[yocto] [meta-selinux][PATCH] audit: upgrade 2.6.6 -> 2.7
From: Wenzong Fan
Signed-off-by: Wenzong Fan
---
recipes-security/audit/{audit_2.6.6.bb => audit_2.7.bb} | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
rename recipes-security/audit/{audit_2.6.6.bb => audit_2.7.bb} (96%)
diff --git a/recipes-security/audit/audit_2.6.6.bb
b/recipes-security/audit/audit_2.7.bb
similarity index 96%
rename from recipes-security/audit/audit_2.6.6.bb
rename to recipes-security/audit/audit_2.7.bb
index 3823731..6bcbecd 100644
--- a/recipes-security/audit/audit_2.6.6.bb
+++ b/recipes-security/audit/audit_2.7.bb
@@ -15,8 +15,8 @@ SRC_URI =
"http://people.redhat.com/sgrubb/${BPN}/${BPN}-${PV}.tar.gz \
file://auditd.service \
file://audit-volatile.conf \
"
-SRC_URI[md5sum] = "871fbc03039a5101b5191c5dcc6e8ac2"
-SRC_URI[sha256sum] =
"61d8dc61e882fdbb75153a1316817a8f8c8fca25de588256edd81fbb03e7994b"
+SRC_URI[md5sum] = "d3b1017e259509b9b3054656d0d2b4e9"
+SRC_URI[sha256sum] =
"05533f5d88d9520ceebfd8bfb3fd998ca4a2b246757fec7bbd8e33c287544537"
inherit autotools pythonnative update-rc.d systemd
--
2.7.4
--
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto
[yocto] Failure Inheriting rpm_sign
I am getting "Exception: OSError: [Errno 7] Argument list too long" for
sign_rpm in the do_package_write_rpm tasks for the
linux-yocto and glibc-locale recipes.
This is building core-image-minimal (and also my own image) with morty
(5aa481d) on Fedora 25.
I have enabled the rpm signing with:
INHERIT += " sign_rpm"
RPM_GPG_NAME = "{name}"
RPM_GPG_PASSPHRASE = "{passphrase}"
IMAGE_INSTALL_append = " signing-keys-rpm"
The error message makes some sense in as much as these recipes produce a lot of
packages (for example, glibc-locale produces 1791 packages) and the command
line in the log is pretty big, although reading around I didn't find a
consensus on what the max command line should be.
The code to sign rpms is in meta/lib/oe/gpg_sign.py b/meta/lib/oe/gpg_sign.py
and it builds up one command line with all the packages.
I changed the code (patch appended) to sign each rpm in a separate command and
the build completed successfully. The signing operations take a large amount
of time so I think this might be a reasonable change but you may have other
concerns.
Regards,
Chris
diff --git a/meta/lib/oe/gpg_sign.py b/meta/lib/oe/gpg_sign.py
index 38eb0cb..a386b1f 100644
--- a/meta/lib/oe/gpg_sign.py
+++ b/meta/lib/oe/gpg_sign.py
@@ -29,17 +29,18 @@ class LocalSigner(object):
def sign_rpms(self, files, keyid, passphrase):
"""Sign RPM files"""
-cmd = self.rpm_bin + " --addsign --define '_gpg_name %s' " % keyid
-cmd += "--define '_gpg_passphrase %s' " % passphrase
-if self.gpg_bin:
-cmd += "--define '%%__gpg %s' " % self.gpg_bin
-if self.gpg_path:
-cmd += "--define '_gpg_path %s' " % self.gpg_path
-cmd += ' '.join(files)
-
-status, output = oe.utils.getstatusoutput(cmd)
-if status:
-raise bb.build.FuncFailed("Failed to sign RPM packages: %s" %
output)
+for file in files:
+cmd = self.rpm_bin + " --addsign --define '_gpg_name %s' " % keyid
+cmd += "--define '_gpg_passphrase %s' " % passphrase
+if self.gpg_bin:
+cmd += "--define '%%__gpg %s' " % self.gpg_bin
+if self.gpg_path:
+cmd += "--define '_gpg_path %s' " % self.gpg_path
+cmd += file
+
+status, output = oe.utils.getstatusoutput(cmd)
+if status:
+raise bb.build.FuncFailed("Failed to sign RPM packages: %s" %
output)
def detach_sign(self, input_file, keyid, passphrase_file, passphrase=None,
armor=True):
"""Create a detached signature of a file"""
--
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto
[yocto] Adding to inittab based on image content
Hi, I have a custom recipe for an application, and the app also needs an entry adding to inittab. I'd like to trigger this, obviously, only when the app is included in the image. I came across some hints at how to do this - http://git.yoctoproject.org/cgit/cgit.cgi/meta-virtualization/tree/recipes-c ore/sysvinit/sysvinit-inittab_2.88dsf.bbappend?h=dizzy - but the app isn't in DISTRO_FEATURES. (Right or wrong.., I include it in the image with a "CORE_IMAGE_EXTRA_INSTALL +=" in my image recipe). Any suggestions on how to make this inittab addition conditional? Thanks -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
[yocto] [patchwork][PATCH] patchwork/templates/patchwork/series: Improve series view
From: Jose Lamego
Reviewing patches from a series requires heavy usage of the
browser navigation buttons, providing a poor UX.
This changes allows viewing content from each patch in a series,
without leaving the series view.
[YOCTO #10627]
Signed-off-by: Jose Lamego
---
htdocs/js/series.js | 43 +++
patchwork/templates/patchwork/patch.html | 15 ++--
patchwork/templates/patchwork/series.html | 114 --
3 files changed, 113 insertions(+), 59 deletions(-)
create mode 100644 htdocs/js/series.js
diff --git a/htdocs/js/series.js b/htdocs/js/series.js
new file mode 100644
index 000..4f4f477
--- /dev/null
+++ b/htdocs/js/series.js
@@ -0,0 +1,43 @@
+$(document).ready(function(){
+$('[data-toggle="tooltip"]').tooltip();
+revTab=document.getElementById('revs-list')
+coverView=document.getElementById('cover-letter-view'),
+patchView=document.getElementById('patch-view'),
+patchList=document.getElementById('patches-list')
+
+revTab.style.border='none'
+revTab.style.background='transparent'
+revTab.style.padding='15px'
+coverView.style.display='block'
+patchView.style.display='none'
+patchList.style.display='none'
+
+document.getElementById('cover-letter-tab').onclick=function(){
+coverView.style.display='block'
+patchView.style.display='none'
+patchList.style.display='none'
+}
+
+document.getElementById('patches-tab').onclick=function(){
+coverView.style.display='none'
+patchList.style.display='block'
+patchView.style.display="none"
+}
+
+$('#revs-list').on('change', function(e){
+var optionSelected=$("option:selected", this)
+jQuery('.tab-content div.tab-pane.fade.in.active').
+removeClass(' in active')
+jQuery('.tab-content div#'+this.value+'.tab-pane.fade').
+addClass(' in active')
+patchView.style.display='none'
+})
+
+$('.patch-link').on('click', function(){
+coverView.style.display='none'
+patchView.style.display='block'
+patchView.innerHTML=
+'Loading patch...'
+$("#patch-view").load(this.getAttribute("data-url") + " #patch-body")
+})
+})
diff --git a/patchwork/templates/patchwork/patch.html
b/patchwork/templates/patchwork/patch.html
index 5ce540d..59df19d 100644
--- a/patchwork/templates/patchwork/patch.html
+++ b/patchwork/templates/patchwork/patch.html
@@ -7,6 +7,7 @@
{% block title %}{{patch.name}}{% endblock %}
{% block body %}
+
function toggle_headers(link_id, headers_id)
{
@@ -25,10 +26,12 @@ function toggle_headers(link_id, headers_id)
}
-
+
{{ patch.name }}
Submitted by {{ patch.submitter|personify:project }} on {{
patch.date }}
+|
+Patch ID: {{ patch.id }}
Details
@@ -134,10 +137,10 @@ function toggle_headers(link_id, headers_id)
{% csrf_token %}
-
-{% for bundle in bundles %}
- {{bundle.name}}
-{% endfor %}
+
+ {% for bundle in bundles %}
+ {{bundle.name}}
+ {% endfor %}
@@ -219,5 +222,5 @@ function toggle_headers(link_id, headers_id)
{% endfor %}
-
+
{% endblock %}
diff --git a/patchwork/templates/patchwork/series.html
b/patchwork/templates/patchwork/series.html
index c0a5261..6c35212 100644
--- a/patchwork/templates/patchwork/series.html
+++ b/patchwork/templates/patchwork/series.html
@@ -1,6 +1,7 @@
{% extends "base.html" %}
{% load person %}
+{% load static %}
{% block title %}{{project.name}}{% endblock %}
{% block headers %}
@@ -9,64 +10,70 @@ $(function () {
pw.setup_series({ patches: 'series-patchlist' });
});
+
{% endblock %}
{% block body %}
-{{ series.name }}
-
-
- Submitted by {{ series.submitter|personify:project }} on {{
series.submitted }}
-
-
-Details
+ {{ series.name }}
+
+
+Submitted by {{ series.submitter|personify:project }} on {{
series.submitted }}
+|
+Reviewer: {{ series.reviewer }}
+|
+Updated on: {{ series.last_updated }}
+|
+Series ID: {{ series.pk }}
+
-
-
-Reviewer
-{% if series.reviewer %}
-{{ series.reviewer.name }}
-{% else %}
-None
-{% endif %}
-
-
-Submitted
-{{ series.submitted }}
-
-
-Last Updated
-{{ series.last_updated }}
-
-
-Revision
-{{ series.last_revision.version }}
-
-
+
+
+
+
+ Toggle navigation
+
+
+
+
+
+
+
+
+
+ {% for revision in revisions %}
+
+ Revision {{ revision.version }}
+
+ {% endfor %}
+
+
+
+Cover letter
+
+
+
+ Patches ({{ series.latest_revision.n_patches }})
+
+
+
+
+
+
+
{% if cover
[yocto] openjdk 8 support compile for arm with jit support
Please suggest me the solution for compiling Openjdk 8 for arm adding support for any jit compiler like shark or jamvm -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
Re: [yocto] Adding to inittab based on image content
Hi Colin,
The correct way of doing this is a package postinstallation script that is run
by the package manager after the package containing your application is
installed on the target system.
You add to your recipe:
pkg_postinst_${PN}() {
#!/bin/sh
echo "whateveryouneed" >> ${D}/etc/inittab
}
The build system will include this as the post install script into the package
in the correct form for the package manager you are using e.g. RPM, DEB, IPK.
This will work when the build system installs your package into the system
root or when executed on the target.
You can also distinguish the two cases:
pkg_postinst_${PN}() {
#!/bin/sh
if [ x"$D" = "x" ] ; then
# shell commands for target execution
else
# shell commands for build system execution
fi
}
In the case of target execution $D is not set.
Best regards,
Rudi
On Friday, January 6, 2017 1:39:40 PM PST colin.helliw...@ln-systems.com
wrote:
> Hi,
>
> I have a custom recipe for an application, and the app also needs an entry
> adding to inittab. I'd like to trigger this, obviously, only when the app is
> included in the image.
>
> I came across some hints at how to do this -
> http://git.yoctoproject.org/cgit/cgit.cgi/meta-virtualization/tree/recipes-c
> ore/sysvinit/sysvinit-inittab_2.88dsf.bbappend?h=dizzy - but the app isn't
> in DISTRO_FEATURES. (Right or wrong.., I include it in the image with a
> "CORE_IMAGE_EXTRA_INSTALL +=" in my image recipe).
>
> Any suggestions on how to make this inittab addition conditional?
>
> Thanks
--
Rudolf J Streif
signature.asc
Description: This is a digitally signed message part.
--
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto
[yocto] [meta-selinux][PATCH] refpolicy-git: Update patches
A number of upstream changes caused patch conflicts or duplication in the final policy. Update the list of git patches appropriately. Signed-off-by: Joe MacDonald --- .../ftp-add-ftpd_t-to-mlsfilewrite.patch | 11 +- .../refpolicy/refpolicy-git/poky-fc-clock.patch| 11 +- .../refpolicy-git/poky-fc-corecommands.patch | 24 .../refpolicy/refpolicy-git/poky-fc-dmesg.patch| 11 +- .../refpolicy/refpolicy-git/poky-fc-fix-bind.patch | 9 +- .../poky-fc-fix-real-path_login.patch | 20 ++-- .../poky-fc-fix-real-path_resolv.conf.patch| 13 +-- .../poky-fc-fix-real-path_shadow.patch | 11 +- .../refpolicy-git/poky-fc-fix-real-path_su.patch | 9 +- .../refpolicy/refpolicy-git/poky-fc-fstools.patch | 33 +++--- .../refpolicy-git/poky-fc-ftpwho-dir.patch | 13 +-- .../refpolicy/refpolicy-git/poky-fc-iptables.patch | 24 .../refpolicy/refpolicy-git/poky-fc-mta.patch | 11 +- .../refpolicy/refpolicy-git/poky-fc-netutils.patch | 13 +-- .../refpolicy/refpolicy-git/poky-fc-nscd.patch | 9 +- .../refpolicy/refpolicy-git/poky-fc-rpm.patch | 9 +- .../refpolicy/refpolicy-git/poky-fc-screen.patch | 12 +- .../refpolicy/refpolicy-git/poky-fc-ssh.patch | 15 ++- .../refpolicy/refpolicy-git/poky-fc-su.patch | 23 .../refpolicy-git/poky-fc-subs_dist.patch | 15 ++- .../refpolicy-git/poky-fc-sysnetwork.patch | 23 ++-- .../refpolicy/refpolicy-git/poky-fc-udevd.patch| 21 ++-- .../poky-fc-update-alternatives_hostname.patch | 9 +- .../poky-fc-update-alternatives_sysklogd.patch | 20 ++-- .../poky-fc-update-alternatives_sysvinit.patch | 27 +++-- ...poky-policy-add-rules-for-bsdpty_device_t.patch | 53 ++--- ...ky-policy-add-rules-for-syslogd_t-symlink.patch | 13 +-- .../poky-policy-add-rules-for-tmp-symlink.patch| 63 --- ...ky-policy-add-rules-for-var-cache-symlink.patch | 11 +- ...licy-add-rules-for-var-log-symlink-apache.patch | 11 +- ...rules-for-var-log-symlink-audisp_remote_t.patch | 13 +-- ...poky-policy-add-rules-for-var-log-symlink.patch | 81 ++ ...ky-policy-add-syslogd_t-to-trusted-object.patch | 11 +- ...-policy-allow-nfsd-to-exec-shell-commands.patch | 21 ++-- ...-policy-allow-setfiles_t-to-read-symlinks.patch | 11 +- .../poky-policy-allow-sysadm-to-run-rpcinfo.patch | 11 +- .../poky-policy-don-t-audit-tty_device_t.patch | 11 +- .../poky-policy-fix-dmesg-to-use-dev-kmsg.patch| 17 ++- .../poky-policy-fix-new-SELINUXMNT-in-sys.patch| 124 - ...poky-policy-fix-nfsd_t-to-mount_nfsd_fs_t.patch | 26 - ...olicy-fix-setfiles-statvfs-get-file-count.patch | 11 +- ...ky-policy-fix-seutils-manage-config-files.patch | 19 ++-- .../refpolicy-update-for_systemd.patch | 9 +- recipes-security/refpolicy/refpolicy_common.inc| 4 + recipes-security/refpolicy/refpolicy_git.inc | 3 - 45 files changed, 501 insertions(+), 418 deletions(-) delete mode 100644 recipes-security/refpolicy/refpolicy-git/poky-fc-corecommands.patch delete mode 100644 recipes-security/refpolicy/refpolicy-git/poky-fc-iptables.patch delete mode 100644 recipes-security/refpolicy/refpolicy-git/poky-fc-su.patch diff --git a/recipes-security/refpolicy/refpolicy-git/ftp-add-ftpd_t-to-mlsfilewrite.patch b/recipes-security/refpolicy/refpolicy-git/ftp-add-ftpd_t-to-mlsfilewrite.patch index 49da4b6..4830566 100644 --- a/recipes-security/refpolicy/refpolicy-git/ftp-add-ftpd_t-to-mlsfilewrite.patch +++ b/recipes-security/refpolicy/refpolicy-git/ftp-add-ftpd_t-to-mlsfilewrite.patch @@ -21,11 +21,11 @@ Signed-off-by: Roy Li policy/modules/contrib/ftp.te |2 ++ 1 file changed, 2 insertions(+) -diff --git a/policy/modules/contrib/ftp.te b/policy/modules/contrib/ftp.te -index 544c512..12a31dd 100644 --- a/policy/modules/contrib/ftp.te +++ b/policy/modules/contrib/ftp.te -@@ -144,6 +144,8 @@ role ftpdctl_roles types ftpdctl_t; +@@ -148,10 +148,12 @@ init_system_domain(ftpdctl_t, ftpdctl_ex + role ftpdctl_roles types ftpdctl_t; + type ftpdctl_tmp_t; files_tmp_file(ftpdctl_tmp_t) @@ -34,6 +34,5 @@ index 544c512..12a31dd 100644 type sftpd_t; domain_type(sftpd_t) role system_r types sftpd_t; --- -1.7.10.4 - + + type xferlog_t; diff --git a/recipes-security/refpolicy/refpolicy-git/poky-fc-clock.patch b/recipes-security/refpolicy/refpolicy-git/poky-fc-clock.patch index 3ff8f55..b36c209 100644 --- a/recipes-security/refpolicy/refpolicy-git/poky-fc-clock.patch +++ b/recipes-security/refpolicy/refpolicy-git/poky-fc-clock.patch @@ -4,19 +4,16 @@ Upstream-Status: Inappropriate [configuration] Signed-off-by: Xin Ouyang --- - policy/modules/system/clock.fc | 1 + + policy/modules/system/clock.fc |1 + 1 file changed, 1 insertion(+) -diff --git a/policy/modules/system/clock.fc b/policy/modules/system/clock.fc -index c5e05ca..a74c40c 100644 --- a/policy/modu
[yocto] [ANNOUNCEMENT] Milestone 1 for Yocto Project 2.3 now available.
The first milestone release for Yocto Project 2.3 is available for download now. Download: http://downloads.yoctoproject.org/releases/yocto/milestones/yocto-2.3_M1/ eclipse-poky/mars-master 92aa0e79e8b01c56f0670af3cd8296ec68b43350 eclipse-poky/neon-master a751bfdcb095bdc7bf8008b205b06adfdaad294f meta-qt3 f33b73a9563f2dfdfd0ee37b61d65d90197a456f meta-qt4 2c7f8df9039be498f8a2232d1428adb7f4e5e800 poky 573c646d4cc62dcd0c230381df4940bdf314d495 Test report: https://wiki.yoctoproject.org/wiki/WW52_-_2016-12-19_-_Full_Test_Cycle_2.3_M1_rc1 Thank you to everyone for your contributions. Tracy Graydon Yocto Project Build and Release -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
[yocto] has support for MPC8315E-RDB been dropped?
i notice that if you search for the powerpc BSP in the latest release here: https://www.yoctoproject.org/downloads/bsps?release=98&processer%5B%5D=22&title= you get no match. i haven't been paying attention -- has yocto dropped that board as its powerpc reference board? is it being replaced by a newer powerpc system? rday -- Robert P. J. Day Ottawa, Ontario, CANADA http://crashcourse.ca Twitter: http://twitter.com/rpjday LinkedIn: http://ca.linkedin.com/in/rpjday -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
[yocto] [patchwork][PATCH] patchwork/bin/parsemail: Make "[PATCH" prefix mandatory
Patchwork may incorrectly identify emails containing patch-like content as
patches.
This change makes "[PATCH" prefix in subject mandatory for emails to be
considered as new patches.
[YOCTO #10764]
Signed-off-by: Jose Lamego
---
patchwork/bin/parsemail.py | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/patchwork/bin/parsemail.py b/patchwork/bin/parsemail.py
index 476118d..8d6529c 100755
--- a/patchwork/bin/parsemail.py
+++ b/patchwork/bin/parsemail.py
@@ -399,7 +399,8 @@ def find_content(project, mail):
refs = build_references_list(mail)
is_root = refs == []
is_cover_letter = is_root and x == 0
-is_patch = patchbuf is not None
+patch_prefix = re.search('\[\s*PATCH', mail.get('Subject'))
+is_patch = patchbuf is not None and patch_prefix
drop_patch = not is_attachment and \
project.git_send_email_only and not is_git_send_email(mail)
--
1.9.1
--
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto
Re: [yocto] [PATCH 0/2] yocto-kernel-cache: Update audio support and add Firewire support
On 2017-01-04 10:19 AM, Jussi Laako wrote: Here are two patches for yocto-kernel-cache: 1) Updates audio support configuration and removes some legacy stuff 2) Adds kernel feature for Firewire support I merged the firewire support from here, and the audio from the v2 patch. The changes are pushed, and I'll send SRCREV updates on Monday once I'm back in the office. Bruce -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
