124 Commits

Author SHA1 Message Date
Armin Kuster 5b2e937448 squid: serveral missing security fixes
SQUID-2015:2 - Does not affect Squid-3.4 and older versions are not vulnerable.
CVE-2015-5400
CVE-2015-3455
CVE-2014-7142
CVE-2014-7141
CVE-2014-6270

see http://www.squid-cache.org/Advisories/

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-02-08 14:13:39 +01:00
Robert Yang 4ab3ee5bc1 opensaf: RDEPENDS on python and bash
python:
opensaf/usr/share/opensaf/samples/immsv/immom_python/immom.py

bash:
opensaf/usr/share/opensaf/immxml/verify.sh
opensaf/usr/share/opensaf/immxml/immxml-modify-config
opensaf/usr/share/opensaf/immxml/immxml-configure
opensaf/usr/share/opensaf/immxml/immxml-clustersize
opensaf/usr/share/opensaf/immxml/immxml-nodegen
opensaf/usr/share/opensaf/samples/INSTALL
opensaf/usr/share/opensaf/samples/smfsv/campaigns/smf-verify
opensaf/usr/lib/opensaf/configure_tipc

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-03 09:06:59 -07:00
Bian Naimeng 7f27458531 postfix: get rid of useless code
We should set group of ${localstatedir}/lib/postfix to 'nogroup' not 'postfix',
actually it's done at the below, so remove this useless code.

Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-03-11 19:29:34 -04:00
Kang Kai 769ea4a473 postfix: add link file /usr/lib/sendmail
Link file /usr/lib/sendmail points to /usr/sbin/sendmail is required by
LSB core test according to Linux FHS[Ref2]: "For historical reasons,
/usr/lib/sendmail must be a symbolic link to /usr/sbin/sendmail if the
latter exists."

The linke file was provided by package lsb before, but should be
provided by packages which provides command sendmail such as msmtp,
postfix and esmtp etc.

Refs:
1 http://refspecs.linuxfoundation.org/LSB_4.1.0/LSB-Core-generic/LSB-Core-generic/normativerefs.html#STD.
2 http://www.pathname.com/fhs/pub/fhs-2.3.html#SPECIFICOPTIONS13

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-03-10 18:25:23 -04:00
Joe MacDonald d1d09c1167 ptpd: use pkgconfig
pcap-config should not be used for determining how to build against
libpcap in a yocto environment.

Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-02-27 09:14:22 -05:00
Bian Naimeng bb177c85a2 postfix: fix bug of main.cf_2.0
${exec_prefix}/libexec/${PN} => ${libexecdir}

Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-02-23 14:31:30 -05:00
Bian Naimeng 710459da20 postfix: don't hard-code PATH in service file
Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-02-23 13:53:32 -05:00
Bian Naimeng 9b67eabcec ptpd: add systemd supported
Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-02-23 13:52:15 -05:00
Bian Naimeng b740f2712f cyrus-sasl: add systemd supported for saslauthd
Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-02-23 13:38:49 -05:00
Bian Naimeng 7b3d4803b4 cyrus-sasl: remove trailing slash from plugin directory path
Specifying the plugin directory with a trailing '/' hit this failure in
the install rule:

  ... snip ...

  install-exec-local: $(INSTALLOSX)
        @if test "$(plugindir)" != "$(prefix)/lib/sasl2"; then \
          echo "********************************************************"; \
          echo "* WARNING:"; \
          echo "* Plugins are being installed into $(prefix)/lib/sasl2,"; \
          echo "* but the library will look for them in $(plugindir)."; \
          echo "* You need to make sure that the plugins will eventually"; \
          echo "* be in $(plugindir) -- the easiest way is to make a"; \
          echo "* symbolic link from $(plugindir) to $(prefix)/lib/sasl2,"; \
          echo "* but this may not be appropriate for your site, so this"; \
          echo "* installation procedure won't do it for you."; \
          echo "*"; \
          echo "* If you don't want to do this for some reason, you can"; \
          echo "* set the location where the library will look for plugins"; \
          echo "* by setting the environment variable SASL_PATH to the path"; \
          echo "* the library should use."; \
          echo "********************************************************"; \
        fi

Work around that.

Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-02-23 13:30:35 -05:00
Roy Li de5d7d91ba proftpd: add systemd support
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-02-11 21:25:41 -05:00
Bian Naimeng 2166c638b4 postfix: instead ${exec_prefix}/libexec/${PN} by ${libexecdir}
Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-02-11 21:25:41 -05:00
Roy Li fedb486a3a postfix: start the postfix daemon by default when init is systemd
postfix should be started by default, so that the root user can
receive mail, and if init is not systemd, it is started by default

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-02-11 21:25:40 -05:00
Roy Li ee3412f502 iscsi-initiator-utils: fix the iscsid path in iscsid.conf
iscsid is installed into ${sbindir}, which is /usr/sbin, not /sbin/,
so fix it in /etc/iscsi/iscsid.conf

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-01-26 10:10:45 -05:00
Joe MacDonald 645df34e8a opensaf: update SRC_URI and install actions
The default configuration for OpenSAF creates /run and /var/lock during
install time.  Tweak the recipe to use ${localstatedir} as other recipes
do, and clean up at the end of do_install.

Swap the hard-coded SRC_URI with ${SOURCEFORGE_MIRROR} while we're at it.

Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-01-26 08:54:08 -05:00
Bian Naimeng e18830c2b4 opensaf: add recipe
OpenSAF is an open source implementation of the SAF AIS specification

Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-01-26 08:53:51 -05:00
Robert Yang 639a269298 ncftp: use BPN in SRC_URI
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-01-07 10:20:19 -05:00
Robert Yang 5b4413ccf3 dnrd: fix SRC_URI
Fixed:
ERROR: Function failed: Fetcher failure for URL:
    'http://ncu.dl.sourceforge.net/project/dnrd/dnrd/2.20.3/dnrd-2.20.3.tar.gz'.
    Unable to fetch URL from any source.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-01-05 11:25:51 -05:00
Armin Kuster f2833950be proftpd: update to 1.3.5
dropped proftpd-sftp.patch as it is included in update.
combined make.patch, move-pidfile-to-var-run.patch, move-runfile-to-var-run.patch into
build_fixup

Added several packagesconfig options (too much eggnog)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-12-29 14:51:53 -05:00
Qian Lei e805464634 dnrd: Add new recipe
dnrd is a proxying nameserver. It forwards DNS queries to the appropriate
nameserver, but can also act as the primary nameserver for a subnet behind
a firewall. It also has features such as caching DNS requests, support for
DNS servers, cache poisoning prevention, TCP support, etc.

Signed-off-by: Qian Lei <qianl.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-12-29 14:12:06 -05:00
Qian Lei 6781f9b5dc lldpad: Add new recipe
LLDPAD contains the Linux user space daemon and configuration tool for
Intel LLDP Agent with Enhanced Ethernet support for the Data Center.

Signed-off-by: Qian Lei <qianl.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-12-19 20:10:55 +01:00
Li xin 10d3b5e33b ncftp: add new recipe
ncftp is a sophisticated console ftp client.

Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-12-16 16:08:46 -05:00
Joe MacDonald bb3cacccfb Revert "open-iscsi: add recipe"
This reverts commit 97cffc1f24.

Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-12-02 12:34:08 -05:00
Li xin 97cffc1f24 open-iscsi: add recipe
Open-iSCSI project is a high performance, transport
independent, multi-platform implementation of RFC3720.

Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-11-30 15:52:10 -05:00
Martin Jansa 770994c2f8 postfix: Fix indentation
* we're using 4 spaces, not mix of tabs and spaces\!

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-11-21 16:32:50 -05:00
Jackie Huang 66be3df87d postfix.inc: Remove references to buildmachine paths in target makedefs.out
Fixed the buildpaths QA issue:
ERROR: QA Issue: File
/work/core2-64-wrs-linux/postfix/2.11.1-r0/packages-split/postfix/etc/postfix/makedefs.out
in package contained reference to tmpdir [buildpaths]

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-11-21 16:32:21 -05:00
Zhenhua Luo c8c17e074a ptpd: add FSL QorIQ DPAA and eTSEC support
This patch is for Freescale QorIQ DPAA and eTSEC which support 1588 hardware
assist module, and mainly uses SO_TIMESTAMPING API for HW timestamp and PHC
API.

Signed-off-by: Yangbo Lu <yangbo.lu@freescale.com>
Signed-off-by: Zhenhua Luo <zhenhua.luo@freescale.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-11-19 15:21:04 +01:00
Roy Li c78eca1ea7 postfix: create or update aliases.db when using systemd
aliases.db should be created by postinstall script, but failed since
queue_directory is not includes root dir ${D}:
    ------
    |newaliases: fatal: chdir /var/spool/postfix: No such file or directory
    ------
initscript will recall newaliases before start postfix daemon, the similar
method, which run aliasesdb to create aliases.db when using systemd, is
introduced to fix this issue.

Signed-off-by: Roy.Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-11-10 15:18:55 -05:00
Chong Lu 22119569b9 squid: change ksh reference in krb ldap helper to sh
This solves the following warning:

squid-3.4.7: squid requires /bin/bash, /usr/bin/perl, but no providers in its
RDEPENDS [file-rdeps]

Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-11-04 16:02:44 -05:00
Chong.Lu@windriver.com d47b4c7ca0 squid: Add a PACKAGECONFIG for libnetfilter-conntrack
This solves the following warning:

WARNING: QA Issue: squid rdepends on libnetfilter-conntrack, but it isn't a
build dependency? [build-deps]

Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-10-30 08:59:31 +01:00
Chen Qi 350139ba63 radvd: fix daemon start-up
1. Fix radvd.service to start daemon correctly.
2. Make the daemon run under 'radvd' user by default.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-10-21 15:07:12 -04:00
Roy.Li 4cc73f63aa tftp-hpa: fix the empty file writing error
make write_behind to return 0 if a empty file is written, to
distinguish a true writing failure[on which the write_behind
will return -1], then the annoying wrong log will disappear.
    ____
    |Error code 3: Disk full or allocation exceeded
    -----
Signed-off-by: Roy.Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-10-21 14:54:11 -04:00
Roy.Li 15ccbddc6d Revert "tftp-hpa: bug fix on empty file put error"
This reverts commit b2eb21a5fbcb065e84ed582e87de21bdc3082f00.

It make 3d8520a0b411[tftp-hpa: add error check for disk filled up]
unable to work

Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-10-21 14:54:11 -04:00
Kang Kai 1ecd7bbba8 postfix: remove overriding config config_directory
postfix 2.11.1 adds overriding config check. In postinstall script, it
calls command newaliases to read configure file main.cf_2.0.
config_directory is set in config main.cf_2.0, but it is an overriding
config and warning shows when build an image:

WARNING: log_check: There is a warn message in the logfile
WARNING: log_check: Matched keyword: [warn]
WARNING: log_check: newaliases: warning:
/buildarea3/kkang/poky/qemuarm-build/tmp/work/qemuarm-poky-linux-gnueabi/core-
image-minimal/1.0-r0/rootfs/etc/postfix/main.cf, line 27: overriding
earlier entry: config_directory=/buildarea3/kkang/
poky/qemuarm-build/tmp/work/qemuarm-poky-linux-gnueabi/core-image-minimal/1.0-r0/rootfs/etc/postfix

Remove config_directory setting in main.cf_2.0 to avoid this warning.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-10-21 14:33:03 -04:00
Jackie Huang b310b1daf8 squid: add new recipe
squid is a fully-featured http proxy and web-cache daemon for Linux.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-10-16 07:00:59 +02:00
Chen Qi 3efc0c1974 vsftpd: add systemd service file
Add systemd service for vsftpd.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-10-04 00:28:31 +02:00
Chen Qi fd7973168a vsftpd: fix pkg_postinst
Fix pkg_postinst to not exit if "$D" is not empty.
Otherwise, postinsts from update-rc.d.bbclass would not run and the
symlinks under /etc/rc?.d/ would not be created.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-10-04 00:28:31 +02:00
Roy Li 9ff0361317 iscsi-initiator-utils: add recipe file
The package provides the server daemon for the iSCSI protocol, as
well as the utility programs used to manage it. iSCSI is a protocol
for distributed disk access using SCSI commands sent over Internet
Protocol networks

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-09-26 05:42:54 +02:00
Chen Qi da6908e1d3 radvd: add systemd service file
Add systemd service for for radvd.
The unit is disabled by default, just as Fedora20 does.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-09-26 05:42:53 +02:00
zhangxiao ed698c4dba tftp-hpa: bug fix on empty file put error
With the feature that checking the disk filled up, the return value of
function write_behind was checked and used to detect the disk status.
While for empty file, without data being written, this function will
return -1 thus the disk filled up error was miss-raised. Fix it.

Signed-off-by: Zhang Xiao <xiao.zhang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-09-26 05:41:54 +02:00
Hongxu Jia af971abbf0 proftpd: fix integer overflow CVE-2013-4359
Integrate a patch from proftpd upstream to fix an integer overflow bug
described in the CVE-2013-4359, which allows remote attachers to cause
a denial of service (memory consumption) attack.

Refer: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4359

Signed-off-by: Shan Hai <shan.hai@windriver.com>

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-09-26 05:41:52 +02:00
Robert Yang 57b9899fcb proftpd: add perl to RDEPENDS_proftpd
Perl:
proftpd/usr/bin/ftpasswd:#!/usr/bin/perl
proftpd/usr/bin/ftpquota:#!/usr/bin/perl

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
2014-09-26 05:41:51 +02:00
Robert Yang 5b17d7cf94 autofs: remove bashism
The autofs.init can work with /bin/sh in busybox, so remove bashsim.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
2014-09-26 05:41:50 +02:00
Joe Slater e997f028f7 radvd: update to 1.14
No changes except to source version.

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-09-23 22:00:14 -04:00
Joe Slater 2fab4b8902 vftpd: update to version 3.0.2
No changes other than source checksum.

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-09-23 21:59:56 -04:00
Joe Slater f2715a5652 ptpd: update to version 2.3.1-rc2
Add a little processing to find correct directory
for source upstream.

Update LIC_FILES_CHKSUM since the latest package
doesn't include a COPYRIGHT file anymore.

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-09-23 21:59:42 -04:00
Roy Li 5e1098f2c2 autofs: uprev it to 5.1.0
1. Uprev it to 5.1.0, add remove the unneed patches
2. fix a building failure since not include stdarg.h
3. using pkg-config to check xml and krb5
4. force STRIP to empty to not strip the file

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-21 21:35:07 +02:00
Wenzong Fan 27981cbef1 vsftpd: fix install warning
WARNING: QA Issue: vsftpd: Files/directories were installed but not shipped
  /run
  /run/vsftpd
  /run/vsftpd/empty

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-22 00:01:47 +02:00
Jackie Huang 96acc14b6c postfix: add new recipe
Postfix is Wietse Venema's mail server that started life at IBM
research as an alternative to the widely-used Sendmail program.

Postfix attempts to be fast, easy to administer, and secure.
The outside has a definite Sendmail-ish flavor, but the inside
is completely different.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-07-20 23:30:19 -04:00
Roy Li 43da512cc3 tftp-hpa: fix a build failure
AR is defined as "ar cq" in MCONFIG.in, then "cq" is no longer needed in
Makefile of common and libs subdir.
	#grep AR MCONFIG.in
	AR	= ar cq
	#

	#grep AR common/Makefile
	$(AR) $(LIB) $(OBJS)
	#
But MCONFIG maybe not able to be generated by MCONFIG.in, common/Makefile
allows this condition [Note the - before include]
	#grep MCONFIG common/Makefile
	-include ../MCONFIG
	#
then AR from building environment is used, but it not included the parameter
"cq", and lead to below error, so add the "cq" to AR to fix this issue.
	i586-wrs-linux-ar libcommon.a tftpsubs.
	i586-wrs-linux-ar: two different operation options specified

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-06-29 22:53:05 -04:00