aboutsummaryrefslogtreecommitdiffstats
path: root/meta-networking
AgeCommit message (Collapse)Author
2017-09-13ruli: FIx build with hardening flagsKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-13ruli: Fix build with hardening flagsKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-13snort: fix for snort.confJackie Huang
The /etc/snort/snort.conf doesn't work since there are hardcoded paths and lib names, and it tries to include many rules that are not provided. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-13nftables: backport a few ICMP & ICMPv6 fixesAndré Draszik
- assign network ctx for ICMP & ICMPv6 - additional ICMPv6 types - allow update of net base w. meta l4proto ipv6-icmp - l4 proto fixes The initial trigger was that ICMPv6 type 143 (mld2-listener-report) wasn't working as expected. Signed-off-by: André Draszik <adraszik@tycoint.com> Acked-by: Sylvain Lemieux <slemieux@tycoint.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-13linux-atm: Fix build with hardening flagsKhem Raj
Port to build on musl while here Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-13vlan: Fix build with security flags turned onKhem Raj
Limit the license checksum to the file header Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-13iscsi-initiator-utils: do not regenerate prom_lex.cJoe Slater
prom_lex.c is provided in source. If we try to remake it from prom_lex.l, we will not find "lex" since it is not in recipe-sysroot-native. If we do manage to provide lex, the new source will not compile. Signed-off-by: Joe Slater <jslater@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-13wireshark: Upgrade to 2.2.7fan.xin
Upgrade wireshark from 2.2.6 to 2.2.7 Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> This update add bug and security fixes. Bazaar dissector infinite loop (Bug 13599) CVE-2017-9352 DOF dissector read overflow (Bug 13608) CVE-2017-9348 DHCP dissector read overflow (Bug 13609, Bug 13628) CVE-2017-9351 SoulSeek dissector infinite loop (Bug 13631) CVE-2017-9346 DNS dissector infinite loop (Bug 13633) CVE-2017-9345 DICOM dissector infinite loop (Bug 13685) CVE-2017-9349 openSAFETY dissector memory exhaustion (Bug 13649) CVE-2017-9350 BT L2CAP dissector divide by zero (Bug 13701) CVE-2017-9344 MSNIP dissector crash (Bug 13725) CVE-2017-9343 ROS dissector crash (Bug 13637) CVE-2017-9347 RGMP dissector crash (Bug 13646) CVE-2017-9354 IPv6 dissector crash (Bug 13675) CVE-2017-9353 Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-13samba: Fix build with muslKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-13nopoll: Disable doc generationKhem Raj
This also fixes installed-vs-shipped build QA errors like ERROR: nopoll-0.4.2.b297-r0 do_package: QA Issue: nopoll: Files/directories were installed but not shipped in any package: /usr/bin Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-13traceroute: Move manual pages from mandir to man8 under itLi Zhou
Traceroute's manual pages are installed in /usr/share/man, which should be placed in /usr/share/man/man8. Correct this. Signed-off-by: Li Zhou <li.zhou@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-13net-snmp: supported cross compile for the perl embedded and perl modulesWenlin Kang
The patch solves two issues: 1. Supported cross compile for the perl embedded and perl modules. 2. Solved runtime depend issue. Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-07-17dante: fix unknown-configure-option QA issueQi.Chen@windriver.com
Fix the following QA issue. dante-1.4.1: dante: configure was passed unrecognised options: --disable-krb5 [unknown-configure-option] Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-07-17open-isns: fix QA issueQi.Chen@windriver.com
Fix the following QA issue. ERROR: open-isns-0.97-r0 do_package: QA Issue: open-isns: Files/directories were installed but not shipped in any package: /usr/lib /usr/lib/systemd /usr/lib/systemd/system /usr/lib/systemd/system/isnsd.socket /usr/lib/systemd/system/isnsd.service Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-07-17opensaf: Add -latomic to LDFLAGSMingli Yu
* Add "-Wl,--as-needed -latomic -Wl,--no-as-needed" to LDFLAGS to let the libatomic handled automatically if required to fix below build error as atomic operations on some arch such as x86 are supplied by the compiler. For other arch which lacks the instructions, a standardized external call provided by external library libatomic will be made to perform the operation. | src/amf/amfd/bin_osafamfd-main.o: In function `std::__atomic_base<unsigned long long>::load(std::memory_order) const': | $Prj/build/tmp/work/ppc7400-wrs-linux/opensaf/5.2.0-r0/recipe-sysroot/usr/include/c++/6.3.0/bits/atomic_base.h:396: undefined reference to `__atomic_load_8' | $Prj/build/tmp/work/ppc7400-wrs-linux/opensaf/5.2.0-r0/recipe-sysroot/usr/include/c++/6.3.0/bits/atomic_base.h:396: undefined reference to `__atomic_load_8' | collect2: error: ld returned 1 exit status | make[2]: *** [Makefile:8200: bin/osafamfd] Error 1 | make[2]: *** Waiting for unfinished jobs.... | make[2]: Leaving directory '$Prj/build/tmp/work/ppc7400-wrs-linux/opensaf/5.2.0-r0/build' | make[1]: *** [Makefile:19749: all-recursive] Error 1 | make[1]: Leaving directory '$Prj/build/tmp/work/ppc7400-wrs-linux/opensaf/5.2.0-r0/build' | make: *** [Makefile:6175: all] Error 2 Reference: https://gcc.gnu.org/wiki/Atomic/GCCMM/LIbrary#line-23 Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-07-17drbd-utils: remove /var/lock to avoid conflictJackie Huang
Remove the empty /var/lock to avoid conflict with base-files: | Error: Transaction check error: file /var/lock conflicts between attempted installs of drbd-utils-8.9.6-r0.core2_64 and base-files-3.0.14-r89.qemux86_64 Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-07-17drbd-utils: fix dependency for perl under small-fsYadi.hu
Perl script drbd-overview fails to run due to some of perl's lib noexists under small rootfs,fixing it through adding explicit definitions Signed-off-by: Marius Tiplea <marius.tiplea@windriver.com> Signed-off-by: Yadi.hu <yadi.hu@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-07-17netcat-openbsd: correct subdir for SRC_URIMingli Yu
* Correct subdir to let the second source file netcat-openbsd_${PV}-7.debian.tar.gz unpacked under the correct folder to avoid below error when do_patch in multilib env. | DEBUG: Executing python function do_patch | DEBUG: Executing shell function netcat_do_patch | No patch removed | No series file found | WARNING: exit code 2 from a shell command. Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-05-09README: update maintainers list for pyroArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-05-09wireguard: module install cleanupJoe MacDonald
The module_install target shouldn't be used, just installing the module to the sysroot directly seems more appropriate. Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-05-01wireguard: blacklistJoe MacDonald
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-27wireguard: add dependencies and kernel build optionsJoe MacDonald
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-27wireguard: add WireGuard kernel module and toolsStefan Agner
WireGuard is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography. It aims to be faster, simpler, leaner, and more useful than IPSec, while avoiding the massive headache. The recipes add the current experimental snapshot v0.0.20170421 out-of-tree kernel module and tools. The kernel module has some kernel configuration dependencies such as some configuration part of features/netfilter/netfilter.scc, hence netfilter.scc should be part of KERNEL_EXTRA_FEATURES (which is the case by default). Since wireguard-tools is TUNE_PKGARCH and depends on wireguard-module which is MACHINE_ARCH (like all kernel modules) we need to add this dependency to SIGGEN_EXCLUDE_SAFE_RECIPE_DEPS. Signed-off-by: Stefan Agner <stefan@agner.ch> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-27strongswan: Split pluginsDavid Vincent
strongSwan offers a plugin mechanism therefore it should not be mandatory to install all of them when installing the package. Each plugin is now a self-contained package with the library and its configuration. To remain compatible with the current configuration, a default set of plugins has been selected as RDEPENDS of the main package. This default list is based on the default strongSwan list minus some plugins enabled via PACKAGECONFIG (see https://wiki.strongswan.org/projects/strongswan/PluginList). Signed-off-by: David Vincent <freesilicon@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-27opensaf: Upgrade to 5.2.0Khem Raj
Fix build with gcc7 Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-27openhpi: add new recipeJackie Huang
OpenHPI is an open source project created with the intent of providing an implementation of the SA Forum's Hardware Platform Interface (HPI). Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-26waf-samba.bbclass: redefine WAF_CROSS_ANSWERS_PATHMingli Yu
* Redefine WAF_CROSS_ANSWERS_PATH in waf-samba.bbclass to fix checksum mismatch for those packages which inherit waf-samba.bbclass when install eSDK # bitbake-diffsigs $Prj/build/sdkext_dir/tmp/stamps/core2-64-wrs-linux/libtalloc/2.1.8-r0.do_configure.sigdata.8a0fd2871f1e464f4586c32f0e67378f $Prj/build/tmp/stamps/core2-64-wrs-linux/libtalloc/2.1.8-r0.do_configure.sigdata.16b87e6ddccb52ca5e988e928f111e5a basehash changed from ea2fea38e7efe710a11fa9d13c7ad94c to 943a7ead4ed10ce794532a942569bcf9 Variable WAF_CROSS_ANSWERS_PATH value changed from '$Prj/build/sdkext_dir/layers/meta-networking/files/waf-cross-answers' to '$Prj/layers/meta-openembedded/meta-networking/files/waf-cross-answers' * Remove the previous WAF_CROSS_ANSWERS_PATH definition in layer.conf Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-26postfix: do NOT create directory /var/spool/mailKai Kang
postfix installs directory /var/spool/mail which conflicts with package shadow. | Error: Transaction check error: | file /var/spool/mail conflicts between attempted installs of | postfix-3.1.1-r0.ppc64e6500 and shadow-4.2.1-r0.1.ppc64e6500 Make postfix not create /var/spool/mail that it does NOT create the directory on Fedora and Ubuntu either. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25autofs: Upgrade to 5.1.2 releaseKhem Raj
Add patches to make it work when SECURITY_FLAGS are enabled Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25dovecot: 2.2.25 -> 2.2.29Huang Qiyu
Upgrade dovecot from 2.2.25 to 2.2.29. Signed-off-by: Huang Qiyu <huangqy.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25yp-tools: Fix build with gcc7Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25samba: Upgrade to 4.6.2Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25libtalloc: Upgrade to 2.1.9Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25squid: Upgrade to 3.5.25Khem Raj
Add patch to fix throw() errors with gcc7 Update copyright year to 2017 Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25lowpan-tools: Fix build with gcc7Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25memcached: Upgrade to 1.4.36Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25ipsec-tools: Fix build with gcc7Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25tinyproxy: Add recipeBenjamin Gaignard
Signed-off-by: Benjamin Gaignard <benjamin.gaignard@linaro.org> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25lowpan-tools: Fix build with clangKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25ez-ipupdate: Fix formatting security warningsKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25libnetfilter-conntrack: Upgrade to 1.0.6Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25conntrack-tools: Upgrade to 1.4.4Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25libnetfilter-acct: Fix build with clangKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25libnetfilter-queue: Fix symbol visibility bug found with clangKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25libnetfilter-cthelper, libnetfilter-cttimeout: Backport patches to fix ↵Khem Raj
symbol visibility These are needed for building it with clang Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25nftables: Upgrade to 0.7Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25libnftnl: Upgrade to 1.0.7Khem Raj
Fix build with clang while here Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25mtr: Upgrade 0.87+gitKhem Raj
Fixes for musl build are not in a release yet until then switch to using git for SRC_URI License file changes are here https://github.com/traviscross/mtr/commit/dd42b2305a94dcbf80847410be0288df29d6a5ef Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25samba: fix conflict between samba and sudo packagesSzombathelyi György
Use the same permissions for sudoers.d as in the sudo package. Signed-off-by: Gyorgy Szombathelyi <gyurco@freemail.hu> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25wireshark: update to 2.2.6Armin Kuster
The following vulnerabilities have been fixed: * [1]wnpa-sec-2017-12 IMAP dissector crash ([2]Bug 13466) [3]CVE-2017-7703 * [4]wnpa-sec-2017-13 WBMXL dissector infinite loop ([5]Bug 13477) [6]CVE-2017-7702 * [7]wnpa-sec-2017-14 NetScaler file parser infinite loop ([8]Bug 13478) [9]CVE-2017-7700 * [10]wnpa-sec-2017-15 RPCoRDMA dissector infinite loop ([11]Bug 13558) [12]CVE-2017-7705 * [13]wnpa-sec-2017-16 BGP dissector infinite loop ([14]Bug 13557) [15]CVE-2017-7701 * [16]wnpa-sec-2017-17 DOF dissector infinite loop ([17]Bug 13453) [18]CVE-2017-7704 * [19]wnpa-sec-2017-18 PacketBB dissector crash ([20]Bug 13559) * [21]wnpa-sec-2017-19 SLSK dissector long loop ([22]Bug 13576) * [23]wnpa-sec-2017-20 SIGCOMP dissector infinite loop ([24]Bug 13578) * [25]wnpa-sec-2017-21 WSP dissector infinite loop ([26]Bug 13581) Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-04-28 00:41:22 +0000