Re: [OE-core] [V2][PATCH] cve-check.bbclass: allow skiping non pbn

2021-02-18 Thread Ross Burton
On Mon, 15 Feb 2021 at 22:43, akuster wrote: > I don't see the point in logging native, nativesdk etc. > The bottom line is the BPN has the issue. Unless the base recipe doesn't exist, for example it's nativesdk or native specific. Whilst native is build tool and so arguably not as relevant,

Re: [OE-core] [V2][PATCH] cve-check.bbclass: allow skiping non pbn

2021-02-16 Thread Mikko Rapeli
Hi, On Mon, Feb 15, 2021 at 10:42:54PM +, akuster wrote: > I don't see the point in logging native, nativesdk etc. > The bottom line is the BPN has the issue. There have been several cases where different build targets were applying different patches, e.g. CVE patched not applied in -native

[OE-core] [V2][PATCH] cve-check.bbclass: allow skiping non pbn

2021-02-15 Thread akuster
I don't see the point in logging native, nativesdk etc. The bottom line is the BPN has the issue. Allow folks to filter out those other package name variations via CVE_CHECK_MANIFEST_FILTER Signed-off-by: Armin Kuster -- [V2] rename varible to CVE_CHECK_FILTER_BUILD_TOOLS ---