[yocto] [meta-selinux][PATCH] rpm: modify the rpm bbappend file to suitable for rpm4

2017-05-09 Thread Dengke Du
1. change the rpm_5.4.16.bbappend to rpm_git.bbappend, this is
   because the rpm in oe-core has become rpm4 from rpm5.

2. drop the patch for rpm5.

3. delete the does not exist files when run task do_package.

Signed-off-by: Dengke Du 
---
 recipes-devtools/rpm/rpm_5.4.16.bbappend | 10 --
 recipes-devtools/rpm/rpm_git.bbappend|  4 
 2 files changed, 4 insertions(+), 10 deletions(-)
 delete mode 100644 recipes-devtools/rpm/rpm_5.4.16.bbappend
 create mode 100644 recipes-devtools/rpm/rpm_git.bbappend

diff --git a/recipes-devtools/rpm/rpm_5.4.16.bbappend 
b/recipes-devtools/rpm/rpm_5.4.16.bbappend
deleted file mode 100644
index 2a41a28..000
--- a/recipes-devtools/rpm/rpm_5.4.16.bbappend
+++ /dev/null
@@ -1,10 +0,0 @@
-FILESEXTRAPATHS_prepend := "${THISDIR}/${PN}:"
-
-SRC_URI += "file://rpm-fix-build-bug.patch \
-  "
-FILES_${PN} += "${libdir}/rpm/bin/spooktool \
-${libdir}/rpm/bin/semodule \
-   "
-
-inherit with-selinux
-PACKAGECONFIG[selinux] = "${WITH_SELINUX},${WITHOUT_SELINUX},libsemanage,"
diff --git a/recipes-devtools/rpm/rpm_git.bbappend 
b/recipes-devtools/rpm/rpm_git.bbappend
new file mode 100644
index 000..9f3ec90
--- /dev/null
+++ b/recipes-devtools/rpm/rpm_git.bbappend
@@ -0,0 +1,4 @@
+FILESEXTRAPATHS_prepend := "${THISDIR}/${PN}:"
+
+inherit with-selinux
+PACKAGECONFIG[selinux] = "${WITH_SELINUX},${WITHOUT_SELINUX},libsemanage,"
-- 
2.8.1

-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


Re: [yocto] [meta-selinux][PATCH] rpm: modify the rpm bbappend file to suitable for rpm4

2017-05-09 Thread Dengke Du

Please ignore this, thanks.


On 2017年05月09日 15:41, Dengke Du wrote:

1. change the rpm_5.4.16.bbappend to rpm_git.bbappend, this is
because the rpm in oe-core has become rpm4 from rpm5.

2. drop the patch for rpm5.

3. delete the does not exist files when run task do_package.

Signed-off-by: Dengke Du 
---
  recipes-devtools/rpm/rpm_5.4.16.bbappend | 10 --
  recipes-devtools/rpm/rpm_git.bbappend|  4 
  2 files changed, 4 insertions(+), 10 deletions(-)
  delete mode 100644 recipes-devtools/rpm/rpm_5.4.16.bbappend
  create mode 100644 recipes-devtools/rpm/rpm_git.bbappend

diff --git a/recipes-devtools/rpm/rpm_5.4.16.bbappend 
b/recipes-devtools/rpm/rpm_5.4.16.bbappend
deleted file mode 100644
index 2a41a28..000
--- a/recipes-devtools/rpm/rpm_5.4.16.bbappend
+++ /dev/null
@@ -1,10 +0,0 @@
-FILESEXTRAPATHS_prepend := "${THISDIR}/${PN}:"
-
-SRC_URI += "file://rpm-fix-build-bug.patch \
-  "
-FILES_${PN} += "${libdir}/rpm/bin/spooktool \
-${libdir}/rpm/bin/semodule \
-   "
-
-inherit with-selinux
-PACKAGECONFIG[selinux] = "${WITH_SELINUX},${WITHOUT_SELINUX},libsemanage,"
diff --git a/recipes-devtools/rpm/rpm_git.bbappend 
b/recipes-devtools/rpm/rpm_git.bbappend
new file mode 100644
index 000..9f3ec90
--- /dev/null
+++ b/recipes-devtools/rpm/rpm_git.bbappend
@@ -0,0 +1,4 @@
+FILESEXTRAPATHS_prepend := "${THISDIR}/${PN}:"
+
+inherit with-selinux
+PACKAGECONFIG[selinux] = "${WITH_SELINUX},${WITHOUT_SELINUX},libsemanage,"


--
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


Re: [yocto] [meta-raspberrypi] how to apply custom kernel configuration?

2017-05-09 Thread Bruce Ashfield

On 2017-05-08 6:08 PM, Andrei Gherzan wrote:

On Sat, May 6, 2017 at 6:14 PM, Khem Raj  wrote:

On Sat, May 6, 2017 at 9:45 AM, Andrea Galbusera  wrote:

Hi!

I was wondering how to apply some extra kernel configuration from a custom
layer via a bbappend. I know that with meta-raspberrypi there exist some
variables you can define in local.conf that will drive how the kernel is
configured: but what about some very specific device driver nobody than me
is interest in? To me it seems it doesn't deserve a dedicated global oe
variable.

Some investigation showed this topic already came up on the list from time
to time in the past (most recently in [1]). To me it looks like there is
some common desire to get rid of the current "magic" carried out by
linux-rpi.inc by moving the linux-raspberrypi recipes into the configuration
fragments style.

In the short term, my question are: how do you guys manage to add your
custom kernel configurations? Do you rely on full blown static defconfigs?
Have you found any reliable way to do "differential" configurations with the
current state of metadata?

In a longer term, I'd really like to help moving towards supporting
configuration fragments for linux-raspberrypi, but I suspect it'd be a too
much hard task for my current understanding of the whole kernel
configuration workflow. Do you know of anyone already working on this or
does anyone have a clear idea of what is needed to get the work done? Some
times ago I tried to resurrect [2], but with no luck, probably due to some
changes that happened in the linux-yocto files in the meanwhile.

Comments from gurus are welcome! ;-)


I have been hinting at using yocto kernel tooling. Idea is worth a pull request
care sending one ?


I'm not using config fragments myself but I was under the impression
that we do support it.


Also FWIW, I've had a feature around for quite a while that I'll
complete in the 2.4 release cycle. That feature pulls the core fragment
processing into the main kernel classes (with auditing, etc, still in
kernel-yocto).

So doing an inherit of kernel-yocto won't be necessary at that point
.. which may ease the introduction of some config fragments.

Bruce



--
Andrei Gherzan



--
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


[yocto] [meta-security][PATCH] clamav: fix new build error

2017-05-09 Thread Armin Kuster
configure: error: The installed zlib version may contain a security bug. Please 
upgrade to 1.2.2 or later: http://www.zlib.net. You can omit this check with 
--disable-zlib-vcheck but DO NOT REPORT any stability issues then!

bypass check as our zlib is 1.2.11

Signed-off-by: Armin Kuster 
---
 recipes-security/clamav/clamav_0.99.2.bb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/recipes-security/clamav/clamav_0.99.2.bb 
b/recipes-security/clamav/clamav_0.99.2.bb
index 3e5f36c..c755a64 100644
--- a/recipes-security/clamav/clamav_0.99.2.bb
+++ b/recipes-security/clamav/clamav_0.99.2.bb
@@ -51,7 +51,7 @@ PACKAGECONFIG[json] = "--with-libjson=${STAGING_LIBDIR}, 
--without-libjson, json
 PACKAGECONFIG[curl] = "--with-libcurl=${STAGING_LIBDIR}, --without-libcurl, 
curl,"
 PACKAGECONFIG[ipv6] = "--enable-ipv6, --disable-ipv6"
 PACKAGECONFIG[openssl] = "--with-openssl=${STAGING_DIR_HOST}/usr, 
--without-openssl, openssl, openssl"
-PACKAGECONFIG[zlib] = "--with-zlib=${STAGING_DIR_HOST}/usr, --without-zlib, 
zlib, "
+PACKAGECONFIG[zlib] = "--with-zlib=${STAGING_DIR_HOST}/usr 
--disable-zlib-vcheck , --without-zlib, zlib, "
 PACKAGECONFIG[bz2] = "--with-libbz2-prefix=${STAGING_LIBDIR}/.., 
--without-libbz2-prefix, "
 PACKAGECONFIG[ncurses] = "--with-libncurses-prefix=${STAGING_LIBDIR}/.., 
--without-libncurses-prefix, ncurses, "
 PACKAGECONFIG[systemd] = 
"--with-systemdsystemunitdir=${systemd_unitdir}/system/, 
--without-systemdsystemunitdir, "
-- 
2.7.4

-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


[yocto] [meta-security][PATCH 00/10] move tpm into its own layer

2017-05-09 Thread Armin Kuster
tpm recipes copied as-is

This was done to allow inclusion of TPM components independent of the rest of 
the layer.
minimizes layerdepends

fixed incorrect use of DISTRO_FEATURES

Updated tpm kernel configs to newer version

added a few new packagegroups

Armin Kuster (10):
  tpm: move to a sub layer
  change tpm from distro to machine feature
  meta-tpm: add base package group as was in meta-security
  packagegroup: remove tpm components
  tpm packagegroups: split into logical units
  tpm-i2c: some systems us i2c TPM
  kernel tpm rework
  tpm-image: used for testing for now.
  linux-stable: fix module selections
  tpm2: package groups fixes

 meta-tpm/README|  0
 meta-tpm/conf/layer.conf   | 13 ++
 meta-tpm/recipes-core/images/security-tpm-image.bb | 19 ++
 .../packagegroup/packagegroup-security-tpm-i2c.bb  | 19 ++
 .../packagegroup/packagegroup-security-tpm.bb  | 29 ++
 .../packagegroup/packagegroup-security-tpm2.bb | 18 ++
 .../packagegroup/packagegroup-security-vtpm.bb | 14 +++
 meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg  |  8 ++
 meta-tpm/recipes-kernel/linux/linux-yocto/tpm.scc  |  3 +++
 meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.cfg |  6 +
 meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.scc |  3 +++
 .../recipes-kernel/linux/linux-yocto/tpm_i2c.cfg   | 15 +++
 .../recipes-kernel/linux/linux-yocto/tpm_i2c.scc   |  6 +
 .../recipes-kernel/linux/linux-yocto/tpm_x86.cfg   |  4 +++
 meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.cfg |  5 
 meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.scc |  4 +++
 .../recipes-kernel/linux/linux-yocto_4.%.bbappend  | 17 +
 .../Convert-another-vdprintf-to-dprintf.patch  |  0
 .../files/Use-format-s-for-call-to-dprintf.patch   |  0
 .../libtpm/files/fix_signed_issue.patch|  0
 .../recipes-tpm}/libtpm/libtpm_1.0.bb  |  0
 .../recipes-tpm}/swtpm/files/fix_fcntl_h.patch |  0
 .../swtpm/files/fix_lib_search_path.patch  |  0
 .../swtpm/files/fix_signed_issue.patch |  0
 .../recipes-tpm}/swtpm/files/ioctl_h.patch |  0
 .../recipes-tpm}/swtpm/swtpm-wrappers-native.bb|  0
 .../recipes-tpm}/swtpm/swtpm_1.0.bb|  0
 .../tpm-tools/files/tpm-tools-extendpcr.patch  |  0
 .../recipes-tpm}/tpm-tools/tpm-tools_git.bb|  0
 .../recipes-tpm}/tpm2.0-tools/tpm2.0-tools_git.bb  |  0
 .../tpm2.0-tss/tpm2.0-tss/ax_pthread.m4|  0
 .../tpm2.0-tss/fix_musl_select_include.patch   |  0
 .../recipes-tpm}/tpm2.0-tss/tpm2.0-tss_git.bb  |  0
 .../tpm2simulator/tpm2simulator-native_116.bb  |  0
 ...path-use-POSIX-getpwent-instead-of-getpwe.patch |  0
 .../recipes-tpm}/trousers/files/tcsd.service   |  0
 .../trousers/files/trousers-udev.rules |  0
 .../recipes-tpm}/trousers/files/trousers.init.sh   |  0
 .../recipes-tpm}/trousers/trousers_git.bb  |  0
 recipes-kernel/linux/linux-yocto_4.10.bbappend |  3 ---
 .../packagegroup/packagegroup-core-security.bb | 18 ++
 41 files changed, 185 insertions(+), 19 deletions(-)
 create mode 100644 meta-tpm/README
 create mode 100644 meta-tpm/conf/layer.conf
 create mode 100644 meta-tpm/recipes-core/images/security-tpm-image.bb
 create mode 100644 
meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm-i2c.bb
 create mode 100644 
meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb
 create mode 100644 
meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm2.bb
 create mode 100644 
meta-tpm/recipes-core/packagegroup/packagegroup-security-vtpm.bb
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm.scc
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.cfg
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.scc
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.cfg
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.scc
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm_x86.cfg
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.cfg
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.scc
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend
 rename {recipes-tpm => 
meta-tpm/recipes-tpm}/libtpm/files/Convert-another-vdprintf-to-dprintf.patch 
(100%)
 rename {recipes-tpm => 
meta-tpm/recipes-tpm}/libtpm/files/Use-format-s-for-call-to-dprintf.patch (100%)
 rename {recipes-tpm => 
meta-tpm/recipes-tpm}/libtpm/files/fix_signed_issue.patch (100%)
 rename {recipes-tpm => meta-tpm/recipes-tpm}/libtpm/libtpm_1.0.bb (100%)
 rename {recipes-tpm => meta-tpm/recipes-tpm}/swtpm/files/fix_fcntl_h.patch 
(100%)
 rename {recipes-tpm => 
meta-tpm/recipes-tpm}/swtpm/files/fix_lib_search_path.patch (100%)
 renam

[yocto] [meta-security][PATCH 01/10] tpm: move to a sub layer

2017-05-09 Thread Armin Kuster
Signed-off-by: Armin Kuster 
---
 meta-tpm/README |  0
 meta-tpm/conf/layer.conf| 13 +
 meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend |  5 +
 .../libtpm/files/Convert-another-vdprintf-to-dprintf.patch  |  0
 .../libtpm/files/Use-format-s-for-call-to-dprintf.patch |  0
 .../recipes-tpm}/libtpm/files/fix_signed_issue.patch|  0
 {recipes-tpm => meta-tpm/recipes-tpm}/libtpm/libtpm_1.0.bb  |  0
 .../recipes-tpm}/swtpm/files/fix_fcntl_h.patch  |  0
 .../recipes-tpm}/swtpm/files/fix_lib_search_path.patch  |  0
 .../recipes-tpm}/swtpm/files/fix_signed_issue.patch |  0
 .../recipes-tpm}/swtpm/files/ioctl_h.patch  |  0
 .../recipes-tpm}/swtpm/swtpm-wrappers-native.bb |  0
 {recipes-tpm => meta-tpm/recipes-tpm}/swtpm/swtpm_1.0.bb|  0
 .../recipes-tpm}/tpm-tools/files/tpm-tools-extendpcr.patch  |  0
 .../recipes-tpm}/tpm-tools/tpm-tools_git.bb |  0
 .../recipes-tpm}/tpm2.0-tools/tpm2.0-tools_git.bb   |  0
 .../recipes-tpm}/tpm2.0-tss/tpm2.0-tss/ax_pthread.m4|  0
 .../tpm2.0-tss/tpm2.0-tss/fix_musl_select_include.patch |  0
 .../recipes-tpm}/tpm2.0-tss/tpm2.0-tss_git.bb   |  0
 .../recipes-tpm}/tpm2simulator/tpm2simulator-native_116.bb  |  0
 ...-user-ps-path-use-POSIX-getpwent-instead-of-getpwe.patch |  0
 .../recipes-tpm}/trousers/files/tcsd.service|  0
 .../recipes-tpm}/trousers/files/trousers-udev.rules |  0
 .../recipes-tpm}/trousers/files/trousers.init.sh|  0
 .../recipes-tpm}/trousers/trousers_git.bb   |  0
 recipes-kernel/linux/linux-yocto_4.10.bbappend  |  3 ---
 26 files changed, 18 insertions(+), 3 deletions(-)
 create mode 100644 meta-tpm/README
 create mode 100644 meta-tpm/conf/layer.conf
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend
 rename {recipes-tpm => 
meta-tpm/recipes-tpm}/libtpm/files/Convert-another-vdprintf-to-dprintf.patch 
(100%)
 rename {recipes-tpm => 
meta-tpm/recipes-tpm}/libtpm/files/Use-format-s-for-call-to-dprintf.patch (100%)
 rename {recipes-tpm => 
meta-tpm/recipes-tpm}/libtpm/files/fix_signed_issue.patch (100%)
 rename {recipes-tpm => meta-tpm/recipes-tpm}/libtpm/libtpm_1.0.bb (100%)
 rename {recipes-tpm => meta-tpm/recipes-tpm}/swtpm/files/fix_fcntl_h.patch 
(100%)
 rename {recipes-tpm => 
meta-tpm/recipes-tpm}/swtpm/files/fix_lib_search_path.patch (100%)
 rename {recipes-tpm => 
meta-tpm/recipes-tpm}/swtpm/files/fix_signed_issue.patch (100%)
 rename {recipes-tpm => meta-tpm/recipes-tpm}/swtpm/files/ioctl_h.patch (100%)
 rename {recipes-tpm => meta-tpm/recipes-tpm}/swtpm/swtpm-wrappers-native.bb 
(100%)
 rename {recipes-tpm => meta-tpm/recipes-tpm}/swtpm/swtpm_1.0.bb (100%)
 rename {recipes-tpm => 
meta-tpm/recipes-tpm}/tpm-tools/files/tpm-tools-extendpcr.patch (100%)
 rename {recipes-tpm => meta-tpm/recipes-tpm}/tpm-tools/tpm-tools_git.bb (100%)
 rename {recipes-tpm => meta-tpm/recipes-tpm}/tpm2.0-tools/tpm2.0-tools_git.bb 
(100%)
 rename {recipes-tpm => 
meta-tpm/recipes-tpm}/tpm2.0-tss/tpm2.0-tss/ax_pthread.m4 (100%)
 rename {recipes-tpm => 
meta-tpm/recipes-tpm}/tpm2.0-tss/tpm2.0-tss/fix_musl_select_include.patch (100%)
 rename {recipes-tpm => meta-tpm/recipes-tpm}/tpm2.0-tss/tpm2.0-tss_git.bb 
(100%)
 rename {recipes-tpm => 
meta-tpm/recipes-tpm}/tpm2simulator/tpm2simulator-native_116.bb (100%)
 rename {recipes-tpm => 
meta-tpm/recipes-tpm}/trousers/files/get-user-ps-path-use-POSIX-getpwent-instead-of-getpwe.patch
 (100%)
 rename {recipes-tpm => meta-tpm/recipes-tpm}/trousers/files/tcsd.service (100%)
 rename {recipes-tpm => 
meta-tpm/recipes-tpm}/trousers/files/trousers-udev.rules (100%)
 rename {recipes-tpm => meta-tpm/recipes-tpm}/trousers/files/trousers.init.sh 
(100%)
 rename {recipes-tpm => meta-tpm/recipes-tpm}/trousers/trousers_git.bb (100%)

diff --git a/meta-tpm/README b/meta-tpm/README
new file mode 100644
index 000..e69de29
diff --git a/meta-tpm/conf/layer.conf b/meta-tpm/conf/layer.conf
new file mode 100644
index 000..5085db5
--- /dev/null
+++ b/meta-tpm/conf/layer.conf
@@ -0,0 +1,13 @@
+# We have a conf and classes directory, add to BBPATH
+BBPATH .= ":${LAYERDIR}"
+
+# We have a recipes directory, add to BBFILES
+BBFILES += "${LAYERDIR}/recipes*/*/*.bb ${LAYERDIR}/recipes*/*/*.bbappend 
${LAYERDIR}/classes/*.bbclass"
+
+BBFILE_COLLECTIONS += "tpm-layer"
+BBFILE_PATTERN_tpm-layer = "^${LAYERDIR}/"
+BBFILE_PRIORITY_tpm-layer = "6"
+
+LAYERDEPENDS_tpm-layer = " \
+core \
+"
diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend 
b/meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend
new file mode 100644
index 000..e6b3c65
--- /dev/null
+++ b/meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend
@@ -0,0 +1,5 @@
+#
+# TPM kernel support
+
+KERNEL_FEATURES_append += "${@bb.utils.contains('DISTRO_FEATURES', 'tpm', ' 
feat

[yocto] [meta-security][PATCH 04/10] packagegroup: remove tpm components

2017-05-09 Thread Armin Kuster
Signed-off-by: Armin Kuster 
---
 .../packagegroup/packagegroup-core-security.bb | 14 --
 1 file changed, 14 deletions(-)

diff --git a/recipes-security/packagegroup/packagegroup-core-security.bb 
b/recipes-security/packagegroup/packagegroup-core-security.bb
index 2180908..681874c 100644
--- a/recipes-security/packagegroup/packagegroup-core-security.bb
+++ b/recipes-security/packagegroup/packagegroup-core-security.bb
@@ -57,17 +57,3 @@ SUMMARY_packagegroup-security-mac = "Security Mandatory 
Access Control systems"
 RDEPENDS_packagegroup-security-mac = " \
 ${@bb.utils.contains("DISTRO_FEATURES", "tomoyo", "ccs-tools", "",d)} \
 "
-
-SUMMARY_packagegroup-security-tpm = "Security TPM support"
-RDEPENDS_packagegroup-security-tpm = " \
-tpm-tools \
-trousers \
-tpm2.0-tools \
-libtss2 \
-resourcemgr \
-libtctidevice \
-libtctisocket \
-resourcemgr \
-libtpm \
-swtpm \
-"
-- 
2.7.4

-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


[yocto] [meta-security][PATCH 03/10] meta-tpm: add base package group as was in meta-security

2017-05-09 Thread Armin Kuster
Signed-off-by: Armin Kuster 
---
 .../packagegroup/packagegroup-security-tpm.bb  | 23 ++
 1 file changed, 23 insertions(+)
 create mode 100644 
meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb

diff --git a/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb 
b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb
new file mode 100644
index 000..f176627
--- /dev/null
+++ b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb
@@ -0,0 +1,23 @@
+DESCRIPTION = "Security packagegroup for Poky"
+LICENSE = "MIT"
+LIC_FILES_CHKSUM = 
"file://${COREBASE}/LICENSE;md5=4d92cd373abda3937c2bc47fbc49d690 \
+
file://${COREBASE}/meta/COPYING.MIT;md5=3da9cfbcb788c80a0384361b4de20420"
+
+inherit packagegroup
+
+PACKAGES = "packagegroup-security-tpm"
+
+SUMMARY_packagegroup-security-tpm = "Security TPM support"
+RDEPENDS_packagegroup-security-tpm = " \
+tpm-tools \
+trousers \
+tpm2.0-tools \
+libtss2 \
+resourcemgr \
+libtctidevice \
+libtctisocket \
+resourcemgr \
+libtpm \
+swtpm \
+"
+
-- 
2.7.4

-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


[yocto] [meta-security][PATCH 02/10] change tpm from distro to machine feature

2017-05-09 Thread Armin Kuster
Signed-off-by: Armin Kuster 
---
 meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend | 2 +-
 recipes-security/packagegroup/packagegroup-core-security.bb | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend 
b/meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend
index e6b3c65..208d23f 100644
--- a/meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend
+++ b/meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend
@@ -1,5 +1,5 @@
 #
 # TPM kernel support
 
-KERNEL_FEATURES_append += "${@bb.utils.contains('DISTRO_FEATURES', 'tpm', ' 
features/tpm/tpm.scc', '', d)}"
+KERNEL_FEATURES_append += "${@bb.utils.contains('MACHINE_FEATURES', 'tpm', ' 
features/tpm/tpm.scc', '', d)}"
 
diff --git a/recipes-security/packagegroup/packagegroup-core-security.bb 
b/recipes-security/packagegroup/packagegroup-core-security.bb
index ae856c7..2180908 100644
--- a/recipes-security/packagegroup/packagegroup-core-security.bb
+++ b/recipes-security/packagegroup/packagegroup-core-security.bb
@@ -11,7 +11,7 @@ PACKAGES = "\
 packagegroup-security-scanners \
 packagegroup-security-ids  \
 packagegroup-security-mac  \
-${@bb.utils.contains("DISTRO_FEATURES", "tpm", 
"packagegroup-security-tpm", "",d)} \
+${@bb.utils.contains("MACHINE_FEATURES", "tpm", 
"packagegroup-security-tpm", "",d)} \
 "
 
 RDEPENDS_packagegroup-core-security = "\
@@ -19,7 +19,7 @@ RDEPENDS_packagegroup-core-security = "\
 packagegroup-security-scanners \
 packagegroup-security-ids  \
 packagegroup-security-mac  \
-${@bb.utils.contains("DISTRO_FEATURES", "tpm", 
"packagegroup-security-tpm", "",d)} \
+${@bb.utils.contains("MACHINE_FEATURES", "tpm", 
"packagegroup-security-tpm", "",d)} \
 "
 
 SUMMARY_packagegroup-security-utils = "Security utilities"
-- 
2.7.4

-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


[yocto] [meta-security][PATCH 06/10] tpm-i2c: some systems us i2c TPM

2017-05-09 Thread Armin Kuster
add modules and i2c support

Signed-off-by: Armin Kuster 
---
 .../packagegroup/packagegroup-security-tpm-i2c.bb   | 17 +
 1 file changed, 17 insertions(+)
 create mode 100644 
meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm-i2c.bb

diff --git 
a/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm-i2c.bb 
b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm-i2c.bb
new file mode 100644
index 000..d4c3bb7
--- /dev/null
+++ b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm-i2c.bb
@@ -0,0 +1,17 @@
+DESCRIPTION = "Security packagegroup for TPM i2c support"
+LICENSE = "MIT"
+LIC_FILES_CHKSUM = 
"file://${COREBASE}/LICENSE;md5=4d92cd373abda3937c2bc47fbc49d690 \
+
file://${COREBASE}/meta/COPYING.MIT;md5=3da9cfbcb788c80a0384361b4de20420"
+
+inherit packagegroup
+
+PACKAGES = "packagegroup-security-tpm-i2c"
+
+SUMMARY_packagegroup-security-tpm-i2c = "Security TPM i2c support"
+RDEPENDS_packagegroup-security-tpm-i2c = " \
+kernel-module-tpm-i2c-atmel \
+kernel-module-tpm-i2c-infineon \
+kernel-module-tpm-i2c-nuvoton \
+kernel-module-tpm-st33zp24 \
+kernel-module-tpm-st33zp24-i2c \
+"
-- 
2.7.4

-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


[yocto] [meta-security][PATCH 05/10] tpm packagegroups: split into logical units

2017-05-09 Thread Armin Kuster
this should help mitgate the need to pull in too many layers
if swtpm in not wanted

Signed-off-by: Armin Kuster 
---
 .../packagegroup/packagegroup-security-tpm.bb  |  9 -
 .../packagegroup/packagegroup-security-tpm2.bb | 18 ++
 .../packagegroup/packagegroup-security-vtpm.bb | 14 ++
 3 files changed, 32 insertions(+), 9 deletions(-)
 create mode 100644 
meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm2.bb
 create mode 100644 
meta-tpm/recipes-core/packagegroup/packagegroup-security-vtpm.bb

diff --git a/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb 
b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb
index f176627..2412348 100644
--- a/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb
+++ b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb
@@ -11,13 +11,4 @@ SUMMARY_packagegroup-security-tpm = "Security TPM support"
 RDEPENDS_packagegroup-security-tpm = " \
 tpm-tools \
 trousers \
-tpm2.0-tools \
-libtss2 \
-resourcemgr \
-libtctidevice \
-libtctisocket \
-resourcemgr \
-libtpm \
-swtpm \
 "
-
diff --git a/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm2.bb 
b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm2.bb
new file mode 100644
index 000..1c96cbe
--- /dev/null
+++ b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm2.bb
@@ -0,0 +1,18 @@
+DESCRIPTION = "Security packagegroup for Poky"
+LICENSE = "MIT"
+LIC_FILES_CHKSUM = 
"file://${COREBASE}/LICENSE;md5=4d92cd373abda3937c2bc47fbc49d690 \
+
file://${COREBASE}/meta/COPYING.MIT;md5=3da9cfbcb788c80a0384361b4de20420"
+
+inherit packagegroup
+
+PACKAGES = "packagegroup-security-tpm2"
+
+SUMMARY_packagegroup-security-tpm2 = "Security TPM 2.0 support"
+RDEPENDS_packagegroup-security-tpm2 = " \
+tpm2.0-tools \
+libtss2 \
+libtctidevice \
+libtctisocket \
+resourcemgr \
+kernel-module-tpm-crb \
+"
diff --git a/meta-tpm/recipes-core/packagegroup/packagegroup-security-vtpm.bb 
b/meta-tpm/recipes-core/packagegroup/packagegroup-security-vtpm.bb
new file mode 100644
index 000..f7eee7c
--- /dev/null
+++ b/meta-tpm/recipes-core/packagegroup/packagegroup-security-vtpm.bb
@@ -0,0 +1,14 @@
+DESCRIPTION = "Security packagegroup for Poky"
+LICENSE = "MIT"
+LIC_FILES_CHKSUM = 
"file://${COREBASE}/LICENSE;md5=4d92cd373abda3937c2bc47fbc49d690 \
+
file://${COREBASE}/meta/COPYING.MIT;md5=3da9cfbcb788c80a0384361b4de20420"
+
+inherit packagegroup
+
+PACKAGES = "packagegroup-security-vtpm"
+
+SUMMARY_packagegroup-security-vtpm = "Security Software vTPM support"
+RDEPENDS_packagegroup-security-vtpm = " \
+libtpm \
+swtpm \
+"  
-- 
2.7.4

-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


[yocto] [meta-security][PATCH 07/10] kernel tpm rework

2017-05-09 Thread Armin Kuster
Signed-off-by: Armin Kuster 
---
 meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg   |  5 +
 meta-tpm/recipes-kernel/linux/linux-yocto/tpm.scc   |  3 +++
 meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.cfg   | 15 +++
 meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.scc   |  6 ++
 meta-tpm/recipes-kernel/linux/linux-yocto/tpm_x86.cfg   |  4 
 meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.cfg  |  5 +
 meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.scc  |  4 
 meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend  | 11 +++
 meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend |  5 -
 9 files changed, 53 insertions(+), 5 deletions(-)
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm.scc
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.cfg
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.scc
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm_x86.cfg
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.cfg
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.scc
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend
 delete mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend

diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg 
b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg
new file mode 100644
index 000..e34b24e
--- /dev/null
+++ b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg
@@ -0,0 +1,5 @@
+CONFIG_HW_RANDOM_TPM=y
+CONFIG_TCG_TPM=y
+CONFIG_TCG_TIS_CORE=y
+CONFIG_TCG_TIS=y
+CONFIG_SECURITYFS=y
diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto/tpm.scc 
b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm.scc
new file mode 100644
index 000..2949ed4
--- /dev/null
+++ b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm.scc
@@ -0,0 +1,3 @@
+define KFEATURE_DESCRIPTION "Enable TPM"
+
+kconf hardware tpm.cfg
diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.cfg 
b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.cfg
new file mode 100644
index 000..59993f9
--- /dev/null
+++ b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.cfg
@@ -0,0 +1,15 @@
+CONFIG_HW_RANDOM_TPM=y
+CONFIG_TCG_TPM=y
+CONFIG_TCG_TIS_CORE=y
+CONFIG_TCG_TIS=y
+CONFIG_SECURITYFS=y
+
+CONFIG_REGMAP_I2C=y
+CONFIG_I2C_BOARDINFO=y
+CONFIG_I2C_COMPAT=y
+CONFIG_RTC_I2C_AND_SPI=y
+
+CONFIG_TCG_TIS_I2C_ATMEL=m
+CONFIG_TCG_TIS_I2C_INFINEON=m
+CONFIG_TCG_TIS_I2C_NUVOTON=m
+CONFIG_TCG_TIS_ST33ZP24_I2C=m
diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.scc 
b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.scc
new file mode 100644
index 000..0e4eedb
--- /dev/null
+++ b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.scc
@@ -0,0 +1,6 @@
+define KFEATURE_DESCRIPTION "Enable TPM i2c"
+
+include features/i2c/i2c.scc
+
+kconf hardware tpm_i2c.cfg
+
diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto/tpm_x86.cfg 
b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm_x86.cfg
new file mode 100644
index 000..8be331a
--- /dev/null
+++ b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm_x86.cfg
@@ -0,0 +1,4 @@
+CONFIG_TCG_NSC=m
+CONFIG_TCG_ATMEL=m
+CONFIG_TCG_INFINEON=m
+CONFIG_TCG_TIS_ST33ZP24=m
diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.cfg 
b/meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.cfg
new file mode 100644
index 000..a8b3758
--- /dev/null
+++ b/meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.cfg
@@ -0,0 +1,5 @@
+CONFIG_HW_RANDOM_TPM=y
+CONFIG_TCG_TPM=y
+CONFIG_TCG_VTPM_PROXY=y
+CONFIG_SECURITYFS=y
+~
diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.scc 
b/meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.scc
new file mode 100644
index 000..e842da6
--- /dev/null
+++ b/meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.scc
@@ -0,0 +1,4 @@
+define KFEATURE_DESCRIPTION "Enable vTPM"
+
+kconf hardware vtpm.cfg
+
diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend 
b/meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend
new file mode 100644
index 000..0eebf00
--- /dev/null
+++ b/meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend
@@ -0,0 +1,11 @@
+FILESEXTRAPATHS_prepend := "${THISDIR}/linux-yocto:"
+
+# Enable tpm in kernel 
+SRC_URI_append_x86 = " \
+${@bb.utils.contains('MACHINE_FEATURES', 'tpm', 'file://tpm.scc', '', d)} \
+"
+
+SRC_URI += " \
+${@bb.utils.contains('MACHINE_FEATURES', 'tpm_i2c', 'file://tpm_i2c.scc', 
'', d)} \
+${@bb.utils.contains('MACHINE_FEATURES', 'vtpm', 'file://vtpm.scc', '', 
d)} \
+"
diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend 
b/meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend
deleted file mode 100644
index 208d23f..000
--- a/meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend
+++ /dev/null
@@ -1,5 +0,0 @@
-#
-# TPM kernel support
-
-KERNEL_FEATURES_append += "${@bb.utils.conta

[yocto] [meta-security][PATCH 08/10] tpm-image: used for testing for now.

2017-05-09 Thread Armin Kuster
Signed-off-by: Armin Kuster 
---
 meta-tpm/recipes-core/images/security-tpm-image.bb | 19 +++
 1 file changed, 19 insertions(+)
 create mode 100644 meta-tpm/recipes-core/images/security-tpm-image.bb

diff --git a/meta-tpm/recipes-core/images/security-tpm-image.bb 
b/meta-tpm/recipes-core/images/security-tpm-image.bb
new file mode 100644
index 000..a337076
--- /dev/null
+++ b/meta-tpm/recipes-core/images/security-tpm-image.bb
@@ -0,0 +1,19 @@
+DESCRIPTION = "A small image for building meta-security packages"
+
+IMAGE_FEATURES += "ssh-server-openssh"
+
+IMAGE_INSTALL = "\
+packagegroup-base \
+packagegroup-core-boot \
+${@bb.utils.contains('MACHINE_FEATURES', 'tpm',  
'packagegroup-security-tpm',  '', d)} \
+${@bb.utils.contains('MACHINE_FEATURES', 'tpm2', 
'packagegroup-security-tpm2', '', d)} \
+os-release \
+${CORE_IMAGE_EXTRA_INSTALL}"
+
+IMAGE_LINGUAS ?= " "
+
+LICENSE = "MIT"
+
+inherit core-image
+
+export IMAGE_BASENAME = "security-tpm-image"
-- 
2.7.4

-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


[yocto] [meta-security][PATCH 09/10] linux-stable: fix module selections

2017-05-09 Thread Armin Kuster
Signed-off-by: Armin Kuster 
---
 meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg  | 3 +++
 meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.cfg | 6 ++
 meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.scc | 3 +++
 meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend | 6 ++
 4 files changed, 18 insertions(+)
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.cfg
 create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.scc

diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg 
b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg
index e34b24e..8782823 100644
--- a/meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg
+++ b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg
@@ -3,3 +3,6 @@ CONFIG_TCG_TPM=y
 CONFIG_TCG_TIS_CORE=y
 CONFIG_TCG_TIS=y
 CONFIG_SECURITYFS=y
+CONFIG_TCG_NSC=m
+CONFIG_TCG_ATMEL=m
+CONFIG_TCG_INFINEON=m
diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.cfg 
b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.cfg
new file mode 100644
index 000..a81b54d
--- /dev/null
+++ b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.cfg
@@ -0,0 +1,6 @@
+CONFIG_HW_RANDOM_TPM=y
+CONFIG_TCG_TPM=y
+CONFIG_TCG_TIS_CORE=y
+CONFIG_TCG_TIS=y
+CONFIG_TCG_CRB=y
+CONFIG_SECURITYFS=y
diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.scc 
b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.scc
new file mode 100644
index 000..088148f
--- /dev/null
+++ b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.scc
@@ -0,0 +1,3 @@
+define KFEATURE_DESCRIPTION "Enable TPM 2.0"
+
+kconf hardware tpm2.cfg
diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend 
b/meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend
index 0eebf00..cea8b1b 100644
--- a/meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend
+++ b/meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend
@@ -3,6 +3,12 @@ FILESEXTRAPATHS_prepend := "${THISDIR}/linux-yocto:"
 # Enable tpm in kernel 
 SRC_URI_append_x86 = " \
 ${@bb.utils.contains('MACHINE_FEATURES', 'tpm', 'file://tpm.scc', '', d)} \
+${@bb.utils.contains('MACHINE_FEATURES', 'tpm2', 'file://tpm2.scc', '', 
d)} \
+"
+
+SRC_URI_append_x86-64 = " \
+${@bb.utils.contains('MACHINE_FEATURES', 'tpm', 'file://tpm.scc', '', d)} \
+${@bb.utils.contains('MACHINE_FEATURES', 'tpm2', 'file://tpm2.scc', '', 
d)} \
 "
 
 SRC_URI += " \
-- 
2.7.4

-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


[yocto] [meta-security][PATCH 10/10] tpm2: package groups fixes

2017-05-09 Thread Armin Kuster
Signed-off-by: Armin Kuster 
---
 .../packagegroup/packagegroup-security-tpm-i2c.bb |  2 ++
 .../packagegroup/packagegroup-security-tpm.bb | 15 +++
 .../packagegroup/packagegroup-security-tpm2.bb|  2 +-
 3 files changed, 18 insertions(+), 1 deletion(-)

diff --git 
a/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm-i2c.bb 
b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm-i2c.bb
index d4c3bb7..d3d9ebc 100644
--- a/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm-i2c.bb
+++ b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm-i2c.bb
@@ -9,6 +9,8 @@ PACKAGES = "packagegroup-security-tpm-i2c"
 
 SUMMARY_packagegroup-security-tpm-i2c = "Security TPM i2c support"
 RDEPENDS_packagegroup-security-tpm-i2c = " \
+${@bb.utils.contains('MACHINE_FEATURES', 'tpm', 
'packagegroup-security-tpm', '', d)} \
+${@bb.utils.contains('MACHINE_FEATURES', 'tpm2', 
'packagegroup-security-tpm2, '', d)} \
 kernel-module-tpm-i2c-atmel \
 kernel-module-tpm-i2c-infineon \
 kernel-module-tpm-i2c-nuvoton \
diff --git a/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb 
b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb
index 2412348..2db8521 100644
--- a/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb
+++ b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb
@@ -11,4 +11,19 @@ SUMMARY_packagegroup-security-tpm = "Security TPM support"
 RDEPENDS_packagegroup-security-tpm = " \
 tpm-tools \
 trousers \
+${X86_TPM_MODULES} \
+"
+
+X86_TPM_MODULES ?= ""
+
+X86_TPM_MODULES_x86 = " \
+kernel-module-tpm-atmel \
+kernel-module-tpm-infineon \
+kernel-module-tpm-nsc \
+"
+
+X86_TPM_MODULES_x86-64 = " \
+kernel-module-tpm-atmel \
+kernel-module-tpm-infineon \
+kernel-module-tpm-nsc \
 "
diff --git a/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm2.bb 
b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm2.bb
index 1c96cbe..57b0722 100644
--- a/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm2.bb
+++ b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm2.bb
@@ -10,9 +10,9 @@ PACKAGES = "packagegroup-security-tpm2"
 SUMMARY_packagegroup-security-tpm2 = "Security TPM 2.0 support"
 RDEPENDS_packagegroup-security-tpm2 = " \
 tpm2.0-tools \
+trousers \
 libtss2 \
 libtctidevice \
 libtctisocket \
 resourcemgr \
-kernel-module-tpm-crb \
 "
-- 
2.7.4

-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


[yocto] [meta-security][PATCH] security-core package group: add few more apps

2017-05-09 Thread Armin Kuster
Signed-off-by: Armin Kuster 
---
 recipes-security/packagegroup/packagegroup-core-security.bb | 7 ++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/recipes-security/packagegroup/packagegroup-core-security.bb 
b/recipes-security/packagegroup/packagegroup-core-security.bb
index 681874c..cfd7918 100644
--- a/recipes-security/packagegroup/packagegroup-core-security.bb
+++ b/recipes-security/packagegroup/packagegroup-core-security.bb
@@ -27,6 +27,7 @@ RDEPENDS_packagegroup-security-utils = "\
 checksec \
 nmap \
 pinentry \
+scapy \
 ${@bb.utils.contains("DISTRO_FEATURES", "pax", "pax-utils", "",d)} \
 "
 
@@ -34,7 +35,8 @@ SUMMARY_packagegroup-security-scanners = "Security scanners"
 RDEPENDS_packagegroup-security-scanners = "\
 nikto \
 checksecurity \
-   "
+clamav \
+"
 
 SUMMARY_packagegroup-security-audit = "Security Audit tools "
 RDEPENDS_packagegroup-security-audit = " \
@@ -51,9 +53,12 @@ SUMMARY_packagegroup-security-ids = "Security Intrusion 
Detection systems"
 RDEPENDS_packagegroup-security-ids = " \
 tripwire \
 samhain-client \
+suricata \
 "
 
 SUMMARY_packagegroup-security-mac = "Security Mandatory Access Control systems"
 RDEPENDS_packagegroup-security-mac = " \
 ${@bb.utils.contains("DISTRO_FEATURES", "tomoyo", "ccs-tools", "",d)} \
+${@bb.utils.contains("DISTRO_FEATURES", "apparmor", "", "",d)} \
+${@bb.utils.contains("DISTRO_FEATURES", "smack", "smack", "",d)} \
 "
-- 
2.7.4

-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


[yocto] meta-security does not set the right ACL to trouser config file (/etc/tsdc.conf)

2017-05-09 Thread Dominig ar Foll (Intel Open Source)
meta-security requires to predefine a user and group tss ibn order for
bitbake to build an image.
But it fails to set the correct ownership to the trouser conf file
(/etc/tsdc.conf)


Tspi_Context_Connect failed: 0x3011 - layer=tsp, code=0011 (17),
Communication failure
root@intel-corei7-64:~# tcsd -f
TCSD ERROR: TCSD config file (/etc/tcsd.conf) must be user/group tss/tss

-- 
Dominig ar Foll
Senior Software Architect
Intel Open Source Technology Centre

-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


[yocto] how to activate tpm

2017-05-09 Thread Dominig ar Foll (Intel Open Source)

  
  
Hello,
  
  I am trying to get tpm working on a Minnowboard and a Joule.
  I have enabled tpm in meta-security.
  I can see that the Kernel config looks good (see extract bellow)
  tpm is enable in the BIOS (fails with TPM>PTT or dTPM 2.0)
  BUT i still cannot see my tpm device in /sys/class/tpm
  
  Has anyone succeeded to enable tpm with meta-security ?
  If yes, I would be interested to know how you have done.

-- 
Dominig ar Foll
Senior Software Architect
Intel Open Source Technology Centre

--- log device not visible --
tcsd -f
TCSD TDDL ERROR: Could not find a device to open!
root@intel-corei7-64:~# modprobe -D tpm
builtin tpm
root@intel-corei7-64:~# modprobe -D tpm_tis
builtin tpm_tis
root@intel-corei7-64:/tmp# ls /sys/class/tpm   
root@intel-corei7-64:/tmp# 

- kernel config extract --

CONFIG_HW_RANDOM_TPM=m
# CONFIG_NVRAM is not set
# CONFIG_R3964 is not set
# CONFIG_APPLICOM is not set
# CONFIG_MWAVE is not set
# CONFIG_RAW_DRIVER is not set
CONFIG_HPET=y
CONFIG_HPET_MMAP=y
CONFIG_HPET_MMAP_DEFAULT=y
# CONFIG_HANGCHECK_TIMER is not set
CONFIG_TCG_TPM=y
CONFIG_TCG_TIS_CORE=y
CONFIG_TCG_TIS=y
# CONFIG_TCG_TIS_SPI is not set
# CONFIG_TCG_TIS_I2C_ATMEL is not set
# CONFIG_TCG_TIS_I2C_INFINEON is not set
# CONFIG_TCG_TIS_I2C_NUVOTON is not set
# CONFIG_TCG_NSC is not set
# CONFIG_TCG_ATMEL is not set
# CONFIG_TCG_INFINEON is not set
CONFIG_TCG_CRB=y
CONFIG_TCG_VTPM_PROXY=y
# CONFIG_TCG_TIS_ST33ZP24_I2C is not set
# CONFIG_TCG_TIS_ST33ZP24_SPI is not set
# CONFIG_TELCLOCK is not set
CONFIG_DEVPORT=y
# CONFIG_XILLYBUS is not set




  

-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


Re: [yocto] how to activate tpm

2017-05-09 Thread Hofemeier, Ulf
Hi Domining,

Please check out this article.

https://prosauce.org/blog/2016/1/11/minnowboard-max-enable-and-test-the-firmware-txe-tpm-20

Also, there has been a person in the MinnowBoard GitHub issue tracker who 
successfully enabled TPM2 for this platform. See the thread here:
https://github.com/MinnowBoard-org/bugs-and-help/issues/29

Thanks,
Ulf

From:  on behalf of Dominig Foll 

Date: Tuesday, May 9, 2017 at 8:12 AM
To: "yocto@yoctoproject.org" 
Subject: [yocto] how to activate tpm

Hello,

I am trying to get tpm working on a Minnowboard and a Joule.
I have enabled tpm in meta-security.
I can see that the Kernel config looks good (see extract bellow)
tpm is enable in the BIOS (fails with TPM>PTT or dTPM 2.0)
BUT i still cannot see my tpm device in /sys/class/tpm

Has anyone succeeded to enable tpm with meta-security ?
If yes, I would be interested to know how you have done.


--

Dominig ar Foll

Senior Software Architect

Intel Open Source Technology Centre



--- log device not visible --

tcsd -f

TCSD TDDL ERROR: Could not find a device to open!

root@intel-corei7-64:~# modprobe -D tpm

builtin tpm

root@intel-corei7-64:~# modprobe -D tpm_tis

builtin tpm_tis

root@intel-corei7-64:/tmp# ls /sys/class/tpm

root@intel-corei7-64:/tmp#



- kernel config extract --



CONFIG_HW_RANDOM_TPM=m

# CONFIG_NVRAM is not set

# CONFIG_R3964 is not set

# CONFIG_APPLICOM is not set

# CONFIG_MWAVE is not set

# CONFIG_RAW_DRIVER is not set

CONFIG_HPET=y

CONFIG_HPET_MMAP=y

CONFIG_HPET_MMAP_DEFAULT=y

# CONFIG_HANGCHECK_TIMER is not set

CONFIG_TCG_TPM=y

CONFIG_TCG_TIS_CORE=y

CONFIG_TCG_TIS=y

# CONFIG_TCG_TIS_SPI is not set

# CONFIG_TCG_TIS_I2C_ATMEL is not set

# CONFIG_TCG_TIS_I2C_INFINEON is not set

# CONFIG_TCG_TIS_I2C_NUVOTON is not set

# CONFIG_TCG_NSC is not set

# CONFIG_TCG_ATMEL is not set

# CONFIG_TCG_INFINEON is not set

CONFIG_TCG_CRB=y

CONFIG_TCG_VTPM_PROXY=y

# CONFIG_TCG_TIS_ST33ZP24_I2C is not set

# CONFIG_TCG_TIS_ST33ZP24_SPI is not set

# CONFIG_TELCLOCK is not set

CONFIG_DEVPORT=y

# CONFIG_XILLYBUS is not set






-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


[yocto] [PATCH] recipes-support: Add recipe for libgpiod

2017-05-09 Thread Marek Belisko
libgpiod - C library and tools for interacting with the linux GPIO
character device

Since linux 4.8 the GPIO sysfs interface is deprecated.
User space should use the character device instead.
This library encapsulates the ioctl calls and data structures behind a
straightforward API.

Signed-off-by: Marek Belisko 
---
 meta/recipes-support/libgpiod/libgpiod_0.2.bb | 25 +
 1 file changed, 25 insertions(+)
 create mode 100644 meta/recipes-support/libgpiod/libgpiod_0.2.bb

diff --git a/meta/recipes-support/libgpiod/libgpiod_0.2.bb 
b/meta/recipes-support/libgpiod/libgpiod_0.2.bb
new file mode 100644
index 000..fe2cd80
--- /dev/null
+++ b/meta/recipes-support/libgpiod/libgpiod_0.2.bb
@@ -0,0 +1,25 @@
+SUMMARY = "C library and tools for interacting with the linux GPIO character 
device"
+HOMEPAGE = "https://github.com/brgl/libgpiod";
+
+LICENSE = "LGPLv2.1+"
+LIC_FILES_CHKSUM = "file://COPYING;md5=2caced0b25dfefd4c601d92bd15116de"
+
+UPSTREAM_CHECK_URI = "https://github.com/brgl/libgpiod/releases";
+
+SRC_URI = "https://github.com/brgl/libgpiod/archive/v${PV}.tar.gz";
+
+SRC_URI[md5sum] = "e3430f35b6efa842693d659c0bfb7ad5"
+SRC_URI[sha256sum] = 
"de1947f3cb2cc4174364af430309fe6238976658575655bdbd76c60cffa7df92"
+
+inherit autotools pkgconfig
+
+# enable tools
+PACKAGECONFIG ?= "tools"
+
+PACKAGECONFIG[tests] = "--enable-tests,--disable-tests,kmod udev"
+PACKAGECONFIG[tools] = "--enable-tools,--disable-tools,"
+
+PACKAGES += " ${PN}-tools"
+
+FILES_${PN} = "${libdir}/*"
+FILES_${PN}-tools = "${bindir}/*"
-- 
2.7.4

-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


Re: [yocto] [PATCH] recipes-support: Add recipe for libgpiod

2017-05-09 Thread akuster808

Marek,

There is another mailing list that is geared towards the core 
development and recipes like this that are targeted for the main "meta" 
layer.


You should resend this patch to: openembedded-c...@lists.openembedded.org.

regards,

Armin


On 05/09/2017 02:10 PM, Marek Belisko wrote:

libgpiod - C library and tools for interacting with the linux GPIO
character device

Since linux 4.8 the GPIO sysfs interface is deprecated.
User space should use the character device instead.
This library encapsulates the ioctl calls and data structures behind a
straightforward API.

Signed-off-by: Marek Belisko 
---
  meta/recipes-support/libgpiod/libgpiod_0.2.bb | 25 +
  1 file changed, 25 insertions(+)
  create mode 100644 meta/recipes-support/libgpiod/libgpiod_0.2.bb

diff --git a/meta/recipes-support/libgpiod/libgpiod_0.2.bb 
b/meta/recipes-support/libgpiod/libgpiod_0.2.bb
new file mode 100644
index 000..fe2cd80
--- /dev/null
+++ b/meta/recipes-support/libgpiod/libgpiod_0.2.bb
@@ -0,0 +1,25 @@
+SUMMARY = "C library and tools for interacting with the linux GPIO character 
device"
+HOMEPAGE = "https://github.com/brgl/libgpiod";
+
+LICENSE = "LGPLv2.1+"
+LIC_FILES_CHKSUM = "file://COPYING;md5=2caced0b25dfefd4c601d92bd15116de"
+
+UPSTREAM_CHECK_URI = "https://github.com/brgl/libgpiod/releases";
+
+SRC_URI = "https://github.com/brgl/libgpiod/archive/v${PV}.tar.gz";
+
+SRC_URI[md5sum] = "e3430f35b6efa842693d659c0bfb7ad5"
+SRC_URI[sha256sum] = 
"de1947f3cb2cc4174364af430309fe6238976658575655bdbd76c60cffa7df92"
+
+inherit autotools pkgconfig
+
+# enable tools
+PACKAGECONFIG ?= "tools"
+
+PACKAGECONFIG[tests] = "--enable-tests,--disable-tests,kmod udev"
+PACKAGECONFIG[tools] = "--enable-tools,--disable-tools,"
+
+PACKAGES += " ${PN}-tools"
+
+FILES_${PN} = "${libdir}/*"
+FILES_${PN}-tools = "${bindir}/*"


--
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


Re: [yocto] [OE-core] [PATCH] recipes-support: Add recipe for libgpiod

2017-05-09 Thread Denys Dmytriyenko
Can libsoc help here? It's in meta-oe, but this libgpiod should be there too...

On Tue, May 09, 2017 at 02:24:18PM -0700, akuster808 wrote:
> Marek,
> 
> There is another mailing list that is geared towards the core
> development and recipes like this that are targeted for the main
> "meta" layer.
> 
> You should resend this patch to: openembedded-c...@lists.openembedded.org.
> 
> regards,
> 
> Armin
> 
> 
> On 05/09/2017 02:10 PM, Marek Belisko wrote:
> >libgpiod - C library and tools for interacting with the linux GPIO
> >character device
> >
> >Since linux 4.8 the GPIO sysfs interface is deprecated.
> >User space should use the character device instead.
> >This library encapsulates the ioctl calls and data structures behind a
> >straightforward API.
> >
> >Signed-off-by: Marek Belisko 
> >---
> >  meta/recipes-support/libgpiod/libgpiod_0.2.bb | 25 
> > +
> >  1 file changed, 25 insertions(+)
> >  create mode 100644 meta/recipes-support/libgpiod/libgpiod_0.2.bb
> >
> >diff --git a/meta/recipes-support/libgpiod/libgpiod_0.2.bb 
> >b/meta/recipes-support/libgpiod/libgpiod_0.2.bb
> >new file mode 100644
> >index 000..fe2cd80
> >--- /dev/null
> >+++ b/meta/recipes-support/libgpiod/libgpiod_0.2.bb
> >@@ -0,0 +1,25 @@
> >+SUMMARY = "C library and tools for interacting with the linux GPIO 
> >character device"
> >+HOMEPAGE = "https://github.com/brgl/libgpiod";
> >+
> >+LICENSE = "LGPLv2.1+"
> >+LIC_FILES_CHKSUM = "file://COPYING;md5=2caced0b25dfefd4c601d92bd15116de"
> >+
> >+UPSTREAM_CHECK_URI = "https://github.com/brgl/libgpiod/releases";
> >+
> >+SRC_URI = "https://github.com/brgl/libgpiod/archive/v${PV}.tar.gz";
> >+
> >+SRC_URI[md5sum] = "e3430f35b6efa842693d659c0bfb7ad5"
> >+SRC_URI[sha256sum] = 
> >"de1947f3cb2cc4174364af430309fe6238976658575655bdbd76c60cffa7df92"
> >+
> >+inherit autotools pkgconfig
> >+
> >+# enable tools
> >+PACKAGECONFIG ?= "tools"
> >+
> >+PACKAGECONFIG[tests] = "--enable-tests,--disable-tests,kmod udev"
> >+PACKAGECONFIG[tools] = "--enable-tools,--disable-tools,"
> >+
> >+PACKAGES += " ${PN}-tools"
> >+
> >+FILES_${PN} = "${libdir}/*"
> >+FILES_${PN}-tools = "${bindir}/*"
> 
> -- 
> ___
> Openembedded-core mailing list
> openembedded-c...@lists.openembedded.org
> http://lists.openembedded.org/mailman/listinfo/openembedded-core
-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


Re: [yocto] [OE-core] [PATCH] recipes-support: Add recipe for libgpiod

2017-05-09 Thread Belisko Marek
On Tue, May 9, 2017 at 11:33 PM, Denys Dmytriyenko  wrote:
> Can libsoc help here? It's in meta-oe, but this libgpiod should be there 
> too...
t can but according description sysfs api is deprecated and libgpiod
implementing new gpio interface through char device. Sorry about to
posting to wrong ML.
>
> On Tue, May 09, 2017 at 02:24:18PM -0700, akuster808 wrote:
>> Marek,
>>
>> There is another mailing list that is geared towards the core
>> development and recipes like this that are targeted for the main
>> "meta" layer.
>>
>> You should resend this patch to: openembedded-c...@lists.openembedded.org.
>>
>> regards,
>>
>> Armin
>>
>>
>> On 05/09/2017 02:10 PM, Marek Belisko wrote:
>> >libgpiod - C library and tools for interacting with the linux GPIO
>> >character device
>> >
>> >Since linux 4.8 the GPIO sysfs interface is deprecated.
>> >User space should use the character device instead.
>> >This library encapsulates the ioctl calls and data structures behind a
>> >straightforward API.
>> >
>> >Signed-off-by: Marek Belisko 
>> >---
>> >  meta/recipes-support/libgpiod/libgpiod_0.2.bb | 25 
>> > +
>> >  1 file changed, 25 insertions(+)
>> >  create mode 100644 meta/recipes-support/libgpiod/libgpiod_0.2.bb
>> >
>> >diff --git a/meta/recipes-support/libgpiod/libgpiod_0.2.bb 
>> >b/meta/recipes-support/libgpiod/libgpiod_0.2.bb
>> >new file mode 100644
>> >index 000..fe2cd80
>> >--- /dev/null
>> >+++ b/meta/recipes-support/libgpiod/libgpiod_0.2.bb
>> >@@ -0,0 +1,25 @@
>> >+SUMMARY = "C library and tools for interacting with the linux GPIO 
>> >character device"
>> >+HOMEPAGE = "https://github.com/brgl/libgpiod";
>> >+
>> >+LICENSE = "LGPLv2.1+"
>> >+LIC_FILES_CHKSUM = "file://COPYING;md5=2caced0b25dfefd4c601d92bd15116de"
>> >+
>> >+UPSTREAM_CHECK_URI = "https://github.com/brgl/libgpiod/releases";
>> >+
>> >+SRC_URI = "https://github.com/brgl/libgpiod/archive/v${PV}.tar.gz";
>> >+
>> >+SRC_URI[md5sum] = "e3430f35b6efa842693d659c0bfb7ad5"
>> >+SRC_URI[sha256sum] = 
>> >"de1947f3cb2cc4174364af430309fe6238976658575655bdbd76c60cffa7df92"
>> >+
>> >+inherit autotools pkgconfig
>> >+
>> >+# enable tools
>> >+PACKAGECONFIG ?= "tools"
>> >+
>> >+PACKAGECONFIG[tests] = "--enable-tests,--disable-tests,kmod udev"
>> >+PACKAGECONFIG[tools] = "--enable-tools,--disable-tools,"
>> >+
>> >+PACKAGES += " ${PN}-tools"
>> >+
>> >+FILES_${PN} = "${libdir}/*"
>> >+FILES_${PN}-tools = "${bindir}/*"
>>
>> --
>> ___
>> Openembedded-core mailing list
>> openembedded-c...@lists.openembedded.org
>> http://lists.openembedded.org/mailman/listinfo/openembedded-core

BR,

marek

-- 
as simple and primitive as possible
-
Marek Belisko - OPEN-NANDRA
Freelance Developer

Ruska Nova Ves 219 | Presov, 08005 Slovak Republic
Tel: +421 915 052 184
skype: marekwhite
twitter: #opennandra
web: http://open-nandra.com
-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


[yocto] [PATCH V2] rpm: modify the rpm bbappend file to suitable for rpm4

2017-05-09 Thread Dengke Du
1. change the rpm_5.4.16.bbappend to rpm_git.bbappend, this is
   because the rpm in oe-core has become rpm4 from rpm5.

2. drop the patch for rpm5.

3. delete the does not exist files when run task do_package.

Signed-off-by: Dengke Du 
---
 recipes-devtools/rpm/rpm_5.4.16.bbappend | 10 --
 recipes-devtools/rpm/rpm_git.bbappend|  4 
 2 files changed, 4 insertions(+), 10 deletions(-)
 delete mode 100644 recipes-devtools/rpm/rpm_5.4.16.bbappend
 create mode 100644 recipes-devtools/rpm/rpm_git.bbappend

diff --git a/recipes-devtools/rpm/rpm_5.4.16.bbappend 
b/recipes-devtools/rpm/rpm_5.4.16.bbappend
deleted file mode 100644
index 2a41a28..000
--- a/recipes-devtools/rpm/rpm_5.4.16.bbappend
+++ /dev/null
@@ -1,10 +0,0 @@
-FILESEXTRAPATHS_prepend := "${THISDIR}/${PN}:"
-
-SRC_URI += "file://rpm-fix-build-bug.patch \
-  "
-FILES_${PN} += "${libdir}/rpm/bin/spooktool \
-${libdir}/rpm/bin/semodule \
-   "
-
-inherit with-selinux
-PACKAGECONFIG[selinux] = "${WITH_SELINUX},${WITHOUT_SELINUX},libsemanage,"
diff --git a/recipes-devtools/rpm/rpm_git.bbappend 
b/recipes-devtools/rpm/rpm_git.bbappend
new file mode 100644
index 000..9f3ec90
--- /dev/null
+++ b/recipes-devtools/rpm/rpm_git.bbappend
@@ -0,0 +1,4 @@
+FILESEXTRAPATHS_prepend := "${THISDIR}/${PN}:"
+
+inherit with-selinux
+PACKAGECONFIG[selinux] = "${WITH_SELINUX},${WITHOUT_SELINUX},libsemanage,"
-- 
2.8.1

-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


[yocto] [meta-raspberrypi][PATCH 1/2] userland: Add missing GLES2 defines

2017-05-09 Thread Khem Raj
Needed by weston

Signed-off-by: Khem Raj 
---
 ...-gl2ext.h-Define-GL_R8_EXT-and-GL_RG8_EXT.patch | 30 ++
 recipes-graphics/userland/userland_git.bb  |  1 +
 2 files changed, 31 insertions(+)
 create mode 100644 
recipes-graphics/userland/userland/0014-GLES2-gl2ext.h-Define-GL_R8_EXT-and-GL_RG8_EXT.patch

diff --git 
a/recipes-graphics/userland/userland/0014-GLES2-gl2ext.h-Define-GL_R8_EXT-and-GL_RG8_EXT.patch
 
b/recipes-graphics/userland/userland/0014-GLES2-gl2ext.h-Define-GL_R8_EXT-and-GL_RG8_EXT.patch
new file mode 100644
index 000..2232d4b
--- /dev/null
+++ 
b/recipes-graphics/userland/userland/0014-GLES2-gl2ext.h-Define-GL_R8_EXT-and-GL_RG8_EXT.patch
@@ -0,0 +1,30 @@
+From 55a66f56a14eb8c3ae8294860e49efc9c9598c46 Mon Sep 17 00:00:00 2001
+From: Khem Raj 
+Date: Wed, 10 May 2017 06:39:34 +
+Subject: [PATCH] GLES2/gl2ext.h: Define GL_R8_EXT and GL_RG8_EXT
+
+weston code uses these defines
+Upstream-Status: Pending
+
+Signed-off-by: Khem Raj 
+---
+ interface/khronos/include/GLES2/gl2ext.h | 3 +++
+ 1 file changed, 3 insertions(+)
+
+diff --git a/interface/khronos/include/GLES2/gl2ext.h 
b/interface/khronos/include/GLES2/gl2ext.h
+index 4eacf7f..283e3e1 100644
+--- a/interface/khronos/include/GLES2/gl2ext.h
 b/interface/khronos/include/GLES2/gl2ext.h
+@@ -327,6 +327,9 @@ typedef void* GLeglImageOES;
+ #define GL_RGBX_BRCM0x80EE
+ #endif
+ 
++#define GL_R8_EXT   0x8229
++#define GL_RG8_EXT  0x822B
++
+ /* GL_EXT_texture_type_2_10_10_10_REV */
+ #ifndef GL_EXT_texture_type_2_10_10_10_REV
+ #define GL_UNSIGNED_INT_2_10_10_10_REV_EXT  0x8368
+-- 
+1.9.1
+
diff --git a/recipes-graphics/userland/userland_git.bb 
b/recipes-graphics/userland/userland_git.bb
index 9526fae..1176ef2 100644
--- a/recipes-graphics/userland/userland_git.bb
+++ b/recipes-graphics/userland/userland_git.bb
@@ -33,6 +33,7 @@ SRC_URI = "\
 file://0011-build-shared-library-for-vchostif.patch \
 file://0012-implement-buffer-wrapping-interface-for-dispmanx.patch \
 file://0013-Implement-triple-buffering-for-wayland.patch \
+file://0014-GLES2-gl2ext.h-Define-GL_R8_EXT-and-GL_RG8_EXT.patch \
 "
 S = "${WORKDIR}/git"
 
-- 
2.12.2

-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


[yocto] [meta-raspberrypi][PATCH 2/2] mesa-gl: Enable gbm for rpi

2017-05-09 Thread Khem Raj
weston needs gbm support which is not
in userland

Signed-off-by: Khem Raj 
---
 recipes-graphics/mesa/mesa-gl_%.bbappend | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 recipes-graphics/mesa/mesa-gl_%.bbappend

diff --git a/recipes-graphics/mesa/mesa-gl_%.bbappend 
b/recipes-graphics/mesa/mesa-gl_%.bbappend
new file mode 100644
index 000..7897125
--- /dev/null
+++ b/recipes-graphics/mesa/mesa-gl_%.bbappend
@@ -0,0 +1 @@
+PACKAGECONFIG_append_rpi = " gbm"
-- 
2.12.2

-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto