Junling Zheng [Wed, 3 Jun 2020 14:08:41 +0000 (22:08 +0800)]
security_flags: Remove stack protector flag from LDFLAGS
SECURITY_LDFLAGS contains stack protector flag inappropriately, which
has already be contained in SECURITY_CFLAGS. Let's remove it from
SECURITY_LDFLAGS.
Signed-off-by: Junling Zheng <zhengjunling@huawei.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Wed, 3 Jun 2020 10:52:01 +0000 (18:52 +0800)]
valgrind: upgrade 3.15.0 -> 3.16.0
0001-gcc10-arm64-build-needs-__getauxval-for-linking-with.patch
0001-tests-Make-pthread_detatch-call-portable-across-plat.patch
0004-pth_atfork1.c-Define-error-API-for-musl.patch
removed since they are included in 3.16.0
refresh 0004-Fix-out-of-tree-builds.patch
-License-Update:
before:
You should have received a copy of the GNU General Public
License along with this program; if not, write to the Free Software
Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA
02111-1307, USA.
after:
You should have received a copy of the GNU General Public License
along with this program; if not, see <http://www.gnu.org/licenses/>.
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Debians init-system-helpers bundle an own, perl written update-rc.d which
doesn't fulfill embedded/cross-build requirements as our own in
meta/recipes-core/update-rc.d
does. To avoid unnecessary conflicts or questions, do not bundle it by
default. Whoever wants it is invited to have an .bbappend.
Signed-off-by: Jens Rehsack <sno@netbsd.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Check the status before start it to avoid duplicates.
the use of a script {/usr/sbin/}service is introduced - maybe earlier
provided by systemd, nowadays mostly by init-system-helpers from
debian project.
For the very first shot, maybe discussions and improvements based
on that script collection, use just the init-system-helpers-service
in initscripts/mountnfs.sh to avoid problems mounting NFS in later
boot stage.
Signed-off-by: Jens Rehsack <sno@netbsd.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Alex Kiernan [Tue, 2 Jun 2020 14:51:20 +0000 (15:51 +0100)]
systemd: upgrade v245.5 -> v245.6
Commits:
aa0cb635f1f6 network: L2TP fix crash 9774347b5775 Fix typo. 2cac801f0f37 stat-util: trivial empty_or_null() tweaks b054e69bf98e Check ambient set against bounding set prior to applying ambient set bed695375abc udev: when the BSD lock on a block device is taken, don't complain 66fcfdfde7d9 core: add forgotten return in error path 05dd19fad320 shared/efi-loader: remove check that uses absolute tick value 753a71ad1d0e gpt: include homed GPT partition type in well-known partition table 366872204933 units: don't set PrivateNetwork= in systemd-homed.service 2bca2d77d37d resolved-dns-query: remove dns_query_candidate_is_routable a3f60204325a sd-network: fix inverted error message a7a9fe3c930d network: allow empty assignment to PreferredLifetime= 8df6fc1241d1 Update resolvectl zsh completion c1a83277d086 shared: treat generator units as vendor units 1f382d818dd0 tree-wide: fix bad errno checks 667c2076838f bus-message: immediately reject messages with invalid type 116a8eadb6ad bus-message: fix negative offset with ~empty message 4d5779d886d0 load-fragment: fix a typo c8b6de003a07 NEWS: retroactively document Family= cf6b8e6ec524 man: fix dir name in sysctl.d(5) 6d009b7a25b1 journalctl,elsewhere: make sure --file=foo fails with sane error msg if foo is not readable cf786ef1643e makefs: log about OOM condition 0b1839822f9e blockdev: propagate one more unexpected error d78ce949d001 repart: don't insist on coming up on partition label ourselves 9e1363fcc65f journal: fix dropping first record during upload to remote journal 50cb4e418dab meson: initialize time-epoch to reproducible builds compatible value 76abe079b79a limit-util: quieten a very common debug message that is misleading b3e484a3b133 shared: fix integer overflow in calendarspec 0c29eea9691d repart: suppress complaints about lack of BLKRRPART when operating on regular file 3db52f5ed840 repart: explain when we exit early and don't do a thing d99cba3aaa8c mount: introduce mount_is_nofail() helper 7bc4bcea15aa mount: default startup dependencies and default network ones are orthogonal 7fe617fa5381 mount: introduce mount_add_default_ordering_dependencies() e1c091b6d4c5 automount: fix handling of default dependencies for automount units ae05a137c9d4 mount: let pid1 alone handle the default dependencies for mount units f1fb1971767d mount: mount unit activated by automount unit should be only ordered against the automount unit c9bcc69703c1 generator: don't generate device dependencies for extrinsic mounts ebac09ea0a4e fstab-util: introduce fstab_is_extrinsic() a20e4ea0ed98 device: drop refuse_after 2799fffac1eb man: drop some left-over mentions of StandardOutput=syslog 144aff9c3beb sd-netlink: remove unused RTNL_WQUEUE_MAX define 34ca8df8e131 test: Add return 0 to main() function (even it is not strictly necessary) 6e03f328a939 network: 'cur' variable cannot be null, so simplify code 8d0c97f6ca3c tree-wide: Initialize _cleanup_ variables if needed 4f174e49aef8 netlink: Fix assert condition on n_containers 3905ce532c86 journald: Increase stdout buffer size sooner, when almost full 5a37eb7c6155 core: don't bind varlink socket if running in test mode 33fff72ce665 pam_systemd: also print debug lines when ending a session ba9af79ccbab pam_systemd_home: use correct macro for converting ptr to fd 619923548961 Fix misuse of PAM_PROMPT_ECHO_OFF in systemd-homed c180a2c4520e shared/ethtool-util: hush gcc warnings about array bounds 1addba4aac47 core: fix compilation with gcc -O3 9c46b97161c7 random-util: use ERRNO_IS_NOT_SUPPORTED() macro d85f9093d2f5 tmpfiles: clarify that "!" lines are filtered before collisions are checked 2fac966a5ca3 man: mention the exclamation mark and minus sign literally, to make things searchable 4f61be3373e3 man: clarify that exit status name mappings are unaffected by SuccessExitStatus= b747d74a4102 seccomp-util: add new syscalls from kernel 5.6 to syscall filter table c30d8caf8b3d tree-wide: Replace assert() by assert_se() when there is side effect b6e8e3be7e48 networkctl: use uint64_t for link speed throughout be66ce60891d tree-wide: use CMSG_SPACE() (and not CMSG_LEN()) to allocate control buffers 1cb197798a40 man: suffix pam options with "=" where arg is required too a5fe01d3da4c test: Use assert_se() where variables are only checked by assert 6960efd19892 tree-wide: Fix, replace assert() by assert_se() when there is side effect 93c1b0307496 tree-wide: Mark as _unused_ variables that are only used in assert() c7679d7a9f01 tree-wide: Workaround -Wnonnull GCC bug 073b257fd760 man: bring example PAM snippet of pam_systemd and pam_systemd_home back in sync 855291a81ca6 man: highlight relevant lines in pam_systemd_home.so example PAM snippet f89ad7c0fdd9 login: include pam_systemd_home.so in the default PAM snippet we ship for user@.service 9357f9466f80 test: Skip test-boot-timestamps on permission denied cad4ebe14e9e sysusers: be extra careful when locking accounts 551e6f233a52 shared/install: print name of offending file in error c6a2e5123206 systemctl: fix --root support in querying presets 6f1eedbfdda5 systemctl: fix hint when 'systemctl help' is given 925521df7c86 shared/unit-file: fix resolution of absoulute symlinks with --root 756ba362e873 man: mention that ProtectSystem= also takes care of /efi 4f77cf43b5de man: systemd.service: systemd-analyze exit-codes -> exit-status 7c6ea7a0534c man: expand on the star…end/repetition time expressions e06b9407928c calendarspec: be more graceful with two kinds of calendar expressions f3dd0b476d9d calendarspec: minor simplification 3581c16d5681 shutdown: fix spacing in shutdown error message 9556255349ff nspawn: mount custom paths before writing to /etc 37447b7e78ad repart: fix partition maximum size segfault 7f231ba503e7 link: Add units and fix typo in (Rx|Tx)BufferSize= manpage. Clean up the implementation slightly e75d2cdb0b22 main: bump RLIMIT_MEMLOCK by physical RAM size e16b9a1e31bf nspawn: be more careful with creating/chowning directories to overmount 765d184a6976 homectl: say "home area" in more places c11bff4fa72b userdbctl: make --help fit in 80 columns 0e56c2ef3fe3 shell-completion/zsh: update systemd-analyze completions 2bb580f9942d zsh: fix disable/enable completion 607a19a30936 cgroup-util: check for SYSFS_MAGIC when detecting cgroup format ddb3c38efce1 stat-util: no need to open a file to check fs type bd8842304c87 sysusers,tmpfiles: always mention error when failing to replace specifiers bdea9b65d21a sysusers: add accidentally forgotten 'return' 17b059774dd4 man: document binfmt's new --unregister switch 560380d8ec94 binfmt: also unregister binfmt entries from unit 80835d9c51bd binfmt: modernize code a bit a1745741b82f shutdown: unregister all binfmt_misc entries before entering shutdown loop b637445950c8 shared: add common helper for unregistering all binfmt entries 0215625e9927 home: fix strv NUL termination 038988baa14e networkd: don't do lldp rx nor tx on bond devices 9512d576d9f3 sd-bus: Fix typo in sd_bus_message_append_array docs 63cef71dd068 shared: add NULL callback check in one more place 6b91ca22a2e5 core: fix unused variable warning when !HAVE_SECCOMP f7c1c79c576d udev: prepare memory for extra NUL termination for NULSTR 69e0ef0d99ec tree-wide: use recvmsg_safe() at various places cd0a84d4e956 socket-util: add recvmsg_safe() wrapper that handles MSG_CTRUNC 2bb48c704b8d sd-bus: work around ubsan warning c147bba1fb4a shared: Don't try calling NULL callback in bus_wait_for_units_clear f907491463ac run: don't wait for start job to complete when running interactively anyway d3d1550a5d98 man: Fix typo "multiplied with" -> "multiplied by" ae5a9f27c5e5 core: make sure we don't get confused when setting TERM for a tty fd a07d3eaf7657 man: document that VirtualEthernetExtra= has nothing to do with Bridge= 35fe81078eb1 core: add debug log when a job in the activation queue is not runnable a0cd882be891 core: add log_get_max_level check optimization in log_unit_full 2a6ad1093c3c util: return the correct correct wd from inotify helpers 9ec244c5c121 core: minor error code handling fixes a799283c91f6 man: document how to get the boot menu with zero time-out 7263e86c8dd8 resolved: return org.freedesktop.resolve1.DnsError.NXDOMAIN on LLMNR resolution failure 6eab4c2b3ece man: use manpages.ubuntu.com for resolvconf(8) link 75ccec5cde54 man: add a note that resolvconf updates /etc/resolv.conf in specific circumstances 3e3a31743a45 resolvectl: fix indentation of hexdump'ed packets 6576058fab75 journald: add configuration option for enabling/disabling audit during journald startup 52c5909f15ff man/systemd-service: clarify env variable expansion ac08df59c0db resolved: fix typo in an unused function and add comment
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Doxygen in meta-oe has recently been extended for nativesdk. Doxygen is
often used together with mscgen which in turn depends indirectly on
tiff (via gd library).
Signed-off-by: Christian Eggers <ceggers@arri.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Joshua Watt [Tue, 2 Jun 2020 13:42:05 +0000 (08:42 -0500)]
wic: Add --offset argument for partitions
Add support for an --offset argument when defining a partition. Many
SoCs require that boot partitions be located at specific offsets. Prior
to this argument, most WKS files were using the --align attribute to
specify the location of these fixed partitions but this is not ideal
because in the event that the partition couldn't be placed in the
specified location, wic would move it to the next sector with that
alignment, often preventing the device from booting. Unlike the --align
argument, wic will fail if a partition cannot be placed at the exact
offset specified with --offset.
Changes in V2:
* Fixed a small typo that prevented test_fixed_size_error from passing
Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Hongxu Jia [Wed, 3 Jun 2020 06:55:31 +0000 (14:55 +0800)]
rpm: fix rpm -Kv xxx.rpm failed if signature header is larger than 64KB
Since commits [Place file signatures into the signature header where they
belong][1] applied, run `rpm -Kv **.rpm' failed if signature header
is larger than 64KB. Here are steps:
1) A unsigned rpm package, the size is 227560 bytes
$ ls -al xz-src-5.2.5-r0.corei7_64.rpm
-rw-------. 1 mockbuild 1000 227560 Jun 3 09:59
2) Sign the rpm package
$ rpmsign --addsign ... xz-src-5.2.5-r0.corei7_64.rpm
3) The size of signed rpm is 312208 bytes
$ ls -al xz-src-5.2.5-r0.corei7_64.rpm
-rw-------. 1 mockbuild 1000 312208 Jun 3 09:48
4) Run `rpm -Kv' failed with signature hdr data out of range
$ rpm -Kv xz-src-5.2.5-r0.corei7_64.rpm
xz-src-5.2.5-r0.corei7_64.rpm:
error: xz-src-5.2.5-r0.corei7_64.rpm: signature hdr data: BAD, no. of
bytes(88864) out of range
>From 1) and 3), the size of signed rpm package increased
312208 - 227560 = 84648, so the check of dl_max (64KB,65536)
is not enough.
As [1] said:
This also means the signature header can be MUCH bigger than ever
before,so bump up the limit (to 64MB, arbitrary something for now)
Jan Luebbe [Wed, 3 Jun 2020 08:12:37 +0000 (10:12 +0200)]
classes/buildhistory: capture package config
As the PACKAGECONFIG variable has a large influence on the resulting
package sizes and dependencies, it's useful to capture it in the
recipe-level buildhistory. This makes it straightforward to analyze the
impact of PACKAGECONFIG changes on the resulting image size.
Signed-off-by: Jan Luebbe <jlu@pengutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Andreas Müller [Tue, 2 Jun 2020 18:37:10 +0000 (20:37 +0200)]
vte: Pack ${libexecdir}/vte-urlencode-cwd to vte-prompt
Have vte-prompt in my images. Since upgrade 0.60.2 all terminals complain with:
| bash: /usr/libexec/vte-urlencode-cwd: No such file or directory
Grepping sources shows that vte.csh and vte.sh are the only callers of
vte-urlencode-cwd. Both are installed by vte-prompt so move vte-urlencode-cwd
where it's used.
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ralph Siemsen [Tue, 2 Jun 2020 18:21:13 +0000 (14:21 -0400)]
cve-check: include epoch in product version output
In the generated cve.log files, include the epoch in the product
version. This better matches how versions are displayed elsewhere,
in particular the bb.warn("Found unpatched CVE...") that appears
on the terminal when CVEs are found.
Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
which can only be caused by the qemu.stop() method not being called.
Tweak the error handling to fix the blanket exception handler which
is likely meaning this function isn't getting called.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
cairo: Do not try to remove nonexistent directories
Commit 0e1f8fa0 (bitbake.conf: propagate 'opengl' DISTRO_FEATURE to
native/nativesdk from target) changed the default PACKAGECONFIG for
native and nativesdk so that it becomes empty unless "x11" is in
DISTRO_FEATURES since "trace" was also removed (propbably
unintentionally). This highlighted than an empty PACKAGECONFIG would
lead to a build failure since /usr/bin is never created under these
conditions, but the recipe still tried to remove it.
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Konrad Weihmann [Sun, 31 May 2020 20:57:48 +0000 (22:57 +0200)]
sysfsutils: rem leftover settings for libsysfs-dev
22af6a2595dbec98ce4a2e3b1324ad8d400390ad removed the PACKAGES
setting, but left the FILES-assignments of libsysfs-dev and -staticdev.
As these have no use anymore they can be safely removed
Signed-off-by: Konrad Weihmann <kweihmann@outlook.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
License-Update: http changed to https Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Replace pcre-cross.patch with the (default) option
to use pre-built tables; the README says it's ok, and
recommended in cross-compile situations. The option
was in the recipe from the start and neither the commit
that adds the recipe, nor the patch to make it work explain
why.
License-Update: copyright years Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
License-Update: copyright years Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
License-Update: copyright years, formatting Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
License-Update: additional copyright statements, all BSD Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
