]> code.ossystems Code Review - openembedded-core.git/commit
Code Review / openembedded-core.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: eb227c8) | patch
glibc: exclude child recipes from CVE scanning
authorRoss Burton <ross.burton@intel.com>
Wed, 6 Nov 2019 15:37:30 +0000 (17:37 +0200)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 6 Nov 2019 20:44:15 +0000 (20:44 +0000)
commit2b9f1b654c726e7c7b2fe8710d60ca10212295f5
treeedf768b533d426cdb389c67ab62aba2247fcabf4tree | snapshot
parenteb227c8885580fc08dccc005056bb1fdb691ea1dcommit | diff
glibc: exclude child recipes from CVE scanning

As glibc will be scanned for CVEs, we don't need to scan glibc-locale,
glibc-mtrace, and glibc-scripts which are all separate recipes for technical
reasons.

Exclude the recipes by setting CVE_PRODUCT in the recipe, instead of using the
global whitelist.

(From OE-Core rev: 1f9a963b9ff7ebe052ba54b9fcbdf7d09478dd17)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/classes/cve-check.bbclass diff | blob | history
meta/recipes-core/glibc/glibc-locale.inc diff | blob | history
meta/recipes-core/glibc/glibc-mtrace.inc diff | blob | history
meta/recipes-core/glibc/glibc-scripts.inc diff | blob | history
Mirror of the official openembedded-core repository