemon + # + +-auth requiredpam_env.so +-@include common-auth +-@include common-account +-@include common-session-noninteractive +-sessionrequired pam_limits.so ++authrequiredpam_env.so ++authinclude common-auth ++account include common-account ++session include common-session-noninteractive ++session requiredpam_limits.so diff --git a/meta/recipes-extended/at/at_3.1.12.bb b/meta/recipes-extended/at/at_3.1.12.bb index 3a94497..16f428c 100644 --- a/meta/recipes-extended/at/at_3.1.12.bb +++ b/meta/recipes-extended/at/at_3.1.12.bb @@ -4,20 +4,23 @@ the system load levels drop to a particular level." SECTION = "base" LICENSE="GPLv2+" LIC_FILES_CHKSUM = "file://COPYING;md5=4325afd396febcb659c36b49533135d4" -DEPENDS = "flex libpam initscripts" +DEPENDS = "flex libpam initscripts \ + ${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}" RCONFLICTS_${PN} = "atd" RREPLACES_${PN} = "atd" -PR = "r4" +PR = "r5" SRC_URI = "${DEBIAN_MIRROR}/main/a/at/at_${PV}.orig.tar.gz \ file://configure.patch \ +file://pam.conf.patch \ file://use-ldflags.patch \ file://nonstripbinaries.patch \ file://fix_parallel_build_error.patch \ file://posixtm.c \ file://posixtm.h \ file://file_replacement_with_gplv2.patch \ -file://S99at" +file://S99at \ + file://configure-add-enable-pam.patch" SRC_URI[md5sum] = "1e67991776148fb319fd77a2e599a765" SRC_URI[sha256sum] = "7c55c6ab4fbe8add9e68f31b2b0ebf3fe805c9a4e7cfb2623a3d8a4789cc18f3" @@ -26,7 +29,8 @@ EXTRA_OECONF += "ac_cv_path_SENDMAIL=/bin/true \ --with-daemon_username=root \ --with-daemon_groupname=root \ --with-jobdir=/var/spool/at/jobs \ - --with-atspool=/var/spool/at/spool" + --with-atspool=/var/spool/at/spool \ +${@base_contains('DISTRO_FEATURES', 'pam', '--with-pam', '--without-pam', d)} " inherit autotools @@ -41,6 +45,7 @@ do_install () { install -d ${D}${sysconfdir}/rcS.d install -m 0755${WORKDIR}/S99at ${D}${sysconfdir}/init.d/atd ln -sf ../init.d/atd ${D}${sysconfdir}/rcS.d/S99at + install -D -m 0644 ${WORKDIR}/${P}/pam.conf ${D}${sysconfdir}/pam.d/atd } pkg_postinst_${PN} () { -- 1.7.5.1.300.gc565c ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 08/10] cronie: enable PAM support for cronie
From: Wenzong Fan Enable PAM support for cronie and update its pam config file 'crond'. Signed-off-by: Wenzong Fan --- .../cronie/cronie/crond_pam_config.patch | 13 + meta/recipes-extended/cronie/cronie_1.4.7.bb |9 +++-- 2 files changed, 20 insertions(+), 2 deletions(-) create mode 100644 meta/recipes-extended/cronie/cronie/crond_pam_config.patch diff --git a/meta/recipes-extended/cronie/cronie/crond_pam_config.patch b/meta/recipes-extended/cronie/cronie/crond_pam_config.patch new file mode 100644 index 000..01884ce --- /dev/null +++ b/meta/recipes-extended/cronie/cronie/crond_pam_config.patch @@ -0,0 +1,13 @@ +--- cronie-1.4.7/pam/crond.orig2010-12-16 16:59:02.0 +0800 cronie-1.4.7/pam/crond 2011-07-20 09:47:16.080819203 +0800 +@@ -4,7 +4,7 @@ + # + # No PAM authentication called, auth modules not needed + accountrequired pam_access.so +-accountincludepassword-auth ++accountincludecommon-account + sessionrequired pam_loginuid.so +-sessionincludepassword-auth +-auth includepassword-auth ++sessionincludecommon-session-noninteractive ++auth includecommon-auth diff --git a/meta/recipes-extended/cronie/cronie_1.4.7.bb b/meta/recipes-extended/cronie/cronie_1.4.7.bb index 992b610..5107b8a 100644 --- a/meta/recipes-extended/cronie/cronie_1.4.7.bb +++ b/meta/recipes-extended/cronie/cronie_1.4.7.bb @@ -14,17 +14,22 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=963ea0772a2adbdcd607a9b2ec320c11 \ SECTION = "utils" -PR = "r2" +DEPENDS += "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}" +PR = "r3" SRC_URI = "https://fedorahosted.org/releases/c/r/cronie/cronie-${PV}.tar.gz \ file://crond.init \ - file://crontab" + file://crontab \ + file://crond_pam_config.patch" SRC_URI[md5sum] = "dfc26c47756d0c40ee27ae3c7ee98e0d" SRC_URI[sha256sum] = "83bae15ae5504454ba74f4142f5db3aa22be594327fea19d2534f65803137fbd" inherit autotools update-rc.d +EXTRA_OECONF += "\ + ${@base_contains('DISTRO_FEATURES', 'pam', '--with-libpam', '--without-libpam', d)}" + INITSCRIPT_NAME = "crond" INITSCRIPT_PARAMS = "start 90 2 3 4 5 . stop 60 0 1 6 ." -- 1.7.5.1.300.gc565c ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [CONSOLIDATED PULL 16/20] shared-mime-info: inherit perlnative
From: Martin Jansa * otherwise perl from host is used and if there isn't libxml-parser-perl installed on host it fails with: checking for XML::Parser... configure: error: XML::Parser perl module is required for intltool Signed-off-by: Martin Jansa --- .../shared-mime-info/shared-mime-info.inc |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/meta/recipes-support/shared-mime-info/shared-mime-info.inc b/meta/recipes-support/shared-mime-info/shared-mime-info.inc index 64eef9d..8b10535 100644 --- a/meta/recipes-support/shared-mime-info/shared-mime-info.inc +++ b/meta/recipes-support/shared-mime-info/shared-mime-info.inc @@ -10,7 +10,7 @@ DEPENDS_virtclass-native = "libxml2-native intltool-native glib-2.0-native" SRC_URI = "http://freedesktop.org/~hadess/shared-mime-info-${PV}.tar.bz2"; -inherit autotools pkgconfig gettext +inherit autotools pkgconfig gettext perlnative EXTRA_OECONF = "--disable-update-mimedb" -- 1.7.3.4 ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 07/10] sudo: add pam support
From: Kang Kai According to DISTRO_FEATURES to add pam support for sudo, and import configure file from Fedora. Signed-off-by: Kang Kai --- meta/recipes-extended/sudo/files/sudo.pamd |6 ++ meta/recipes-extended/sudo/sudo_1.8.1p2.bb | 11 --- 2 files changed, 14 insertions(+), 3 deletions(-) create mode 100644 meta/recipes-extended/sudo/files/sudo.pamd diff --git a/meta/recipes-extended/sudo/files/sudo.pamd b/meta/recipes-extended/sudo/files/sudo.pamd new file mode 100644 index 000..5bc26e7 --- /dev/null +++ b/meta/recipes-extended/sudo/files/sudo.pamd @@ -0,0 +1,6 @@ +#%PAM-1.0 +auth include common-auth +accountinclude common-account +password include common-password +sessionrequired pam_keyinit.so revoke +sessionrequired pam_limits.so diff --git a/meta/recipes-extended/sudo/sudo_1.8.1p2.bb b/meta/recipes-extended/sudo/sudo_1.8.1p2.bb index 7eba307..529a44b 100644 --- a/meta/recipes-extended/sudo/sudo_1.8.1p2.bb +++ b/meta/recipes-extended/sudo/sudo_1.8.1p2.bb @@ -1,11 +1,16 @@ require sudo.inc -PR = "r0" +PR = "r1" SRC_URI = "http://ftp.sudo.ws/sudo/dist/sudo-${PV}.tar.gz \ - file://libtool.patch" + file://libtool.patch \ + file://sudo.pamd" SRC_URI[md5sum] = "e8330f0e63b0ecb2e12b5c76922818cc" SRC_URI[sha256sum] = "281f90c80547cf22132e351e7f61c25ba4ba9cf393438468f318f9a7884026fb" -EXTRA_OECONF += " --with-pam=no" +EXTRA_OECONF += " ${@base_contains('DISTRO_FEATURES', 'pam', '--with-pam', '--without-pam', d)}" + +do_install_append () { + install -D -m 664 ${WORKDIR}/sudo.pamd ${D}/${sysconfdir}/pam.d/sudo +} -- 1.7.5.1.300.gc565c ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 06/10] screen: add pam support
From: Kang Kai According to DISTRO_FEATURES then add screen pam support or not. Press "Ctrl+a x" will lock the screen terminal, then unlock it will use pam. Add pam related configure file sceen.pamd from Fedora. Signed-off-by: Kang Kai --- .../screen/screen-4.0.3/screen.pamd|2 ++ meta/recipes-extended/screen/screen_4.0.3.bb | 14 ++ 2 files changed, 12 insertions(+), 4 deletions(-) create mode 100644 meta/recipes-extended/screen/screen-4.0.3/screen.pamd diff --git a/meta/recipes-extended/screen/screen-4.0.3/screen.pamd b/meta/recipes-extended/screen/screen-4.0.3/screen.pamd new file mode 100644 index 000..ff657fa --- /dev/null +++ b/meta/recipes-extended/screen/screen-4.0.3/screen.pamd @@ -0,0 +1,2 @@ +#%PAM-1.0 +auth include common-auth diff --git a/meta/recipes-extended/screen/screen_4.0.3.bb b/meta/recipes-extended/screen/screen_4.0.3.bb index dac2893..c5bdf78 100644 --- a/meta/recipes-extended/screen/screen_4.0.3.bb +++ b/meta/recipes-extended/screen/screen_4.0.3.bb @@ -10,12 +10,14 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=0774d66808b0f602e94448108f59448b \ file://screen.h;endline=23;md5=9a7ae69a2aafed891bf7c38ddf9f6b7d" SECTION = "console/utils" -DEPENDS = "ncurses" -PR = "r0" +DEPENDS = "ncurses \ + ${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}" +PR = "r1" SRC_URI = "${GNU_MIRROR}/screen/screen-${PV}.tar.gz;name=tarball \ ${DEBIAN_MIRROR}/main/s/screen/screen_4.0.3-11+lenny1.diff.gz;name=patch \ - file://configure.patch" + file://configure.patch \ + file://screen.pamd" SRC_URI[tarball.md5sum] = "8506fd205028a96c741e4037de6e3c42" SRC_URI[tarball.sha256sum] = "78f0d5b1496084a5902586304d4a73954b2bfe33ea13edceecf21615c39e6c77" @@ -25,5 +27,9 @@ SRC_URI[patch.sha256sum] = "19130d097e9ed897c84a2c640634dd36ee3233c17b0bf5d18549 inherit autotools -EXTRA_OECONF = "--with-pty-mode=0620 --with-pty-group=5" +EXTRA_OECONF = "--with-pty-mode=0620 --with-pty-group=5 \ + ${@base_contains('DISTRO_FEATURES', 'pam', '--enable-pam', '--disable-pam', d)}" +do_install_append () { + install -D -m 644 ${WORKDIR}/screen.pamd ${D}/${sysconfdir}/pam.d/screen +} -- 1.7.5.1.300.gc565c ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 04/10] polkit: Support PAM
From: Xiaofeng Yan Modify configuration "polkit-1" in /etc/pam.d/ for supporting pam. Signed-off-by: Xiaofeng Yan --- .../polkit/polkit-0.101/polkit-1_pam.patch | 23 meta/recipes-extended/polkit/polkit_0.101.bb |6 +++- 2 files changed, 27 insertions(+), 2 deletions(-) create mode 100644 meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch diff --git a/meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch b/meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch new file mode 100644 index 000..fa145ac --- /dev/null +++ b/meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch @@ -0,0 +1,23 @@ +polkit: No system-auth in poky, we can use common-* in place of it. + +Upstream-Status:Inappropriate [configuration] + +Signed-off-by: Xiaofeng Yan + +--- a/configure.ac 2011-03-04 02:26:20.0 +0800 b/configure.ac.new 2011-07-18 10:14:12.516818852 +0800 +@@ -350,10 +350,10 @@ + PAM_FILE_INCLUDE_PASSWORD=system + PAM_FILE_INCLUDE_SESSION=system + else +- PAM_FILE_INCLUDE_AUTH=system-auth +- PAM_FILE_INCLUDE_ACCOUNT=system-auth +- PAM_FILE_INCLUDE_PASSWORD=system-auth +- PAM_FILE_INCLUDE_SESSION=system-auth ++ PAM_FILE_INCLUDE_AUTH=common-auth ++ PAM_FILE_INCLUDE_ACCOUNT=common-account ++ PAM_FILE_INCLUDE_PASSWORD=common-password ++ PAM_FILE_INCLUDE_SESSION=common-session + fi + + AC_SUBST(PAM_FILE_INCLUDE_AUTH) diff --git a/meta/recipes-extended/polkit/polkit_0.101.bb b/meta/recipes-extended/polkit/polkit_0.101.bb index 6769914..da1d581 100644 --- a/meta/recipes-extended/polkit/polkit_0.101.bb +++ b/meta/recipes-extended/polkit/polkit_0.101.bb @@ -7,8 +7,10 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=155db86cdbafa7532b41f390409283eb \ file://docs/polkit/html/license.html;md5=07ddbf5f29e44c80c99be19c1690ec1f" SRC_URI = "http://hal.freedesktop.org/releases/polkit-${PV}.tar.gz \ - file://introspection.patch" -PR = "r0" + file://introspection.patch \ + file://polkit-1_pam.patch" + +PR = "r1" DEPENDS = "libpam expat dbus-glib eggdbus intltool" RDEPENDS_${PN} = "libpam" EXTRA_OECONF = "--with-authfw=pam --with-os-type=moblin --disable-man-pages --disable-gtk-doc --disable-introspection" -- 1.7.5.1.300.gc565c ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 03/10] openssh: Support PAM
From: Xiaofeng Yan Adding configuration file "sshd" in /etc/pam.d/ for supporting pam. Signed-off-by: Xiaofeng Yan --- .../openssh/openssh-5.8p2/sshd | 10 ++ meta/recipes-connectivity/openssh/openssh_5.8p2.bb |7 +-- 2 files changed, 15 insertions(+), 2 deletions(-) create mode 100644 meta/recipes-connectivity/openssh/openssh-5.8p2/sshd diff --git a/meta/recipes-connectivity/openssh/openssh-5.8p2/sshd b/meta/recipes-connectivity/openssh/openssh-5.8p2/sshd new file mode 100644 index 000..4882e58 --- /dev/null +++ b/meta/recipes-connectivity/openssh/openssh-5.8p2/sshd @@ -0,0 +1,10 @@ +#%PAM-1.0 + +auth include common-auth +accountrequired pam_nologin.so +accountinclude common-account +password include common-password +sessionoptional pam_keyinit.so force revoke +sessioninclude common-session +sessionrequired pam_loginuid.so + diff --git a/meta/recipes-connectivity/openssh/openssh_5.8p2.bb b/meta/recipes-connectivity/openssh/openssh_5.8p2.bb index e23069c..e0da936 100644 --- a/meta/recipes-connectivity/openssh/openssh_5.8p2.bb +++ b/meta/recipes-connectivity/openssh/openssh_5.8p2.bb @@ -7,7 +7,7 @@ SECTION = "console/network" LICENSE = "BSD" LIC_FILES_CHKSUM = "file://LICENCE;md5=bae9a689be41581503bcf95d8fb42c4e" -PR = "r0" +PR = "r1" DEPENDS = "zlib openssl" DEPENDS += "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}" @@ -23,6 +23,7 @@ SRC_URI = "ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-${PV}.tar. file://sshd_config \ file://ssh_config \ file://init \ + file://sshd \ " SRC_URI[md5sum] = "0541579adf9d55abb15ef927048d372e" SRC_URI[sha256sum] = "5c35ec7c966ce05cc4497ac59c0b54a556e55ae7368165cc8c4129694654f314" @@ -59,7 +60,9 @@ do_compile_append () { do_install_append () { install -d ${D}${sysconfdir}/init.d + install -d ${D}${sysconfdir}/pam.d install -m 0755 ${WORKDIR}/init ${D}${sysconfdir}/init.d/sshd + install -m 0755 ${WORKDIR}/sshd ${D}${sysconfdir}/pam.d/sshd mv ${D}${bindir}/scp ${D}${bindir}/scp.${PN} mv ${D}${bindir}/ssh ${D}${bindir}/ssh.${PN} rm -f ${D}${bindir}/slogin ${D}${datadir}/Ssh.bin @@ -71,7 +74,7 @@ ALLOW_EMPTY_${PN} = "1" PACKAGES =+ "${PN}-keygen ${PN}-scp ${PN}-ssh ${PN}-sshd ${PN}-sftp ${PN}-misc ${PN}-sftp-server" FILES_${PN}-scp = "${bindir}/scp.${PN}" FILES_${PN}-ssh = "${bindir}/ssh.${PN} ${sysconfdir}/ssh/ssh_config" -FILES_${PN}-sshd = "${sbindir}/sshd ${sysconfdir}/init.d/sshd" +FILES_${PN}-sshd = "${sbindir}/sshd ${sysconfdir}/init.d/sshd ${sysconfdir}/pam.d/sshd" FILES_${PN}-sshd += "${sysconfdir}/ssh/moduli ${sysconfdir}/ssh/sshd_config" FILES_${PN}-sftp = "${bindir}/sftp" FILES_${PN}-sftp-server = "${libexecdir}/sftp-server" -- 1.7.5.1.300.gc565c ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 02/10] dropbear: Support PAM
From: Xiaofeng Yan I make a patch and some changes in dropbear.inc for supporting pam. - Enable pam in configure - Modify file option.h to open pam supporting Signed-off-by: Xiaofeng Yan --- meta/recipes-core/dropbear/dropbear.inc|6 - .../dropbear/dropbear/dropbear-enable-pam.patch| 21 2 files changed, 26 insertions(+), 1 deletions(-) create mode 100644 meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch diff --git a/meta/recipes-core/dropbear/dropbear.inc b/meta/recipes-core/dropbear/dropbear.inc index 1b51e1a..48cefb6 100644 --- a/meta/recipes-core/dropbear/dropbear.inc +++ b/meta/recipes-core/dropbear/dropbear.inc @@ -9,13 +9,15 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3a5b0c2f0d0c49dfde9558ae2036683c" DEPENDS = "zlib" RPROVIDES = "ssh sshd" +DEPENDS += "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}" SRC_URI = "http://matt.ucc.asn.au/dropbear/releases/dropbear-${PV}.tar.gz \ file://urandom-xauth-changes-to-options.h.patch \ file://configure.patch \ file://fix-2kb-keys.patch \ file://allow-nopw.patch;apply=no \ -file://init" +file://init \ +file://dropbear-enable-pam.patch " inherit autotools update-rc.d @@ -28,6 +30,8 @@ LD = "${CC}" SBINCOMMANDS = "dropbear dropbearkey dropbearconvert" BINCOMMANDS = "dbclient ssh scp" EXTRA_OEMAKE = 'MULTI=1 SCPPROGRESS=1 PROGRAMS="${SBINCOMMANDS} ${BINCOMMANDS}"' +EXTRA_OECONF += "\ + ${@base_contains('DISTRO_FEATURES', 'pam', '--enable-pam', '--disable-pam', d)}" DISTRO_TYPE = "${@base_contains("IMAGE_FEATURES", "debug-tweaks", "debug", "",d)}" diff --git a/meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch b/meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch new file mode 100644 index 000..b941db5 --- /dev/null +++ b/meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch @@ -0,0 +1,21 @@ +dropbear: We need modify file option.h besides enabling pam in \ +configure if we want dropbear to support pam. + +Upstream-Status: Pending + +Signed-off-by: Xiaofeng Yan + +--- a/options.h2011-07-12 13:27:39.008819183 +0800 b/options.h.new2011-07-12 13:37:37.780819308 +0800 +@@ -149,9 +149,9 @@ + * but there's an interface via a PAM module - don't bother using it otherwise. + * You can't enable both PASSWORD and PAM. */ + +-#define ENABLE_SVR_PASSWORD_AUTH ++//#define ENABLE_SVR_PASSWORD_AUTH + /* PAM requires ./configure --enable-pam */ +-/*#define ENABLE_SVR_PAM_AUTH*/ ++#define ENABLE_SVR_PAM_AUTH + #define ENABLE_SVR_PUBKEY_AUTH + + /* Wether to ake public key options in authorized_keys file into account */ -- 1.7.5.1.300.gc565c ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 00/10] works of adding packages pam support
From: Kang Kai Hi Scott, This is the current work of adding pam supports. After update libpam to 1.1.4, we enable the packages pam support. And if the pacakge doesn't have a pam configure file, import from Fedora. The following changes since commit fa4bcfdb73167f8159b88e5a4d711c0d37627a70: bb-matrix: correct BB and PM number canonicalization (2011-07-14 22:23:09 +0100) are available in the git repository at: git://git.pokylinux.org/poky-contrib kangkai/distro http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/pam-commits Kang Kai (5): libpam: update to 1.1.4 and add subpackage xtests cups: add pam support screen: add pam support sudo: add pam support shadow: update pam related configure files Wenzong Fan (2): cronie: enable PAM support for cronie at: enable pam support Xiaofeng Yan (3): dropbear: Support PAM openssh: Support PAM polkit: Support PAM .../openssh/openssh-5.8p2/sshd | 10 + meta/recipes-connectivity/openssh/openssh_5.8p2.bb |7 +- meta/recipes-core/dropbear/dropbear.inc|6 +- .../dropbear/dropbear/dropbear-enable-pam.patch| 21 +++ .../at/at-3.1.12/configure-add-enable-pam.patch| 23 +++ meta/recipes-extended/at/at-3.1.12/pam.conf.patch | 16 ++ meta/recipes-extended/at/at_3.1.12.bb | 13 +- .../cronie/cronie/crond_pam_config.patch | 13 ++ meta/recipes-extended/cronie/cronie_1.4.7.bb |9 +- meta/recipes-extended/cups/cups_1.4.6.bb |8 +- .../pam/libpam/libpam-xtests.patch | 35 .../pam/{libpam_1.1.3.bb => libpam_1.1.4.bb} | 14 +- .../polkit/polkit-0.101/polkit-1_pam.patch | 23 +++ meta/recipes-extended/polkit/polkit_0.101.bb |6 +- .../screen/screen-4.0.3/screen.pamd|2 + meta/recipes-extended/screen/screen_4.0.3.bb | 14 +- .../shadow/files/shadow-update-pam-conf.patch | 175 meta/recipes-extended/shadow/shadow_4.1.4.3.bb |5 +- meta/recipes-extended/sudo/files/sudo.pamd |6 + meta/recipes-extended/sudo/sudo_1.8.1p2.bb | 11 +- 20 files changed, 389 insertions(+), 28 deletions(-) create mode 100644 meta/recipes-connectivity/openssh/openssh-5.8p2/sshd create mode 100644 meta/recipes-core/dropbear/dropbear/dropbear-enable-pam.patch create mode 100644 meta/recipes-extended/at/at-3.1.12/configure-add-enable-pam.patch create mode 100644 meta/recipes-extended/at/at-3.1.12/pam.conf.patch create mode 100644 meta/recipes-extended/cronie/cronie/crond_pam_config.patch create mode 100644 meta/recipes-extended/pam/libpam/libpam-xtests.patch rename meta/recipes-extended/pam/{libpam_1.1.3.bb => libpam_1.1.4.bb} (85%) create mode 100644 meta/recipes-extended/polkit/polkit-0.101/polkit-1_pam.patch create mode 100644 meta/recipes-extended/screen/screen-4.0.3/screen.pamd create mode 100644 meta/recipes-extended/shadow/files/shadow-update-pam-conf.patch create mode 100644 meta/recipes-extended/sudo/files/sudo.pamd -- 1.7.5.1.300.gc565c ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [PATCH 01/10] libpam: update to 1.1.4 and add subpackage xtests
From: Kang Kai Update libpam to 1.1.4, and add dependecy cracklib because run xtexts will need pam-plugin-cracklib. There are some additional checks under subdirectory xtests and make it as a subpackage libpam-xtests. Signed-off-by: Kang Kai --- .../pam/libpam/libpam-xtests.patch | 35 .../pam/{libpam_1.1.3.bb => libpam_1.1.4.bb} | 14 +--- 2 files changed, 44 insertions(+), 5 deletions(-) create mode 100644 meta/recipes-extended/pam/libpam/libpam-xtests.patch rename meta/recipes-extended/pam/{libpam_1.1.3.bb => libpam_1.1.4.bb} (85%) diff --git a/meta/recipes-extended/pam/libpam/libpam-xtests.patch b/meta/recipes-extended/pam/libpam/libpam-xtests.patch new file mode 100644 index 000..be68745 --- /dev/null +++ b/meta/recipes-extended/pam/libpam/libpam-xtests.patch @@ -0,0 +1,35 @@ +This patch is used to create a new sub package libpam-xtests to do more checks. + +Upstream-Status: Pending + +Signed-off-by: Kang Kai +--- Linux-PAM-1.1.4/xtests/Makefile.am.orig2011-07-19 17:00:09.619980001 +0800 Linux-PAM-1.1.4/xtests/Makefile.am 2011-07-19 16:54:00.229979998 +0800 +@@ -7,7 +7,7 @@ + AM_LDFLAGS = -L$(top_builddir)/libpam -lpam \ + -L$(top_builddir)/libpam_misc -lpam_misc + +-CLEANFILES = *~ $(XTESTS) ++CLEANFILES = *~ + + EXTRA_DIST = run-xtests.sh tst-pam_dispatch1.pamd tst-pam_dispatch2.pamd \ + tst-pam_dispatch3.pamd tst-pam_dispatch4.pamd \ +@@ -51,3 +51,18 @@ + + xtests: $(XTESTS) run-xtests.sh + "$(srcdir)"/run-xtests.sh "$(srcdir)" ${XTESTS} ${NOSRCTESTS} ++ ++all: $(XTESTS) ++ ++install: install_xtests ++ ++install_xtests: ++ $(INSTALL) -d $(DESTDIR)$(pkgdatadir)/xtests ++ for file in $(EXTRA_DIST) ; do \ ++ $(INSTALL) $$file $(DESTDIR)$(pkgdatadir)/xtests ; \ ++ done ++ for file in $(XTESTS); do \ ++ $(INSTALL) .libs/$$file $(DESTDIR)$(pkgdatadir)/xtests ; \ ++ done ++ ++.PHONY: all install_xtests diff --git a/meta/recipes-extended/pam/libpam_1.1.3.bb b/meta/recipes-extended/pam/libpam_1.1.4.bb similarity index 85% rename from meta/recipes-extended/pam/libpam_1.1.3.bb rename to meta/recipes-extended/pam/libpam_1.1.4.bb index b62e2f2..f2379e4 100644 --- a/meta/recipes-extended/pam/libpam_1.1.3.bb +++ b/meta/recipes-extended/pam/libpam_1.1.4.bb @@ -11,18 +11,21 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=ca0395de9a86191a078b8b79302e3083" PR = "r0" -DEPENDS = "bison flex" +DEPENDS = "bison flex cracklib" RDEPENDS_${PN}-runtime = "libpam pam-plugin-deny pam-plugin-permit pam-plugin-warn pam-plugin-unix" +RDEPENDS_${PN}-xtests = "libpam pam-plugin-access pam-plugin-debug pam-plugin-cracklib pam-plugin-pwhistory \ + pam-plugin-succeed-if pam-plugin-time coreutils" RRECOMMENDS_${PN} = "libpam-runtime" SRC_URI = "${KERNELORG_MIRROR}/linux/libs/pam/library/Linux-PAM-${PV}.tar.bz2 \ file://99_pam \ - file://pam.d/*" + file://pam.d/* \ + file://libpam-xtests.patch" SRC_URI_append_libc-uclibc = " file://pam-no-innetgr.patch" -SRC_URI[md5sum] = "6db7fcb5db6253350e3a4648ceac40e7" -SRC_URI[sha256sum] = "17b268789b935a76e736a1150210dd12f156972973e79347668f828d43632652" +SRC_URI[md5sum] = "e9af5fb27bb22edb55d077e2888b3ebc" +SRC_URI[sha256sum] = "ccd89331914390b1e9e99c954471d65f19b660d81e15a46eeb96cee125d44056" EXTRA_OECONF = "--with-db-uniquename=_pam \ --includedir=${includedir}/security \ @@ -34,12 +37,13 @@ S = "${WORKDIR}/Linux-PAM-${PV}" inherit autotools gettext -PACKAGES += "${PN}-runtime" +PACKAGES += "${PN}-runtime ${PN}-xtests" FILES_${PN} = "${base_libdir}/lib*${SOLIBS}" FILES_${PN}-dbg += "${base_libdir}/security/.debug \ ${base_libdir}/security/pam_filter/.debug" FILES_${PN}-dev += "${base_libdir}/security/*.la ${base_libdir}/*.la ${base_libdir}/lib*${SOLIBSDEV}" FILES_${PN}-runtime = "${sysconfdir}" +FILES_${PN}-xtests = "${datadir}/Linux-PAM/xtests" PACKAGES_DYNAMIC += " pam-plugin-*" -- 1.7.5.1.300.gc565c ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [CONSOLIDATED PULL 06/20] icon-naming-utils-native: Fix long path to perl in icon-name-mapping
From: Tom Rini This is 5396e0868cf89787746fa6341ddb1f271a770595 in oe.dev but here we instead use the nativeperl wrapper. Signed-off-by: Tom Rini --- .../icon-naming-utils-native_0.8.7.bb |7 ++- 1 files changed, 6 insertions(+), 1 deletions(-) diff --git a/meta/recipes-devtools/icon-naming-utils/icon-naming-utils-native_0.8.7.bb b/meta/recipes-devtools/icon-naming-utils/icon-naming-utils-native_0.8.7.bb index d34fb03..4760c96 100644 --- a/meta/recipes-devtools/icon-naming-utils/icon-naming-utils-native_0.8.7.bb +++ b/meta/recipes-devtools/icon-naming-utils/icon-naming-utils-native_0.8.7.bb @@ -1,6 +1,6 @@ LICENSE = "GPLv2" DEPENDS = "libxml-simple-perl-native" -PR = "r2" +PR = "r3" LIC_FILES_CHKSUM = "file://COPYING;md5=94d55d512a9ba36caa9b7df079bae19f" @@ -9,3 +9,8 @@ SRC_URI = "http://tango.freedesktop.org/releases/icon-naming-utils-0.8.7.tar.gz"; S = "${WORKDIR}/icon-naming-utils-${PV}" inherit autotools native perlnative + +do_configure_append() { + # Make sure we use our nativeperl wrapper. + sed -i -e "1s:#!.*:#!/usr/bin/env nativeperl:" ${S}/icon-name-mapping.pl.in +} -- 1.7.3.4 ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
[OE-core] [CONSOLIDATED PULL 08/20] tcmode-default: set preferred version also for (e)glibc-locale
From: Martin Jansa Signed-off-by: Martin Jansa --- meta/conf/distro/include/tcmode-default.inc |2 ++ 1 files changed, 2 insertions(+), 0 deletions(-) diff --git a/meta/conf/distro/include/tcmode-default.inc b/meta/conf/distro/include/tcmode-default.inc index e27a1b4..86538f1 100644 --- a/meta/conf/distro/include/tcmode-default.inc +++ b/meta/conf/distro/include/tcmode-default.inc @@ -50,10 +50,12 @@ PREFERRED_VERSION_binutils-cross-canadian ?= "${BINUVERSION}" PREFERRED_VERSION_linux-libc-headers ?= "${LINUXLIBCVERSION}" PREFERRED_VERSION_linux-libc-headers-nativesdk ?= "${LINUXLIBCVERSION}" PREFERRED_VERSION_glibc ?= "${GLIBCVERSION}" +PREFERRED_VERSION_glibc-locale ?= "${GLIBCVERSION}" PREFERRED_VERSION_glibc-nativesdk ?= "${GLIBCVERSION}" PREFERRED_VERSION_glibc-initial ?= "${GLIBCVERSION}" PREFERRED_VERSION_glibc-initial-nativesdk ?= "${GLIBCVERSION}" PREFERRED_VERSION_eglibc ?= "${EGLIBCVERSION}" +PREFERRED_VERSION_eglibc-locale?= "${EGLIBCVERSION}" PREFERRED_VERSION_eglibc-nativesdk ?= "${EGLIBCVERSION}" PREFERRED_VERSION_eglibc-initial ?= "${EGLIBCVERSION}" PREFERRED_VERSION_eglibc-initial-nativesdk ?= "${EGLIBCVERSION}" -- 1.7.3.4 ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core
Re: [OE-core] [PATCH 2/2] perl-dynloader.patch: Fix libdir issue for multilib
>-Original Message- >From: openembedded-core-boun...@lists.openembedded.org >[mailto:openembedded-core-boun...@lists.openembedded.org] On Behalf Of >Richard Purdie >Sent: Wednesday, July 20, 2011 10:34 PM >To: Patches and discussions about the oe-core layer >Subject: Re: [OE-core] [PATCH 2/2] perl-dynloader.patch: Fix libdir issue for >multilib > >On Wed, 2011-07-20 at 16:48 +0800, Mei Lei wrote: >> The perl-dynloader.patch can't support /usr/lib64, change the regular >expression to support multilib. >> >> Signed-off-by: Mei Lei >> --- >> .../perl/perl-5.12.3/perl-dynloader.patch |2 +- >> 1 files changed, 1 insertions(+), 1 deletions(-) >> >> diff --git a/meta/recipes-devtools/perl/perl-5.12.3/perl-dynloader.patch >b/meta/recipes-devtools/perl/perl-5.12.3/perl-dynloader.patch >> index d5ea00f..a45af91 100644 >> --- a/meta/recipes-devtools/perl/perl-5.12.3/perl-dynloader.patch >> +++ b/meta/recipes-devtools/perl/perl-5.12.3/perl-dynloader.patch >> @@ -19,7 +19,7 @@ Update by Nitin A Kamble >2011/04/21 >> +{ >> +my $hostlib = $ENV{PERLHOSTLIB}; >> +print STDERR "*** Module name IN: $modlibname\n"; >> -+($p1, $p2, $p3, $p4, $p5) = $modlibname =~ >m/(^(.*lib\/)?)((perl\/[0-9\.]*\/)?)(.*)$/; >> ++($p1, $p2, $p3, $p4, $p5) = $modlibname =~ >m/(^(.*lib[0-9]*\/)?)((perl\/[0-9\.]*\/)?)(.*)$/; >> +print STDERR "*** p1: $p1 p3: $p3 p5: $p5\n"; >> +if ( $p1 ne "" ) { >> +$modlibname = $hostlib.$p5; > >We might need to relax this a little further since we might want things >like libx32 to work in future? Hi Nitin, I am not sure what is the perl work style under libx32, can you supply some information about it? Thanks Lei > >Cheers, > >Richard > > > >___ >Openembedded-core mailing list >Openembedded-core@lists.openembedded.org >http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core ___ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-core