]> code.ossystems Code Review - openembedded-core.git/commit
package_ipk: Clean up Source entry in ipk packages
authorRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 16 Jun 2017 08:42:30 +0000 (09:42 +0100)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 16 Jun 2017 09:18:55 +0000 (10:18 +0100)
commit0b5e0d072f93a958e4211a8aeb2fd8cc3c25cc21
tree29023c7fb8a72bae7628d1b4713fe6ee62d10cee
parentccd8e2cf7157c941ebacc6be306c1dbe2ec31e86
package_ipk: Clean up Source entry in ipk packages

There is the potential for sensitive information to leak through the urls
there and removing it brings this into the behavior of the other package
backends since filtering it is likely error prone.

Since ipks don't appear to be generated at all if we don't set this, set
the field to the recipe name used (basename only, no paths). This avoids
information leaking. We may want to drop the field if opkg can allow that
at a future point but the recipe name is a suitable identifier for now.

Reported-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/classes/package_ipk.bbclass