[yocto] setcap using recipe

Hello All, Is there a way to add a capability to a binary (cap_net_raw+ep),into a recipe? Example : do_install() { install -d ${D}${bindir} install -m 0755 helloworld ${D}${bindir} install -d ${D}/lib/systemd/system install -m 0755 hello.servic

Re: [yocto] setcap using recipe

hello.service ${D}/lib/systemd/system/ setcap cap_net_raw+ep ${D}${bindir}/helloworld } Thanks and Regards Shrawan From: Burton, Ross [mailto:ross.bur...@intel.com] Sent: Friday, June 24, 2016 5:09 PM To: Kumar, Shrawan Cc: yocto@yoctoproject.org Subject: Re: [yocto] setcap using recipe

Re: [yocto] setcap using recipe

I am using Yocto 2.0.2 Thanks and Regards Shrawan From: Burton, Ross [mailto:ross.bur...@intel.com] Sent: Friday, June 24, 2016 5:56 PM To: Kumar, Shrawan Cc: yocto@yoctoproject.org Subject: Re: [yocto] setcap using recipe What version of OE/Yocto are you using? Old versions of pseudo didn&#

Re: [yocto] setcap using recipe

, 2016 6:40 PM To: Kumar, Shrawan Cc: yocto@yoctoproject.org Subject: Re: [yocto] setcap using recipe Looks like using setcap directly is broken currently, there are two workarounds: 1) use a postinst to invoke setcap on the target instead 2) test the patch for pseudo that is on this list ([PATCH

Re: [yocto] setcap using recipe

Hello Ross, Could your update on my issues ? Regards Shrawan From: yocto-boun...@yoctoproject.org [mailto:yocto-boun...@yoctoproject.org] On Behalf Of Kumar, Shrawan Sent: Monday, June 27, 2016 12:04 PM To: Burton, Ross Cc: yocto@yoctoproject.org Subject: Re: [yocto] setcap using recipe

Re: [yocto] setcap using recipe

[mailto:ross.bur...@intel.com] Sent: Friday, June 24, 2016 6:40 PM To: Kumar, Shrawan Cc: yocto@yoctoproject.org Subject: Re: [yocto] setcap using recipe Looks like using setcap directly is broken currently, there are two workarounds: 1) use a postinst to invoke setcap on the target instead 2) test the

Re: [yocto] setcap using recipe

m qemux86 is my target. Can someone review the attached recipe and help solve the problem statement ? Regards Shrawan -Original Message- From: Daniel. [mailto:danielhi...@gmail.com] Sent: Friday, July 01, 2016 7:54 PM To: Mathieu Allard Cc: Kumar, Shrawan; yocto@yoctoproject.org S

Re: [yocto] setcap using recipe

it on the target, but my requirement is to do it on the build host. We do not want “setcap” utility to be present on the target. Regards Shrawan From: Burton, Ross [mailto:ross.bur...@intel.com] Sent: Saturday, July 02, 2016 2:56 PM To: Kumar, Shrawan Cc: Daniel.; Mathieu Allard; yocto

[yocto] useradd does not creates user in rootfs but sysroot ?

Dear Team, Downloaded " krogoth" release , with intension to use the above bb file to create users( user1,user2 etc.) The expectation was that the users should get created in the "rootfs" . But to dismay, this get created in the sysroot (poky/build/tmp/sysroots/qemux86/etc/passwd). This

[yocto] Access Control List (ACL) permissions attributes not getting preserved in rootfs

Hello All, I am using poky " jethro" , and though one of my recipe, I have created user1 & user2 and then trying to set ACL rules on "helloworld" bin as below : do_install() { install -d ${D}${bindir} install -m 0700 helloworld ${D}${bindir}

Re: [yocto] Access Control List (ACL) permissions attributes not getting preserved in rootfs

mmand )creation when "create_image_ext4.sh" is called , again this is getting lost. Any idea on this ? Regards Shrawan -Original Message- From: Joshua G Lock [mailto:joshua.g.l...@linux.intel.com] Sent: Friday, August 12, 2016 7:22 PM To: Kumar, Shrawan; yocto@yoctoproject.o

Re: [yocto] Access Control List (ACL) permissions attributes not getting preserved in rootfs

ards Shrawan -Original Message- From: Joshua G Lock [mailto:joshua.g.l...@linux.intel.com] Sent: Wednesday, August 17, 2016 1:22 AM To: Kumar, Shrawan; yocto@yoctoproject.org Subject: Re: [yocto] Access Control List (ACL) permissions attributes not getting preserved in rootfs On Tue, 20

Re: [yocto] [EXTERNAL] Re: want to execute a script having sudo : sudo cryptsetup

nley [mailto:john.fin...@gmail.com] Sent: 27 September 2017 22:58 To: Khem Raj Cc: Kumar, Shrawan ; connect.shra...@gmail.com; yocto@yoctoproject.org Subject: [EXTERNAL] Re: [yocto] want to execute a script having sudo : sudo cryptsetup pseudo can't do some of the cryptsetup functions that really require

[yocto] removal of user & group from sysroot when recipe/package is cleaned

Hello Team, Referring to the patch below regarding removal of user & group from sysroot when recipe/package is cleaned using clean/cleansstate/cleanall : https://patchwork.openembedded.org/patch/119549/ Has this patch been up streamed ? Regards Shrawan -- __

[yocto] POSIX capability broken pseudo

Hello Team, Under DISTRO_VERSION = "2.0.2" ("jethro"), I was using the attached “setcap.patch” on pseudo_1.7.4 to get POSIX capability set in the files as below : pkg_postinst_${PN}() { setcap cap_net_raw+ep $D$bindir/helloworld } This was working fine. However, recently switched to

Re: [yocto] POSIX capability broken pseudo

Any update on this ? Regards Shrawan From: Kumar, Shrawan Sent: 09 July 2018 17:17 To: 'yocto@yoctoproject.org' Cc: 'connect.shra...@gmail.com' ; 'Khem Raj' Subject: POSIX capability broken pseudo Hello Team, Under DISTRO_VERSION = "2.0.2&qu

[yocto] setting security attributes to device file(/dev/ipc)

Hello Team , I want to set ACL and SMACK/SELinux rules to device files (line /dev/ipc2 /dev/galcore etc .. ) from the build system . But device files are dynamically populated at runtime. Do we have some way in "Yocto" to achieve the goal ? Thanks & Regards Shrawan -- _

Re: [yocto] want to execute a script having sudo : sudo cryptsetup

Hello Team , I am trying to achieve below from yocto , do we have a way ? dd if=/dev/zero of=hello.enc bs=4k count=$400 mknod /dev/loop_dev_0 losetup /dev/loop_dev_0 hello.enc sudo cryptsetup --type=plain open /dev/loop_dev_0 plainMap < $2 Thanks and Regards Shrawan -- __

[yocto] rootfs encryption support

Hello Team , Is it possible to get encrypted rootfs during image build ? Currently , I am running "cryptsetup" (as sudo) manually after the final image(rootfs.ext4) is produced . The idea is to get this done within yocto environment without sudo problem . Thanks and Regards Shrawan -- __

Re: [yocto] rootfs encryption support

hat "fakeroot" shall have allowed to me achieve the goal. Thanks & Regads Shrawan From: Kumar, Shrawan Sent: Tuesday, September 26, 2017 10:56 AM To: 'yocto@yoctoproject.org' Subject: rootfs encryption support Hello Team , Is it possible to get encrypted rootfs du

Re: [yocto] [EXTERNAL] Re: rootfs encryption support

crypt" module is loaded . -Original Message- From: Ayoub Zaki [mailto:ayoub.z...@embexus.com] Sent: Tuesday, September 26, 2017 4:17 PM To: Kumar, Shrawan Subject: [EXTERNAL] Re: [yocto] rootfs encryption support On 26.09.2017 12:29, Kumar, Shrawan wrote: > To add further informati

[yocto] want to execute a script having sudo : sudo cryptsetup

Hello Team , I am trying to achieve below from yocto , do we have a way ? dd if=/dev/zero of=hello.enc bs=4k count=$400 mknod /dev/loop_dev_0 losetup /dev/loop_dev_0 hello.enc sudo cryptsetup --type=plain open /dev/loop_dev_0 plainMap < $2 Thanks and Regards Shrawan -- __

Re: [yocto] Access Control List (ACL) permissions attributes not getting preserved in rootfs

rt/kb/doc?id=7003064 https://bbs.archlinux.org/viewtopic.php?id=211463 https://access.redhat.com/solutions/752523 Thanks and Regards Shrawan -Original Message- From: Joshua G Lock [mailto:joshua.g.l...@linux.intel.com] Sent: Friday, August 12, 2016 7:22 PM To: Kumar, Shrawan; yo

Re: [yocto] Access Control List (ACL) permissions attributes not getting preserved in rootfs

e 256 while creating the ext4 image. Thanks and REgads Shrawan -Original Message- From: yocto-boun...@yoctoproject.org [mailto:yocto-boun...@yoctoproject.org] On Behalf Of Kumar, Shrawan Sent: Thursday, October 27, 2016 6:26 PM To: Joshua G Lock; yocto@yoctoproject.org Subject: R