mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-10-16 06:37:38 +00:00
Wang Mingyu
872ba7a5b0
Changelog: =========== - Add --no-command / -C flag to disable command mode at runtime - Disable command mode in haveged.service and haveged-once.service - Enable PrivateNetwork=true and remove ReadWritePaths=/dev/shm in service files - Add PractRand example to man page - Use O_EXCL with sem_open to prevent semaphore pre-planting attacks [pyllyukko] - Recover stale semaphores after SIGKILL by unlinking and retrying - Add sem_close before sem_unlink for proper cleanup ordering - Fix compilation when NO_COMMAND_MODE is defined - Fix out-of-bounds memory access in safein()/safeout() on socket errors - Reject command socket connections from different user namespaces - Use O_NOFOLLOW for PID file to prevent symlink attacks - Open random device with O_CLOEXEC to prevent fd leak across execv - Restrict semaphore permissions from 0644 to 0600 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Collection of layers for the OE-core universe
Main layer maintainer: Khem Raj raj.khem@gmail.com
This repository is a collection of layers to supplement OE-Core with additional packages, Each layer have designated maintainer Please see the respective READMEs in the layer subdirectories