From: Wenzong Fan
The scripts/team_basic_test.py will be called as testcase.
RedHat specific tests have been disabled since they are incampatible
with OE.
Signed-off-by: Wenzong Fan
---
...asic_test.py-disable-RedHat-specific-test.patch | 32 ++
meta-oe/recipes-support/lib
From: Wenzong Fan
Refer to http://www.tcpdump.org/tcpdump-changes.txt:
Fix buffer overflow vulnerabilities:
CVE-2017-11543 (SLIP)
CVE-2017-13011 (bittok2str_internal)
Fix infinite loop vulnerabilities:
CVE-2017-12989 (RESP)
CVE-2017-12990 (ISAKMP)
CVE-2017-12995 (DNS)
CVE-2017-12997
From: Wenzong Fan
Backport patches for fixing:
- CVE-2017-11541:
https://nvd.nist.gov/vuln/detail/CVE-2017-11541
https://github.com/the-tcpdump-group/tcpdump/commit/21d702a136c5c16882e368af7c173df728242280
- CVE-2017-11542:
https://nvd.nist.gov/vuln/detail/CVE-2017-11542
https://github
From: Wenzong Fan
Fix runtime error:
File "/usr/lib/python2.7/site-packages/networkx/readwrite/gml.py", \
line 44, in
from lib2to3.pgen2.parse import ParseError
ImportError: No module named lib2to3.pgen2.parse
Signed-off-by: Wenzong Fan
---
meta-python/recipes-devtools/python/pyth
From: Wenzong Fan
Fixed CVEs & Issues:
CVE-2017-11577: #3088
CVE-2017-11576: #3091
CVE-2017-11575: #3096
CVE-2017-11574: #3090
CVE-2017-11572: #3092
CVE-2017-11571: #3087
CVE-2017-11569: #3093
CVE-2017-11568: #3089
Signed-off-by: Wenzong Fan
---
.../fontforge/{fontforge_2016101
From: Wenzong Fan
Summary for 4.9.1 tcpdump release
CVE-2017-11108/Fix bounds checking for STP.
Make assorted documentation updates and fix a few typos in tcpdump output.
Fixup -C for file size >2GB (GH #488).
Show AddressSanitizer presence in version output.
Fix a bug in test scripts (
From: Wenzong Fan
Python package for creating and manipulating graphs and networks.
Signed-off-by: Wenzong Fan
---
meta-python/recipes-devtools/python/python-networkx_1.11.bb | 8
1 file changed, 8 insertions(+)
create mode 100644 meta-python/recipes-devtools/python/python-networkx_1
From: Wenzong Fan
Python package for creating and manipulating graphs and networks.
Signed-off-by: Wenzong Fan
---
meta-python/recipes-devtools/python/python-networkx_1.11.bb | 8
1 file changed, 8 insertions(+)
create mode 100644 meta-python/recipes-devtools/python/python-networkx_1
From: Wenzong Fan
The opencv 2.4 has been blacklisted, 3.1 should be the default choice
for both opencv and lib32-opencv.
Signed-off-by: Wenzong Fan
---
meta-oe/recipes-support/opencv/opencv_3.1.bb | 2 --
1 file changed, 2 deletions(-)
diff --git a/meta-oe/recipes-support/opencv/opencv_3.1.b
From: Wenzong Fan
Fix host path for commands: mount, umount:
.../tmp/sysroots/x86_64-linux/bin/mount -> /bin/mount
.../tmp/sysroots/x86_64-linux/bin/umount -> /bin/umount
Signed-off-by: Wenzong Fan
---
meta-oe/recipes-support/rsnapshot/rsnapshot_git.bb | 2 ++
1 file changed, 2 insertion
From: Wenzong Fan
Remove install errors:
mv: cannot stat '.../tmp/work/mips64-wrs-linux/opencv/3.1+gitAUTOINC
+92387b1ef8-r0/image/usr/lib/*': No such file or directory
Signed-off-by: Wenzong Fan
---
meta-oe/recipes-support/opencv/opencv_3.1.bb | 2 +-
1 file changed, 1 insertion(+), 1 de
From: Wenzong Fan
Rename tarball name: 3.2.8.tar.bz2 -> libeigen-3.2.8.tar.bz2
Signed-off-by: Wenzong Fan
---
meta-oe/recipes-support/libeigen/libeigen_3.2.8.bb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta-oe/recipes-support/libeigen/libeigen_3.2.8.bb
b/meta-oe/rec
From: Wenzong Fan
Replace '/lib' with '${baselib}' to fix QA issue:
ERROR: do_package_qa: QA Issue: non -staticdev package contains \
static .a library: opencv-apps path \
'.../opencv-apps/usr/share/OpenCV/3rdparty/lib64/libippicv.a' \
[staticdev]
Signed-off-by: Wenzong Fan
---
meta-o
From: Kai Kang
The mdb backend to slapd(8) is the recommended primary backend for a
normal slapd database. Add PACKAGECONFIG 'mdb' to enable it and build
mdb as SLAPD_STATIC_BACKENDS.
This fixes the errors while starting slapd:
$systemctl start slapd
Job for slapd.service failed because the
From: Wenzong Fan
* update rsnapshot from 1.3.1 to 1.4.2
* fix configure error:
configure.ac:302: file 't/include.ac' does not exist
Signed-off-by: Wenzong Fan
---
meta-oe/recipes-support/rsnapshot/rsnapshot_git.bb | 12 ++--
1 file changed, 10 insertions(+), 2 deletions(-)
diff --g
From: Wenzong Fan
* /usr/bin/smicache requires wget:
+ WGET=/usr/bin/wget
* Set the WGET as target path to avoid host contamination.
Signed-off-by: Wenzong Fan
---
meta-oe/recipes-support/libsmi/libsmi_0.5.0.bb | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/meta-oe/r
From: Yue Tao
mysqlbug.sh is a bug report script. It makes a report with the build
information,
including gcc version. The CC is the local path of gcc, which is useless for bug
report, and the path may expose private information, so change it to CC_VERSION.
Signed-off-by: Yue Tao
Signed-off-by
From: Yue Tao
This fixes:
# on target
$ grep PERLLIB /etc/webmin/start
PERLLIB=/path/to/builddir/.../webmin/1.801-r0/image/usr/libexec/webmin
Signed-off-by: Yue Tao
Signed-off-by: Wenzong Fan
---
meta-webserver/recipes-webadmin/webmin/files/setup.sh | 2 +-
1 file changed, 1 insertion(
From: Wenzong Fan
* fix CVEs CVE-2014-3634, CVE-2014-3683
* rebase the patch use-pkgconfig-to-check-libgcrypt.patch
* backport fixes for build error:
lexer.l:34:14: error: expected identifier or '(' before '__extension__'
* replace the old configure option '--enable-cached-man-pages' with
From: Li Wang
the patch comes from:
https://bugzilla.redhat.com/show_bug.cgi?id=1238322
https://bugzilla.redhat.com/attachment.cgi?id=1055640
The nss_parse_ciphers function in libraries/libldap/tls_m.c in
OpenLDAP does not properly parse OpenSSL-style multi-keyword mode
cipher strings, which mig
From: Wenzong Fan
* fix CVE: CVE-2015-8036
Signed-off-by: Wenzong Fan
---
.../mbedtls/{mbedtls_1.3.10.bb => mbedtls_1.3.17.bb} | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
rename meta-networking/recipes-connectivity/mbedtls/{mbedtls_1.3.10.bb =>
mbedtls_1.3.17.b
From: Wenzong Fan
* fix CVEs: CVE-2015-8629, CVE-2015-8630, CVE-2015-8631
* update LIC_FILES_CHKSUM, only Copyright changed in NOTICE file:
-Copyright (C) 1985-2015 by the Massachusetts Institute of Technology.
+Copyright (C) 1985-2016 by the Massachusetts Institute of Technology.
* remove
From: Wenzong Fan
Signed-off-by: Wenzong Fan
---
.../traceroute/{traceroute_2.0.21.bb => traceroute_2.1.0.bb} | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
rename meta-networking/recipes-support/traceroute/{traceroute_2.0.21.bb =>
traceroute_2.1.0.bb} (91%)
diff --git a/
From: Wenzong Fan
Signed-off-by: Wenzong Fan
---
.../krb5/krb5/krb5-admin-server.service| 14 +++
.../krb5/krb5/krb5-kdc.service | 13 ++
meta-oe/recipes-connectivity/krb5/krb5_1.13.2.bb | 29 +++---
3 files changed, 47 insertion
From: Wenzong Fan
V2 changes:
* replace base_contains with bb.utils.contains
* replace ${systemd_unitdir}/system with ${systemd_system_unitdir}
The changes tested on master branch.
The following changes since commit 9cd117a5dc5f26133a855d1cc3bf9604ae178685:
chrony: Versatile implementation
From: Wenzong Fan
Signed-off-by: Wenzong Fan
---
.../krb5/krb5/krb5-admin-server.service| 14 +++
.../krb5/krb5/krb5-kdc.service | 13 ++
meta-oe/recipes-connectivity/krb5/krb5_1.13.2.bb | 29 +++---
3 files changed, 47 insertion
From: Wenzong Fan
* Add configure options '--without-valgrind'
* Disable valgrind by default since it doesn't build for all targets
This fixes build errors:
../source3/include/includes.h:156:31: fatal error: \
valgrind/memcheck.h: No such file or directory
compilation terminated.
Signe
From: Wenzong Fan
* add ptest support
* runtime depends on gnupg
Signed-off-by: Wenzong Fan
---
.../recipes-devtools/python/python-pygpgme/run-ptest| 3 +++
meta-python/recipes-devtools/python/python-pygpgme_0.3.bb | 13 +++--
2 files changed, 14 insertions(+), 2 deletions(-
From: Wenzong Fan
The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c
in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly
accesses a certain pointer, which allows remote authenticated users
to cause a denial of service (memory corruption) or possibly have
unspec
From: Wenzong Fan
lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before
1.14 relies on an inappropriate context handle, which allows remote
attackers to cause a denial of service (incorrect pointer read and
process crash) via a crafted SPNEGO packet that is mishandled during
a gss_i
From: Wenzong Fan
The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT
Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users
to cause a denial of service (out-of-bounds read and KDC crash) via
an initial '\0' character in a long realm field within a TGS request.
Backp
From: Wenzong Fan
lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14
relies on an inappropriate context handle, which allows remote
attackers to cause a denial of service (incorrect pointer read and
process crash) via a crafted IAKERB packet that is mishandled during
a gss_inquire_
From: Wenzong Fan
Fix CVEs:
CVE-2015-2695
CVE-2015-2696
CVE-2015-2697
CVE-2015-2698
The following changes since commit 721a2cabf352085d34dd14c22e71914d3429ca59:
ntp: upgrade 4.2.8p3 -> 4.2.8p4 (2015-11-11 12:12:08 +0100)
are available in the git repository at:
git://git.pokylinux
From: Wenzong Fan
The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1
and 4.5.x before 4.5.1 allows remote attackers to spoof content via the
url parameter.
Backport upstream commit to fix it:
https://github.com/phpmyadmin/phpmyadmin/commit/cd097656758f981f80fb9029c7d6b4294582
From: Wenzong Fan
PyGPGME is a Python module that lets you sign, verify, encrypt and
decrypt messages using the OpenPGP format.
Signed-off-by: Wenzong Fan
---
.../recipes-devtools/python/python-pygpgme_0.3.bb | 18 ++
1 file changed, 18 insertions(+)
create mode 100644 me
From: Yue Tao
If run bitbake -c patch -f netcat-openbsd twice, the patch conflict
will happen, so replace the patch with quilt to avoid do_patch failed.
Signed-off-by: Yue Tao
Signed-off-by: Wenzong Fan
---
meta-networking/recipes-support/netcat/netcat-openbsd_1.105.bb | 3 ++-
1 file changed
From: Jian Liu
The script ypbind will cause error if using ypdomainname command
provided by busybox. So add RDEPENDCY on yp-tools and change
the path of ypdomainname.
Signed-off-by: Jian Liu
Signed-off-by: Wenzong Fan
---
meta-networking/recipes-support/nis/files/ypbind.init | 11 ++-
From: Wenzong Fan
Depends on libgudev directly base on oe-core commit:
commit e11801d031896351364e7723db3392012f58b603
Author: Andreas Müller
Date: Fri Oct 2 22:27:21 2015 +0200
udev: add PROVIDES = "libgudev"
With the last update of systemd libgudev was splitted out of system
From: Wenzong Fan
4.2.8p4 fixed following 13 low- and medium-severity vulnerabilities:
* Bug 2941 CVE-2015-7871
* Bug 2922 CVE-2015-7855
* Bug 2921 CVE-2015-7854
* Bug 2920 CVE-2015-7853
* Bug 2919 CVE-2015-7852
* Bug 2918 CVE-2015-7851
* Bug 2917 CVE-2015-7850
* Bug 2916 CVE-201
From: Wenzong Fan
* udev provides libgudev but it won't be built with systemd;
* systemd provides udev but no libgudev, libgudev has been removed
from systemd and it's a independent project now; libgudev only be
built if systemd distro feature enabled.
Signed-off-by: Wenzong Fan
---
.../re
From: Wenzong Fan
The recipes depend on virtual/libx11 indirectly, they only can be
built with x11 in DISTRO_FEATURES.
Signed-off-by: Wenzong Fan
---
meta-gnome/recipes-gnome/libgtop/libgtop_2.30.0.bb| 5 -
meta-gnome/recipes-gnome/metacity/metacity_2.34.13.bb | 4 +++-
2 files changed
From: Wenzong Fan
swig 3.0.6 has been moved to oe-croe:
66923c6776da13bd4513a73c3f7c5e60d74eb0f3
Signed-off-by: Wenzong Fan
---
meta-oe/recipes-devtools/swig/swig.inc | 63
...lf-exe-for-swig-swiglib-on-non-Win32-plat.patch | 69 --
...nfi
From: Wenzong Fan
They have been moved to oe-core.
The following changes since commit f4533380c8a5c1d229f69ee0c2ef9d187ef8:
dracut: install modules to /usr/lib (2015-09-23 16:10:57 +0200)
are available in the git repository at:
git://git.pokylinux.org/poky-contrib wenzong/libcap-1
h
From: Wenzong Fan
libcap-ng 0.7.7 has been added to oe-core:
ad509d7644803ff9386affefe2ec1a3664027074
Signed-off-by: Wenzong Fan
---
.../libcap-ng/libcap-ng/python.patch | 58 --
.../recipes-support/libcap-ng/libcap-ng_0.7.7.bb | 39 ---
2 file
From: Wenzong Fan
Those buildpaths were generated from configure substitutions, they are
required for cross-compiling, but obviously they should be cleaned up
from target stuffs.
Cleanup buildpaths from config_vars.mk and config.nice:
* remove ${STAGING_DIR_HOST} from CC, CFLAGS ...
* set APU_I
From: Wenzong Fan
* gdlib.pc:
-L/path/to/tmp/sysroots/qemux86-64/usr/lib64 -> -L/usr/lib64
Signed-off-by: Wenzong Fan
---
meta-oe/recipes-support/gd/gd_2.1.1.bb | 5 +
1 file changed, 5 insertions(+)
diff --git a/meta-oe/recipes-support/gd/gd_2.1.1.bb
b/meta-oe/recipes-support/gd/gd_2.
From: Wenzong Fan
Don't enable GNU atomic operations for all targets, it fails on
powerpc and mips:
AtomicWord.h: undefined reference to `__sync_fetch_and_add_8'
collect2: error: ld returned 1 exit status
Refer to https://gcc.gnu.org/bugzilla/show_bug.cgi?id=56300:
There is no hardware s
From: Wenzong Fan
The dracut modules will be installed to /usr/lib64 while building 64bit
targets with multilib enabled, this causes runtime errors:
dracut: Cannot find /usr/lib/dracut/dracut-functions.sh.
dracut: Are you running from a git checkout?
dracut: Try passing -l as an argument t
From: Robert Yang
Use PACKAGECONFIG to depend on systemd optionally.
Signed-off-by: Robert Yang
Signed-off-by: Wenzong Fan
---
meta-initramfs/recipes-devtools/dracut/dracut_git.bb | 11 ++-
1 file changed, 6 insertions(+), 5 deletions(-)
diff --git a/meta-initramfs/recipes-devtools/d
From: Wenzong Fan
V2 changes:
* Move the "PACKAGECONFIG" next to "EXTRA_OECONF".
The following changes since commit 1692d5c3020434404fc1ee6911a60b88287a5efb:
netmap: add new package (2015-09-15 10:49:30 -0400)
are available in the git repository at:
git://git.pokylinux.org/poky-contrib w
From: Wenzong Fan
After rsyslog updated to 7.6.1, ptest fails to build & run since the
serial-tests config patch was dropped:
- rsyslog-use-serial-tests-config-needed-by-ptest.patch
This patch involved serial test harness:
+ AM_INIT_AUTOMAKE([serial-tests])
Which is deprecated in favour of
From: Robert Yang
Use PACKAGECONFIG to depend on systemd optionally.
Signed-off-by: Robert Yang
Signed-off-by: Wenzong Fan
---
meta-initramfs/recipes-devtools/dracut/dracut_git.bb | 11 ++-
1 file changed, 6 insertions(+), 5 deletions(-)
diff --git a/meta-initramfs/recipes-devtools/d
From: Wenzong Fan
The dracut modules will be installed to /usr/lib64 while building 64bit
targets with multilib enabled, this causes runtime errors:
dracut: Cannot find /usr/lib/dracut/dracut-functions.sh.
dracut: Are you running from a git checkout?
dracut: Try passing -l as an argument t
From: Wenzong Fan
* Get dracut RDEPEND on systemd optionally;
* install modules to /usr/lib for fixing runtime issues.
The following changes since commit d36e2d1066f50036080f978583a58fe79ecfac54:
libunique: add a recipe from oe-core (2015-09-08 16:30:24 +0200)
are available in the git reposi
From: Wenzong Fan
The binaries/docs that generated by imagemagick has suffix '.im6',
use update-alternatives to add alternatives for them.
Signed-off-by: Wenzong Fan
---
.../imagemagick/imagemagick_6.9.2.bb | 45 +-
1 file changed, 44 insertions(+), 1 deletion
From: Wenzong Fan
Add SRCREV_FORMAT to provide a composite version number for
get_srcrev() in fetch2 code. This fixes error:
* FetchError: Fetcher failure: The SRCREV_FORMAT variable \
must be set when multiple SCMs are used.
Signed-off-by: Wenzong Fan
---
meta-networking/recipes-irc/zn
From: Wenzong Fan
update to 2.0121 and clean unused logic:
- do_configure_prepend() {
-rm -rf ${S}/.pc/*
- }
Signed-off-by: Wenzong Fan
---
...{libxml-libxml-perl_2.0116.bb => libxml-libxml-perl_2.0121.bb} | 8 ++--
1 file changed, 2 insertions(+), 6 deletions(-)
rename met
From: Wenzong Fan
Signed-off-by: Wenzong Fan
---
.../libxml/libxml-libxml-perl_2.0116.bb| 47 --
.../libxml/libxml-libxml-perl_2.0121.bb| 47 ++
2 files changed, 47 insertions(+), 47 deletions(-)
delete mode 100644 meta-perl/recip
From: Wenzong Fan
Update mercurial to fix CVE-2014-9462:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9462
Signed-off-by: Wenzong Fan
---
.../mercurial/mercurial-native_3.0.1.bb| 26 --
.../mercurial/mercurial-native_3.4.1.bb| 26
From: Yue Tao
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9130
The patch comes from:
https://bitbucket.org/xi/libyaml/commits/2b9156756423e967cfd09a61d125d883fca6f4f2
Removed invalid simple key assertion (thank to Jonathan Gray)
Signed-off-by: Yue Tao
Signed-off-by: Wenzong Fan
From: Wenzong Fan
removed patch:
- libyaml-CVE-2014-2525.patch (included by 0.1.6)
Signed-off-by: Wenzong Fan
---
.../libyaml/files/libyaml-CVE-2014-2525.patch | 42 --
meta-oe/recipes-support/libyaml/libyaml_0.1.5.bb | 21 ---
meta-oe/recipes-support/libyaml
From: Wenzong Fan
Keep compatibility with chkconfig tool.
Signed-off-by: Wenzong Fan
---
meta-networking/recipes-daemons/postfix/files/postfix | 8
1 file changed, 8 insertions(+)
diff --git a/meta-networking/recipes-daemons/postfix/files/postfix
b/meta-networking/recipes-daemons/po
From: Wenzong Fan
Keep compatibility with chkconfig tool.
Signed-off-by: Wenzong Fan
---
meta-networking/recipes-daemons/vsftpd/files/init | 9 +
1 file changed, 9 insertions(+)
diff --git a/meta-networking/recipes-daemons/vsftpd/files/init
b/meta-networking/recipes-daemons/vsftpd/fi
From: Wenzong Fan
The smb, nmb, winbind services have been disabled for systemd system
by default, disable them for sysvinit as well.
Signed-off-by: Wenzong Fan
---
meta-oe/recipes-connectivity/samba/samba.inc | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta-oe/recipes-
From: Wenzong Fan
* /etc/iscsi/initiatorname.iscsi: etc_runtime_t -> etc_t
This config file was created by postinstall or initscript, fix SELinux
label for it to remove:
avc: denied { read } for pid=6094 comm="iscsid" \
name="initiatorname.iscsi" dev="sda3" ino=1057846 \
scontext=system_u
From: Wenzong Fan
Add PACKAGECONFIG for libvirt, libesmtp to fix below warnings:
WARN: collectd: collectd rdepends on libvirt, but it isn't a build dependency?
WARN: collectd: collectd rdepends on libcrypto, but it isn't a build dependency?
WARN: collectd: collectd rdepends on libesmtp, but it i
From: Wenzong Fan
Add PACKAGECONFIG for 'libvirt', otherwise there would be warnings
like below:
WARN: collectd: collectd rdepends on libvirt, but it isn't a build
dependency?
Signed-off-by: Wenzong Fan
---
meta-oe/recipes-extended/collectd/collectd_5.4.1.bb |3 ++-
1 file changed, 2 inse
From: Wenzong Fan
Don't install local patch files to target.
Signed-off-by: Wenzong Fan
---
meta-webserver/recipes-php/phpmyadmin/phpmyadmin_4.2.7.bb |2 ++
1 file changed, 2 insertions(+)
diff --git a/meta-webserver/recipes-php/phpmyadmin/phpmyadmin_4.2.7.bb
b/meta-webserver/recipes-php
From: Wenzong Fan
Add PACKAGECONFIG for 'selinux', otherwise there would be warnings like
below:
WARN: apache2: apache2 rdepends on libselinux, but it isn't a build dependency?
Signed-off-by: Wenzong Fan
---
.../recipes-httpd/apache2/apache2_2.4.10.bb|4 ++
...onfigure-allow-to-di
From: Wenzong Fan
Add PACKAGECONFIG for 'selinux', otherwise there would be warnings like
below:
WARN: ltrace: ltrace rdepends on libselinux, but it isn't a build dependency?
Signed-off-by: Wenzong Fan
---
...onfigure-allow-to-disable-selinux-support.patch | 36
meta-oe
From: Wenzong Fan
* Clean INCLUDES to fix the host contamination errors:
In file included from /usr/src/linux/include/linux/posix_types.h:47:0,
from /usr/src/linux/include/linux/types.h:17,
from /usr/src/linux/include/linux/if.h:22,
from sethdlc.c:23:
/usr/src/linux/include/asm-generic
From: Wenzong Fan
The kadm5_randkey_principal_3 function in lib/kadm5/srv/svr_principal.c
in kadmind in MIT Kerberos 5 (aka krb5) before 1.13 sends old keys in a
response to a -randkey -keepold request, which allows remote authentic-
ated users to forge tickets by leveraging administrative access
From: Wenzong Fan
The kadm5_randkey_principal_3 function in lib/kadm5/srv/svr_principal.c
in kadmind in MIT Kerberos 5 (aka krb5) before 1.13 sends old keys in a
response to a -randkey -keepold request, which allows remote authentic-
ated users to forge tickets by leveraging administrative access
From: Wenzong Fan
Get /etc/init.d/ntpd support options 'status'.
The following changes since commit 71d2fe7c9e2681fede255d7f5b430d63a122ab18:
vim: add ncurses-terminfo-base as a runtime dependency (2014-10-18 10:47:43
+0200)
are available in the git repository at:
git://git.pokylinux.org
From: Wenzong Fan
Signed-off-by: Wenzong Fan
---
meta-networking/recipes-support/ntp/files/ntpd |9 -
1 file changed, 8 insertions(+), 1 deletion(-)
diff --git a/meta-networking/recipes-support/ntp/files/ntpd
b/meta-networking/recipes-support/ntp/files/ntpd
index 3cd1c6c..d1b9c49
From: Wenzong Fan
This change is used for fixing cmd path in rsnapshot.conf.default.
The options --without-* disable checking command * on host and get
the default path used, otherwise the host path will be injected into
target configs.
The runtime dependencies to ssh, logger, cp, du are option
From: Wenzong Fan
This change is used for fixing cmd path in rsnapshot.conf.default.
The options --without-* disable checking command * on host and get
the default path used, otherwise the host path will be injected into
target configs.
The runtime dependencies to ssh, logger, cp, du are option
From: Wenzong Fan
v3 changes:
* Update the drift file path in recipes-support/ntp/files/ntp.conf;
* Drop the logic for creating /var/lib/ntp, This addressed by Peter A. Bigot's
patch:
[oe] [meta-networking][PATCH] ntp: create and package ntp home directory
The following changes since commit
From: Wenzong Fan
The default path of ntp drift file is /etc/ntp.drift, ntp daemon
maybe fails to create this file since the user ntp is not always
permitted to write /etc.
Refer to other distributions such as RedHat, Debian, just moving
the file to /var/lib/ntp which the home dir of user ntp.
From: Wenzong Fan
v2 changes:
Update the commit logs:
---
* fix the path to drift file:
The default path of ntp drift file is /etc/ntp.drift, ntp daemon
maybe fails to create this file since the user ntp is not always
permitted to write /etc.
Refer to other distributions su
From: Wenzong Fan
* fix the path to drift file:
The default path of ntp drift file is /etc/ntp.drift, ntp daemon
maybe fails to create this file since the user ntp is not always
permitted to write /etc.
Refer to other distributions such as RedHat, Debian, just moving
the file to /var/lib/ntp wh
From: Wenzong Fan
Default path to driftfile is "/etc/ntp.drift", that doesn't work since
ntp daemon is always started with "ntp" user. It should be created at
the home directory of "ntp" which is "/var/lib/ntp/".
The following changes since commit 17ff23b4a4a0e5ed7efde107fb00296f1ebd5fdd:
xf8
From: Wenzong Fan
Default path to driftfile is "/etc/ntp.drift", that doesn't work since
ntp daemon is always started with "ntp" user. It should be created at
the home directory of "ntp" which is "/var/lib/ntp/".
Signed-off-by: Wenzong Fan
---
meta-networking/recipes-support/ntp/ntp.inc | 15
From: Wenzong Fan
rsnapshot is a filesystem snapshot utility based on rsync.
rsnapshot makes it easy to make periodic snapshots of local machines,
and remote machines over ssh. The code makes extensive use of hard links
whenever possible, to greatly reduce the disk space required.
Homepage: htt
From: Wenzong Fan
rsnapshot is a filesystem snapshot utility based on rsync.
rsnapshot makes it easy to make periodic snapshots of local machines,
and remote machines over ssh. The code makes extensive use of hard links
whenever possible, to greatly reduce the disk space required.
Homepage: htt
From: Wenzong Fan
Both targets install-data-local & install-includeHEADERS will install
header file magick-baseconfig.h to the same location, and they might
be run in the same time while enabling parallel build:
* target dependencies:
+ install-data-am: ... install-data-local ... install-inclu
From: Wenzong Fan
Both targets install-data-local & install-includeHEADERS will install
header file magick-baseconfig.h to the same location, and they might
be run in the same time while enabling parallel build:
* target dependencies:
+ install-data-am: ... install-data-local ... install-inclu
From: Wenzong Fan
* depens on swig-native to make sure that the talloc.i always be
installed;
* remove relative path that from `swig -swiglib`:
${D}/usr/bin/../share -> ${D}/usr/share
This prevents 'install' from creraing empty dir: ${D}${bindir};
* fix the path to talloc.i for separa
From: Wenzong Fan
Patch 2/2:
Fixes for sstate cache reuse between different build dirs. The
${SWIGLIBDIR##${STAGING_DIR_NATIVE}} had confused bitbake, bitbake would
add the "SWIGLIBDIR##${STAGING_DIR_NATIVE}" to the deps of do_install,
which caused the sstate cached can't be re-used.
Use anothe
From: Robert Yang
Fixes for sstate cache reuse between different build dirs. The
${SWIGLIBDIR##${STAGING_DIR_NATIVE}} had confused bitbake, bitbake would
add the "SWIGLIBDIR##${STAGING_DIR_NATIVE}" to the deps of do_install,
which caused the sstate cached can't be re-used.
Use another way for SW
From: Wenzong Fan
Changes include:
* depens on swig-native to make sure that the talloc.i always be
installed;
* remove relative path that from `swig -swiglib`:
${D}/usr/bin/../share -> ${D}/usr/share
This prevents 'install' from creraing empty dir: ${D}${bindir};
* fix the path
From: Wenzong Fan
* depens on swig-native to make sure that the talloc.i always be
installed;
* remove relative path that from `swig -swiglib`:
${D}/usr/bin/../share -> ${D}/usr/share
This prevents 'install' from creraing empty dir: ${D}${bindir};
* fix the path to talloc.i for separa
From: Wenzong Fan
* fix do_insall errors:
rmdir: failed to remove `.../talloc/2.0.1-r2/image/usr/bin': \
No such file or directory
Signed-off-by: Wenzong Fan
---
meta-oe/recipes-support/talloc/talloc_2.0.1.bb |2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/meta-oe/re
From: Wenzong Fan
* fix do_insall errors:
rmdir: failed to remove `.../talloc/2.0.1-r2/image/usr/bin': \
No such file or directory
The following changes since commit 46824934fa4ac6a61bebe2c92faa31c0a8e85392:
meta-networking: Update layer dependency information (2014-09-08 16:34:25
-0400)
From: Wenzong Fan
Use pkg-config for the libxml2 dependency, not the -config script.
Signed-off-by: Wenzong Fan
---
.../use-pkg-config-for-libxml2-dependency.patch| 44
.../recipes-support/postgresql/postgresql_9.2.4.bb |1 +
2 files changed, 45 insertions(+)
cr
From: Wenzong Fan
WARNING: QA Issue: vsftpd: Files/directories were installed but not shipped
/run
/run/vsftpd
/run/vsftpd/empty
Signed-off-by: Li Wang
Signed-off-by: Wenzong Fan
---
.../recipes-daemons/vsftpd/vsftpd_3.0.0.bb |9 -
1 file changed, 8 insertions(+), 1
From: Wenzong Fan
This patch properly uses the path variables and fixes ntptrace and
ntp-wait, just in case perl is not installed with the hardcode path.
Signed-off-by: Rahat Mahbub
Signed-off-by: Wenzong Fan
---
meta-networking/recipes-support/ntp/ntp.inc |4
1 file changed, 4 inser
From: Wenzong Fan
* Fix QA warnings to vsftpd that some files installed but not shipped;
* Fix hardcode path to perl for ntp scripts: ntptrace, ntp-wait
The following changes since commit 5ccedeb028c46a6b98335fedb16029c6f7f87022:
sshfs-fuse: update to 2.5 (2014-04-20 16:10:21 +0200)
are avai
From: Wenzong Fan
Building libsemanage 2.2 need the header libaudit.h.
Signed-off-by: Wenzong Fan
---
recipes-security/audit/audit_2.3.2.bb|8 +++-
recipes-security/selinux/libsemanage.inc |2 +-
2 files changed, 8 insertions(+), 2 deletions(-)
diff --git a/recipes-security/au
From: Wenzong Fan
Signed-off-by: Wenzong Fan
---
.../packagegroups/packagegroup-core-selinux.bb |2 +-
.../packagegroups/packagegroup-selinux-minimal.bb |2 +-
.../packagegroup-selinux-policycoreutils.bb|2 +-
3 files changed, 3 insertions(+), 3 deletions(-)
diff --git
1 - 100 of 116 matches
Mail list logo
