[yocto] [meta-selinux][PATCH 0/1] Fix build errors when enable selinux and ptest
From: Kai Kang
Fix build errors when enable selinux and ptest:
DISTRO_FEATURES_append = ""
ERROR: busybox-1.30.1-r0 do_package: Error executing a python function in
exec_python_func() autogenerated:
The stack trace of python calls that resulted in this exception/failure was:
File: 'exec_python_func() autogenerated', lineno: 2, function:
0001:
*** 0002:ptest_update_alternatives(d)
0003:
File:
'/home/kkang/buildarea/wrlx-201902/repo/layers/oe-core/meta/classes/ptest.bbclass',
lineno: 97, function: ptest_update_alternatives
0093:for alt_name, alt_link, alt_target, _ in alternatives:
0094:# Some alternatives are for man pages,
0095:# check if the alternative is in PATH
0096:if os.path.dirname(alt_link) in bin_paths:
*** 0097:os.symlink(alt_target, os.path.join(ptest_bindir,
alt_name))
0098:}
0099:
0100:do_configure_ptest_base[dirs] = "${B}"
0101:do_compile_ptest_base[dirs] = "${B}"
Exception: FileExistsError: [Errno 17] File exists:
'/usr/lib64/busybox/bin/ash' ->
'/home/kkang/buildarea/wrlx-201902/LIN1019-1104/tmp-glibc/
work/aarch64-wrs-linux/busybox/1.30.1-r0/package/usr/lib64/busybox/ptest/bin/ash'
ERROR: busybox-1.30.1-r0 do_package: [Errno 17] File exists:
'/usr/lib64/busybox/bin/ash' ->
'/home/kkang/buildarea/wrlx-201902/LIN1019-1104/t
mp-glibc/work/aarch64-wrs-linux/busybox/1.30.1-r0/package/usr/lib64/busybox/ptest/bin/ash'
ERROR: busybox-1.30.1-r0 do_package: Function failed: ptest_update_alternatives
ERROR: Logfile of failure stored in:
/home/kkang/buildarea/wrlx-201902/LIN1019-1104/tmp-glibc/work/aarch64-wrs-linux/busybox/1.30.1-r0/temp/lo
g.do_package.87140
ERROR: Task
(/home/kkang/buildarea/wrlx-201902/repo/layers/oe-core/meta/recipes-core/busybox/busybox_1.30.1.bb:do_package)
failed with exit co
de '1'
NOTE: Tasks Summary: Attempted 1775 tasks of which 1774 didn't need to be rerun
and 1 failed.
Summary: 1 task failed:
/home/kkang/buildarea/wrlx-201902/repo/layers/oe-core/meta/recipes-core/busybox/busybox_1.30.1.bb:do_package
Kai Kang (1):
busybox: disable PTEST_BINDIR
recipes-core/busybox/busybox_selinux.inc | 2 ++
1 file changed, 2 insertions(+)
--
2.20.0
--
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto
[yocto] [meta-selinux][PATCH 1/1] busybox: disable PTEST_BINDIR
From: Kai Kang
A new feature has been added in oe-core to use update-alternative
mechanism for ptest. But it conflicts with current patch in
meta-selinux. So do not use this new feature for ptest when build with
selinux.
Signed-off-by: Kai Kang
---
recipes-core/busybox/busybox_selinux.inc | 2 ++
1 file changed, 2 insertions(+)
diff --git a/recipes-core/busybox/busybox_selinux.inc
b/recipes-core/busybox/busybox_selinux.inc
index df7c117..cc83b01 100644
--- a/recipes-core/busybox/busybox_selinux.inc
+++ b/recipes-core/busybox/busybox_selinux.inc
@@ -1,3 +1,5 @@
+PTEST_BINDIR = "0"
+
FILES_${PN} += "${libdir}/${PN}"
# We should use sh wrappers instead of links so the commands could get correct
--
2.20.0
--
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto
Re: [yocto] [yocto-announce] [ANNOUNCEMENT] Yocto Project 2.6.2 (thud 20.0.2) Released
Hi Tracy, > -Original Message- > From: yocto-announce-boun...@yoctoproject.org [mailto:yocto-announce- > boun...@yoctoproject.org] On Behalf Of Tracy Graydon > Sent: Wednesday, April 17, 2019 1:25 PM > To: yocto-annou...@yoctoproject.org; yocto@yoctoproject.org > Subject: [yocto-announce] [ANNOUNCEMENT] Yocto Project 2.6.2 (thud 20.0.2) > Released > > We are pleased to announce the latest release of the Yocto Project 2.6.2 > (thud- > 20.0.2) is now available for download: > > http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.2/poky-thud- > 20.0.2.tar.bz2 > http://mirrors.kernel.org/yocto/yocto/yocto-2.6.2/poky-thud-20.0.2.tar.bz2 > > A gpg signed version of these release notes is available at: > > http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.2/RELEASENOTES > > Yocto 2.6.2 QA reporting: > > Summary: https://lists.yoctoproject.org/pipermail/yocto/2019- > April/044827.html > Results: > https://autobuilder.yocto.io/pub/releases/yocto-2.6.2.rc3/testresults/ > I am not able to access this results page. It says "No Such Resource File not found." Thanks, Manju > Build log: > hhttps://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/122 > > Release Criteria: > https://wiki.yoctoproject.org/wiki/Yocto_Project_v2.6_Status#Yocto_Project_2 > .6.2_release > > > Thank you for everyone's contributions to this release. > > Sincerely, > > Tracy Graydon > Yocto Project Build and Release > tracy.gray...@intel.com > -- > ___ > yocto-announce mailing list > yocto-annou...@yoctoproject.org > https://lists.yoctoproject.org/listinfo/yocto-announce -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
[yocto] [meta-selinux][PATCH] refpolicy: update source checksums for refpolicy 20190201
The previous md5sum and sha256sum are not correct.
See: https://github.com/SELinuxProject/refpolicy/releases/tag/RELEASE_2_20190201
Signed-off-by: Yi Zhao
---
recipes-security/refpolicy/refpolicy_2.20190201.inc | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/recipes-security/refpolicy/refpolicy_2.20190201.inc
b/recipes-security/refpolicy/refpolicy_2.20190201.inc
index 822c0f3..78c6e74 100644
--- a/recipes-security/refpolicy/refpolicy_2.20190201.inc
+++ b/recipes-security/refpolicy/refpolicy_2.20190201.inc
@@ -1,6 +1,6 @@
SRC_URI =
"https://github.com/SELinuxProject/refpolicy/releases/download/RELEASE_2_20190201/refpolicy-${PV}.tar.bz2";
-SRC_URI[md5sum] = "76a7a455289c9216ee0fbb8de71c9799"
-SRC_URI[sha256sum] =
"5e4daee61d89dfdc8c7bf369f81c99845931e337916dc6401e301c5de57ea336"
+SRC_URI[md5sum] = "babb0d5ca2ae333631d25392b2b3ce8d"
+SRC_URI[sha256sum] =
"ed620dc91c4e09eee6271b373f7c61a364a82ea57bd2dc86ca1f7075304e2843"
FILESEXTRAPATHS_prepend := "${THISDIR}/refpolicy-2.20190201:"
--
2.7.4
--
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto
Re: [yocto] [yocto-announce] [ANNOUNCEMENT] Yocto Project 2.6.2 (thud 20.0.2) Released
For latest releases and test results please refer to: https://autobuilder.yocto.io/pub/releases/ For previous test results, refer to yocto-testresults repo at https://git.yoctoproject.org/cgit/cgit.cgi/yocto-testresults/ to refer 2.6.2.rc3 results from yocto-testresults, use --branch thud --commit faeb366bc3eb322f5f203cfe08dc4cf529a822e9 Thanks & Regards, Sangeeta Jain >-Original Message- >From: yocto-boun...@yoctoproject.org On >Behalf Of Manjukumar Harthikote Matha >Sent: Thursday, 18 April, 2019 4:28 AM >To: Graydon, Tracy ; yocto- >annou...@yoctoproject.org; yocto@yoctoproject.org >Subject: Re: [yocto] [yocto-announce] [ANNOUNCEMENT] Yocto Project 2.6.2 >(thud 20.0.2) Released > >Hi Tracy, > >> -Original Message- >> From: yocto-announce-boun...@yoctoproject.org [mailto:yocto-announce- >> boun...@yoctoproject.org] On Behalf Of Tracy Graydon >> Sent: Wednesday, April 17, 2019 1:25 PM >> To: yocto-annou...@yoctoproject.org; yocto@yoctoproject.org >> Subject: [yocto-announce] [ANNOUNCEMENT] Yocto Project 2.6.2 (thud >> 20.0.2) Released >> >> We are pleased to announce the latest release of the Yocto Project >> 2.6.2 (thud- >> 20.0.2) is now available for download: >> >> http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.2/poky-thud >> - >> 20.0.2.tar.bz2 >> http://mirrors.kernel.org/yocto/yocto/yocto-2.6.2/poky-thud-20.0.2.tar >> .bz2 >> >> A gpg signed version of these release notes is available at: >> >> http://downloads.yoctoproject.org/releases/yocto/yocto-2.6.2/RELEASENO >> TES >> >> Yocto 2.6.2 QA reporting: >> >> Summary: https://lists.yoctoproject.org/pipermail/yocto/2019- >> April/044827.html >> Results: >> https://autobuilder.yocto.io/pub/releases/yocto-2.6.2.rc3/testresults/ >> > >I am not able to access this results page. It says "No Such Resource File not >found." > > >Thanks, >Manju > > >> Build log: >> hhttps://autobuilder.yoctoproject.org/typhoon/#/builders/83/builds/122 >> >> Release Criteria: >> https://wiki.yoctoproject.org/wiki/Yocto_Project_v2.6_Status#Yocto_Pro >> ject_2 >> .6.2_release >> >> >> Thank you for everyone's contributions to this release. >> >> Sincerely, >> >> Tracy Graydon >> Yocto Project Build and Release >> tracy.gray...@intel.com >> -- >> ___ >> yocto-announce mailing list >> yocto-annou...@yoctoproject.org >> https://lists.yoctoproject.org/listinfo/yocto-announce >-- >___ >yocto mailing list >yocto@yoctoproject.org >https://lists.yoctoproject.org/listinfo/yocto -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
[yocto] [PATCH][thud] meta-yocto-bsp: Bump to the latest stable kernel for the BSPs
In order to fix a systemtap bug [1] on arm board, we backport a kernel patch from v5.0 kernel to v4.14 & v4.18 kernel, then need to bump the kernel version to include this patch. Even this is only an arm specific bug, we would like to bump the kernel version for the BSPs at the same time. Boot test for all the boards. [1] https://bugzilla.yoctoproject.org/show_bug.cgi?id=13273 Signed-off-by: Kevin Hao --- .../recipes-kernel/linux/linux-yocto_4.14.bbappend | 20 ++-- .../recipes-kernel/linux/linux-yocto_4.18.bbappend | 20 ++-- 2 files changed, 20 insertions(+), 20 deletions(-) diff --git a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_4.14.bbappend b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_4.14.bbappend index 502485a94b15..426757e48c9e 100644 --- a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_4.14.bbappend +++ b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_4.14.bbappend @@ -8,11 +8,11 @@ KMACHINE_genericx86 ?= "common-pc" KMACHINE_genericx86-64 ?= "common-pc-64" KMACHINE_beaglebone-yocto ?= "beaglebone" -SRCREV_machine_genericx86?= "2c5caa7e84311f2a0097974a697ac1f59030530e" -SRCREV_machine_genericx86-64 ?= "2c5caa7e84311f2a0097974a697ac1f59030530e" -SRCREV_machine_edgerouter ?= "e06bfa18c727bd0e6e10cf26d9f161e4c791f52b" -SRCREV_machine_beaglebone-yocto ?= "b8805de77dcf8f59d8368fee4921c146c1300a6a" -SRCREV_machine_mpc8315e-rdb ?= "f88e87360b10f8fbd853a7d412982e6620f3f96d" +SRCREV_machine_genericx86?= "5252513a39b4b3773debab1f77071d7c430ecb10" +SRCREV_machine_genericx86-64 ?= "5252513a39b4b3773debab1f77071d7c430ecb10" +SRCREV_machine_edgerouter ?= "d8fb40cd0e99325715c70aed6f361a8318097829" +SRCREV_machine_beaglebone-yocto ?= "c67809688bd22cb4cb909bcf1a1045e6337c3229" +SRCREV_machine_mpc8315e-rdb ?= "258ee8228e0a512c6dbe2a0dadcd9f030ba45964" COMPATIBLE_MACHINE_genericx86 = "genericx86" COMPATIBLE_MACHINE_genericx86-64 = "genericx86-64" @@ -20,8 +20,8 @@ COMPATIBLE_MACHINE_edgerouter = "edgerouter" COMPATIBLE_MACHINE_beaglebone-yocto = "beaglebone-yocto" COMPATIBLE_MACHINE_mpc8315e-rdb = "mpc8315e-rdb" -LINUX_VERSION_genericx86 = "4.14.76" -LINUX_VERSION_genericx86-64 = "4.14.76" -LINUX_VERSION_edgerouter = "4.14.71" -LINUX_VERSION_beaglebone-yocto = "4.14.71" -LINUX_VERSION_mpc8315e-rdb = "4.14.71" +LINUX_VERSION_genericx86 = "4.14.98" +LINUX_VERSION_genericx86-64 = "4.14.98" +LINUX_VERSION_edgerouter = "4.14.98" +LINUX_VERSION_beaglebone-yocto = "4.14.98" +LINUX_VERSION_mpc8315e-rdb = "4.14.98" diff --git a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_4.18.bbappend b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_4.18.bbappend index 7f15843f3a90..11b35cc1c2f8 100644 --- a/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_4.18.bbappend +++ b/meta-yocto-bsp/recipes-kernel/linux/linux-yocto_4.18.bbappend @@ -8,11 +8,11 @@ KMACHINE_genericx86 ?= "common-pc" KMACHINE_genericx86-64 ?= "common-pc-64" KMACHINE_beaglebone-yocto ?= "beaglebone" -SRCREV_machine_genericx86?= "db2d813869a0501782469ecdb17e277a501c9f57" -SRCREV_machine_genericx86-64 ?= "db2d813869a0501782469ecdb17e277a501c9f57" -SRCREV_machine_edgerouter ?= "28e7781d57a59227bf1c08c7f3dbdfee16aa0dc2" -SRCREV_machine_beaglebone-yocto ?= "28e7781d57a59227bf1c08c7f3dbdfee16aa0dc2" -SRCREV_machine_mpc8315e-rdb ?= "99071a599d8650b069fb8135866fca203f375350" +SRCREV_machine_genericx86?= "b24d9d2146d4ce4ef3ad7251b936f35c69dcf0c4" +SRCREV_machine_genericx86-64 ?= "b24d9d2146d4ce4ef3ad7251b936f35c69dcf0c4" +SRCREV_machine_edgerouter ?= "b24d9d2146d4ce4ef3ad7251b936f35c69dcf0c4" +SRCREV_machine_beaglebone-yocto ?= "b24d9d2146d4ce4ef3ad7251b936f35c69dcf0c4" +SRCREV_machine_mpc8315e-rdb ?= "0802dc980cbc8bdb156d6fe305e7b88e6b602634" COMPATIBLE_MACHINE_genericx86 = "genericx86" COMPATIBLE_MACHINE_genericx86-64 = "genericx86-64" @@ -20,8 +20,8 @@ COMPATIBLE_MACHINE_edgerouter = "edgerouter" COMPATIBLE_MACHINE_beaglebone-yocto = "beaglebone-yocto" COMPATIBLE_MACHINE_mpc8315e-rdb = "mpc8315e-rdb" -LINUX_VERSION_genericx86 = "4.18.22" -LINUX_VERSION_genericx86-64 = "4.18.22" -LINUX_VERSION_edgerouter = "4.18.25" -LINUX_VERSION_beaglebone-yocto = "4.18.25" -LINUX_VERSION_mpc8315e-rdb = "4.18.25" +LINUX_VERSION_genericx86 = "4.18.35" +LINUX_VERSION_genericx86-64 = "4.18.35" +LINUX_VERSION_edgerouter = "4.18.35" +LINUX_VERSION_beaglebone-yocto = "4.18.35" +LINUX_VERSION_mpc8315e-rdb = "4.18.35" -- 2.14.4 -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
[yocto] [meta-selinux][PATCH] refpolicy: refresh patches
Refrefsh 0001-refpolicy-minimum-audit-logging-getty-audit-related-.patch
and 0004-refpolicy-minimum-systemd-mount-logging-authlogin-ad.patch.
Remove the trailing line: \ No newline at end of file
Signed-off-by: Yi Zhao
---
...y-minimum-audit-logging-getty-audit-related-.patch | 1 -
...y-minimum-systemd-mount-logging-authlogin-ad.patch | 19 ---
...y-minimum-audit-logging-getty-audit-related-.patch | 1 -
...y-minimum-systemd-mount-logging-authlogin-ad.patch | 19 ---
4 files changed, 16 insertions(+), 24 deletions(-)
diff --git
a/recipes-security/refpolicy/refpolicy-2.20190201/0001-refpolicy-minimum-audit-logging-getty-audit-related-.patch
b/recipes-security/refpolicy/refpolicy-2.20190201/0001-refpolicy-minimum-audit-logging-getty-audit-related-.patch
index f92ddb8..10d2bcb 100644
---
a/recipes-security/refpolicy/refpolicy-2.20190201/0001-refpolicy-minimum-audit-logging-getty-audit-related-.patch
+++
b/recipes-security/refpolicy/refpolicy-2.20190201/0001-refpolicy-minimum-audit-logging-getty-audit-related-.patch
@@ -62,7 +62,6 @@ index 63e92a8e..8ab46925 100644
+allow auditd_t initrc_t:unix_dgram_socket sendto;
+
+allow klogd_t initrc_t:unix_dgram_socket sendto;
-\ No newline at end of file
--
2.19.1
diff --git
a/recipes-security/refpolicy/refpolicy-2.20190201/0004-refpolicy-minimum-systemd-mount-logging-authlogin-ad.patch
b/recipes-security/refpolicy/refpolicy-2.20190201/0004-refpolicy-minimum-systemd-mount-logging-authlogin-ad.patch
index 98b6156..65ef55b 100644
---
a/recipes-security/refpolicy/refpolicy-2.20190201/0004-refpolicy-minimum-systemd-mount-logging-authlogin-ad.patch
+++
b/recipes-security/refpolicy/refpolicy-2.20190201/0004-refpolicy-minimum-systemd-mount-logging-authlogin-ad.patch
@@ -33,13 +33,13 @@ Signed-off-by: Shrikant Bobade
Signed-off-by: Joe MacDonald
---
policy/modules/system/authlogin.te | 2 ++
- policy/modules/system/logging.te | 7 ++-
+ policy/modules/system/logging.te | 5 +
policy/modules/system/mount.te | 3 +++
policy/modules/system/systemd.te | 5 +
- 4 files changed, 16 insertions(+), 1 deletion(-)
+ 4 files changed, 15 insertions(+)
diff --git a/policy/modules/system/authlogin.te
b/policy/modules/system/authlogin.te
-index 345e07f3..39f860e0 100644
+index 345e07f..39f860e 100644
--- a/policy/modules/system/authlogin.te
+++ b/policy/modules/system/authlogin.te
@@ -472,3 +472,5 @@ optional_policy(`
@@ -49,23 +49,20 @@ index 345e07f3..39f860e0 100644
+
+allow chkpwd_t proc_t:filesystem getattr;
diff --git a/policy/modules/system/logging.te
b/policy/modules/system/logging.te
-index 8ab46925..520f7da6 100644
+index c9991ab..520f7da 100644
--- a/policy/modules/system/logging.te
+++ b/policy/modules/system/logging.te
-@@ -627,4 +627,9 @@ allow auditd_t tmpfs_t:file { getattr setattr create open
read append };
- allow auditd_t tmpfs_t:dir { open read search add_name write getattr search };
+@@ -628,3 +628,8 @@ allow auditd_t tmpfs_t:dir { open read search add_name
write getattr search };
allow auditd_t initrc_t:unix_dgram_socket sendto;
--allow klogd_t initrc_t:unix_dgram_socket sendto;
-\ No newline at end of file
-+allow klogd_t initrc_t:unix_dgram_socket sendto;
+ allow klogd_t initrc_t:unix_dgram_socket sendto;
+
+allow syslogd_t self:shm create;
+allow syslogd_t self:sem { create read unix_write write };
+allow syslogd_t self:shm { read unix_read unix_write write };
+allow syslogd_t tmpfs_t:file { read write };
diff --git a/policy/modules/system/mount.te b/policy/modules/system/mount.te
-index 3dcb8493..a87d0e82 100644
+index 3dcb849..a87d0e8 100644
--- a/policy/modules/system/mount.te
+++ b/policy/modules/system/mount.te
@@ -231,3 +231,6 @@ optional_policy(`
@@ -76,7 +73,7 @@ index 3dcb8493..a87d0e82 100644
+allow mount_t proc_t:filesystem getattr;
+allow mount_t initrc_t:udp_socket { read write };
diff --git a/policy/modules/system/systemd.te
b/policy/modules/system/systemd.te
-index a6f09dfd..68b80de3 100644
+index a6f09df..68b80de 100644
--- a/policy/modules/system/systemd.te
+++ b/policy/modules/system/systemd.te
@@ -993,6 +993,11 @@ allow systemd_tmpfiles_t systemd_journal_t:file {
relabelfrom relabelto };
diff --git
a/recipes-security/refpolicy/refpolicy-git/0001-refpolicy-minimum-audit-logging-getty-audit-related-.patch
b/recipes-security/refpolicy/refpolicy-git/0001-refpolicy-minimum-audit-logging-getty-audit-related-.patch
index 3cc5395..517782d 100644
---
a/recipes-security/refpolicy/refpolicy-git/0001-refpolicy-minimum-audit-logging-getty-audit-related-.patch
+++
b/recipes-security/refpolicy/refpolicy-git/0001-refpolicy-minimum-audit-logging-getty-audit-related-.patch
@@ -62,7 +62,6 @@ index e6221a02..4cc73327 100644
+allow auditd_t initrc_t:unix_dgram_socket sendto;
+
+allow klogd_t initrc_t:unix_dgram_socket sendto;
-\ No newline at end of file
--
2.19.1
diff --git
a/recipes-security/refpolicy/refpolicy-git/0004-refpolicy-minim
