Commit Graph

357 Commits

Author SHA1 Message Date
Oleksandr Kravchuk db4b115ef3 dhcpcd: update to 7.2.2
udev is now enabled by default and is always requested.

License checksum changed due to modified copyright year.

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-25 14:22:33 -07:00
Oleksandr Kravchuk 5fc4c10a19 mbedtls: update to 2.16.2
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-25 14:21:48 -07:00
Adrian Bunk 170f30b3d8 wireless-regdb: Remove, was moved to oe-core
kernel_wireless_regdb.bbclass stays here since it is only
required for kernels <= 4.14.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-19 19:59:15 -07:00
Yi Zhao 3e03fe9984 snort: upgrade 2.9.11.1 -> 2.9.13
* Add PACKAGECONFIG[appid] for application identification support.

* Set the variables 'have_daq_packet_trace' and
  'have_daq_verdict_reason' to 'no' since they are only supported in daq
  2.2.2 but not in 2.0.6.

* Cleanup snort.init script and fix the incorrect argument of mkdir

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-19 06:06:47 -07:00
Oleksandr Kravchuk 23cb89eaf8 openconnect: update to 8.03
Signed-off-by: Oleksandr Kravchuk <oleksandr.kravchuk@pelagicore.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-18 15:58:29 -07:00
Mingli Yu 57929333d9 kea: replace -Og with -O
With below logic in local.conf:
MACHINE ??= "qemumips64"
MULTILIB_GLOBAL_VARIANTS_append = " libn32"
MULTILIBS ?= "multilib:lib32 multilib:libn32"
DEFAULTTUNE_virtclass-multilib-lib32 ?= "mips"
DEFAULTTUNE_virtclass-multilib-libn32 ?= "mips64-n32"
require conf/multilib.conf
DEBUG_BUILD = "1"
 $ bitbake lib32-kea
[snip]
{standard input}: Assembler messages:
{standard input}:305030: Error: branch out of range
{standard input}:305041: Error: branch out of range
{standard input}:305432: Error: branch out of range
{standard input}:305443: Error: branch out of range
Makefile:707: recipe for target 'dhcp4_parser.lo' failed
make[6]: *** [dhcp4_parser.lo] Error 1
[snip]

When DEBUG_BUILD enabled, -Og pass to compiler,
replace -Og with -O to fix the above compile error.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-15 16:45:33 -07:00
Adrian Bunk b4e9a646ce wireless-regdb: Upgrade 2019.03.01 -> 2019.06.03
This includes deletion of a frequency where transmission
is no longer legal in Japan.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-15 16:45:33 -07:00
Adrian Bunk 6050d95be2 samba: Upgrade 4.8.11 -> 4.8.12
The only change is the fix for CVE-2018-16860.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-15 16:45:32 -07:00
Changqing Li 8e641e28f6 samba/libldb: add rconflicts
samba have bundled libldb, so when both samba and libldb, or both pyldb \
and samba-python is installed, below error will appear:

file /usr/bin/ldbadd conflicts between attempted installs of samba-4.8.11-r0.i586 and libldb-1.4.1-r0.i586
file /usr/bin/ldbdel conflicts between attempted installs of samba-4.8.11-r0.i586 and libldb-1.4.1-r0.i586
...
file /usr/lib/python2.7/site-packages/ldb.so conflicts between attempted installs of libpyldb-util1-1.4.1-r0.i586 and samba-python-4.8.11-r0.i586

so add rconflicts for both packages

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-29 02:21:42 -07:00
Andrei Gherzan 061953143d networkmanager: Update to 1.18.0
One patch was dropped (0003-dlopen-failure.patch) as a similar one was
merged upstream. See:
https://github.com/NetworkManager/NetworkManager/commit/bd4957fcd78a0e64d26459e94ab3b84c91cd6f5f

Refreshed musl patches as well.

Signed-off-by: Andrei Gherzan <andrei@gherzan.ro>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-29 02:21:42 -07:00
Mingli Yu 5c20a95fc5 kea: Upgrade to 1.5.0
* License-Update: below text added
  The ext/coroutine code is externally maintained and distributed under
  the Boost Software License, Version 1.0.  (See its accompanying file
  LICENSE_1_0.txt.)

* There is a new added logic in 1.5.0 to use AC_TRY_RUN
  to detect usable C++11 regex in below commit:
  39ab2f5d15 [5680] Added sanitizeString() function to libutil

  Use AC_COMPILE_IFELSE instead to fix below
  do_configure error:
  | checking for usuable C++11 regex... configure: error: in '/builddir/upgrade1/tmp/work/core2-64-poky-linux/kea/1.5.0-r0/build':
  | configure: error: cannot run test program while cross compiling

* Remove 0001-Fix-error-call-of-overloaded-distance-is-ambiguous.patch
  as the logic is already included in 1.5.0.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-24 10:12:12 -07:00
Adrian Bunk bb4aa80bfb Remove ipsec-tools and umip
ipsec-tools is dead upstream and upstream recommends
against using it:
http://ipsec-tools.sourceforge.net/

More detailed explanation from the Debian maintainer:
https://bugs.debian.org/917847

umip was the only package depending on ipsec-tools.
umip is dormant upstream since 2013.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-23 08:26:14 -07:00
Martin Jansa 590663da5d umip: make MACHINE_ARCH
* Depends on ipsec-tools which is already MACHINE_ARCH (and also RRECOMMENDS kernel modules)
* Fixes:
  ERROR: umip different signature for task do_configure.sigdata between hammerhead and mako
  Hash for dependent task umip/umip_1.0.bb.do_prepare_recipe_sysroot changed from 7c74a208880f6c8a5aa46b1c8577e39b6b71429d9a379ea75f17a155ca270035 to 87c6cd438dd9645c98530e3ac1094005bace785bfd89bfe4073bc8815926abba
  Unable to find matching sigdata for /OE/build/luneos-master/webos-ports/meta-openembedded/meta-networking/recipes-connectivity/umip/umip_1.0.bb.do_prepare_recipe_sysroot with hashes 7c74a208880f6c8a5aa46b1c8577e39b6b71429d9a379ea75f17a155ca270035 or 87c6cd438dd9645c98530e3ac1094005bace785bfd89bfe4073bc8815926abba

  bitbake-diffsigs /OE/build/luneos-master/webos-ports/tmp-glibc/sstate-diff/1557963509/[hm]*/*/umip/*do_prepare*.sigdata*
  Hash for dependent task ipsec-tools/ipsec-tools_0.8.2.bb.do_populate_sysroot changed from 1100c4984d88050bb7ca154445205bac3c3ab80c3ff0aa7c9124825c9d4f6e14 to feeddbd35a8106b264c98076e21d0b3cb227ab1d209e150926112b2906273ef4
  Unable to find matching sigdata for /OE/build/luneos-master/webos-ports/meta-openembedded/meta-networking/recipes-support/ipsec-tools/ipsec-tools_0.8.2.bb.do_populate_sysroot with hashes 1100c4984d88050bb7ca154445205bac3c3ab80c3ff0aa7c9124825c9d4f6e14 or feeddbd35a8106b264c98076e21d0b3cb227ab1d209e150926112b2906273ef4

  as detected with:
  openembedded-core/scripts/sstate-diff-machines.sh --targets=world --tmpdir=tmp-glibc/ --analyze --machines="hammerhead mako qemux86"

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-18 12:42:47 -07:00
Nicolas Dechesne 1ecd8b4364 cannelloni: move from meta-oe to meta-networking
It has a dependency on lksctp-tools which is available in
meta-networking. Move the recipe to avoid dependency from meta-oe onto
meta-networking.

Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org>
Acked-by: Sean Nyekjaer <sean@geanix.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-13 20:25:49 -07:00
Johannes Pointner 11e7ffc442 samba: update to 4.8.11
* This includes security fixes that adresses the following defects:
CVE-2018-14629 (Unprivileged adding of CNAME record causing loop in AD
Internal DNS server)
CVE-2018-16841 (Double-free in Samba AD DC KDC with PKINIT)
CVE-2018-16851 (NULL pointer de-reference in Samba AD DC LDAP server)
CVE-2018-16853 (Samba AD DC S4U2Self crash in experimental MIT Kerberos
configuration (unsupported))
CVE-2019-3880 (Save registry file outside share as unprivileged user)

* Upstreamed patch removed:
0001-ldb-Refuse-to-build-Samba-against-a-newer-minor-vers.patch

* Extended PACKAGECONFIG ad-dc to be able to build MIT Kerberos
see https://bugzilla.samba.org/show_bug.cgi?id=13678

Signed-off-by: Johannes Pointner <johannes.pointner@br-automation.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-09 20:34:33 -07:00
Martin Jansa 2fc270597a miniupnpd: fix SRC_URI for multilib
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-02 14:13:57 -07:00
Wenlin Kang 8f97bb5394 samba: add PACKAGECONFIG for libunwind
Add libunwind switch, this makes it have a chance to compile
codes which are conditioned by "HAVE_LIBUNWIND_H"

Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com>
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-30 12:18:30 -07:00
Oleksandr Kravchuk 51e8a7c409 networkmanager-openvpn: update to 1.8.10
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-29 10:13:56 -07:00
Andreas Müller 6a3e1fa0de samba: rework localstatedir package split
Now that we can install smbclient without samba package e.g for gvfs there are
complains:

| gvsd: mkdir failed on directory /var/lib/samba: Permission denied

and browsing Windows network does not work anymore

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-27 10:13:07 -07:00
Andreas Müller f066c44859 samba: install bundled libs into seperate packages
Otherwise bundled libraries find their way into samba
-> that causes several packages to rdepend on samba package
-> samba package rdepends on samba-base (and others) installing daemons
   smbd & nmbd autostarted by default. This is unwanted / not necessary:
   * NetBIOS (nmbd) can cause a security problems
   * slow boot: times reported by systemd-analyse reduced from ~16s -> ~8s

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-27 10:13:07 -07:00
Andreas Müller fc144a1428 networkmanager: rework musl build
patches:
* Split out systemd specifics
* Simplfy patch to fix musl / linux-libc definition conflicts. This makes
  future maintenance less pain and fixes build for recipes depending on
  networkmanager.
  For further background read patch description in 0002-Fix-build-with-musl.patch

musl CFLAGS:
* -D__USE_POSIX199309 removed - could not find any trace of it
* CFLAGS_libc-musl_append -> CFLAGS_append_libc-musl

gobject-introspection:
* enable - it builds perfectly fine

Build tested (musl/glibc) with all dependents found in my layers:
* network-manager-applet
* networkmanager-openvpn
* python-networkmanager
* networkmanager-qt
* plasma-nm
* liri-networkmanager

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-11 11:30:35 -07:00
Oleksandr Kravchuk 4cf971e9a4 wolfssl: update to 4.0.0
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-09 21:31:36 -07:00
Oleksandr Kravchuk 0884fd8a01 nanomsg: update to 1.1.5
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-09 18:09:00 -07:00
Khem Raj 82b8ae6bd2 networkmanager: Fix build with clang
Detecting libdl for dlopen when failed returns
"none required", which then gets added to linker commandline
and inturn fails to link with errors obviously because "-lnone required"
is no such library.

This patch is not musl dependent, earlier patches clubbed it into musl
patch however this is needed with clang too regardless of the C library
the reason is clang automatically brings in libdl in OE and hence this
test is failing.

This is noop with gcc since the first check will pass thats why it works
in first place

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Andreas Müller <schnitzeltony@gmail.com>
2019-04-06 16:59:58 -07:00
Randy MacLeod e57fe0b07e wolfssl: update to 3.15.8 and use github SRC_URI
The previous SRC_URI did not work for the new version and
when looking at the site, users are required to navigate
through a click-through license agreement. Also use git
repo rather than the .zip archive since the github checksum
can change from time to time.

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-06 08:22:48 -07:00
Andreas Müller 850f61362c networkmanager: fix build with musl
* Cleanup patches
* Apply musl-hacks only for musl

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-06 08:22:22 -07:00
Andreas Müller 26ec148383 networkmanager: Fix upstream regex for 1.16
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-06 08:22:22 -07:00
Andreas Müller 5509328af9 networkmanager: upgrade 1.14.4 -> 1.16.0
* license.html was checked: it is still GPLv2. Could not find what changed the
  checksum. Maybe it was generated with a different version of gtk-doc.
* Build tested with just gnutls in PACKAGECONFIG to test nss alternative (and
  setting no crypto won't work)
* Build tested with all entries except gnutls/qt4-x11-free (yes they still
  support it!) in PACKAGECONFIG
* By far the most time was spent on musl patch adjustment. They apply cleanly
  but musl build was not tested due to limited resources.
* Fix build for non systemd by making SYSTEMD_SERVICE conditional

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-03-22 09:33:00 -07:00
Oleksandr Kravchuk 5e70e778a2 mosquitto: update to 1.5.8
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-03-17 08:44:41 -07:00
Oleksandr Kravchuk f096abd399 wolfssl: update to 3.15.7
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-03-17 08:44:41 -07:00
Oleksandr Kravchuk 01a7a78196 openconnect: update to 8.02
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-03-17 08:44:41 -07:00
Oleksandr Kravchuk 41c263bf8e mbedtls: update to 2.16.0
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-03-15 13:57:47 -07:00
Oleksandr Kravchuk 4464399e50 python-networkmanager: update to 2.1
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-03-15 13:57:47 -07:00
Khem Raj 0857abadcc miniupnpd: Upgrade to 2.1.20190210 release
Fixes build with kernel 5.x as well

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-03-08 09:52:54 -08:00
Tom Rini 0280439910 inetutils: Remove as this is now in oe-core
Now that we have migrated this recipe to oe-core we need to drop it from
here.

Signed-off-by: Tom Rini <trini@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-03-07 13:37:10 -08:00
Adrian Bunk d9de836c5f crda: Remove alternative option to build with the obsolete OpenSSL 1.0
Note that crda is mainly a legacy package for older kernels,
wireless-regdb-static is recommended instead for kernels >= 4.15.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-03-07 09:33:45 -08:00
Adrian Bunk f52c6edcc5 wireless-regdb: Upgrade 2018.10.24 -> 2019.03.01
Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-03-07 09:33:45 -08:00
Callaghan, Dan ca0abecca9 firewalld: add new recipe
Signed-off-by: Dan Callaghan <dan.callaghan@opengear.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-03-04 23:09:25 -08:00
Changqing Li 50248bf143 freeradius: Add PACKAGECONFIG openssl/rlm-eap-fast/rlm-eap-pwd
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-02-28 09:42:11 -08:00
Changqing Li 07a8af9a1b freeradius: update radiusd.service
Update radiusd.service that not run script /etc/raddb/certs/bootstrap
before start radiusd. The script makes a set of default certificates. It
should be only used for test purpose.

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-02-27 18:26:55 -08:00
Khem Raj b1ccca4bac snort: Strip out DEBUG_PREFIX_MAP options and --sysroot
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-02-17 12:21:27 -08:00
Marc Ferland f3682953ed networkmanager: fix QA issue when using modemmanager and ppp in PACKAGECONFIG
Got the following error when I activated both ppp and modemmanager
options:

ERROR: networkmanager-1.14.4-r0 do_package: QA Issue: networkmanager: Files/directories were installed but not shipped in any package:
  /usr/lib/pppd/2.4.5/nm-pppd-plugin.so
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.

Signed-off-by: Marc Ferland <ferlandm@amotus.ca>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-02-01 12:08:21 -08:00
Khem Raj 5ca9c88503 dibbler: Fix build with clang/libc++
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-02-01 06:57:14 -08:00
Adrian Bunk db13bed51c wireless-regdb: update 2018.05.31 -> 2018.10.24
Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-30 17:17:54 -08:00
Krzysztof Kozlowski f394ef48f7 civetweb: Bump to v1.11
Drop upstream accepted patch.

Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-26 11:00:07 -08:00
Stefan Agner e6836ceaef networkmanager: introduce polkit package config
Currently polkit is enabled if systemd is in package config. Those
two things are orthogonal: NetworkManager can be used with systemd
and without polkit just fine.

Introduce a new polkit package config and enable it depending on
whether polkit is in DISTRO_FEATURES.

Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-20 10:15:44 -08:00
Stefano Cappa 612128b46d dhcpcd: upgrade to dhcpcd 7.0.8
Signed-off-by: Stefano Cappa <stefano.cappa.ks89@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-13 10:33:16 -08:00
André Draszik 24af1f974c meta-networking: remove True option to getVar calls (again)
A couple have still been missed in the past despite multiple
attempts at doing so (or simply have re-appeared?).

Search & replace made using the following command:
    sed -e 's|\(d\.getVar \?\)( \?\([^,()]*\), \?True)|\1(\2)|g' \
        -i $(git grep -E 'getVar ?\( ?([^,()]*), ?True\)' \
             | cut -d':' -f1 \
             | sort -u)

Signed-off-by: André Draszik <andre.draszik@jci.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-13 10:28:01 -08:00
Khem Raj 55f2541bf6 miniupnpd: Fix cross compile on OE
genconfig script can be specified OS specs
if its not then it pokes at the build system
via uname, we add code for OE support to ensure
we pass DISTRO_VERSION as OS_VERSION

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-12-23 13:29:20 -08:00
Andrea Adami b758150d30 samba: fix build on qemumips64 with musl
There is the same issue as for libldb, the header has conflicting defs
for unitptr_t. Fix it as done for the other recipe.

Fix
 /cmocka/cmocka.h:126:28: error: conflicting types for 'uintptr_t'
    typedef unsigned int uintptr_t;
                             ^~~~~~~~~

Signed-off-by: Andrea Adami <andrea.adami@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-12-12 11:56:49 -08:00