Commit Graph

232 Commits

Author SHA1 Message Date
Andreas Müller aedf26e08a networkmanager: fix prevous commits
The wrong patches were applied:

commit c5a0460081
Author: Armin Kuster <akuster808@gmail.com>
Date:   Fri Mar 30 19:56:03 2018 -0700

    networkmanager: Fix many typos in DISTRO_FEATURES PACKAGECONFIG decodes

commit 575c14ded5
Author: Andreas Müller <schnitzeltony@gmail.com>
Date:   Thu Mar 22 18:40:52 2018 +0100

    networkmanager: fix gobject-introspection/musl and cleanup

* musl fixed (tested)
* PACKAGECONFIG systemd: Logic was broken by c5a046. To avoid
  further confusion, the expression was put into one line.
* PACKAGECONFIG wifi: The expression 'bb.utils.filter.. ' was perfectly fine.

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-01 18:17:02 -07:00
Johannes Pointner 663bc6f016 mbedtls: upgrade to 2.8.0
This also includes a switch to Apache license, because it's the primary license
for the project according to their homepage.

* Detail release note:
  - https://tls.mbed.org/tech-updates/releases/mbedtls-2.8.0-2.7.2-and-2.1.11-released

Signed-off-by: Johannes Pointner <johannes.pointner@br-automation.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-04-25 15:53:46 -04:00
Armin Kuster c5a0460081 networkmanager: Fix many typos in DISTRO_FEATURES PACKAGECONFIG decodes
fixes issues found with yocto-check-layer

 File "/home/akuster/oss/maint/openembedded-core/bitbake/lib/bb/data_smart.py", line 436, in DataSmart.expand(s="nss ifupdown netconfig dhclient dnsmasq     ${@bb.utils.contains('DISTRO_FEATURES', 'systemd', 'systemd', '', d)}     ${@bb.utils.contains('DISTRO_FEATURES', 'x11', 'consolekit', '', d)}     ${@bb.utils.contains('DISTRO_FEATURES', 'bluetooth', '${BLUEZ}', '', d)}     ${@bb.utils.contains('DISTRO_FEATURES', 'wifi', '', d)} ", varname='PACKAGECONFIG'):
         def expand(self, s, varname = None):
    >        return self.expandWithRefs(s, varname).value

  File "/home/akuster/oss/maint/openembedded-core/bitbake/lib/bb/data_smart.py", line 426, in DataSmart.expandWithRefs(s="nss ifupdown netconfig dhclient dnsmasq     ${@bb.utils.contains('DISTRO_FEATURES', 'systemd', 'systemd', '', d)}     ${@bb.utils.contains('DISTRO_FEATURES', 'x11', 'consolekit', '', d)}     ${@bb.utils.contains('DISTRO_FEATURES', 'bluetooth', 'bluez5', '', d)}     ${@bb.utils.contains('DISTRO_FEATURES', 'wifi', '', d)} ", varname='PACKAGECONFIG'):
                 except Exception as exc:
    >                raise ExpansionError(varname, s, exc) from exc

bb.data_smart.ExpansionError: Failure expanding variable PACKAGECONFIG, expression was nss ifupdown netconfig dhclient dnsmasq     ${@bb.utils.contains('DISTRO_FEATURES', 'systemd', 'systemd', '', d)}     ${@bb.utils.contains('DISTRO_FEATURES', 'x11', 'consolekit', '', d)}     ${@bb.utils.contains('DISTRO_FEATURES', 'bluetooth', 'bluez5', '', d)}     ${@bb.utils.contains('DISTRO_FEATURES', 'wifi', '', d)}  which triggered exception TypeError: contains() missing 1 required positional argument: 'd'

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-04-25 15:53:45 -04:00
Andreas Müller 575c14ded5 networkmanager: fix gobject-introspection/musl and cleanup
This adresses the comments for recent patch which updated nm to 1.10.6 and is a
follow-up for [1].

* Make gobject-introspection work by skipping creation of gobject-introspection
  specific documentation. This fixes networkmanager-applet regression.
* Cleanup patches: Remove current musl patches completely and re-use those
  found in void-linux because they do look much cleaner and don't touch glibc
  build. One nice side effect: In the future when nm is updated we can steal
  again and don't need to reenvent here. Usually they are much faster than we
  are (and I know one major contibutor personally from the good old Z80 times..)
* Fix typo in PACKAGECONFIG

[1] https://patchwork.openembedded.org/patch/149244/

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-04-25 15:53:45 -04:00
Mikko Rapeli f0a664f2b7 crda: fix typo in patch metadata
Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13 12:46:32 -07:00
Yi Zhao 05a234c2da crda: refresh patch
Fix QA warning:

WARNING: crda-3.18-r0 do_patch:
Some of the context lines in patches were ignored. This can lead to
incorrectly applied patches.
The context lines in the patches can be updated with devtool:

    devtool modify <recipe>
    devtool finish --force-patch-refresh <recipe> <layer_path>

Then the updated patches and the source tree (in devtool's workspace)
should be reviewed to make sure the patches apply in the correct place
and don't introduce duplicate lines (which can, and does happen
when some of the context is ignored). Further information:
http://lists.openembedded.org/pipermail/openembedded-core/2018-March/148675.html
https://bugzilla.yoctoproject.org/show_bug.cgi?id=10450
Details:
Applying patch fix-linking-of-libraries-used-by-reglib.patch
patching file Makefile
Hunk #2 succeeded at 40 with fuzz 2.
Hunk #3 succeeded at 46 (offset -5 lines).
Hunk #4 succeeded at 116 (offset -5 lines).

Now at patch fix-linking-of-libraries-used-by-reglib.patch

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13 12:45:55 -07:00
Andreas Müller 4c1ef296dc samba: refresh patches
For 16-do-not-check-xsltproc-manpages.patch devtool created a heavy monster

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13 12:43:45 -07:00
Armin Kuster 371e74a5cc snort: refresh patches
WARNING:
Some of the context lines in patches were ignored. This can lead to incorrectly applied patches.
The context lines in the patches can be updated with devtool:

    devtool modify <recipe>
    devtool finish --force-patch-refresh <recipe> <layer_path>

Then the updated patches and the source tree (in devtool's workspace)
should be reviewed to make sure the patches apply in the correct place
and don't introduce duplicate lines (which can, and does happen
when some of the context is ignored). Further information:
http://lists.openembedded.org/pipermail/openembedded-core/2018-March/148675.html
https://bugzilla.yoctoproject.org/show_bug.cgi?id=10450
Details:
checking file configure.in
Hunk #1 succeeded at 698 with fuzz 2 (off
and others

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13 12:43:40 -07:00
Johannes Pointner fa19132152 samba: update to 4.7.6
This includes security fixes that adresses the following defects:
CVE-2018-1050 (Denial of Service Attack on external print server.)
CVE-2018-1057 (Authenticated users can change other users' password.)

* Detail release note:
  - https://www.samba.org/samba/history/samba-4.7.6.html

Signed-off-by: Johannes Pointner <johannes.pointner@br-automation.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-04-09 12:32:07 -04:00
Pablo Saavedra 78cacdb93d networkmanager upgrade to 1.10.6
* Upgraded to latest stable version [1]
* Forward-port of the Yocto patches
* Disabled 0004-Define-missing-features-to-cater-for-musl.patch
* This version keeps fixed 'Fixed setting 802-1x.password-raw
  property in nmcli' error. Fixed on 1.6.4 [2].

References:

[1] https://cgit.freedesktop.org/NetworkManager/NetworkManager/tree/NEWS?h=nm-1-10
[2] https://cgit.freedesktop.org/NetworkManager/NetworkManager/tree/NEWS?h=1.6.4#n11

Signed-off-by: Pablo Saavedra <psaavedra@igalia.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-04-09 12:32:06 -04:00
Johannes Pointner ad8e710be7 samba: update to 4.7.5
This includes security fixes that adresses the following defects:
CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug.
CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when
talloc buffer is grown.

* Detail release note:
  - https://www.samba.org/samba/history/samba-4.7.5.html

Signed-off-by: Johannes Pointner <johannes.pointner@br-automation.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-04-06 08:12:20 -04:00
Kyle Russell cc58fcb4c1 dhcpcd: update to 6.11.5
Signed-off-by: Kyle Russell <bkylerussell@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-04-06 08:12:19 -04:00
Khem Raj 4426e4b300 samba: Refresh musl pam patch
last update left the musl builds broken since the
patch was not forward ported

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-04-04 13:32:28 -04:00
Zheng Ruoqin a98acf9961 samba: Add packagegroup
Add packagegroup for samba, for there are too many rpms in samba and it's hard to manage.

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-03-05 11:45:40 -05:00
Martin Jansa 0db9697dc6 samba, openwsman, pam-ssh-agent-auth, sblim-sfcb, passwdqc, python-pam, smbnetfs: require pam in DISTRO_FEATURES
* there is explicit dependency on libpam without respecting pam in DISTRO_FEATURES
  so add the check to prevent people building it against broken libpam

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-03-05 11:45:40 -05:00
Martin Jansa 99aa19ff53 recipes: use oe.utils.conditional instead of deprecated base_conditional
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2018-02-01 13:48:27 +00:00
Mark Asselstine 3da22ee404 inetutils: make -syslog rconflict with other system loggers
With oe-core commit cdcebd81c872cb7386c658998e27cf24e1d0447c
[initscripts: don't use update-alternatives] we start seeing a a
rootfs generation failure when both sysklogd and inetutils are present
in the image:

ERROR: do_rootfs: [log_check] : found 1 error message in the logfile:
[log_check] update-alternatives: Error: not linking
.../0.2-r0/rootfs/usr/share/man/man8/syslogd.8 to
/usr/share/man/man8/syslogd.8.inetutils since
.../0.2-r0/rootfs/usr/share/man/man8/syslogd.8 exists and is not a link

As has been done with the other packages which provide system logging
we add an rconflicts to only allow one to exist in a rootfs image at a
time.

Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-01-08 12:04:02 -05:00
Joe Slater 286eaa380f samba: move to version 4.7.0
ad-dc code is built and krb5 is used.  If booting using systemd,
'nmb' and 'smb' are started.  'samba' is not.

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-01-08 12:02:52 -05:00
Armin Kuster 35080118f8 Revert "samba: add missing RDEPENDS"
this slipped in. it should not have been merged to master

This reverts commit 9245c2a7ec.

Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-01-08 12:02:21 -05:00
Jackie Huang b55738ef8d networkmanager: add consolekit only when x11 is enabled
consolekit depends on virtual/libx11 then it requires x11
distro feature, so add consolekit option only when x11
is in DISTRO_FEATURES.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-01-08 12:00:41 -05:00
Jackie Huang 9245c2a7ec samba: add missing RDEPENDS
* samba-tool requires the python modules from samba-python
  or it fails with:

  Traceback (most recent call last):
    File "/usr/bin/samba-tool", line 33, in <module>
      from samba.netcmd.main import cmd_sambatool
  ImportError: No module named samba.netcmd.main

* Provisioning with samba-tool requires samba-dsdb-modules
  or it fails with:

  Setting up secrets.ldb
  ldb: unable to stat module /usr/lib64/samba/ldb : No such file or directory
  WARNING: Module [samba_secrets] not found - do you need to set LDB_MODULES_PATH?
  Unable to load modules for /var/lib/samba/private/secrets.ldb: (null)
  ERROR(ldb): uncaught exception - None

* samba-python requires pytalloc and python-tdb or it fails with:

  TypeError: pytalloc: unable to get talloc.BaseObject type
  ERROR(<type 'exceptions.ImportError'>): uncaught exception - No module named tdb

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-11-15 16:31:19 -08:00
Mark Hatle b8210ddacc iproute2: Move tipc enablement to oe-core
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-10-11 16:22:48 -04:00
Khem Raj cf67c2863c networkmanager: Disable gobject-introspection on musl
It segfaults qemu like below, until this is root caused we disable it

|
| (process:16378): GLib-CRITICAL **: g_hash_table_lookup: assertion 'hash_table != NULL' failed
| **
| GLib-GObject:ERROR:../../glib-2.52.3/gobject/gtype.c:2743:g_type_register_static: assertion failed: (static_quark_type_flags)
| /mnt/a/oe/build/tmp/work/aarch64-bec-linux-musl/networkmanager/1.4.4-r0/recipe-sysroot/usr/bin/g-ir-scanner-qemuwrapper: line 6: 16378 Aborted                 (core dumped) PSEUDO_UNLOAD=1 qemu-aarch64 -r 3.14 -L /mnt/a/oe/build/tmp/work/aarch64-bec-linux-musl/networkmanager/1.4.4-r0/recipe-sysroot -E LD_LIBRARY_PATH=$GIR_EXTRA_LIBS_PATH:.libs:/mnt/a/oe/build/tmp/work/aarch64-bec-linux-musl/networkmanager/1.4.4-r0/recipe-sysroot//usr/lib:/mnt/a/oe/build/tmp/work/aarch64-bec-linux-musl/networkmanager/1.4.4-r0/recipe-sysroot//lib "$@"

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-09-22 14:37:18 -04:00
Huang Qiyu 8096888e7c samba: Add HOMEPAGE info into recipe file.
Signed-off-by: Huang Qiyu <huangqy.fnst@cn.fujitsu.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-09-22 10:30:22 -04:00
Huang Qiyu 39b8eefad2 networkmanager: Add HOMEPAGE info into recipe file.
Signed-off-by: Huang Qiyu <huangqy.fnst@cn.fujitsu.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-09-22 10:30:22 -04:00
Huang Qiyu c50cc617cc vlan: Add HOMEPAGE info into recipe file.
Signed-off-by: Huang Qiyu <huangqy.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-09-12 10:55:09 -04:00
Mark Hatle e4e77d2040 miniupnpd: Move to meta-networking, requires libnetfilter-conntrack
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-09-12 10:55:09 -04:00
Mark Hatle fbaf358758 python-networkmanager: Move to networking, requires networkmanager
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-09-12 10:55:08 -04:00
Mark Hatle 677199bb7a networkmanager: Move to meta-networking, requires dnsmasq
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-09-12 10:55:08 -04:00
Mark Hatle c4c0151e20 networkmanager-openvpn: requires openvpn from meta-networking
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-09-12 10:55:08 -04:00
Will Page 80f9a603c4 vpnc: Reduce lifetime value to widely-compatible value
Current proposed lifetime value (2147483 seconds, which equates to
MAXINT ms, or ~25 days) is rejected by Fortigate vpn devices because
"peer SA proposal does not match local policy".  It seems default
policy for these devices constrains lifetime where similar VPN devices
don't.

Reducing the lifetime from its current value to 28800 (exactly 8 hours)
causes it to start working with fortigate devices.

Signed-off-by: Will Page <Will.Page@ni.com>
Signed-off-by: Ioan-Adrian Ratiu <adrian.ratiu@ni.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-09-12 10:55:07 -04:00
dengke.du@windriver.com 04bc4b4c86 wolfssl: upgrade to 3.12.0
Signed-off-by: Dengke Du <dengke.du@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-09-12 10:55:07 -04:00
Kai Kang 3562b0f44a samba: 4.6.5 -> 4.6.7
Upgrade samba from 4.6.5 to 4.6.7 to fix CVE-2017-11103.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-09-12 10:55:06 -04:00
Chen Qi e93b6efa62 openconnect: upgrade to 7.08
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-09-12 10:55:05 -04:00
Jackie Huang 417da61f88 freeradius: Upgrade to 3.0.15
* Upgrade to 3.0.15 to fix many CVE issues.
* There is a defect for disabling dhcp feature:
  https://github.com/FreeRADIUS/freeradius-server/issues/2039
  We don't need the dhcp feature but it's harmless
  to enable it, so enable it as the default.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-09-12 10:37:18 -04:00
Khem Raj e9b03cb0e0 rdate: Define logwtmp if libc != glibc
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-09-08 16:38:17 -04:00
Khem Raj 2d6e1909cd rdate: Fix build with hardening
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-09-08 16:38:00 -04:00
Fabio Berton 28d2c9b447 iproute2: Move append to meta-networking layer
meta-openembedded commit eb8994f44a added
iproute2 append to enable tipc PACKAGECONFIG that install libmnl
package. libmnl recipe is in meta-networking layer and this layer
needs to be added to bblayers.conf file to build libmnl. Move
iproute2 append to meta-networking to allow build iproute2 without add
meta-networking layer to bblayers.conf.

Signed-off-by: Fabio Berton <fabio.berton@ossystems.com.br>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-30 17:17:38 +02:00
Jackie Huang ce91bef219 snort: fix for snort.conf
The /etc/snort/snort.conf doesn't work since
there are hardcoded paths and lib names, and
it tries to include many rules that are not
provided.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28 10:29:48 -04:00
Jackie Huang 4267eede66 rdist: add new recipe
rdist is a remote file distribution client and server.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28 10:29:36 -04:00
Jackie Huang 7d5f8acc42 rdate: add new recipe
rdate is a tool for getting the date/time
from a remote machine.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28 10:29:26 -04:00
Khem Raj 487481d48f relayd: Fix build with hardening flags and glibc
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28 10:29:00 -04:00
Khem Raj 306e67956b relayd: Upgrade to latest
Fixes build with hardening flags

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28 10:28:53 -04:00
Khem Raj 371fbfdec2 vlan: Fix build with security flags turned on
Limit the license checksum to the file header

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28 10:28:48 -04:00
Khem Raj 58e9a52580 freeradius: Upgrade to 3.0.14
Fix a cross compile issue where it was looking for samba headers
in build host.

in src/modules/rlm_mschap/config.log

Fix

cc1: warning: include location "/usr/include/samba-4.0/" is unsafe for cross-compilation [-Wpoison-system-directories]

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28 10:28:44 -04:00
Johannes Pointner 88885fc01a samba: upgrade to 4.6.5
This includes a security fix that adresses the following defect:
CVE-2017-7494 (Remote code execution from a writable share)

* Detail release note:
  - https://www.samba.org/samba/history/samba-4.6.5.html

* Remove 00-fix-typos-in-man-pages.patch which has been fixed
  upstream a long time ago

Signed-off-by: Johannes Pointner <johannes.pointner@br-automation.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28 10:28:27 -04:00
Khem Raj 91d77d978f samba: Fix build with musl
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28 10:27:52 -04:00
Kai Kang 3491e03931 snort: enable static daq
When start snort, it shows error and quit:

|         --== Initializing Snort ==--
| Initializing Output Plugins!
| ERROR: Can't find pcap DAQ!
| Fatal Error, Quitting..

Fix by enable static daq for snort and enable static build for daq. snort calls
command daq-modules-config which is from daq-native to get required daq static
libraries and library path. Add package daq-native and add patch for snort to
filter library path out to avoid host contamination issue.

Add daq-native's dependency libnet-native too. And daq-native also depends on
libpcap-native from layer oe-core.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28 10:26:16 -04:00
Jackie Huang 39e58a887b freeradius: add new recipe
FreeRADIUS is an Internet authentication daemon,
which implements the RADIUS protocol, as defined
in RFC 2865 (and others).

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28 10:23:38 -04:00
Khem Raj d16352e9b4 samba: Upgrade to 4.6.2
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25 16:10:55 -04:00