Re: [OE-core] [PATCH 3/3] cve-check.bbclass: Add class

2016-02-29 Thread Mariano Lopez
On 02/29/2016 08:50 AM, Burton, Ross wrote: On 24 February 2016 at 15:27, > wrote: +do_cve_check[depends] = "cve-check-tool-native:do_populate_cve_db" And cve-check-tool-native:do_populate_sysroot. cve-check-tool-native:do_populate_cve_db depends

Re: [OE-core] [PATCH 3/3] cve-check.bbclass: Add class

2016-02-29 Thread Burton, Ross
On 24 February 2016 at 15:27, wrote: > +# Whitelist for packages (PN) > +cve_check_pn_whitelist () { > +glibc-locale > +} Why is this a shell function? CVE_CHECK_PN_WHITELIST = "glibc-locale" please. +# Whitelist for CVE and version of package > +python cve_check_cve_whitelist () { > +

[OE-core] [PATCH 3/3] cve-check.bbclass: Add class

2016-02-24 Thread mariano . lopez
From: Mariano Lopez This class adds a new task for all the recipes to use cve-check-tool in order to look for public CVEs affecting the packages generated. It is possible to use this class when building an image, building a recipe, or using the "world" or "universe" cases. In order to use this