[OE-core] [PATCH 1/2] dropbear: add default config file to disable root login

From: Jackie Huang root login is disabled by default for openssh and we can enable it through IMAGE_FEATURES 'debug-tweaks' or 'allow-empty-password', so change to the same default behavior for dropbear. Signed-off-by: Jackie Huang --- meta/recipes-core/dropbear/dropbear.inc | 3 +

[OE-core] [PATCH 2/2] rootfs-postcommands: split ssh_allow_empty_password

From: Jackie Huang "allow root login" should not be bundled in ssh_allow_empty_password, because some distro may want only one of "allow root login" and "allow empty password", so split it out into ssh_allow_root_login and add new imagefeature allow-root-login so they can be controlled separately

[OE-core] [PATCH 0/2] rootfs-postcommands: split ssh_allow_empty_password

From: Jackie Huang -- The following changes since commit de7914954571ea8e717f56b6d6df13157b0973bc: scripts/contrib/patchreview: add new script (2017-06-29 13:01:32 +0100) are available in the git repository at: git://git.pokylinux.org/poky-contrib.git jhuang0/d_ssh-allow-empty_170630_0 h

[OE-core] [PATCH 1/1] openssh: Restore TCP wrappers support

From: Wenzong Fan The /etc/hosts.deny doesn't work for sshd without tcp-wrappers support, apply below patch from Debian to fix it: From 1850a2c93f3dcfa3d682eaa85d1593c01d170429 Mon Sep 17 00:00:00 2001 From: Colin Watson Date: Tue, 7 Oct 2014 13:22:41 +0100 Subject: Restore TCP wrappers

[OE-core] [PATCH 0/1] openssh: Restore TCP wrappers support

The following changes since commit 98099349e358a9caaec8ec81f0d4abe588909cfe: bitbake: npm fetcher: fix unknown variable name. (2017-06-29 14:33:42 +0100) are available in the git repository at: https://github.com/DengkeDu/openembedded-core.git dengke/openssh-restore-tcp-wrappers-support h

[OE-core] [PATCH 1/2] mirrors: Add HTTP mirrors for ftp://sourceware.org

Signed-off-by: Soren Brinkmann --- meta/classes/mirrors.bbclass | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/classes/mirrors.bbclass b/meta/classes/mirrors.bbclass index b7c20b6cf5a2..8cc1a315c480 100644 --- a/meta/classes/mirrors.bbclass +++ b/meta/classes/mirrors.bbclass @@ -45,6

[OE-core] [PATCH 2/2] valgrind: Update 3.12.0 -> 3.13.0

Signed-off-by: Soren Brinkmann --- One of the non-upstream patches seems to be obsolete and another one I updated. All others still cleanly apply. I successfully tested 3.13.0 with glibc on aarch64. Sören .../valgrind/0001-fix-build-for-musl-targets.patch | 69 -- ..

[OE-core] [PATCH 3/3] initramfs-framwork: module to support boot live image

From: "Ng, Wei Tee" setup-live module is a new module being introduced to integrate the functionality of init-live.sh into new scriptlet in order to support the live boot image. It gets to run before the rootfs and finish module. Signed-off-by: Ng, Wei Tee --- meta/recipes-core/initrdscripts/i

[OE-core] [PATCH 1/3] initramfs-framework: udev: Add a runtime dependency on udev-extraconf

From: "Ng, Wei Tee" In order to implement initramfs-framework for boot up process, it depends on udev performing automounting, which happens in udev-extraconf. Explicitly depend on it so that we always have it installed. Signed-off-by: Ng, Wei Tee --- meta/recipes-core/initrdscripts/initramfs-

[OE-core] [poky][master][PATCH 0/3] initramfs-framework: configuration to boot up live image

From: "Ng, Wei Tee" This patch is to get initramfs-framework able to boot up live image. In order to implement this framework, there is a need to add runtime

[OE-core] [PATCH 2/3] initramfs-framework: setup-live: detect media and assign rootfs image

From: "Ng, Wei Tee" Integrate the featuers in init-live.sh into new scriptlet to handle boot up live image process using framework method. This commit include the changes for: - Create a conditional loop for the bootparam_root variable. If it is not set, then it will boot from ROOT_IMAGE. Else,

[OE-core] [PATCH] strace:4.16 -> 4.17

From: susanbian Upgrade strace from 4.16 to 4.17. Signed-off-by: susanbian --- meta/recipes-devtools/strace/{strace_4.16.bb => strace_4.17.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-devtools/strace/{strace_4.16.bb => strace_4.17.bb} (91%) diff --git a/m

Re: [OE-core] [PATCH 1/1] expat: upgrade to 2.2.1

OK, I will, thanks! On 2017年06月29日 19:32, Burton, Ross wrote: On 29 June 2017 at 08:57, Dengke Du > wrote: -LIC_FILES_CHKSUM = "file://COPYING;md5=9c3ee559c6f9dcee1043ead112139f4f" +LIC_FILES_CHKSUM = "file://COPYING;md5=5b8620d98e49772d95fc1d2

Re: [OE-core] [PATCH 1/2] ncurses: add SYSROOT_DESTDIR for siteconfig_gencache

> -Original Message- > From: openembedded-core-boun...@lists.openembedded.org > [mailto:openembedded-core-boun...@lists.openembedded.org] On Behalf Of > Huang, Jie (Jackie) > Sent: Friday, June 16, 2017 09:58 > To: BURTON, ROSS > Cc: OE-core > Subject: Re: [OE-core] [PATCH 1/2] ncurses: a

Re: [OE-core] [Openembedded-architecture] OE-Core/Yocto Project's first CVE (CVE-2017-9731)

On Wed, 2017-06-28 at 13:38 -0400, Scott Murray wrote: > On Mon, 19 Jun 2017, Richard Purdie wrote: > > > > > I suspect this has been missed by some people so I want to spell it > > out. We have our first CVE in OE-Core itself. > > > > The issue is limited to binary ipks potentially exposing sen

[OE-core] [PATCH 1/1] scripts/oe-setup-rpmrepo: leverage oe-run-native

RSS means we no longer have a large native sysroot to run binaries from. oe-run-native deals with this already, so this patch uses oe-run-native to call the createrepo_c native binary that we need to make the package feed indices. [YOCTO #11706] Signed-off-by: brian avery --- scripts/oe-setup-rp

[OE-core] [PATCH 0/1] scripts: make createrepo_c run

This uses oe-run-native to run the createrepo_c native binary. RSS means we need additional steps to run native binaries, so it is better to consolidate the logic. -brian avery The following changes since commit 98099349e358a9caaec8ec81f0d4abe588909cfe: bitbake: npm fetcher: fix unknown varia

[OE-core] [PATCH] mkefidsk: fix bash/dash shell quoting problem

mkefidsk currently writes a startup.nsh with embedded control characters. This happens because \b etc are control sequences to the shell echo command when using dash. The resulting startup.nsh causes the bootup to fail, and the user is dropped into the EFI shell to manually run startup.nsh. Patch

[OE-core] [PATCH 1/1] imagefeatures.py: Added testcase to track IMAGE_GEN_DEBUGFS

Add new testcase to check varibale IMAGE_GEN_DEBUGFS. Test makes sure that debug filesystem is created accordingly. [YOCTO #10906] Signed-off-by: Humberto Ibarra --- meta/lib/oeqa/selftest/cases/imagefeatures.py | 21 + 1 file changed, 21 insertions(+) diff --git a/meta/lib

[OE-core] [PATCH v3 0/1] imagefeatures.py: Added testcase to track IMAGE_GEN_DEBUGFS

Patch to add a testcase for IMAGE_GEN_DEBUGFS variable. Checks if debug filesystem was created. The following changes since commit 98099349e358a9caaec8ec81f0d4abe588909cfe: bitbake: npm fetcher: fix unknown variable name. (2017-06-29 14:33:42 +0100) are available in the git repository at:

[OE-core] php: pyro: php fails to compile under pyro with empty PACKAGECONFIG

I am on poky/morty and I am doing some test builds to attempt to stay up to date with the latest branches. I am having issues building php. For my build, I don't want any of the PACKAGECONFIG features and I add curl support, so I have a bbappend with the following: DEPENDS += " \ curl \

[OE-core] [PATCH v4 3/4] standard: append md5 tag only if not already present

From: Leonardo Sandoval In case the proposed md5 tag to be appended is already present, do not append it. Signed-off-by: Leonardo Sandoval --- scripts/lib/devtool/standard.py | 7 +-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/scripts/lib/devtool/standard.py b/scripts/li

[OE-core] [PATCH v4 4/4] import: new plugin to import the devtool workspace

From: Leonardo Sandoval Takes a tar archive created by 'devtool export' and export it (untar) to workspace. By default, the whole tar archive is imported, thus there is no way to limit what is imported. https://bugzilla.yoctoproject.org/show_bug.cgi?id=10510 [YOCTO #10510] Signed-off-by: Leona

[OE-core] [PATCH v4 1/4] export: new plugin to export the devtool workspace

From: Leonardo Sandoval By default, exports the whole workspace (all recipes) including the source code. User can also limit what is exported with --included/--excluded flags. As a result of this operation, a tar archive containing only workspace metadata and its corresponding source code is crea

[OE-core] [PATCH v4 0/4] Two new devtool plugins: export and import

From: Leonardo Sandoval These two plugins can be used to share the devtool workspace between users. The following changes since commit c3058ec4a4f2f4c57116816a5bede1e61a5a4cc4: meta/conf/layer.conf: bump layer version for LSB changes (2017-06-28 15:52:19 +0100) are available in the git repo

[OE-core] [PATCH v4 2/4] devtool: function to replace strings inside a text file

From: Leonardo Sandoval Signed-off-by: Leonardo Sandoval --- scripts/lib/devtool/__init__.py | 37 + 1 file changed, 37 insertions(+) diff --git a/scripts/lib/devtool/__init__.py b/scripts/lib/devtool/__init__.py index 29c4c05071..7f4f817a8e 100644 --- a/scr

Re: [OE-core] revert e7fca5d looks wrong.

On 28 June 2017 at 17:58, akuster808 wrote: > Please double check the revert in master. Is the commit message wrong or > did the wrong thing get removed? > > The revert in master: libxml2: Revert "Add an XML_PARSE_NOXXE flag to block all entities loading even local" .../libxml/libxml2/CVE-2016-

Re: [OE-core] [PATCH 1/2] kernel: add package version in dependencies for kernel packages

On Thu, Jun 29, 2017 at 4:54 AM, Razvan Heghedus wrote: > > > On 06/28/2017 04:10 AM, Bruce Ashfield wrote: > > > > On Tue, Jun 27, 2017 at 4:51 AM, Razvan Heghedus > wrote: > >> >> >> On 06/26/2017 06:50 PM, Bruce Ashfield wrote: >> >> >> >> On Wed, Jun 21, 2017 at 8:00 AM, Heghedus Razvan >>

Re: [OE-core] [PATCH 2/2] kernel: user defined KERNEL_VERSION_PKG_NAME

On Thu, Jun 29, 2017 at 5:10 AM, Razvan Heghedus wrote: > > > On 06/28/2017 04:29 AM, Bruce Ashfield wrote: > > > > On Tue, Jun 27, 2017 at 5:15 AM, Razvan Heghedus > wrote: > >> >> >> On 06/26/2017 06:52 PM, Bruce Ashfield wrote: >> >> >> >> On Wed, Jun 21, 2017 at 8:00 AM, Heghedus Razvan >>

[OE-core] [PATCH] openssh: Fix key generation with systemd

106b59d9 broke SSH host key generation when systemd and a read-only root file system are in use because there isn't a way for systemd to get the optional weak assigment of SYSCONFDIR from /etc/default/sshd and still provide a default value if it is not specified. Instead, move the logic for determi

Re: [OE-core] ✗ patchtest: failure for schedtool-dl: Fix SCHED_DEADLINE value out of range

Zhe emailed me, and this is actually for meta-realtime. The README indicates that changes should be sent to oe-core .. but obviously that isn't accurate anymore. I'm updating the README, and this can be resent to the yocto mailing list with [meta-realtime] in the subject. Cheers, Bruce On Thu,

[OE-core] [PATCH] scripts/contrib/patchreview: add new script

This script analyses the patches we apply and can sanity check or output statistics. Signed-off-by: Ross Burton --- scripts/contrib/patchreview.py | 211 + 1 file changed, 211 insertions(+) create mode 100755 scripts/contrib/patchreview.py diff --git a/s

Re: [OE-core] [PATCH 1/1] expat: upgrade to 2.2.1

On 29 June 2017 at 08:57, Dengke Du wrote: > -LIC_FILES_CHKSUM = "file://COPYING;md5=9c3ee559c6f9dcee1043ead112139f4f" > +LIC_FILES_CHKSUM = "file://COPYING;md5=5b8620d98e49772d95fc1d291c26aa79" > Checksums changed, remember to always explain why in the commit log. Ross --

[OE-core] ✗ patchtest: failure for schedtool-dl: Fix SCHED_DEADLINE value out of range

== Series Details == Series: schedtool-dl: Fix SCHED_DEADLINE value out of range Revision: 1 URL : https://patchwork.openembedded.org/series/7507/ State : failure == Summary == Thank you for submitting this patch series to OpenEmbedded Core. This is an automated response. Several tests have b

[OE-core] [PATCH] schedtool-dl: Fix SCHED_DEADLINE value out of range

From: He Zhe The upstream commit 3ffb479929c31cbae09de08f94f58b8f0f061d91 tries to fix this issue but it's not complete. This patch adds flags at the last necessary place. Signed-off-by: He Zhe --- recipes-tools/schedtool-dl/schedtool-dl.bb | 6 ++- ...-add-flags-to-parameters-of-sch

Re: [OE-core] [PATCH 2/2] kernel: user defined KERNEL_VERSION_PKG_NAME

On 06/28/2017 04:29 AM, Bruce Ashfield wrote: On Tue, Jun 27, 2017 at 5:15 AM, Razvan Heghedus mailto:razvan.heghe...@ni.com>> wrote: On 06/26/2017 06:52 PM, Bruce Ashfield wrote: On Wed, Jun 21, 2017 at 8:00 AM, Heghedus Razvan mailto:razvan.heghe...@ni.com>> wrote:

Re: [OE-core] [PATCH 1/2] kernel: add package version in dependencies for kernel packages

On 06/28/2017 04:10 AM, Bruce Ashfield wrote: On Tue, Jun 27, 2017 at 4:51 AM, Razvan Heghedus mailto:razvan.heghe...@ni.com>> wrote: On 06/26/2017 06:50 PM, Bruce Ashfield wrote: On Wed, Jun 21, 2017 at 8:00 AM, Heghedus Razvan mailto:razvan.heghe...@ni.com>> wrote:

Re: [OE-core] [PATCH v2 0/5] #11662 - wic should mount /boot

On Wed, Jun 28, 2017 at 10:32:27AM -0300, Otavio Salvador wrote: > On Wed, Jun 28, 2017 at 4:31 AM, Ed Bartosh > wrote: > > On Tue, Jun 27, 2017 at 05:41:45PM -0300, Fabio Berton wrote: > >> The last patch I sent is here: > >> https://patchwork.openembedded.org/patch/139252/ > >> > >> We're using

[OE-core] [PATCH 1/1] expat: upgrade to 2.2.1

Signed-off-by: Dengke Du --- meta/recipes-core/expat/expat_2.2.0.bb | 5 - meta/recipes-core/expat/expat_2.2.1.bb | 5 + 2 files changed, 5 insertions(+), 5 deletions(-) delete mode 100644 meta/recipes-core/expat/expat_2.2.0.bb create mode 100644 meta/recipes-core/expat/expat_2.2.1.bb

[OE-core] [PATCH 0/1] expat: upgrade to 2.2.1

The following changes since commit abc7131777e8ea8e6aacc5118bbb5c24883c0ead: lz4: Add patch to fix re-builds (2017-06-28 20:55:09 +0100) are available in the git repository at: https://github.com/DengkeDu/openembedded-core.git dengke/expat-upgrade-to-2.2.1 Dengke Du (1): expat: upgrade t