aboutsummaryrefslogtreecommitdiffstats
path: root/meta-networking
AgeCommit message (Collapse)Author
2015-05-11meta-networking: standardize SECTION valuesjoeythesaint/masterJoe MacDonald
SECTION has been used inconsistently throughout the recipes in this layer. Convert them to all use the same convention. Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-05-11daq: move recipe to meta-networkingArmin Kuster
ERROR: Nothing PROVIDES 'libdnet' (but /home/akuster/oss/clean/meta-openembedded/meta-oe/recipes-connectivity/daq/daq_2.0.2.bb DEPENDS on or otherwise requires it). Close matches: libnet libnewt libidn ERROR: Required build target 'daq' has no buildable providers. Missing or unbuildable dependency chain was: ['daq', 'libdnet'] world build fails for meta-oe. move daq to meta-networking where snort and libdnet both reside. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-05-11netkit-telnet: support the cross-compileRoy Li
when check the CC, only compile the object by CC, not run the object. MCONFIG file includes more configuration, we can not clear it Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-05-08net-snmp: fix CVE-2014-2285Junling Zheng
The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a denial of service (snmptrapd crash) via an empty community string in an SNMP trap, which triggers a NULL pointer dereference within the newSVpv function in Perl. Refer to: https://bugzilla.redhat.com/show_bug.cgi?id=1072044 Signed-off-by: Junling Zheng <zhengjunling@huawei.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-05-08cifs-utils: upgrade to 6.4Roy Li
6.4 fixed a CVE defect: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2830 Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pam_cifscreds, allows remote attackers to have unspecified impact via unknown vectors. Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-05-08ipsec-tools: set SYSTEMD_SERVICE correctly to avoid building warning.Bian Naimeng
ipsec-tools-0.8.2: ipsec-tools: Files/directories were installed but not shipped /lib /lib/systemd /lib/systemd/system /lib/systemd/system/racoon.service [installed-vs-shipped] Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-05-08opensaf: RDEPENDS on python and bashRobert Yang
python: opensaf/usr/share/opensaf/samples/immsv/immom_python/immom.py bash: opensaf/usr/share/opensaf/immxml/verify.sh opensaf/usr/share/opensaf/immxml/immxml-modify-config opensaf/usr/share/opensaf/immxml/immxml-configure opensaf/usr/share/opensaf/immxml/immxml-clustersize opensaf/usr/share/opensaf/immxml/immxml-nodegen opensaf/usr/share/opensaf/samples/INSTALL opensaf/usr/share/opensaf/samples/smfsv/campaigns/smf-verify opensaf/usr/lib/opensaf/configure_tipc Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-05-08opensaf: install opensafd.serviceRobert Yang
Fixed when systemd: ERROR: Function failed: SYSTEMD_SERVICE_opensaf value opensafd.service does not exist Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-05-08netcat-openbsd: add LIC_FILES_CHKSUMChunrong Guo
Signed-off-by: Chunrong Guo <B40290@freescale.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-05-08vsftpd: fix the CVE-2015-1419Roy Li
Taken Patch from fedora to fix CVE-2015-1419, deny_file parsing to do more what is expected. Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-05-08ntp: uprev to 4.2.8p2Roy Li
ntp 4.2.8p2 has more CVE fixes, like CVE-2015-1799, CVE-2015-1798; and remove ntp-4.2.8-ntp-keygen-no-openssl.patch which 4.2.8p2 has integrated Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-05-08lksctp-tools: make -utils and -ptest recommend sctp kernel moduleDmitry Eremin-Solenikov
Neither -utils nor -ptest packages make sense w/o actual kernel support for SCTP protocol. Make both packages RRECOMMEND kernel-module-sctp. Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-04-15postfix: add LSB init infosWenzong Fan
Keep compatibility with chkconfig tool. Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-04-15vsftpd / init: add LSB init infosWenzong Fan
Keep compatibility with chkconfig tool. Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-04-15vpnc: don't rdepend on kernel-module-tunAndreas Oberritter
Kernel modules may be built-in, so rrecommend it instead. Signed-off-by: Andreas Oberritter <obi@opendreambox.org> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-04-15wolfssl: change name from cyassl to wolfssl, update to version 3.4.0lchristina26
CyaSSL is now called wolfSSL. Recipe updates included RPROVIDE and PROVIDE lines, with updates to sha/md5 sums. Signed-off-by: lchristina26 <leah@wolfssl.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-04-15ipvsadm: Add version 1.26 (initial recipe)Jianchuan Wang
* add ipvs administration tool Signed-off-by: Jianchuan Wang <jianchuan.wang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-04-07ypbind-mt: Add systemd dependencyJoe MacDonald
When building for a system including systemd ypbind-mt will link against libsystemd creating an implicit dependency. Make that explicit. Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-03-21smcroute: add version 2.0.0 with /usr/sbin and endless loop fixesDenys Dmytriyenko
Signed-off-by: Denys Dmytriyenko <denys@ti.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-03-18GeoIP: update checksumsJoe MacDonald
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-03-13openflow: add libcrypto to static openflow libraryJoe MacDonald
An update in OpenSSL removed the -lcrypto from libssl's pkg-config options. The old behaviour always linked it with -lssl, so revert to that for now. Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-03-11postfix: get rid of useless codeBian Naimeng
We should set group of ${localstatedir}/lib/postfix to 'nogroup' not 'postfix', actually it's done at the below, so remove this useless code. Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-03-11net-snmp: add ptest packageJackie Huang
Issue: TA79430 - Change to use append for PACKAGES so that: * ptest package is added from ptest bbcalss * the PN is back, allow empty and add rdepends on net-snmp-client in case the user try to add net-snmp to the image - Add a patch to fix the output format for ptest - Add run-ptest - Add rdepends on perl for ptest (LOCAL REV: NOT UPSTREAM) -- Sent to meta-networking on 20150114 Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-03-11net-snmp: move net-snmp-config to client packageJackie Huang
Since net-snmp-config is a common tool, move it from dev package to client package. Signed-off-by: yzhu1 <yanjun.zhu@windriver.com> Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-03-11net-snmp: init script fixesJackie Huang
Changes: 1. Add source function and status command. 2. make it possible to change the start arguments with a default file in the same way as debian. 3. change the default INITSCRIPT_PARAMS 4. Add PIDFILE and fix restart 5. remove the postrm sicne we use the one from update-rc.d Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-03-11net-snmp: fix "libtool --finish"Jackie Huang
LIB_LDCONFIG_CMD failed since it is using a host dir $(libdir) which is /usr/lib64 does not exist on host when compile 64bit image. In fact, configuring dynamic linker run-time bindings is meaningless at this step, If it is needed, Poky would write ldconfig scripts to rpm-postinst for each recipe while do_package, in package.bbclass. Signed-off-by: Roy.Li <rongqing.li@windriver.com> Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-03-11net-snmp: move persistent dir to /var/lib/net-snmpJackie Huang
Move persistent dir to /var/lib/net-snmp and fix security contexts for them. Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-03-11net-snmp: have mib-modules=smux enabledJackie Huang
According to the following commit, net-snmp needs to have mib-modules=smux enabled: commit f64db3011c04ada0a8ac04b9eddde05b67d21eec Author: Aws Ismail <aws.ismail@windriver.com> Date: Mon Mar 25 11:30:06 2013 -0400 Quagga has no snmp support, unrecognized options --enable-tcp-md5 1. Quagga's tcp-md5 has been renamed to linux24-tcp-md5 2. net-snmp needs to have mib-modules=smux enabled to enable quagga to support snmp. Make the net-snmp option dependent on the DISTRO_FEATURE snmp. 3. Misc: install the sample conf files for quagga. Also, Make sure that the post install script is being run on the target rather than during the rootfs creation stage. Signed-off-by: Amy Fong <amy.fong@windriver.com> Signed-off-by: Aws Ismail <aws.ismail@windriver.com> Signed-off-by: Joe MacDonald <joe.macdonald@windriver.com> Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-03-11net-snmp: add knob whether nlist.h are checkedChong.Lu@windriver.com
Previously, it still was checked when there was no nlish.h in sysroots directory. Add knob to decide whether nlist.h are checked or not. Fixed by using PACKAGECONFIG to check elf, with default disabled set. Signed-off-by: Chong Lu <Chong.Lu@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-03-10postfix: add link file /usr/lib/sendmailKang Kai
Link file /usr/lib/sendmail points to /usr/sbin/sendmail is required by LSB core test according to Linux FHS[Ref2]: "For historical reasons, /usr/lib/sendmail must be a symbolic link to /usr/sbin/sendmail if the latter exists." The linke file was provided by package lsb before, but should be provided by packages which provides command sendmail such as msmtp, postfix and esmtp etc. Refs: 1 http://refspecs.linuxfoundation.org/LSB_4.1.0/LSB-Core-generic/LSB-Core-generic/normativerefs.html#STD. 2 http://www.pathname.com/fhs/pub/fhs-2.3.html#SPECIFICOPTIONS13 Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-03-10esmtp: update sendmail link filesKang Kai
esmtp use 'sbinsendmail' to define alternative ${sbindir}/sendmail, but other packages msmtp and postfix use 'sendmail'. When remove esmtp, it removes ${sbindir}/sendmail even msmtp or postfix is installed which has alternative ${sbindir}/sendmail. Make esmtp use 'sendmail' too to fix this issue. Remove ${libdir}/sendmail which is only used by LSB core test for historical reasons. And only create link file with fixed path /usr/lib/sendmail for LSB images even for 64 bits system. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-03-10crda: move libnl, libgcrypt to DEPENDSJavier Viguera
crda has a build time dependence on libgcrypt, so move the dependence from RDEPENDS to DEPENDS. Otherwise the build fails with: reglib.c:28:20: fatal error: gcrypt.h: No such file or directory Signed-off-by: Javier Viguera <javier.viguera@digi.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-03-10wireshark: update to 12.4Armin Kuster
The following vulnerabilities have been fixed. * [1]wnpa-sec-2015-06 The ATN-CPDLC dissector could crash. ([2]Bug 9952) [3]CVE-2015-2187 * [4]wnpa-sec-2015-07 The WCP dissector could crash. ([5]Bug 10844) [6]CVE-2015-2188 * [7]wnpa-sec-2015-08 The pcapng file parser could crash. ([8]Bug 10895) [9]CVE-2015-2189 * [10]wnpa-sec-2015-09 The LLDP dissector could crash. ([11]Bug 10983) [12]CVE-2015-2190 * [13]wnpa-sec-2015-10 The TNEF dissector could go into an infinite loop. Discovered by Vlad Tsyrklevich. ([14]Bug 11023) [15]CVE-2015-2191 * [16]wnpa-sec-2015-11 The SCSI OSD dissector could go into an infinite loop. Discovered by Vlad Tsyrklevich. ([17]Bug 11024) [18]CVE-2015-2192 For more information see https://www.wireshark.org/docs/relnotes/wireshark-1.12.4.html Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-03-10stunnel: Update to version 5.10Sven Ebenfeld
Signed-off-by: Sven Ebenfeld <sven.ebenfeld@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-03-10vlan: install vconfig into /sbin same as Ubuntu and Fedora.Bian Naimeng
Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-03-06ypbind-mt: fix typo in PNBLACKLIST to really blacklist itMartin Jansa
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-03-05nis: blacklist updated yp toolsJoe MacDonald
The updated yp-tools fails on qemuarm: /home/jenkins/oe/world/shr-core/tmp-glibc/work/armv5e-oe-linux-gnueabi/yp-tools/3.3-r0/yp-tools-3.3/lib/do_ypcall.c: In function 'do_ypcall_tr': /home/jenkins/oe/world/shr-core/tmp-glibc/work/armv5e-oe-linux-gnueabi/yp-tools/3.3-r0/yp-tools-3.3/lib/do_ypcall.c:461:27: error: cast increases required alignment of target type [-Werror=cast-align] status = ypprot_err (((struct ypresp_val *) resp)->status); http://errors.yoctoproject.org/Errors/Details/9221/ Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-03-04nis: integrate latest stable yp-tools and ypbindJoe MacDonald
Update to the latest stable NIS tools. The yp-tools libraries and headers conflict with the RPC headers provided by glibc, so install them to a different location. Systems that intend to build using the NIS-provided versions will need to specify the alternate location, but that is covered by pkg-config, so it should only be necessary to point pkg-config at the alternate .pc file. The older stable versions are suitable for IPv4-only setups, so keep them around in case those are required for some systems. Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-02-27nis: update yp-tools and ypbindJoe MacDonald
Both yp-tools and ypbind-mt were out of date with their latest released versions, so bump them up to current. Remove two dead patches at the same time and reorganize the recipes to better follow the preferred OE style. Finally, the new release includes a new version of the GPLv2 COPYING file, with a significant amount of whitespace fixes, so update the license checksum. Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-02-27ptpd: use pkgconfigJoe MacDonald
pcap-config should not be used for determining how to build against libpcap in a yocto environment. Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-02-25lksctp-tools: include library major version symlink in base packageJoe MacDonald
Typically the major-version-only link for shared libs are included in the base package. Move the links into the base packages here, leaving the un-versioned links in the -dev packages. Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-02-23postfix: fix bug of main.cf_2.0Bian Naimeng
${exec_prefix}/libexec/${PN} => ${libexecdir} Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-02-23postfix: don't hard-code PATH in service fileBian Naimeng
Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-02-23ptpd: add systemd supportedBian Naimeng
Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-02-23ipsec-tools: add systemd supportedBian Naimeng
Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-02-23ipsec-tools: install a sample config file for racoonBian Naimeng
Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-02-23cyrus-sasl: add systemd supported for saslauthdBian Naimeng
Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-02-23cyrus-sasl: remove trailing slash from plugin directory pathBian Naimeng
Specifying the plugin directory with a trailing '/' hit this failure in the install rule: ... snip ... install-exec-local: $(INSTALLOSX) @if test "$(plugindir)" != "$(prefix)/lib/sasl2"; then \ echo "********************************************************"; \ echo "* WARNING:"; \ echo "* Plugins are being installed into $(prefix)/lib/sasl2,"; \ echo "* but the library will look for them in $(plugindir)."; \ echo "* You need to make sure that the plugins will eventually"; \ echo "* be in $(plugindir) -- the easiest way is to make a"; \ echo "* symbolic link from $(plugindir) to $(prefix)/lib/sasl2,"; \ echo "* but this may not be appropriate for your site, so this"; \ echo "* installation procedure won't do it for you."; \ echo "*"; \ echo "* If you don't want to do this for some reason, you can"; \ echo "* set the location where the library will look for plugins"; \ echo "* by setting the environment variable SASL_PATH to the path"; \ echo "* the library should use."; \ echo "********************************************************"; \ fi Work around that. Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-02-23wireshark: fix pcap-config issueArmin Kuster
configure: error: Header file pcap.h not found; if you installed libpcap don't use pcap. Use the internal version. And minor configure cleanups Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-02-23openvpn: install /etc/tmpfiles.d/openvpn.confBian Naimeng
Directory /var/run/openvpn is required by service. Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>