seccomp is activated by default in vsftpd and
this has caused compatibility issues with some
kernel versions. This was fixed as one can see
as https://bugzilla.redhat.com/show_bug.cgi?id=845980,
but can still cause issues with newer kernels with
kernel 4.18+.
And there is even a patch 0034-Turn-off-seccomp-sandbox-because-it-is-too-strict.patch
in fedora[https://dl.fedoraproject.org/pub/fedora/linux/releases/29/Everything/source/tree/Packages/v/vsftpd-3.0.3-28.fc29.src.rpm]
turning off seccomp sandbox for vsftpd by default
as below which means fedora doesn't limit the syscall
any more by default.
[snip]
- tunable_seccomp_sandbox = 1;
+ tunable_seccomp_sandbox = 0;
tunable_allow_writeable_chroot = 0;
tunable_accept_timeout = 60;
[snip]
Refresh 0001-vsftpd-allow-sysinfo-in-the-seccomp-sandbox.patch
to allow one more syscall getdents64 in the
seccomp sandbox apart from the previous one in
below commit:
fbffcf3f3 vsftpd: allow sysinfo() in the seccomp sandbox
before this patch:
root@qemux86-64:~# tnftp 127.0.0.1
Connected to 127.0.0.1.
220 (vsFTPd 3.0.3)
Name (127.0.0.1:root): anonymous
331 Please specify the password.
Password:
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> dir
229 Entering Extended Passive Mode (|||8352|)
150 Here comes the directory listing.
500 OOPS: priv_sock_get_cmd
ftp>
after this patch:
root@qemux86-64:~# tnftp 127.0.0.1
Connected to 127.0.0.1.
220 (vsFTPd 3.0.3)
Name (127.0.0.1:root): anonymous
331 Please specify the password.
Password:
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> dir
229 Entering Extended Passive Mode (|||22610|)
150 Here comes the directory listing.
226 Directory send OK.
ftp>
Reference: https://wiki.archlinux.org/index.php/Very_Secure_FTP_Daemon#vsftpd:_Error_500_with_kernel_4.18+
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* This was one the longest lasting and most annoying bug
* While we are at it: rename path files -> libxklavier
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
libcereal is header-only so create the empty base package so that
libcereal can be sanely included in an SDK via IMAGE_INSTALL, RDEPENDS,
and the like.
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This includes dvb-apps patches, dvb-scan-tables, dvb-libraries and firmware for WINTV 950Q
Fix build with kernel > 4.14
Inherit perlnative for tests to build
Change options to cp command to fix
dvb-apps: /dvb-apps/usr/share/dvb/dvb-t/vn-Hanoi is owned by uid 3004,
which is the same as the user running bitbake. This may be due to host
contamination
Signed-off-by: Haseenamol <haseenamol@tataelxsi.co.in>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The mozjs build system makes use of host headers and libraries if not
passed an invalid path for `--x-includes` and `--x-libraries`. This
fixes host contamination while building in a development host.
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
delete patch 0001-0020 since already merged to upstream
update patch 0021-0031 to version 0.7.9
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Drop 0012-remove-dmraid-dependency-check.patch and
0013-add-Z-y-and-y-to-lvm.pvcreate.patch which the
new version has fixed the issues
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Inherit ptest for net-snmp to create ${PN}-ptest. Update run-ptest as
well to avoid only could be run in the same directory.
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This is otherwise detected based on host machines X11 install directory
and on builders where x11 may not be insalled this will default to
another directory /usr/lib/X11/.. instead of /usr/share/X11...
This patch makes it consistent and avoids poking at host machines
install
make clean does not work so enable CLEANBROKEN
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add a class to perform security scans of Python code using Bandit.
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Doxygen binary is necessary to generate C++ bindings for libsigrok.
Signed-off-by: Bartosz Golaszewski <brgl@bgdev.pl>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The original one was previously removed
by commit ec9e5ed062
as part of a clean-up of blacklisted recipes.
Signed-off-by: Peter Bašista <pbasista@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The postgresql-setup utility log-in on postgres user to create the
database, however, the shell was set to bash and it wasn't being
installed as runtime dependency.
This rework this expectation to use busybox ash as shell and avoid the
new dependency
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Patch fixes compile errors by defining empty macros as
hinted by TODO mark in the sources.
Signed-off-by: Primoz Fiser <primoz.fiser@norik.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Update dependencies, and cheat by adding python3-modules to RDEPENDS for now.
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Stefan Wiehler
Mingli Yu
Changqing Li
Andreas Müller
Brad Bishop
Khem Raj
Haseenamol
Otavio Salvador
Hongxu Jia
Kai Kang
Philip Balister
Ross Burton
Bartosz Golaszewski
Gianfranco Costamagna
Adrian Bunk
Peter Bašista
Craig McQueen
Primoz Fiser
Paul Eggleton