Commit Graph
22 Commits
Author SHA1 Message Date
Luca Boccassi b72de343a9 dbus-broker: enforce required versions of libselinux and libaudit
v29 requires libselinux >= 3.2 and libaudit >= 3.0, set them as such
in DEPENDS

Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-09 12:19:23 -07:00
Luca Boccassi a65570945c dbus-broker: remove deprecated linux-4-17 option
Removed in v29

Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-09 12:19:23 -07:00
Luca Boccassi d19ffdf625 dbus-broker: upgrade 27 -> 28
See full changelog https://github.com/bus1/dbus-broker/releases/tag/v28

Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-18 11:26:33 -07:00
Luca Boccassi a9ca1577a4 dbus-broker: upgrade 26 -> 27
See full changelog https://github.com/bus1/dbus-broker/releases/tag/v27

Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-15 11:48:21 -07:00
Luca Boccassi 2266a8a194 cryptsetup: depend on new util-linux-uuid to break cycle
The util-linux recipe in Poky has been split, and libuuid is separate now:

http://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?id=d42487bf52310d095178e480b7ddec2666471009

This allows to build util-linux with cryptsetup, for native dm-verity
support.
The main cryptsetup build needs libuuid and not the full util-linux, so
switch the build-dependency over, thus allowing users to enable the
cryptsetup util-linux's PACKAGECONFIG.
The libblkid dependency is handled individually by the crypsetup's
PACKAGECONFIG option.

Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-12 15:55:07 -08:00
Luca Boccassi 3c9ced9c02 dbus-broker: update to v26
Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 00:26:41 -08:00
Luca Boccassi 8a29a7f9aa fsverity: fix MinGW build
Upstream supports building a binary with MinGW but not a shared library,
so remove the configure option for MinGW targets.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:44:15 -08:00
Luca Boccassi d960d152b9 fsverity: update to 1.3
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:44:15 -08:00
Luca Boccassi 67631e5ac7 dbus-broker: enable SO_PEERSEC usage by default
Linux 4.17 is quite old at the moment, the last 3 LTS kernels are all newver,
so it should be safe to enable a better security option by default.

Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-11 09:51:22 -08:00
Luca Boccassi ca5977699e dbus-broker: upgrade 24 -> 25
See full changelog https://github.com/bus1/dbus-broker/releases/tag/v25

Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-03 14:49:27 -08:00
Luca Boccassi c5245640b5 dbus-brocker: upgrade 23 -> 24
See full changelog https://github.com/bus1/dbus-broker/releases/tag/v24

Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-30 11:40:31 -08:00
Luca Boccassi 12166b96ba dbus-broker: rdepend on dbus-common
The dbus package in oe-core was split, and the common configuration
files that are also required by dbus-broker are now shipped in
dbus-common, to avoid having to pull in the entire dbus-daemon.

Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-30 11:40:31 -08:00
Luca Boccassi 4c3a471dcd Add new recipe for squashfs-tools-ng
The main difference with squashfs-tools is the availability
of a shared library and a programmatic interface, rather
than just command-line tools.

Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-27 08:39:09 -07:00
Luca Boccassi 993c8cfbc9 Add recipe for fsverity-utils
Library and command-line tool to manage the fs-verity
feature, introduced in Linux 5.4 and supported in ext4
and f2fs filesystems.

https://www.kernel.org/doc/html/latest/filesystems/fsverity.html

Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-21 14:11:09 -07:00
Luca Boccassi dda2962584 dbus-broker: backport patches to fix policy with SELinux nodes
Backport from master: https://github.com/bus1/dbus-broker/pull/213

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-06 07:20:04 -08:00
Luca Boccassi b70b263add dbus-broker: build with libaudit if selinux is enabled
There is no DISTRO_FEATURE for audit, so most packages enable it
if selinux is enabled.

Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-01 17:22:52 -07:00
Luca Boccassi 71af733347 dbus-broker: add patch to fix build with musl libc
Forwarded upstream: https://github.com/bus1/dbus-broker/pull/214

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-28 15:26:42 -07:00
Luca Boccassi 9ac1df048a dbus-broker: build with SELinux if it's enabled via DISTRO_FEATURES
Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-28 15:26:42 -07:00
Luca Boccassi c12bca1e7a dbus-broker: backport patches from master
These patches fix issues found in Fedora 30, which switched from
dbus-daemon to dbus-broker.
These backports align meta-oe to Fedora 30.

Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-28 15:26:42 -07:00
Luca Boccassi 65cf98b5a4 dbus-broker: 19 -> 21
Add /lib/systemd/catalog to the package, as snippets for the journal are
now shipped.

Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-28 15:26:42 -07:00
Luca Boccassi d21d509b9f python-pygobject: remove build-dependency on setuptools and add dependency on pkgutil
Sync python-pygobject recipe with poky's python3-pygobject:
Setuptools is not a mandatory build-dependency, so remove it.
Pkgutil from the core library is needed at runtime, so add a
dependency on it.

Fixes: f8e1d0c176 ("python-pygobject: move python-setuptools from RDEPENDS to DEPENDS")

Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-14 16:05:00 -07:00
Luca Boccassi f8e1d0c176 python-pygobject: move python-setuptools from RDEPENDS to DEPENDS
python-setuptools is necessary to build pygobject but not to run it, as
also documented by the upstream packaging guide:

https://gitlab.gnome.org/GNOME/pygobject/blob/master/docs/packagingguide.rst

Move it to DEPENDS to shrink the runtime dependency chain, as setuptools
includes scripts to download other packages, which might not be desired on
a minimal image.

Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-05 17:55:36 -07:00