[yocto] [meta-selinux][PATCH] rpm: modify the rpm bbappend file to suitable for rpm4
1. change the rpm_5.4.16.bbappend to rpm_git.bbappend, this is because the rpm in oe-core has become rpm4 from rpm5. 2. drop the patch for rpm5. 3. delete the does not exist files when run task do_package. Signed-off-by: Dengke Du --- recipes-devtools/rpm/rpm_5.4.16.bbappend | 10 -- recipes-devtools/rpm/rpm_git.bbappend| 4 2 files changed, 4 insertions(+), 10 deletions(-) delete mode 100644 recipes-devtools/rpm/rpm_5.4.16.bbappend create mode 100644 recipes-devtools/rpm/rpm_git.bbappend diff --git a/recipes-devtools/rpm/rpm_5.4.16.bbappend b/recipes-devtools/rpm/rpm_5.4.16.bbappend deleted file mode 100644 index 2a41a28..000 --- a/recipes-devtools/rpm/rpm_5.4.16.bbappend +++ /dev/null @@ -1,10 +0,0 @@ -FILESEXTRAPATHS_prepend := "${THISDIR}/${PN}:" - -SRC_URI += "file://rpm-fix-build-bug.patch \ - " -FILES_${PN} += "${libdir}/rpm/bin/spooktool \ -${libdir}/rpm/bin/semodule \ - " - -inherit with-selinux -PACKAGECONFIG[selinux] = "${WITH_SELINUX},${WITHOUT_SELINUX},libsemanage," diff --git a/recipes-devtools/rpm/rpm_git.bbappend b/recipes-devtools/rpm/rpm_git.bbappend new file mode 100644 index 000..9f3ec90 --- /dev/null +++ b/recipes-devtools/rpm/rpm_git.bbappend @@ -0,0 +1,4 @@ +FILESEXTRAPATHS_prepend := "${THISDIR}/${PN}:" + +inherit with-selinux +PACKAGECONFIG[selinux] = "${WITH_SELINUX},${WITHOUT_SELINUX},libsemanage," -- 2.8.1 -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
Re: [yocto] [meta-selinux][PATCH] rpm: modify the rpm bbappend file to suitable for rpm4
Please ignore this, thanks. On 2017年05月09日 15:41, Dengke Du wrote: 1. change the rpm_5.4.16.bbappend to rpm_git.bbappend, this is because the rpm in oe-core has become rpm4 from rpm5. 2. drop the patch for rpm5. 3. delete the does not exist files when run task do_package. Signed-off-by: Dengke Du --- recipes-devtools/rpm/rpm_5.4.16.bbappend | 10 -- recipes-devtools/rpm/rpm_git.bbappend| 4 2 files changed, 4 insertions(+), 10 deletions(-) delete mode 100644 recipes-devtools/rpm/rpm_5.4.16.bbappend create mode 100644 recipes-devtools/rpm/rpm_git.bbappend diff --git a/recipes-devtools/rpm/rpm_5.4.16.bbappend b/recipes-devtools/rpm/rpm_5.4.16.bbappend deleted file mode 100644 index 2a41a28..000 --- a/recipes-devtools/rpm/rpm_5.4.16.bbappend +++ /dev/null @@ -1,10 +0,0 @@ -FILESEXTRAPATHS_prepend := "${THISDIR}/${PN}:" - -SRC_URI += "file://rpm-fix-build-bug.patch \ - " -FILES_${PN} += "${libdir}/rpm/bin/spooktool \ -${libdir}/rpm/bin/semodule \ - " - -inherit with-selinux -PACKAGECONFIG[selinux] = "${WITH_SELINUX},${WITHOUT_SELINUX},libsemanage," diff --git a/recipes-devtools/rpm/rpm_git.bbappend b/recipes-devtools/rpm/rpm_git.bbappend new file mode 100644 index 000..9f3ec90 --- /dev/null +++ b/recipes-devtools/rpm/rpm_git.bbappend @@ -0,0 +1,4 @@ +FILESEXTRAPATHS_prepend := "${THISDIR}/${PN}:" + +inherit with-selinux +PACKAGECONFIG[selinux] = "${WITH_SELINUX},${WITHOUT_SELINUX},libsemanage," -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
Re: [yocto] [meta-raspberrypi] how to apply custom kernel configuration?
On 2017-05-08 6:08 PM, Andrei Gherzan wrote: On Sat, May 6, 2017 at 6:14 PM, Khem Raj wrote: On Sat, May 6, 2017 at 9:45 AM, Andrea Galbusera wrote: Hi! I was wondering how to apply some extra kernel configuration from a custom layer via a bbappend. I know that with meta-raspberrypi there exist some variables you can define in local.conf that will drive how the kernel is configured: but what about some very specific device driver nobody than me is interest in? To me it seems it doesn't deserve a dedicated global oe variable. Some investigation showed this topic already came up on the list from time to time in the past (most recently in [1]). To me it looks like there is some common desire to get rid of the current "magic" carried out by linux-rpi.inc by moving the linux-raspberrypi recipes into the configuration fragments style. In the short term, my question are: how do you guys manage to add your custom kernel configurations? Do you rely on full blown static defconfigs? Have you found any reliable way to do "differential" configurations with the current state of metadata? In a longer term, I'd really like to help moving towards supporting configuration fragments for linux-raspberrypi, but I suspect it'd be a too much hard task for my current understanding of the whole kernel configuration workflow. Do you know of anyone already working on this or does anyone have a clear idea of what is needed to get the work done? Some times ago I tried to resurrect [2], but with no luck, probably due to some changes that happened in the linux-yocto files in the meanwhile. Comments from gurus are welcome! ;-) I have been hinting at using yocto kernel tooling. Idea is worth a pull request care sending one ? I'm not using config fragments myself but I was under the impression that we do support it. Also FWIW, I've had a feature around for quite a while that I'll complete in the 2.4 release cycle. That feature pulls the core fragment processing into the main kernel classes (with auditing, etc, still in kernel-yocto). So doing an inherit of kernel-yocto won't be necessary at that point .. which may ease the introduction of some config fragments. Bruce -- Andrei Gherzan -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
[yocto] [meta-security][PATCH] clamav: fix new build error
configure: error: The installed zlib version may contain a security bug. Please upgrade to 1.2.2 or later: http://www.zlib.net. You can omit this check with --disable-zlib-vcheck but DO NOT REPORT any stability issues then! bypass check as our zlib is 1.2.11 Signed-off-by: Armin Kuster --- recipes-security/clamav/clamav_0.99.2.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-security/clamav/clamav_0.99.2.bb b/recipes-security/clamav/clamav_0.99.2.bb index 3e5f36c..c755a64 100644 --- a/recipes-security/clamav/clamav_0.99.2.bb +++ b/recipes-security/clamav/clamav_0.99.2.bb @@ -51,7 +51,7 @@ PACKAGECONFIG[json] = "--with-libjson=${STAGING_LIBDIR}, --without-libjson, json PACKAGECONFIG[curl] = "--with-libcurl=${STAGING_LIBDIR}, --without-libcurl, curl," PACKAGECONFIG[ipv6] = "--enable-ipv6, --disable-ipv6" PACKAGECONFIG[openssl] = "--with-openssl=${STAGING_DIR_HOST}/usr, --without-openssl, openssl, openssl" -PACKAGECONFIG[zlib] = "--with-zlib=${STAGING_DIR_HOST}/usr, --without-zlib, zlib, " +PACKAGECONFIG[zlib] = "--with-zlib=${STAGING_DIR_HOST}/usr --disable-zlib-vcheck , --without-zlib, zlib, " PACKAGECONFIG[bz2] = "--with-libbz2-prefix=${STAGING_LIBDIR}/.., --without-libbz2-prefix, " PACKAGECONFIG[ncurses] = "--with-libncurses-prefix=${STAGING_LIBDIR}/.., --without-libncurses-prefix, ncurses, " PACKAGECONFIG[systemd] = "--with-systemdsystemunitdir=${systemd_unitdir}/system/, --without-systemdsystemunitdir, " -- 2.7.4 -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
[yocto] [meta-security][PATCH 00/10] move tpm into its own layer
tpm recipes copied as-is This was done to allow inclusion of TPM components independent of the rest of the layer. minimizes layerdepends fixed incorrect use of DISTRO_FEATURES Updated tpm kernel configs to newer version added a few new packagegroups Armin Kuster (10): tpm: move to a sub layer change tpm from distro to machine feature meta-tpm: add base package group as was in meta-security packagegroup: remove tpm components tpm packagegroups: split into logical units tpm-i2c: some systems us i2c TPM kernel tpm rework tpm-image: used for testing for now. linux-stable: fix module selections tpm2: package groups fixes meta-tpm/README| 0 meta-tpm/conf/layer.conf | 13 ++ meta-tpm/recipes-core/images/security-tpm-image.bb | 19 ++ .../packagegroup/packagegroup-security-tpm-i2c.bb | 19 ++ .../packagegroup/packagegroup-security-tpm.bb | 29 ++ .../packagegroup/packagegroup-security-tpm2.bb | 18 ++ .../packagegroup/packagegroup-security-vtpm.bb | 14 +++ meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg | 8 ++ meta-tpm/recipes-kernel/linux/linux-yocto/tpm.scc | 3 +++ meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.cfg | 6 + meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.scc | 3 +++ .../recipes-kernel/linux/linux-yocto/tpm_i2c.cfg | 15 +++ .../recipes-kernel/linux/linux-yocto/tpm_i2c.scc | 6 + .../recipes-kernel/linux/linux-yocto/tpm_x86.cfg | 4 +++ meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.cfg | 5 meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.scc | 4 +++ .../recipes-kernel/linux/linux-yocto_4.%.bbappend | 17 + .../Convert-another-vdprintf-to-dprintf.patch | 0 .../files/Use-format-s-for-call-to-dprintf.patch | 0 .../libtpm/files/fix_signed_issue.patch| 0 .../recipes-tpm}/libtpm/libtpm_1.0.bb | 0 .../recipes-tpm}/swtpm/files/fix_fcntl_h.patch | 0 .../swtpm/files/fix_lib_search_path.patch | 0 .../swtpm/files/fix_signed_issue.patch | 0 .../recipes-tpm}/swtpm/files/ioctl_h.patch | 0 .../recipes-tpm}/swtpm/swtpm-wrappers-native.bb| 0 .../recipes-tpm}/swtpm/swtpm_1.0.bb| 0 .../tpm-tools/files/tpm-tools-extendpcr.patch | 0 .../recipes-tpm}/tpm-tools/tpm-tools_git.bb| 0 .../recipes-tpm}/tpm2.0-tools/tpm2.0-tools_git.bb | 0 .../tpm2.0-tss/tpm2.0-tss/ax_pthread.m4| 0 .../tpm2.0-tss/fix_musl_select_include.patch | 0 .../recipes-tpm}/tpm2.0-tss/tpm2.0-tss_git.bb | 0 .../tpm2simulator/tpm2simulator-native_116.bb | 0 ...path-use-POSIX-getpwent-instead-of-getpwe.patch | 0 .../recipes-tpm}/trousers/files/tcsd.service | 0 .../trousers/files/trousers-udev.rules | 0 .../recipes-tpm}/trousers/files/trousers.init.sh | 0 .../recipes-tpm}/trousers/trousers_git.bb | 0 recipes-kernel/linux/linux-yocto_4.10.bbappend | 3 --- .../packagegroup/packagegroup-core-security.bb | 18 ++ 41 files changed, 185 insertions(+), 19 deletions(-) create mode 100644 meta-tpm/README create mode 100644 meta-tpm/conf/layer.conf create mode 100644 meta-tpm/recipes-core/images/security-tpm-image.bb create mode 100644 meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm-i2c.bb create mode 100644 meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb create mode 100644 meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm2.bb create mode 100644 meta-tpm/recipes-core/packagegroup/packagegroup-security-vtpm.bb create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm.scc create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.cfg create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.scc create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.cfg create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.scc create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm_x86.cfg create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.cfg create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.scc create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend rename {recipes-tpm => meta-tpm/recipes-tpm}/libtpm/files/Convert-another-vdprintf-to-dprintf.patch (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/libtpm/files/Use-format-s-for-call-to-dprintf.patch (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/libtpm/files/fix_signed_issue.patch (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/libtpm/libtpm_1.0.bb (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/swtpm/files/fix_fcntl_h.patch (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/swtpm/files/fix_lib_search_path.patch (100%) renam
[yocto] [meta-security][PATCH 01/10] tpm: move to a sub layer
Signed-off-by: Armin Kuster --- meta-tpm/README | 0 meta-tpm/conf/layer.conf| 13 + meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend | 5 + .../libtpm/files/Convert-another-vdprintf-to-dprintf.patch | 0 .../libtpm/files/Use-format-s-for-call-to-dprintf.patch | 0 .../recipes-tpm}/libtpm/files/fix_signed_issue.patch| 0 {recipes-tpm => meta-tpm/recipes-tpm}/libtpm/libtpm_1.0.bb | 0 .../recipes-tpm}/swtpm/files/fix_fcntl_h.patch | 0 .../recipes-tpm}/swtpm/files/fix_lib_search_path.patch | 0 .../recipes-tpm}/swtpm/files/fix_signed_issue.patch | 0 .../recipes-tpm}/swtpm/files/ioctl_h.patch | 0 .../recipes-tpm}/swtpm/swtpm-wrappers-native.bb | 0 {recipes-tpm => meta-tpm/recipes-tpm}/swtpm/swtpm_1.0.bb| 0 .../recipes-tpm}/tpm-tools/files/tpm-tools-extendpcr.patch | 0 .../recipes-tpm}/tpm-tools/tpm-tools_git.bb | 0 .../recipes-tpm}/tpm2.0-tools/tpm2.0-tools_git.bb | 0 .../recipes-tpm}/tpm2.0-tss/tpm2.0-tss/ax_pthread.m4| 0 .../tpm2.0-tss/tpm2.0-tss/fix_musl_select_include.patch | 0 .../recipes-tpm}/tpm2.0-tss/tpm2.0-tss_git.bb | 0 .../recipes-tpm}/tpm2simulator/tpm2simulator-native_116.bb | 0 ...-user-ps-path-use-POSIX-getpwent-instead-of-getpwe.patch | 0 .../recipes-tpm}/trousers/files/tcsd.service| 0 .../recipes-tpm}/trousers/files/trousers-udev.rules | 0 .../recipes-tpm}/trousers/files/trousers.init.sh| 0 .../recipes-tpm}/trousers/trousers_git.bb | 0 recipes-kernel/linux/linux-yocto_4.10.bbappend | 3 --- 26 files changed, 18 insertions(+), 3 deletions(-) create mode 100644 meta-tpm/README create mode 100644 meta-tpm/conf/layer.conf create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend rename {recipes-tpm => meta-tpm/recipes-tpm}/libtpm/files/Convert-another-vdprintf-to-dprintf.patch (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/libtpm/files/Use-format-s-for-call-to-dprintf.patch (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/libtpm/files/fix_signed_issue.patch (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/libtpm/libtpm_1.0.bb (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/swtpm/files/fix_fcntl_h.patch (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/swtpm/files/fix_lib_search_path.patch (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/swtpm/files/fix_signed_issue.patch (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/swtpm/files/ioctl_h.patch (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/swtpm/swtpm-wrappers-native.bb (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/swtpm/swtpm_1.0.bb (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/tpm-tools/files/tpm-tools-extendpcr.patch (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/tpm-tools/tpm-tools_git.bb (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/tpm2.0-tools/tpm2.0-tools_git.bb (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/tpm2.0-tss/tpm2.0-tss/ax_pthread.m4 (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/tpm2.0-tss/tpm2.0-tss/fix_musl_select_include.patch (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/tpm2.0-tss/tpm2.0-tss_git.bb (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/tpm2simulator/tpm2simulator-native_116.bb (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/trousers/files/get-user-ps-path-use-POSIX-getpwent-instead-of-getpwe.patch (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/trousers/files/tcsd.service (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/trousers/files/trousers-udev.rules (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/trousers/files/trousers.init.sh (100%) rename {recipes-tpm => meta-tpm/recipes-tpm}/trousers/trousers_git.bb (100%) diff --git a/meta-tpm/README b/meta-tpm/README new file mode 100644 index 000..e69de29 diff --git a/meta-tpm/conf/layer.conf b/meta-tpm/conf/layer.conf new file mode 100644 index 000..5085db5 --- /dev/null +++ b/meta-tpm/conf/layer.conf @@ -0,0 +1,13 @@ +# We have a conf and classes directory, add to BBPATH +BBPATH .= ":${LAYERDIR}" + +# We have a recipes directory, add to BBFILES +BBFILES += "${LAYERDIR}/recipes*/*/*.bb ${LAYERDIR}/recipes*/*/*.bbappend ${LAYERDIR}/classes/*.bbclass" + +BBFILE_COLLECTIONS += "tpm-layer" +BBFILE_PATTERN_tpm-layer = "^${LAYERDIR}/" +BBFILE_PRIORITY_tpm-layer = "6" + +LAYERDEPENDS_tpm-layer = " \ +core \ +" diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend b/meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend new file mode 100644 index 000..e6b3c65 --- /dev/null +++ b/meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend @@ -0,0 +1,5 @@ +# +# TPM kernel support + +KERNEL_FEATURES_append += "${@bb.utils.contains('DISTRO_FEATURES', 'tpm', ' feat
[yocto] [meta-security][PATCH 04/10] packagegroup: remove tpm components
Signed-off-by: Armin Kuster --- .../packagegroup/packagegroup-core-security.bb | 14 -- 1 file changed, 14 deletions(-) diff --git a/recipes-security/packagegroup/packagegroup-core-security.bb b/recipes-security/packagegroup/packagegroup-core-security.bb index 2180908..681874c 100644 --- a/recipes-security/packagegroup/packagegroup-core-security.bb +++ b/recipes-security/packagegroup/packagegroup-core-security.bb @@ -57,17 +57,3 @@ SUMMARY_packagegroup-security-mac = "Security Mandatory Access Control systems" RDEPENDS_packagegroup-security-mac = " \ ${@bb.utils.contains("DISTRO_FEATURES", "tomoyo", "ccs-tools", "",d)} \ " - -SUMMARY_packagegroup-security-tpm = "Security TPM support" -RDEPENDS_packagegroup-security-tpm = " \ -tpm-tools \ -trousers \ -tpm2.0-tools \ -libtss2 \ -resourcemgr \ -libtctidevice \ -libtctisocket \ -resourcemgr \ -libtpm \ -swtpm \ -" -- 2.7.4 -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
[yocto] [meta-security][PATCH 03/10] meta-tpm: add base package group as was in meta-security
Signed-off-by: Armin Kuster --- .../packagegroup/packagegroup-security-tpm.bb | 23 ++ 1 file changed, 23 insertions(+) create mode 100644 meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb diff --git a/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb new file mode 100644 index 000..f176627 --- /dev/null +++ b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb @@ -0,0 +1,23 @@ +DESCRIPTION = "Security packagegroup for Poky" +LICENSE = "MIT" +LIC_FILES_CHKSUM = "file://${COREBASE}/LICENSE;md5=4d92cd373abda3937c2bc47fbc49d690 \ + file://${COREBASE}/meta/COPYING.MIT;md5=3da9cfbcb788c80a0384361b4de20420" + +inherit packagegroup + +PACKAGES = "packagegroup-security-tpm" + +SUMMARY_packagegroup-security-tpm = "Security TPM support" +RDEPENDS_packagegroup-security-tpm = " \ +tpm-tools \ +trousers \ +tpm2.0-tools \ +libtss2 \ +resourcemgr \ +libtctidevice \ +libtctisocket \ +resourcemgr \ +libtpm \ +swtpm \ +" + -- 2.7.4 -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
[yocto] [meta-security][PATCH 02/10] change tpm from distro to machine feature
Signed-off-by: Armin Kuster --- meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend | 2 +- recipes-security/packagegroup/packagegroup-core-security.bb | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend b/meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend index e6b3c65..208d23f 100644 --- a/meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend +++ b/meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend @@ -1,5 +1,5 @@ # # TPM kernel support -KERNEL_FEATURES_append += "${@bb.utils.contains('DISTRO_FEATURES', 'tpm', ' features/tpm/tpm.scc', '', d)}" +KERNEL_FEATURES_append += "${@bb.utils.contains('MACHINE_FEATURES', 'tpm', ' features/tpm/tpm.scc', '', d)}" diff --git a/recipes-security/packagegroup/packagegroup-core-security.bb b/recipes-security/packagegroup/packagegroup-core-security.bb index ae856c7..2180908 100644 --- a/recipes-security/packagegroup/packagegroup-core-security.bb +++ b/recipes-security/packagegroup/packagegroup-core-security.bb @@ -11,7 +11,7 @@ PACKAGES = "\ packagegroup-security-scanners \ packagegroup-security-ids \ packagegroup-security-mac \ -${@bb.utils.contains("DISTRO_FEATURES", "tpm", "packagegroup-security-tpm", "",d)} \ +${@bb.utils.contains("MACHINE_FEATURES", "tpm", "packagegroup-security-tpm", "",d)} \ " RDEPENDS_packagegroup-core-security = "\ @@ -19,7 +19,7 @@ RDEPENDS_packagegroup-core-security = "\ packagegroup-security-scanners \ packagegroup-security-ids \ packagegroup-security-mac \ -${@bb.utils.contains("DISTRO_FEATURES", "tpm", "packagegroup-security-tpm", "",d)} \ +${@bb.utils.contains("MACHINE_FEATURES", "tpm", "packagegroup-security-tpm", "",d)} \ " SUMMARY_packagegroup-security-utils = "Security utilities" -- 2.7.4 -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
[yocto] [meta-security][PATCH 06/10] tpm-i2c: some systems us i2c TPM
add modules and i2c support Signed-off-by: Armin Kuster --- .../packagegroup/packagegroup-security-tpm-i2c.bb | 17 + 1 file changed, 17 insertions(+) create mode 100644 meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm-i2c.bb diff --git a/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm-i2c.bb b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm-i2c.bb new file mode 100644 index 000..d4c3bb7 --- /dev/null +++ b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm-i2c.bb @@ -0,0 +1,17 @@ +DESCRIPTION = "Security packagegroup for TPM i2c support" +LICENSE = "MIT" +LIC_FILES_CHKSUM = "file://${COREBASE}/LICENSE;md5=4d92cd373abda3937c2bc47fbc49d690 \ + file://${COREBASE}/meta/COPYING.MIT;md5=3da9cfbcb788c80a0384361b4de20420" + +inherit packagegroup + +PACKAGES = "packagegroup-security-tpm-i2c" + +SUMMARY_packagegroup-security-tpm-i2c = "Security TPM i2c support" +RDEPENDS_packagegroup-security-tpm-i2c = " \ +kernel-module-tpm-i2c-atmel \ +kernel-module-tpm-i2c-infineon \ +kernel-module-tpm-i2c-nuvoton \ +kernel-module-tpm-st33zp24 \ +kernel-module-tpm-st33zp24-i2c \ +" -- 2.7.4 -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
[yocto] [meta-security][PATCH 05/10] tpm packagegroups: split into logical units
this should help mitgate the need to pull in too many layers if swtpm in not wanted Signed-off-by: Armin Kuster --- .../packagegroup/packagegroup-security-tpm.bb | 9 - .../packagegroup/packagegroup-security-tpm2.bb | 18 ++ .../packagegroup/packagegroup-security-vtpm.bb | 14 ++ 3 files changed, 32 insertions(+), 9 deletions(-) create mode 100644 meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm2.bb create mode 100644 meta-tpm/recipes-core/packagegroup/packagegroup-security-vtpm.bb diff --git a/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb index f176627..2412348 100644 --- a/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb +++ b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb @@ -11,13 +11,4 @@ SUMMARY_packagegroup-security-tpm = "Security TPM support" RDEPENDS_packagegroup-security-tpm = " \ tpm-tools \ trousers \ -tpm2.0-tools \ -libtss2 \ -resourcemgr \ -libtctidevice \ -libtctisocket \ -resourcemgr \ -libtpm \ -swtpm \ " - diff --git a/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm2.bb b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm2.bb new file mode 100644 index 000..1c96cbe --- /dev/null +++ b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm2.bb @@ -0,0 +1,18 @@ +DESCRIPTION = "Security packagegroup for Poky" +LICENSE = "MIT" +LIC_FILES_CHKSUM = "file://${COREBASE}/LICENSE;md5=4d92cd373abda3937c2bc47fbc49d690 \ + file://${COREBASE}/meta/COPYING.MIT;md5=3da9cfbcb788c80a0384361b4de20420" + +inherit packagegroup + +PACKAGES = "packagegroup-security-tpm2" + +SUMMARY_packagegroup-security-tpm2 = "Security TPM 2.0 support" +RDEPENDS_packagegroup-security-tpm2 = " \ +tpm2.0-tools \ +libtss2 \ +libtctidevice \ +libtctisocket \ +resourcemgr \ +kernel-module-tpm-crb \ +" diff --git a/meta-tpm/recipes-core/packagegroup/packagegroup-security-vtpm.bb b/meta-tpm/recipes-core/packagegroup/packagegroup-security-vtpm.bb new file mode 100644 index 000..f7eee7c --- /dev/null +++ b/meta-tpm/recipes-core/packagegroup/packagegroup-security-vtpm.bb @@ -0,0 +1,14 @@ +DESCRIPTION = "Security packagegroup for Poky" +LICENSE = "MIT" +LIC_FILES_CHKSUM = "file://${COREBASE}/LICENSE;md5=4d92cd373abda3937c2bc47fbc49d690 \ + file://${COREBASE}/meta/COPYING.MIT;md5=3da9cfbcb788c80a0384361b4de20420" + +inherit packagegroup + +PACKAGES = "packagegroup-security-vtpm" + +SUMMARY_packagegroup-security-vtpm = "Security Software vTPM support" +RDEPENDS_packagegroup-security-vtpm = " \ +libtpm \ +swtpm \ +" -- 2.7.4 -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
[yocto] [meta-security][PATCH 07/10] kernel tpm rework
Signed-off-by: Armin Kuster --- meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg | 5 + meta-tpm/recipes-kernel/linux/linux-yocto/tpm.scc | 3 +++ meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.cfg | 15 +++ meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.scc | 6 ++ meta-tpm/recipes-kernel/linux/linux-yocto/tpm_x86.cfg | 4 meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.cfg | 5 + meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.scc | 4 meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend | 11 +++ meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend | 5 - 9 files changed, 53 insertions(+), 5 deletions(-) create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm.scc create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.cfg create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.scc create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm_x86.cfg create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.cfg create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.scc create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend delete mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg new file mode 100644 index 000..e34b24e --- /dev/null +++ b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg @@ -0,0 +1,5 @@ +CONFIG_HW_RANDOM_TPM=y +CONFIG_TCG_TPM=y +CONFIG_TCG_TIS_CORE=y +CONFIG_TCG_TIS=y +CONFIG_SECURITYFS=y diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto/tpm.scc b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm.scc new file mode 100644 index 000..2949ed4 --- /dev/null +++ b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm.scc @@ -0,0 +1,3 @@ +define KFEATURE_DESCRIPTION "Enable TPM" + +kconf hardware tpm.cfg diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.cfg b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.cfg new file mode 100644 index 000..59993f9 --- /dev/null +++ b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.cfg @@ -0,0 +1,15 @@ +CONFIG_HW_RANDOM_TPM=y +CONFIG_TCG_TPM=y +CONFIG_TCG_TIS_CORE=y +CONFIG_TCG_TIS=y +CONFIG_SECURITYFS=y + +CONFIG_REGMAP_I2C=y +CONFIG_I2C_BOARDINFO=y +CONFIG_I2C_COMPAT=y +CONFIG_RTC_I2C_AND_SPI=y + +CONFIG_TCG_TIS_I2C_ATMEL=m +CONFIG_TCG_TIS_I2C_INFINEON=m +CONFIG_TCG_TIS_I2C_NUVOTON=m +CONFIG_TCG_TIS_ST33ZP24_I2C=m diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.scc b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.scc new file mode 100644 index 000..0e4eedb --- /dev/null +++ b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm_i2c.scc @@ -0,0 +1,6 @@ +define KFEATURE_DESCRIPTION "Enable TPM i2c" + +include features/i2c/i2c.scc + +kconf hardware tpm_i2c.cfg + diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto/tpm_x86.cfg b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm_x86.cfg new file mode 100644 index 000..8be331a --- /dev/null +++ b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm_x86.cfg @@ -0,0 +1,4 @@ +CONFIG_TCG_NSC=m +CONFIG_TCG_ATMEL=m +CONFIG_TCG_INFINEON=m +CONFIG_TCG_TIS_ST33ZP24=m diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.cfg b/meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.cfg new file mode 100644 index 000..a8b3758 --- /dev/null +++ b/meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.cfg @@ -0,0 +1,5 @@ +CONFIG_HW_RANDOM_TPM=y +CONFIG_TCG_TPM=y +CONFIG_TCG_VTPM_PROXY=y +CONFIG_SECURITYFS=y +~ diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.scc b/meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.scc new file mode 100644 index 000..e842da6 --- /dev/null +++ b/meta-tpm/recipes-kernel/linux/linux-yocto/vtpm.scc @@ -0,0 +1,4 @@ +define KFEATURE_DESCRIPTION "Enable vTPM" + +kconf hardware vtpm.cfg + diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend b/meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend new file mode 100644 index 000..0eebf00 --- /dev/null +++ b/meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend @@ -0,0 +1,11 @@ +FILESEXTRAPATHS_prepend := "${THISDIR}/linux-yocto:" + +# Enable tpm in kernel +SRC_URI_append_x86 = " \ +${@bb.utils.contains('MACHINE_FEATURES', 'tpm', 'file://tpm.scc', '', d)} \ +" + +SRC_URI += " \ +${@bb.utils.contains('MACHINE_FEATURES', 'tpm_i2c', 'file://tpm_i2c.scc', '', d)} \ +${@bb.utils.contains('MACHINE_FEATURES', 'vtpm', 'file://vtpm.scc', '', d)} \ +" diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend b/meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend deleted file mode 100644 index 208d23f..000 --- a/meta-tpm/recipes-kernel/linux/linux-yocto_4.10.bbappend +++ /dev/null @@ -1,5 +0,0 @@ -# -# TPM kernel support - -KERNEL_FEATURES_append += "${@bb.utils.conta
[yocto] [meta-security][PATCH 08/10] tpm-image: used for testing for now.
Signed-off-by: Armin Kuster --- meta-tpm/recipes-core/images/security-tpm-image.bb | 19 +++ 1 file changed, 19 insertions(+) create mode 100644 meta-tpm/recipes-core/images/security-tpm-image.bb diff --git a/meta-tpm/recipes-core/images/security-tpm-image.bb b/meta-tpm/recipes-core/images/security-tpm-image.bb new file mode 100644 index 000..a337076 --- /dev/null +++ b/meta-tpm/recipes-core/images/security-tpm-image.bb @@ -0,0 +1,19 @@ +DESCRIPTION = "A small image for building meta-security packages" + +IMAGE_FEATURES += "ssh-server-openssh" + +IMAGE_INSTALL = "\ +packagegroup-base \ +packagegroup-core-boot \ +${@bb.utils.contains('MACHINE_FEATURES', 'tpm', 'packagegroup-security-tpm', '', d)} \ +${@bb.utils.contains('MACHINE_FEATURES', 'tpm2', 'packagegroup-security-tpm2', '', d)} \ +os-release \ +${CORE_IMAGE_EXTRA_INSTALL}" + +IMAGE_LINGUAS ?= " " + +LICENSE = "MIT" + +inherit core-image + +export IMAGE_BASENAME = "security-tpm-image" -- 2.7.4 -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
[yocto] [meta-security][PATCH 09/10] linux-stable: fix module selections
Signed-off-by: Armin Kuster --- meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg | 3 +++ meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.cfg | 6 ++ meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.scc | 3 +++ meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend | 6 ++ 4 files changed, 18 insertions(+) create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.cfg create mode 100644 meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.scc diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg index e34b24e..8782823 100644 --- a/meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg +++ b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm.cfg @@ -3,3 +3,6 @@ CONFIG_TCG_TPM=y CONFIG_TCG_TIS_CORE=y CONFIG_TCG_TIS=y CONFIG_SECURITYFS=y +CONFIG_TCG_NSC=m +CONFIG_TCG_ATMEL=m +CONFIG_TCG_INFINEON=m diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.cfg b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.cfg new file mode 100644 index 000..a81b54d --- /dev/null +++ b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.cfg @@ -0,0 +1,6 @@ +CONFIG_HW_RANDOM_TPM=y +CONFIG_TCG_TPM=y +CONFIG_TCG_TIS_CORE=y +CONFIG_TCG_TIS=y +CONFIG_TCG_CRB=y +CONFIG_SECURITYFS=y diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.scc b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.scc new file mode 100644 index 000..088148f --- /dev/null +++ b/meta-tpm/recipes-kernel/linux/linux-yocto/tpm2.scc @@ -0,0 +1,3 @@ +define KFEATURE_DESCRIPTION "Enable TPM 2.0" + +kconf hardware tpm2.cfg diff --git a/meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend b/meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend index 0eebf00..cea8b1b 100644 --- a/meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend +++ b/meta-tpm/recipes-kernel/linux/linux-yocto_4.%.bbappend @@ -3,6 +3,12 @@ FILESEXTRAPATHS_prepend := "${THISDIR}/linux-yocto:" # Enable tpm in kernel SRC_URI_append_x86 = " \ ${@bb.utils.contains('MACHINE_FEATURES', 'tpm', 'file://tpm.scc', '', d)} \ +${@bb.utils.contains('MACHINE_FEATURES', 'tpm2', 'file://tpm2.scc', '', d)} \ +" + +SRC_URI_append_x86-64 = " \ +${@bb.utils.contains('MACHINE_FEATURES', 'tpm', 'file://tpm.scc', '', d)} \ +${@bb.utils.contains('MACHINE_FEATURES', 'tpm2', 'file://tpm2.scc', '', d)} \ " SRC_URI += " \ -- 2.7.4 -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
[yocto] [meta-security][PATCH 10/10] tpm2: package groups fixes
Signed-off-by: Armin Kuster --- .../packagegroup/packagegroup-security-tpm-i2c.bb | 2 ++ .../packagegroup/packagegroup-security-tpm.bb | 15 +++ .../packagegroup/packagegroup-security-tpm2.bb| 2 +- 3 files changed, 18 insertions(+), 1 deletion(-) diff --git a/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm-i2c.bb b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm-i2c.bb index d4c3bb7..d3d9ebc 100644 --- a/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm-i2c.bb +++ b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm-i2c.bb @@ -9,6 +9,8 @@ PACKAGES = "packagegroup-security-tpm-i2c" SUMMARY_packagegroup-security-tpm-i2c = "Security TPM i2c support" RDEPENDS_packagegroup-security-tpm-i2c = " \ +${@bb.utils.contains('MACHINE_FEATURES', 'tpm', 'packagegroup-security-tpm', '', d)} \ +${@bb.utils.contains('MACHINE_FEATURES', 'tpm2', 'packagegroup-security-tpm2, '', d)} \ kernel-module-tpm-i2c-atmel \ kernel-module-tpm-i2c-infineon \ kernel-module-tpm-i2c-nuvoton \ diff --git a/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb index 2412348..2db8521 100644 --- a/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb +++ b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm.bb @@ -11,4 +11,19 @@ SUMMARY_packagegroup-security-tpm = "Security TPM support" RDEPENDS_packagegroup-security-tpm = " \ tpm-tools \ trousers \ +${X86_TPM_MODULES} \ +" + +X86_TPM_MODULES ?= "" + +X86_TPM_MODULES_x86 = " \ +kernel-module-tpm-atmel \ +kernel-module-tpm-infineon \ +kernel-module-tpm-nsc \ +" + +X86_TPM_MODULES_x86-64 = " \ +kernel-module-tpm-atmel \ +kernel-module-tpm-infineon \ +kernel-module-tpm-nsc \ " diff --git a/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm2.bb b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm2.bb index 1c96cbe..57b0722 100644 --- a/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm2.bb +++ b/meta-tpm/recipes-core/packagegroup/packagegroup-security-tpm2.bb @@ -10,9 +10,9 @@ PACKAGES = "packagegroup-security-tpm2" SUMMARY_packagegroup-security-tpm2 = "Security TPM 2.0 support" RDEPENDS_packagegroup-security-tpm2 = " \ tpm2.0-tools \ +trousers \ libtss2 \ libtctidevice \ libtctisocket \ resourcemgr \ -kernel-module-tpm-crb \ " -- 2.7.4 -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
[yocto] [meta-security][PATCH] security-core package group: add few more apps
Signed-off-by: Armin Kuster --- recipes-security/packagegroup/packagegroup-core-security.bb | 7 ++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/recipes-security/packagegroup/packagegroup-core-security.bb b/recipes-security/packagegroup/packagegroup-core-security.bb index 681874c..cfd7918 100644 --- a/recipes-security/packagegroup/packagegroup-core-security.bb +++ b/recipes-security/packagegroup/packagegroup-core-security.bb @@ -27,6 +27,7 @@ RDEPENDS_packagegroup-security-utils = "\ checksec \ nmap \ pinentry \ +scapy \ ${@bb.utils.contains("DISTRO_FEATURES", "pax", "pax-utils", "",d)} \ " @@ -34,7 +35,8 @@ SUMMARY_packagegroup-security-scanners = "Security scanners" RDEPENDS_packagegroup-security-scanners = "\ nikto \ checksecurity \ - " +clamav \ +" SUMMARY_packagegroup-security-audit = "Security Audit tools " RDEPENDS_packagegroup-security-audit = " \ @@ -51,9 +53,12 @@ SUMMARY_packagegroup-security-ids = "Security Intrusion Detection systems" RDEPENDS_packagegroup-security-ids = " \ tripwire \ samhain-client \ +suricata \ " SUMMARY_packagegroup-security-mac = "Security Mandatory Access Control systems" RDEPENDS_packagegroup-security-mac = " \ ${@bb.utils.contains("DISTRO_FEATURES", "tomoyo", "ccs-tools", "",d)} \ +${@bb.utils.contains("DISTRO_FEATURES", "apparmor", "", "",d)} \ +${@bb.utils.contains("DISTRO_FEATURES", "smack", "smack", "",d)} \ " -- 2.7.4 -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
[yocto] meta-security does not set the right ACL to trouser config file (/etc/tsdc.conf)
meta-security requires to predefine a user and group tss ibn order for bitbake to build an image. But it fails to set the correct ownership to the trouser conf file (/etc/tsdc.conf) Tspi_Context_Connect failed: 0x3011 - layer=tsp, code=0011 (17), Communication failure root@intel-corei7-64:~# tcsd -f TCSD ERROR: TCSD config file (/etc/tcsd.conf) must be user/group tss/tss -- Dominig ar Foll Senior Software Architect Intel Open Source Technology Centre -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
[yocto] how to activate tpm
Hello, I am trying to get tpm working on a Minnowboard and a Joule. I have enabled tpm in meta-security. I can see that the Kernel config looks good (see extract bellow) tpm is enable in the BIOS (fails with TPM>PTT or dTPM 2.0) BUT i still cannot see my tpm device in /sys/class/tpm Has anyone succeeded to enable tpm with meta-security ? If yes, I would be interested to know how you have done. -- Dominig ar Foll Senior Software Architect Intel Open Source Technology Centre --- log device not visible -- tcsd -f TCSD TDDL ERROR: Could not find a device to open! root@intel-corei7-64:~# modprobe -D tpm builtin tpm root@intel-corei7-64:~# modprobe -D tpm_tis builtin tpm_tis root@intel-corei7-64:/tmp# ls /sys/class/tpm root@intel-corei7-64:/tmp# - kernel config extract -- CONFIG_HW_RANDOM_TPM=m # CONFIG_NVRAM is not set # CONFIG_R3964 is not set # CONFIG_APPLICOM is not set # CONFIG_MWAVE is not set # CONFIG_RAW_DRIVER is not set CONFIG_HPET=y CONFIG_HPET_MMAP=y CONFIG_HPET_MMAP_DEFAULT=y # CONFIG_HANGCHECK_TIMER is not set CONFIG_TCG_TPM=y CONFIG_TCG_TIS_CORE=y CONFIG_TCG_TIS=y # CONFIG_TCG_TIS_SPI is not set # CONFIG_TCG_TIS_I2C_ATMEL is not set # CONFIG_TCG_TIS_I2C_INFINEON is not set # CONFIG_TCG_TIS_I2C_NUVOTON is not set # CONFIG_TCG_NSC is not set # CONFIG_TCG_ATMEL is not set # CONFIG_TCG_INFINEON is not set CONFIG_TCG_CRB=y CONFIG_TCG_VTPM_PROXY=y # CONFIG_TCG_TIS_ST33ZP24_I2C is not set # CONFIG_TCG_TIS_ST33ZP24_SPI is not set # CONFIG_TELCLOCK is not set CONFIG_DEVPORT=y # CONFIG_XILLYBUS is not set -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
Re: [yocto] how to activate tpm
Hi Domining, Please check out this article. https://prosauce.org/blog/2016/1/11/minnowboard-max-enable-and-test-the-firmware-txe-tpm-20 Also, there has been a person in the MinnowBoard GitHub issue tracker who successfully enabled TPM2 for this platform. See the thread here: https://github.com/MinnowBoard-org/bugs-and-help/issues/29 Thanks, Ulf From: on behalf of Dominig Foll Date: Tuesday, May 9, 2017 at 8:12 AM To: "yocto@yoctoproject.org" Subject: [yocto] how to activate tpm Hello, I am trying to get tpm working on a Minnowboard and a Joule. I have enabled tpm in meta-security. I can see that the Kernel config looks good (see extract bellow) tpm is enable in the BIOS (fails with TPM>PTT or dTPM 2.0) BUT i still cannot see my tpm device in /sys/class/tpm Has anyone succeeded to enable tpm with meta-security ? If yes, I would be interested to know how you have done. -- Dominig ar Foll Senior Software Architect Intel Open Source Technology Centre --- log device not visible -- tcsd -f TCSD TDDL ERROR: Could not find a device to open! root@intel-corei7-64:~# modprobe -D tpm builtin tpm root@intel-corei7-64:~# modprobe -D tpm_tis builtin tpm_tis root@intel-corei7-64:/tmp# ls /sys/class/tpm root@intel-corei7-64:/tmp# - kernel config extract -- CONFIG_HW_RANDOM_TPM=m # CONFIG_NVRAM is not set # CONFIG_R3964 is not set # CONFIG_APPLICOM is not set # CONFIG_MWAVE is not set # CONFIG_RAW_DRIVER is not set CONFIG_HPET=y CONFIG_HPET_MMAP=y CONFIG_HPET_MMAP_DEFAULT=y # CONFIG_HANGCHECK_TIMER is not set CONFIG_TCG_TPM=y CONFIG_TCG_TIS_CORE=y CONFIG_TCG_TIS=y # CONFIG_TCG_TIS_SPI is not set # CONFIG_TCG_TIS_I2C_ATMEL is not set # CONFIG_TCG_TIS_I2C_INFINEON is not set # CONFIG_TCG_TIS_I2C_NUVOTON is not set # CONFIG_TCG_NSC is not set # CONFIG_TCG_ATMEL is not set # CONFIG_TCG_INFINEON is not set CONFIG_TCG_CRB=y CONFIG_TCG_VTPM_PROXY=y # CONFIG_TCG_TIS_ST33ZP24_I2C is not set # CONFIG_TCG_TIS_ST33ZP24_SPI is not set # CONFIG_TELCLOCK is not set CONFIG_DEVPORT=y # CONFIG_XILLYBUS is not set -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
[yocto] [PATCH] recipes-support: Add recipe for libgpiod
libgpiod - C library and tools for interacting with the linux GPIO character device Since linux 4.8 the GPIO sysfs interface is deprecated. User space should use the character device instead. This library encapsulates the ioctl calls and data structures behind a straightforward API. Signed-off-by: Marek Belisko --- meta/recipes-support/libgpiod/libgpiod_0.2.bb | 25 + 1 file changed, 25 insertions(+) create mode 100644 meta/recipes-support/libgpiod/libgpiod_0.2.bb diff --git a/meta/recipes-support/libgpiod/libgpiod_0.2.bb b/meta/recipes-support/libgpiod/libgpiod_0.2.bb new file mode 100644 index 000..fe2cd80 --- /dev/null +++ b/meta/recipes-support/libgpiod/libgpiod_0.2.bb @@ -0,0 +1,25 @@ +SUMMARY = "C library and tools for interacting with the linux GPIO character device" +HOMEPAGE = "https://github.com/brgl/libgpiod"; + +LICENSE = "LGPLv2.1+" +LIC_FILES_CHKSUM = "file://COPYING;md5=2caced0b25dfefd4c601d92bd15116de" + +UPSTREAM_CHECK_URI = "https://github.com/brgl/libgpiod/releases"; + +SRC_URI = "https://github.com/brgl/libgpiod/archive/v${PV}.tar.gz"; + +SRC_URI[md5sum] = "e3430f35b6efa842693d659c0bfb7ad5" +SRC_URI[sha256sum] = "de1947f3cb2cc4174364af430309fe6238976658575655bdbd76c60cffa7df92" + +inherit autotools pkgconfig + +# enable tools +PACKAGECONFIG ?= "tools" + +PACKAGECONFIG[tests] = "--enable-tests,--disable-tests,kmod udev" +PACKAGECONFIG[tools] = "--enable-tools,--disable-tools," + +PACKAGES += " ${PN}-tools" + +FILES_${PN} = "${libdir}/*" +FILES_${PN}-tools = "${bindir}/*" -- 2.7.4 -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
Re: [yocto] [PATCH] recipes-support: Add recipe for libgpiod
Marek, There is another mailing list that is geared towards the core development and recipes like this that are targeted for the main "meta" layer. You should resend this patch to: openembedded-c...@lists.openembedded.org. regards, Armin On 05/09/2017 02:10 PM, Marek Belisko wrote: libgpiod - C library and tools for interacting with the linux GPIO character device Since linux 4.8 the GPIO sysfs interface is deprecated. User space should use the character device instead. This library encapsulates the ioctl calls and data structures behind a straightforward API. Signed-off-by: Marek Belisko --- meta/recipes-support/libgpiod/libgpiod_0.2.bb | 25 + 1 file changed, 25 insertions(+) create mode 100644 meta/recipes-support/libgpiod/libgpiod_0.2.bb diff --git a/meta/recipes-support/libgpiod/libgpiod_0.2.bb b/meta/recipes-support/libgpiod/libgpiod_0.2.bb new file mode 100644 index 000..fe2cd80 --- /dev/null +++ b/meta/recipes-support/libgpiod/libgpiod_0.2.bb @@ -0,0 +1,25 @@ +SUMMARY = "C library and tools for interacting with the linux GPIO character device" +HOMEPAGE = "https://github.com/brgl/libgpiod"; + +LICENSE = "LGPLv2.1+" +LIC_FILES_CHKSUM = "file://COPYING;md5=2caced0b25dfefd4c601d92bd15116de" + +UPSTREAM_CHECK_URI = "https://github.com/brgl/libgpiod/releases"; + +SRC_URI = "https://github.com/brgl/libgpiod/archive/v${PV}.tar.gz"; + +SRC_URI[md5sum] = "e3430f35b6efa842693d659c0bfb7ad5" +SRC_URI[sha256sum] = "de1947f3cb2cc4174364af430309fe6238976658575655bdbd76c60cffa7df92" + +inherit autotools pkgconfig + +# enable tools +PACKAGECONFIG ?= "tools" + +PACKAGECONFIG[tests] = "--enable-tests,--disable-tests,kmod udev" +PACKAGECONFIG[tools] = "--enable-tools,--disable-tools," + +PACKAGES += " ${PN}-tools" + +FILES_${PN} = "${libdir}/*" +FILES_${PN}-tools = "${bindir}/*" -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
Re: [yocto] [OE-core] [PATCH] recipes-support: Add recipe for libgpiod
Can libsoc help here? It's in meta-oe, but this libgpiod should be there too... On Tue, May 09, 2017 at 02:24:18PM -0700, akuster808 wrote: > Marek, > > There is another mailing list that is geared towards the core > development and recipes like this that are targeted for the main > "meta" layer. > > You should resend this patch to: openembedded-c...@lists.openembedded.org. > > regards, > > Armin > > > On 05/09/2017 02:10 PM, Marek Belisko wrote: > >libgpiod - C library and tools for interacting with the linux GPIO > >character device > > > >Since linux 4.8 the GPIO sysfs interface is deprecated. > >User space should use the character device instead. > >This library encapsulates the ioctl calls and data structures behind a > >straightforward API. > > > >Signed-off-by: Marek Belisko > >--- > > meta/recipes-support/libgpiod/libgpiod_0.2.bb | 25 > > + > > 1 file changed, 25 insertions(+) > > create mode 100644 meta/recipes-support/libgpiod/libgpiod_0.2.bb > > > >diff --git a/meta/recipes-support/libgpiod/libgpiod_0.2.bb > >b/meta/recipes-support/libgpiod/libgpiod_0.2.bb > >new file mode 100644 > >index 000..fe2cd80 > >--- /dev/null > >+++ b/meta/recipes-support/libgpiod/libgpiod_0.2.bb > >@@ -0,0 +1,25 @@ > >+SUMMARY = "C library and tools for interacting with the linux GPIO > >character device" > >+HOMEPAGE = "https://github.com/brgl/libgpiod"; > >+ > >+LICENSE = "LGPLv2.1+" > >+LIC_FILES_CHKSUM = "file://COPYING;md5=2caced0b25dfefd4c601d92bd15116de" > >+ > >+UPSTREAM_CHECK_URI = "https://github.com/brgl/libgpiod/releases"; > >+ > >+SRC_URI = "https://github.com/brgl/libgpiod/archive/v${PV}.tar.gz"; > >+ > >+SRC_URI[md5sum] = "e3430f35b6efa842693d659c0bfb7ad5" > >+SRC_URI[sha256sum] = > >"de1947f3cb2cc4174364af430309fe6238976658575655bdbd76c60cffa7df92" > >+ > >+inherit autotools pkgconfig > >+ > >+# enable tools > >+PACKAGECONFIG ?= "tools" > >+ > >+PACKAGECONFIG[tests] = "--enable-tests,--disable-tests,kmod udev" > >+PACKAGECONFIG[tools] = "--enable-tools,--disable-tools," > >+ > >+PACKAGES += " ${PN}-tools" > >+ > >+FILES_${PN} = "${libdir}/*" > >+FILES_${PN}-tools = "${bindir}/*" > > -- > ___ > Openembedded-core mailing list > openembedded-c...@lists.openembedded.org > http://lists.openembedded.org/mailman/listinfo/openembedded-core -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
Re: [yocto] [OE-core] [PATCH] recipes-support: Add recipe for libgpiod
On Tue, May 9, 2017 at 11:33 PM, Denys Dmytriyenko wrote: > Can libsoc help here? It's in meta-oe, but this libgpiod should be there > too... t can but according description sysfs api is deprecated and libgpiod implementing new gpio interface through char device. Sorry about to posting to wrong ML. > > On Tue, May 09, 2017 at 02:24:18PM -0700, akuster808 wrote: >> Marek, >> >> There is another mailing list that is geared towards the core >> development and recipes like this that are targeted for the main >> "meta" layer. >> >> You should resend this patch to: openembedded-c...@lists.openembedded.org. >> >> regards, >> >> Armin >> >> >> On 05/09/2017 02:10 PM, Marek Belisko wrote: >> >libgpiod - C library and tools for interacting with the linux GPIO >> >character device >> > >> >Since linux 4.8 the GPIO sysfs interface is deprecated. >> >User space should use the character device instead. >> >This library encapsulates the ioctl calls and data structures behind a >> >straightforward API. >> > >> >Signed-off-by: Marek Belisko >> >--- >> > meta/recipes-support/libgpiod/libgpiod_0.2.bb | 25 >> > + >> > 1 file changed, 25 insertions(+) >> > create mode 100644 meta/recipes-support/libgpiod/libgpiod_0.2.bb >> > >> >diff --git a/meta/recipes-support/libgpiod/libgpiod_0.2.bb >> >b/meta/recipes-support/libgpiod/libgpiod_0.2.bb >> >new file mode 100644 >> >index 000..fe2cd80 >> >--- /dev/null >> >+++ b/meta/recipes-support/libgpiod/libgpiod_0.2.bb >> >@@ -0,0 +1,25 @@ >> >+SUMMARY = "C library and tools for interacting with the linux GPIO >> >character device" >> >+HOMEPAGE = "https://github.com/brgl/libgpiod"; >> >+ >> >+LICENSE = "LGPLv2.1+" >> >+LIC_FILES_CHKSUM = "file://COPYING;md5=2caced0b25dfefd4c601d92bd15116de" >> >+ >> >+UPSTREAM_CHECK_URI = "https://github.com/brgl/libgpiod/releases"; >> >+ >> >+SRC_URI = "https://github.com/brgl/libgpiod/archive/v${PV}.tar.gz"; >> >+ >> >+SRC_URI[md5sum] = "e3430f35b6efa842693d659c0bfb7ad5" >> >+SRC_URI[sha256sum] = >> >"de1947f3cb2cc4174364af430309fe6238976658575655bdbd76c60cffa7df92" >> >+ >> >+inherit autotools pkgconfig >> >+ >> >+# enable tools >> >+PACKAGECONFIG ?= "tools" >> >+ >> >+PACKAGECONFIG[tests] = "--enable-tests,--disable-tests,kmod udev" >> >+PACKAGECONFIG[tools] = "--enable-tools,--disable-tools," >> >+ >> >+PACKAGES += " ${PN}-tools" >> >+ >> >+FILES_${PN} = "${libdir}/*" >> >+FILES_${PN}-tools = "${bindir}/*" >> >> -- >> ___ >> Openembedded-core mailing list >> openembedded-c...@lists.openembedded.org >> http://lists.openembedded.org/mailman/listinfo/openembedded-core BR, marek -- as simple and primitive as possible - Marek Belisko - OPEN-NANDRA Freelance Developer Ruska Nova Ves 219 | Presov, 08005 Slovak Republic Tel: +421 915 052 184 skype: marekwhite twitter: #opennandra web: http://open-nandra.com -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
[yocto] [PATCH V2] rpm: modify the rpm bbappend file to suitable for rpm4
1. change the rpm_5.4.16.bbappend to rpm_git.bbappend, this is because the rpm in oe-core has become rpm4 from rpm5. 2. drop the patch for rpm5. 3. delete the does not exist files when run task do_package. Signed-off-by: Dengke Du --- recipes-devtools/rpm/rpm_5.4.16.bbappend | 10 -- recipes-devtools/rpm/rpm_git.bbappend| 4 2 files changed, 4 insertions(+), 10 deletions(-) delete mode 100644 recipes-devtools/rpm/rpm_5.4.16.bbappend create mode 100644 recipes-devtools/rpm/rpm_git.bbappend diff --git a/recipes-devtools/rpm/rpm_5.4.16.bbappend b/recipes-devtools/rpm/rpm_5.4.16.bbappend deleted file mode 100644 index 2a41a28..000 --- a/recipes-devtools/rpm/rpm_5.4.16.bbappend +++ /dev/null @@ -1,10 +0,0 @@ -FILESEXTRAPATHS_prepend := "${THISDIR}/${PN}:" - -SRC_URI += "file://rpm-fix-build-bug.patch \ - " -FILES_${PN} += "${libdir}/rpm/bin/spooktool \ -${libdir}/rpm/bin/semodule \ - " - -inherit with-selinux -PACKAGECONFIG[selinux] = "${WITH_SELINUX},${WITHOUT_SELINUX},libsemanage," diff --git a/recipes-devtools/rpm/rpm_git.bbappend b/recipes-devtools/rpm/rpm_git.bbappend new file mode 100644 index 000..9f3ec90 --- /dev/null +++ b/recipes-devtools/rpm/rpm_git.bbappend @@ -0,0 +1,4 @@ +FILESEXTRAPATHS_prepend := "${THISDIR}/${PN}:" + +inherit with-selinux +PACKAGECONFIG[selinux] = "${WITH_SELINUX},${WITHOUT_SELINUX},libsemanage," -- 2.8.1 -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
[yocto] [meta-raspberrypi][PATCH 1/2] userland: Add missing GLES2 defines
Needed by weston Signed-off-by: Khem Raj --- ...-gl2ext.h-Define-GL_R8_EXT-and-GL_RG8_EXT.patch | 30 ++ recipes-graphics/userland/userland_git.bb | 1 + 2 files changed, 31 insertions(+) create mode 100644 recipes-graphics/userland/userland/0014-GLES2-gl2ext.h-Define-GL_R8_EXT-and-GL_RG8_EXT.patch diff --git a/recipes-graphics/userland/userland/0014-GLES2-gl2ext.h-Define-GL_R8_EXT-and-GL_RG8_EXT.patch b/recipes-graphics/userland/userland/0014-GLES2-gl2ext.h-Define-GL_R8_EXT-and-GL_RG8_EXT.patch new file mode 100644 index 000..2232d4b --- /dev/null +++ b/recipes-graphics/userland/userland/0014-GLES2-gl2ext.h-Define-GL_R8_EXT-and-GL_RG8_EXT.patch @@ -0,0 +1,30 @@ +From 55a66f56a14eb8c3ae8294860e49efc9c9598c46 Mon Sep 17 00:00:00 2001 +From: Khem Raj +Date: Wed, 10 May 2017 06:39:34 + +Subject: [PATCH] GLES2/gl2ext.h: Define GL_R8_EXT and GL_RG8_EXT + +weston code uses these defines +Upstream-Status: Pending + +Signed-off-by: Khem Raj +--- + interface/khronos/include/GLES2/gl2ext.h | 3 +++ + 1 file changed, 3 insertions(+) + +diff --git a/interface/khronos/include/GLES2/gl2ext.h b/interface/khronos/include/GLES2/gl2ext.h +index 4eacf7f..283e3e1 100644 +--- a/interface/khronos/include/GLES2/gl2ext.h b/interface/khronos/include/GLES2/gl2ext.h +@@ -327,6 +327,9 @@ typedef void* GLeglImageOES; + #define GL_RGBX_BRCM0x80EE + #endif + ++#define GL_R8_EXT 0x8229 ++#define GL_RG8_EXT 0x822B ++ + /* GL_EXT_texture_type_2_10_10_10_REV */ + #ifndef GL_EXT_texture_type_2_10_10_10_REV + #define GL_UNSIGNED_INT_2_10_10_10_REV_EXT 0x8368 +-- +1.9.1 + diff --git a/recipes-graphics/userland/userland_git.bb b/recipes-graphics/userland/userland_git.bb index 9526fae..1176ef2 100644 --- a/recipes-graphics/userland/userland_git.bb +++ b/recipes-graphics/userland/userland_git.bb @@ -33,6 +33,7 @@ SRC_URI = "\ file://0011-build-shared-library-for-vchostif.patch \ file://0012-implement-buffer-wrapping-interface-for-dispmanx.patch \ file://0013-Implement-triple-buffering-for-wayland.patch \ +file://0014-GLES2-gl2ext.h-Define-GL_R8_EXT-and-GL_RG8_EXT.patch \ " S = "${WORKDIR}/git" -- 2.12.2 -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto
[yocto] [meta-raspberrypi][PATCH 2/2] mesa-gl: Enable gbm for rpi
weston needs gbm support which is not in userland Signed-off-by: Khem Raj --- recipes-graphics/mesa/mesa-gl_%.bbappend | 1 + 1 file changed, 1 insertion(+) create mode 100644 recipes-graphics/mesa/mesa-gl_%.bbappend diff --git a/recipes-graphics/mesa/mesa-gl_%.bbappend b/recipes-graphics/mesa/mesa-gl_%.bbappend new file mode 100644 index 000..7897125 --- /dev/null +++ b/recipes-graphics/mesa/mesa-gl_%.bbappend @@ -0,0 +1 @@ +PACKAGECONFIG_append_rpi = " gbm" -- 2.12.2 -- ___ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto