Commit Graph

349 Commits

Author SHA1 Message Date
Chong Lu ab6a7fa8dd memcached: add knob to detect whether hugetlbfs are checked
Add knob to detect whether hugetlbfs are checked or not.
This patch fixed the error:
    ld: cannot find -lhugetlbfs

Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-09-08 16:36:08 -04:00
Khem Raj 46824934fa meta-networking: Update layer dependency information
since python recipes are now spun out into its own layer
and there are recipes like crda which depend on M2Crypto
python module, of which the recipe is now moved from meta-oe
into meta-python, we need to express this change of layers
otherwise if you are not using meta-python then you end up
with errors e.g.

Nothing PROVIDES 'python-m2crypto-native' (but
meta-networking/recipes-connectivity/crda/crda_1.1.3.bb
DEPENDS on or otherwise requires it).

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-09-08 16:34:25 -04:00
Peter Bigot aca94301c8 ntp: add deterministic support for KPPS interface
ntp checks for presence of sys/timepps.h to determine whether the kernel
supports the RFC 2783 KPPS interface.  Under Linux the pps-tools package
installs this header.  Without this feature the ATOM clock driver does
not work, and other drivers like NMEA have reduced precision.  Remove
the feature non-determinism and increase ntpd capabilities by adding an
explicit dependency.

See: http://doc.ntp.org/4.2.6/kernpps.html

Signed-off-by: Peter A. Bigot <pab@pabigot.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-09-01 11:37:12 +02:00
Peter Bigot 6bea4ca22e ntp: re-enable server debugging and control by PACKAGECONFIG
The description in a previous patch to disable debugging is incorrect.
Although the option is default-enabled in configure.ac, configure does
respect the option that disables it.

In ntp 4.2.7 the option code is refactored to ntp_debug.m4 and has an
effect in sntp as well.  Adding --disable-debugging to the top-level
configure options overrides the default for both 4.2.6 and 4.2.7 without
patching the distribution.

Make the selection explicit and configurable, but restore the historical
default.  Absence of debugging capability in the server makes it
difficult to validate complex configurations.

Signed-off-by: Peter A. Bigot <pab@pabigot.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-09-01 11:37:11 +02:00
Roy Li 5e1098f2c2 autofs: uprev it to 5.1.0
1. Uprev it to 5.1.0, add remove the unneed patches
2. fix a building failure since not include stdarg.h
3. using pkg-config to check xml and krb5
4. force STRIP to empty to not strip the file

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-21 21:35:07 +02:00
Jackie Huang 778ddba701 strongswan: uprev to version 5.2.0
* removed two patches which were already integrated in 5.2.0:
  strongswan-4.3.3-5.1.1_asn1_unwrap.patch
  strongswan-5.0.0-5.1.2_reject_child_sa.patch

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-21 21:35:07 +02:00
Roy Li 92a28da91b traceroute: uprev it to 2.0.20
1. uprev to 2.0.20
2. Update the license md5sum, since the address is changed in COPYING*:
From:
    Copyright (C) 1989, 1991 Free Software Foundation, Inc.,
    51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
To:
    Copyright (C) 1989, 1991 Free Software Foundation, Inc.
    59 Temple Place, Suite 330, Boston, MA  02111-1307

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-21 21:35:06 +02:00
Roy Li e697845cc9 tcpdump: uprev it to 4.6.1
1. uprev to 4.6.1
2. remove three obsolete patches
3. use PACKAGECONFIG, and the default value is ipv6 openssl

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-21 21:35:06 +02:00
Roy.Li e4edce9d56 wireshark: add libsmi portaudio to PACKAGECONFIG
Signed-off-by: Roy.Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-21 21:35:06 +02:00
Zhang Xiao 622ad1538b ntp: fix CVE-2013-5211
The monlist feature in ntp_request.c in ntpd in NTP before
4.2.7p26 allows remote attackers to cause a denial of service
(traffic amplification) via forged (1) REQ_MON_GETLIST or
(2) REQ_MON_GETLIST_1 requests, as exploited in the wild
in December 2013.

Signed-off-by: Zhang Xiao <xiao.zhang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-21 21:35:05 +02:00
Xufeng Zhang 55ebea4bb0 ntp: Disable debugging by default
There is a problem in configure.ac file that whether or not
'--enable-debugging' is specified in configure cmdline, debugging
is always enabled.
We should disable ntp debugging by default.

Signed-off-by: Xufeng Zhang <xufeng.zhang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-21 21:35:04 +02:00
lchristina26 5f532a928c cyassl: add recipe
Signed-off-by: Leah Thompson <lchristina26@hotmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-15 17:07:45 +02:00
Roy Li 434d5d8d6c net-snmp: uprev it to 5.7.2.1
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13 23:28:06 +02:00
Ting Liu 61362da811 inetutils: not use auto-detected login for telnetd
Below error appears as login was auto-detected by default:
| telnetd: /usr/bin/login -p -h 192.168.2.1 : No such file or directory.
| Connection closed by foreign host.

Signed-off-by: Ting Liu <ting.liu@freescale.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13 23:28:06 +02:00
Roy Li 8a428b570d quagga: uprev it to 0.99.23
uprev it to 0.99.23
remove patches which have been in the latest version

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13 23:28:06 +02:00
Hongxu Jia 8afe9200c4 curlpp: fix do_compile failed since gcc upgrade to 4.9
The deprecated test code was no longer used, so remove it
to avoid compiling failure with -Werror=unused-function
...
| example21.cpp:51:8: error: 'size_t {anonymous}::readData(char*,
size_t, size_t)' defined but not used [-Werror=unused-function]
|  size_t readData(char *buffer, size_t size, size_t nitems)
...

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13 23:28:06 +02:00
Roy Li 4d7e174324 ipsec-tools: uprev it to 0.8.2
Remove 0001-Fix-warning-with-gcc-4.8.patch, it has been in 0.8.2

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13 23:28:05 +02:00
Roy Li 61d61c4eb8 ifenslave: add recipes
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13 23:28:05 +02:00
Christopher Larson 7bb14206a2 dnsmasq: add packageconfigs for idn, conntrack, lua
Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13 23:28:04 +02:00
Christopher Larson f1e112fa68 dnsmasq: look for lua.pc, not lua5.1.pc
Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13 23:28:04 +02:00
Christopher Larson a46abacebd dnsmasq: move parallel make patch to .bb, add upstream-status
Patches really belong in the recipe, not the .inc, given patches are generally
version-bound.

Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13 23:28:03 +02:00
Christopher Larson e87a84abd4 dnsmasq: obey CFLAGS & LDFLAGS
Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13 23:28:03 +02:00
Christopher Larson 7ba7f53075 dnsmasq: add missing inherit pkgconfig
dnsmasq runs pkg-config to get cflags/libs for its dependencies.

Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13 23:28:03 +02:00
Martin Jansa 98d1178cb0 snort: add dependency on util-linux
* fixes floating dependency:
  WARNING: QA Issue: snort rdepends on util-linux-libuuid but it isn't a build dependency? [build-deps]

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-11 10:59:24 +02:00
Martin Jansa 62435508cf stunnel: add dependency on zlib and tcp-wrappers
* fixes floating dependency:
  stunnel/stunnel/latest lost dependency on  libwrap zlib

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-11 10:59:23 +02:00
Roy Li 8f84267086 netcf: init script should be installed under /etc/init.d/
init script should be installed under /etc/init.d/, not /etc/rc.d/init.d

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-10 16:07:18 +02:00
Shrikant Bobade 3740ef2638 dnsmasq: fix parallel make failure
The dnsmasq target depends on .configured and $(objs). .configured does an rm
-f *.o. Yet the only thing telling make to build the .configured target before
the $(objs) target was the order of the dependencies of the dnsmasq target. We
can't rely on that order when doing a paralllel make build, so add an explicit
rule to enforce that order.

Signed-off-by: Christopher Larson <kergoth@gmail.com>
Signed-off-by: Shrikant Bobade <Shrikant_Bobade@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-10 16:07:17 +02:00
Joe MacDonald a9636f77ac wireshark: update configuration and epoch
Commit 6d781369 warranted a PE bump but didn't include it.  Update it,
correct a typo in EXTRA_OECONF and explicitly disable c-ares resolver at
the same time.

Acked-by: Armin Kuster <akuster@mvista.com>
Acked-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-08-06 19:51:59 -04:00
Joe MacDonald 7a3f8a76cb wireshark: update README instructions
Minor tweaks to the README to make the email suggestion follow the format
used in other meta-openembedded README files and adding clarification on
building wireshark in a GUI environment.

Acked-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-08-06 11:24:28 -04:00
Joe MacDonald 96ef73e772 README: Update layer dependencies
There are a few recipes in meta-networking that depend unconditionally on
components in meta-oe, so indicate that in the README.

Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-08-06 09:38:17 -04:00
Joe MacDonald 6d7813692a wireshark: update to latest stable version
Version 1.12.0 is out, update the SRC_URI and associated variables.

Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-08-06 09:28:33 -04:00
Xufeng Zhang c1094b8af7 znc: Fix for CVE-2013-2130
ZNC 1.0 allows remote authenticated users to cause a denial of service
(NULL pointer reference and crash) via a crafted request to the (1) editnetwork,
(2) editchan, (3) addchan, or (4) delchan page in modules/webadmin.cpp.
Per: http://cwe.mitre.org/data/definitions/476.html
CWE-476: NULL Pointer Dereference

Signed-off-by: Xufeng Zhang <xufeng.zhang@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-05 16:23:58 -04:00
Yue Tao 71bb2dc7c3 quagga: Security Advisory - quagga - CVE-2013-2236
Stack-based buffer overflow in the new_msg_lsa_change_notify function in
the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when
--enable-opaque-lsa and the -a command line option are used, allows
remote attackers to cause a denial of service (crash) via a large LSA.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-2236

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-05 16:23:58 -04:00
Yue Tao 18bea20781 strongswan: Security Advisory - strongswan - CVE-2014-2891
strongSwan before 5.1.2 allows remote attackers to cause a denial of
service (NULL pointer dereference and IKE daemon crash) via a crafted
ID_DER_ASN1_DN ID payload.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2891

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-05 16:23:58 -04:00
Armin Kuster 967f16750a wireshark: fix build depends
This should address issues found in test-dependencies 2014-07-25

wireshark/wireshark/latest lost dependency on  libcap libnl libnl-genl libnl-nf libnl-route portaudio-v19 sbc

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-01 14:23:45 +02:00
Richard Purdie abc0dc14b1 wireshark: Add missing pkgconfig dependency
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-08-01 14:23:45 +02:00
Armin Kuster 6d92fd5d68 wireshark: fix build for arm
* Backported Arm build fix

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-01 14:23:45 +02:00
Armin Kuster 9bfdcec408 wireshark: Add recipe 1.12.0-rc2
* Inital wireshark support on gtk+, gtk3
* README with additional info

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-01 14:23:44 +02:00
Roy Li 2d7c7956bd tnftp: add openssl PACKAGECONFIG and inherit pkgconfig
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-30 09:35:44 +02:00
Ting Liu 280f4c9aea ipsec-tools: enable Dead Peer Detection and NAT traversal
* Dead peer detection (DPD) is a method that network devices use to verify
  the current existence and availability of other peer devices.
* NAT traversal (sometimes abbreviated as NAT-T) is a general term for
  techniques that establish and maintain Internet protocol connections
  traversing network address translation (NAT) gateways

Signed-off-by: Ting Liu <b28495@freescale.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-30 09:35:44 +02:00
Roy Li 2ea5feedac ipsec-tools: several fixes
1. use PACKAGECONFIG
2. add three patches which will add the address check, to avoid SEGFAULT

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-30 09:21:05 +02:00
Roy.Li b8baf820be snort: do not hardcode the libdir
libdir is defined as ${pref_exec}/lib/, but we want it to support multilib path

Signed-off-by: Roy.Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-30 09:21:05 +02:00
Roy Li 042f9a89c6 openvpn: not use the hardcoded libdir
it will lead to QA failure, since .debug dir can not be installed into dbg package

    ERROR: QA Issue: non debug package contains .debug directory: openvpn path
    /work/core2-64-wrs-linux/openvpn/2.3.4-r0/packages-split/openvpn/usr/lib64i
    /openvpn/plugins/.debug/openvpn-plugin-down-root.so [debug-files]

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-30 09:21:04 +02:00
Martin Jansa 1e1b6d19ef snort: move files from 'files' to 'snort' for faster lookup
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-24 15:31:51 +02:00
Martin Jansa 26279f3350 snort: add openssl PACKAGECONFIG
* otherwise the result isn't deterministic
  WARN: packages/armv5te-oe-linux-gnueabi/snort/snort/latest lost dependency on  libcrypto

* enable it by default, disabling currently doesn't work, because there are --with flags for
  openssl, but then configure.in still checks for sha.h header with
  AC_CHECK_HEADERS([openssl/sha.h],, SHA_H="no")
  and autodetects it, I'll leave patching configure to someone who
  is actually using snort (this issue was reported many times and
  nobody seems to care).

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-24 15:31:51 +02:00
Martin Jansa f2ec214f09 snort: add missing pkgconfig inherit
* otherwise m4 eats all memory and is killed by OOMK
  [1051138.019784] Out of memory: Kill process 26264 (m4) score 860 or sacrifice child
  [1051138.019788] Killed process 26264 (m4) total-vm:23062712kB, anon-rss:15066516kB, file-rss:100kB

* very strange, but m4 and snort sometimes have strange side-effects,
  from first google result:
  http://www.hipforums.com/newforums/showthread.php?t=466568

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-24 15:31:51 +02:00
Martin Jansa 6ef51f43d5 lksctp-tools: blacklist because it fails to link against sctp_connectx symbol
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-24 15:31:50 +02:00
Richard Tollerton f647f319fc openvpn: update and enable iproute2 support
- Added .bb for version 2.3.4.
- The download URL was broken; it's changed to reflect where the website
  points to.
- Force use of iproute2, which is generally recommended when running
  OpenVPN as an unprivileged user. Ref:
  http://community.openvpn.net/openvpn/wiki/UnprivilegedUser
- Explicitly add libpam to DEPENDS if pam is enabled, and disable the
  auth-pam plugin if pam is not enabled.
- Pass the path to the 'ip' utility to the configure script to keep it
  from trying to find it on the host.

Signed-off-by: Richard Tollerton <rich.tollerton@ni.com>
Signed-off-by: Ben Shelton <ben.shelton@ni.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-22 00:01:58 +02:00
Richard Purdie 8dc1763bac mtr: Use "foreign" automake strictness
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-07-22 00:01:56 +02:00
Richard Purdie d4591958f4 rp-pppoe: Use "foreign" automake strictness
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-07-22 00:01:55 +02:00