From 279e22c16b293c3bee333e313364a8be2ecba233 Mon Sep 17 00:00:00 2001 From: Mikko Rapeli Date: Thu, 20 Jul 2017 16:23:10 +0300 Subject: [PATCH] kernel.bbclass: set CVE_PRODUCT to linux_kernel if not set by recipe It is used by NVD database CVE's like: https://nvd.nist.gov/vuln/detail/CVE-2017-7273 Setting this in kernel.bbclass fixes CVE reporting for all users of the class. (From OE-Core rev: 9b27be77980fdd51423576712dfd6f4a031c3372) Signed-off-by: Mikko Rapeli Signed-off-by: Ross Burton (cherry picked from commit 2e3d325440a50265c73f7d2e782530a02458bc33) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie --- meta/classes/kernel.bbclass | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/classes/kernel.bbclass b/meta/classes/kernel.bbclass index 7a134d5c29..cfa61e60de 100644 --- a/meta/classes/kernel.bbclass +++ b/meta/classes/kernel.bbclass @@ -6,6 +6,8 @@ PACKAGE_WRITE_DEPS += "depmodwrapper-cross virtual/update-alternatives-native" do_deploy[depends] += "depmodwrapper-cross:do_populate_sysroot" +CVE_PRODUCT ?= "linux_kernel" + S = "${STAGING_KERNEL_DIR}" B = "${WORKDIR}/build" KBUILD_OUTPUT = "${B}"