Commit Graph

9166 Commits

Author SHA1 Message Date
Steffen Sledz 6de2fb38b0 syslog-ng: add UPDATE_ALTERNATIVE for syslog-service
Use ALTERNATIVE mechanism in OE to manage the syslog service to
avoid conflicts with other syslog implementations like rsyslog
or busybox.

Signed-off-by: Steffen Sledz <sledz@dresearch-fe.de>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:28:24 +01:00
Wenzong Fan f4ed56d0d4 krb5: fix CVE-2015-2698
The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c
in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly
accesses a certain pointer, which allows remote authenticated users
to cause a denial of service (memory corruption) or possibly have
unspecified other impact by interacting with an application that calls
the gss_export_sec_context function. NOTE: this vulnerability exists
because of an incorrect fix for CVE-2015-2696.

Backport upstream commit to fix it:
https://github.com/krb5/krb5/commit/3db8dfec1ef50ddd78d6ba9503185995876a39fd

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:28:24 +01:00
Wenzong Fan c533d4506e krb5: fix CVE-2015-2697
The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT
Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users
to cause a denial of service (out-of-bounds read and KDC crash) via
an initial '\0' character in a long realm field within a TGS request.

Backport upstream commit to fix it:
https://github.com/krb5/krb5/commit/f0c094a1b745d91ef2f9a4eae2149aac026a5789

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:28:24 +01:00
Wenzong Fan 88368a5826 krb5: fix CVE-2015-2696
lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14
relies on an inappropriate context handle, which allows remote
attackers to cause a denial of service (incorrect pointer read and
process crash) via a crafted IAKERB packet that is mishandled during
a gss_inquire_context call.

Backport upstream commit to fix it:
https://github.com/krb5/krb5/commit/e04f0283516e80d2f93366e0d479d13c9b5c8c2a

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:28:23 +01:00
Wenzong Fan a8edd9e576 krb5: fix CVE-2015-2695
lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before
1.14 relies on an inappropriate context handle, which allows remote
attackers to cause a denial of service (incorrect pointer read and
process crash) via a crafted SPNEGO packet that is mishandled during
a gss_inquire_context call.

Backport upstream commit to fix it:
https://github.com/krb5/krb5/commit/b51b33f2bc5d1497ddf5bd107f791c101695000d

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:28:23 +01:00
Manuel Bachmann 60555f648c dleyna-renderer: Add recipe
dleyna-renderer is a library for implementing Digital Media
(DLNA) Renderers, and also provides a sample implementation
of such a renderer.

"dleyna-renderer-service" is designed to be started and
consumed using D-Bus.

Signed-off-by: Manuel Bachmann <manuel.bachmann@iot.bzh>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:28:23 +01:00
Manuel Bachmann 0bbbb5def5 dleyna-server: Add recipe
dleyna-server is a library for implementing Digital Media
(DLNA) Servers, and also provides a sample implementation
of such a server.

"dleyna-server-service" is designed to be started and
consumed using D-Bus.

Signed-off-by: Manuel Bachmann <manuel.bachmann@iot.bzh>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:28:23 +01:00
Manuel Bachmann 6a9dfe9947 dleyna-connector-dbus: Add recipe
dleyna-connector-dbus is a D-Bus connector library
depending on "dleyna-core", and needed by dLeyna
implementations (most notably "dleyna-server" and
"dleyna-renderer"). It allows them to discover D-Bus
buses, and to be started via D-Bus services files.

Signed-off-by: Manuel Bachmann <manuel.bachmann@iot.bzh>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:28:23 +01:00
Manuel Bachmann 64d79e9d70 dleyna-core: Add recipe
dleyna-core is a library of utility functions needed by
other dLeyna packages (most notably "dleyna-connector-dbus"
"dleyna-server" and "dleyna-renderer").

It provides APIs for logging, error, settings, task
management and an IPC abstraction API.

Signed-off-by: Manuel Bachmann <manuel.bachmann@iot.bzh>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:28:23 +01:00
Adrian e418734c0f networkmanager: add openvpn plugin
Signed-off-by: Adrian Freihofer <adrian.freihofer@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:28:23 +01:00
Adrian 750d298b59 networkmanager: use bluetooth from distro
Signed-off-by: Adrian Freihofer <adrian.freihofer@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:28:23 +01:00
Adrian f9ba3ae0e0 networkmanager: package for adsl plugin
Signed-off-by: Adrian Freihofer <adrian.freihofer@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:28:23 +01:00
Adrian f75161dad3 networkmanager: PACKAGECONFIG for wifi
Signed-off-by: Adrian Freihofer <adrian.freihofer@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:28:23 +01:00
Adrian 4217c83cc2 networkmanager: PACKAGECONFIG for dnsmasq
Signed-off-by: Adrian Freihofer <adrian.freihofer@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:28:23 +01:00
Adrian b8de598558 networkmanager: PACKAGECONFIG for dhclient
Signed-off-by: Adrian Freihofer <adrian.freihofer@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:28:22 +01:00
Adrian 2c7e7ef5bb networkmanager: PACKAGECONFIG for ifupdown netconfig
Signed-off-by: Adrian Freihofer <adrian.freihofer@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:28:22 +01:00
Adrian c3b2f9868d networkmanager: run dispatcher
Signed-off-by: Adrian Freihofer <adrian.freihofer@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:28:22 +01:00
Adrian 4869d8b3fd networkmanager: Add package for nmtui
Signed-off-by: Adrian Freihofer <adrian.freihofer@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:28:22 +01:00
Adrian 0f70410af9 networkmanager: support gnutls and nss
Signed-off-by: Adrian Freihofer <adrian.freihofer@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:28:22 +01:00
Adrian a37cb2ad94 networkmanager: Update to 1.0.6
Signed-off-by: Adrian Freihofer <adrian.freihofer@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:28:22 +01:00
Adrian 307358bada modemmanager: Start always
Signed-off-by: Adrian Freihofer <adrian.freihofer@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:28:22 +01:00
Adrian dbe0e9ee5c modemmanager: add dbus config
Signed-off-by: Adrian Freihofer <adrian.freihofer@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:28:22 +01:00
Adrian 4439535888 modemmanager: Add PACKAGECONFIGs
Signed-off-by: Adrian Freihofer <adrian.freihofer@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:28:21 +01:00
Adrian 7e81a1d269 modemmanager: Update to 1.4.12
- Fixes segfaults, memleaks and other bugs
 - Support more modems

Signed-off-by: Adrian Freihofer <adrian.freihofer@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-12-18 12:28:21 +01:00
Armin Kuster 62bfd1f93f wireshark: update to version 2.0.0
restore PE

updated comments:

QT is the new default GUI for the binary 'wireshark'. This mode is currently disabled in the build.  We build with GTK as the default gui so the resulting binary is now wireshark-gtk.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-11-30 14:39:59 -05:00
Roy Li 3132c6ef09 ufw: improve RRECOMMENDS
ufw needs lots of netfilter module to run

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-11-30 13:20:29 -05:00
Jackie Huang b49d08411c netmap-modules: Modules may not have the same arch as userspace
Kernel modules may not have the same architecture as user space.  So we
tell INSANE_SKIP to skip checking the arch for the modules.  This is
consistent with other kernel modules and the kernel recipe.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-11-30 13:18:40 -05:00
Jackie Huang 636af36e70 netmap-modules: make deterministic builds for drivers
The driver builds are optional, but for deterministic builds,
we should should be able to explicitly enable/disable the
builds for them in a proper place (maybe in BSP).
But we can't use PACKAGECONFIG since there is no option for
each driver, and the options are:
 --no-drivers    do not compile any driver
 --no-drivers=   do not compile the given drivers (comma sep.)
 --drivers=      only compile the given drivers (comma sep.)

So use NETMAP_DRIVERS to list the needed drivers and add proper
configs to EXTRA_OECONF, the default is no drivers, and all
supported drivers are listed in NETMAP_ALL_DRIVERS.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-11-30 13:11:17 -05:00
Christopher Larson 352755e2b7 ctdb: rdep on bash
onnode is a shell script with bashisms and bash #!.

Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-11-30 13:02:22 -05:00
Zhiquan Li 49fa307d47 snort: 2.9.6.0 -> 2.9.7.5
Upgrade snort from 2.9.6.0 to 2.9.7.5, as its dependency upgrade daq from
2.0.2 to 2.0.6, and accordingly update the patches:

* Add 2 new patches for snort to solve the cross compile issues
* Discard 2 snort patches since it is not needed
* Refresh the patch for daq new version
* Remove redundant '/' to getting round the rpm debugedit bug:
  canonicalization unexpectedly shrank character

Signed-off-by: Zhiquan Li <zhiquan.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-11-30 13:00:15 -05:00
Roy Li 20b63d32bc lldpd: configure the systemd unit file dir
configure the systemd unit file dir, otherwise it will be auto-checked
by 'pkg-config --variable=systemdsystemunitdir systemd', but if systemd
is not built firstly, and the the unit file will not be installed, and
lead to below error:
    ERROR: Function failed: SYSTEMD_SERVICE_lldpd value lldpd.service does not exist
and disable sysusersdir, since sysuser is not used currently.

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-11-30 12:59:45 -05:00
Fabio Berton d2b204d21a lldpd: Update to version 0.7.19
The new release has following important changes, worth noticing:

- fix-libevent-configure patch has been applied upstream
- fix for CVE-2015-8012

Signed-off-by: Fabio Berton <fabio.berton@ossystems.com.br>
Acked-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-11-30 12:57:31 -05:00
Li Xin ddbbcf93c1 opensaf: remove unused service file
Upstream ships systemd service file plmcboot.service and plmcd.service now,
so we don't need this anymore.

Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-11-30 12:55:54 -05:00
Jian Liu b6d4390d7b ypbind-mt: set path of ypdomainname in ypbind script
The script ypbind will cause error if using ypdomainname command
provided by busybox. So add RDEPENDCY on yp-tools and change
the path of ypdomainname.

Signed-off-by: Jian Liu <jian.liu@windriver.com>
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-11-30 12:53:48 -05:00
Roy Li fb80c7f2f3 pure-ftpd: add PACKAGECONFIG for libsodium
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-11-30 12:52:15 -05:00
Roy Li 7872b833dd dovecot: add PACKAGECONFIG for lz4
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-11-30 12:51:49 -05:00
Rafaël Carré 7fb5479fb8 net-snmp: fix cross compilation
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-11-30 12:50:41 -05:00
Li Xin ef4b0c6c5d net-snmp: Modify snmpd.service
Add "-a" parameter in snmpd.service,it is needed to address logs.

Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-11-30 12:50:24 -05:00
Yue Tao 4bc9b5638d netcat-openbsd: replace patch with quilt
If run bitbake -c patch -f netcat-openbsd twice, the patch conflict
will happen, so replace the patch with quilt to avoid do_patch failed.

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-11-30 12:44:52 -05:00
Robert Yang 5a8d0deb85 netcat: add DESCRIPTION
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-11-30 12:42:36 -05:00
Joe MacDonald e394584477 xl2tpd: Update git recipe and add release recipe
The previous xl2tpd was significantly out of date, so update the git
recipe and add in a release recipe for anyone looking to use the latest
stable release.

Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-11-24 08:53:10 -05:00
Joe MacDonald 1a57f561ca lldpad: remove obsolete recipe
Based on this thread:

        http://comments.gmane.org/gmane.comp.handhelds.openembedded/70890

it seems that lldpd is a more complete implementation of the LLDP
protocol.  Remove this implementation to provide better direction to
newcomers and to attempt to focus support for a single implementation in
the meta-networking layer.

Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-11-24 08:53:10 -05:00
Martin Jansa ea319464b6 vlc: add PACKAGECONFIG for samba, upnp, dvdnav, sftp, vorbis, dc1394, dv1394, svg, svgdec
* hopefully fixes:
WARN: vlc: vlc rdepends on libavc1394, but it isn't a build dependency?
WARN: vlc: vlc rdepends on libcroco, but it isn't a build dependency?
WARN: vlc: vlc rdepends on libcrypto, but it isn't a build dependency?
WARN: vlc: vlc rdepends on libdvdnav, but it isn't a build dependency?
WARN: vlc: vlc rdepends on librsvg, but it isn't a build dependency?
WARN: vlc: vlc rdepends on libssh2, but it isn't a build dependency?
WARN: vlc: vlc rdepends on libssl, but it isn't a build dependency?
WARN: vlc: vlc rdepends on libupnp, but it isn't a build dependency?
WARN: vlc: vlc rdepends on libvorbis, but it isn't a build dependency?
WARN: vlc: vlc rdepends on libxml2, but it isn't a build dependency?

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-11-16 21:50:11 +01:00
Martin Jansa f4bfa25f70 gvfs: don't depend on samba by default
* we don't want to introduce dependency on meta-networking just because of this

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-11-16 21:50:11 +01:00
Martin Jansa 5ece6afc91 cifs-utils: add dependency on samba
* fixes:
  cifs-utils-6.4: cifs-utils rdepends on samba, but it isn't a build dependency? [build-deps]

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-11-16 21:50:11 +01:00
Martin Jansa 77420b09e7 sox: add PACKAGECONFIG for flac, armwb, amrnb
* hopefully fixes:
  sox-14.4.0: sox rdepends on libflac, but it isn't a build dependency? [build-deps]
  sox-14.4.0: sox rdepends on opencore-amr, but it isn't a build dependency? [build-deps]

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-11-16 21:50:11 +01:00
Martin Jansa d7f4579816 imsettings: add xfconf dependency and xfce-layer to LAYERDEPENDS
* this isn't optimal, but this issue was ignored by recipe author for too long:
  http://lists.openembedded.org/pipermail/openembedded-devel/2015-July/102253.html
  http://patchwork.openembedded.org/patch/86091/

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-11-16 21:50:11 +01:00
Martin Jansa c8ee819e34 samba: add dependency on libbsd cyrus-sasl and PACKAGECONFIG for dmapi
* dmapi is in meta-filesystems
* hopefully fixes:
  WARN: samba: samba rdepends on cyrus-sasl, but it isn't a build dependency?
  WARN: samba: samba rdepends on dmapi, but it isn't a build dependency?
  WARN: samba: samba rdepends on libbsd, but it isn't a build dependency?
  WARN: samba: samba rdepends on libpam, but it isn't a build dependency?
  WARN: samba: samba-python rdepends on libbsd, but it isn't a build dependency?

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-11-16 21:50:11 +01:00
Martin Jansa 0e525daafe samba, ctdb, libldb, libtdb, libtevent, talloc: move to meta-networking
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-11-16 21:50:10 +01:00
Martin Jansa df552bed28 qt-mobility: fix dependencies and PACKAGECONFIG
* this isn't proper fix, just to silence various QA issues
* nobody cares about qt-mobility, this is just last step before adding
  PNBLACKLIST for this (or moving it to separate meta-qt4)
* "Fixes"
  qt-mobility-embedded-1.2.0: qt-mobility-embedded: invalid PACKAGECONFIG: bluez5 [invalid-packageconfig]
  qt-mobility-x11-1.2.0: qt-mobility-x11: invalid PACKAGECONFIG: bluez5 [invalid-packageconfig]
  qt-mobility doesn't really support bluez5, so we'll just silence the
  QA warning, existing PACKAGECONFIGs for bluez4 and pulseaudio are
  useless as well, because without disable option both are still
  autodetected from ssysroot
* "Fixes"
  WARN: qt-mobility-embedded: qt-mobility-embedded rdepends on glib-2.0, but it isn't a build dependency?
  WARN: qt-mobility-embedded: qt-mobility-embedded rdepends on gstreamer, but it isn't a build dependency?
  WARN: qt-mobility-embedded: qt-mobility-embedded rdepends on libasound, but it isn't a build dependency?
  WARN: qt-mobility-embedded: qt-mobility-embedded rdepends on libgstapp-0.10, but it isn't a build dependency?
  WARN: qt-mobility-embedded: qt-mobility-embedded rdepends on libgstvideo-0.10, but it isn't a build dependency?
  WARN: qt-mobility-x11: qt-mobility-x11 rdepends on glib-2.0, but it isn't a build dependency?
  WARN: qt-mobility-x11: qt-mobility-x11 rdepends on gstreamer, but it isn't a build dependency?
  WARN: qt-mobility-x11: qt-mobility-x11 rdepends on libasound, but it isn't a build dependency?
  WARN: qt-mobility-x11: qt-mobility-x11 rdepends on libgstapp-0.10, but it isn't a build dependency?
  WARN: qt-mobility-x11: qt-mobility-x11 rdepends on libgstinterfaces-0.10, but it isn't a build dependency?
  WARN: qt-mobility-x11: qt-mobility-x11 rdepends on libgstvideo-0.10, but it isn't a build dependency?
  WARN: qt-mobility-x11: qt-mobility-x11 rdepends on libxext, but it isn't a build dependency?
  WARN: qt-mobility-x11: qt-mobility-x11 rdepends on libxv, but it isn't a build dependency?
  but it adds dependency on meta-multimedia layer (which isn't in meta-oe dependencies),
  so it's not correct, but won't make things worse then they already are since
  qt-mobility was moved from oe-core, hopefully it will move to separate meta-qt4
  soon. gstreamer was already in DEPENDS, but DEPENDS was overwritten by
  qt-mobility_1.2.0.inc which was included later, also drop qt4* dependencies
  because these are already taken care of in qt4(e).bbclass.

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-11-16 21:50:10 +01:00