Commit Graph

1214 Commits

Author SHA1 Message Date
Patrick Ohly f94ad4d1fc bluez5.inc: remove obsolete workaround
Bluez 5.37 itself correctly installs bluetooth.conf, and honors
the path settings in dbus-1.pc.

Removing the obsolete workaround is necessary for compiling
"stateless" (= read-only system configuration moved out of /etc).

(From OE-Core rev: 695b99336b40842c15762ef9dac2ce43d1c8c186)

Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-05 14:33:58 +01:00
Alexander Kanavin 5c60c36214 bluez5: add ptest support
[YOCTO #5134]

(From OE-Core rev: 70d8cb61b03aa9214fe0e1990ab9500888d9f565)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-03 15:51:36 +01:00
Joe Slater bc100b33ef bind: /var/cache/bind
Change the ownership of /var/cache/bind to bind rather than root.

(From OE-Core rev: 6c76c9e5bb4f4bf6adfac7ccece03d7dcdea7f3d)

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-03-25 10:29:17 +00:00
Alexandru Moise 07515b0b69 dhcpd: create dhcpd user for dhcp dameon
This patch enables the functionality for dhcpd service to be started
with dhcp uid and gid.

Test steps:

Step 1: Assign ip to interface
ifconfig eth0 192.168.1.1

Step 2: Edit /etc/dhcp/dhcpd.conf:
default-lease-time 600;
max-lease-time 7200;
option subnet-mask 255.255.255.0;
subnet 192.168.1.0 netmask 255.255.255.0 {
        option broadcast-address 192.168.1.255;
        range 192.168.1.88 192.168.1.88;
        option routers 192.168.1.0;
}

Step 3: Edit /etc/default/dhcp-server:
INTERFACES="eth0"

Step 4: Check uid and gid of running dhcpd process
$ ps -eo user:19,group:19,cmd | grep dhcpd
dhcp        dhcp        /usr/sbin/dhcpd eth0 -user dhcp -group dhcp

(From OE-Core rev: 36d59255131f6d3f289d4f5dfcb58a9890996ffe)

Signed-off-by: Alexandru Moise <alexandru.moise@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-03-20 23:12:31 +00:00
Javier Viguera 3173979532 bluez5: allow D-Bus to spawn obexd in systems without systemd
This includes a proper D-Bus service file for obexd in systems that do
not support systemd.

(From OE-Core rev: 75c5dc8d4a5506bf5b89292a96c7b9f91e9d71c8)

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-03-20 23:12:30 +00:00
Khem Raj e1f3f4cc3c socat: Access c_ispeed and c_ospeed via APIs
make it more portable across libc implementations

(From OE-Core rev: cd3408e7b845891b63de04249982330e02f13ee8)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-03-20 23:12:27 +00:00
Chen Qi 9aa27fe001 openssl: don't move libcrypto to base_libdir
For now, if 'openssl' is enabled for ntp, ntp would still be built
without openssl & libcrypto. This is because that ntp thinks openssl
and libcrypto locates under the same directory.

This patch removes the codes of moving libcrypto to base_libdir.

(From OE-Core rev: 0be2ab32f690a2fcba0e821abe11460958bbc6dc)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-03-20 23:12:26 +00:00
Chen Qi 4653fdd4b4 dhcp: enable gentle shutdown
For now, `systemctl stop dhcpd' cannot stop dhcpd correctly, the SIGTERM
signal would time out, causing a SIGKILL signal sent to dhcpd.

Patch site.h to enable gentle shutdown to so that dhcpd could be stopped
by SIGTERM.

(From OE-Core rev: 2c789bac353e17637549a7b31706761ba848728e)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-03-20 23:12:26 +00:00
Alexander Kanavin 0d1e4b2238 avahi: enable gobject-introspection
(From OE-Core rev: b9f543de30eb86c0787886d0e78d530fb24984dc)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-03-12 22:11:44 +00:00
Alexander Kanavin 0c6d7cb95e avahi-ui: remove the dependency on python-pygtk by disabling avahi-discover
python-pygtk is removed in a separate commit; the reasons for
that are explained in that commit's message.

(From OE-Core rev: 40e7d522f1e0f9e5533cbb2660f7cec4d62b5d11)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-03-12 22:11:44 +00:00
Ross Burton a321f4e5fc avahi-ui: add dbus to PACKAGECONFIG
Now that avahi has a dbus PACKAGECONFIG we need to ensure it's enabled as
otherwise the avahi-ui module won't build.

(From OE-Core rev: d5e3cf611d302babf0120f887f15aec176ff3429)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-03-09 16:58:11 +00:00
Ross Burton 1bd4b72d71 avahi: add missing intltool-native build dependency
(From OE-Core rev: 52e6e586b142ec782aac10c16366f273be6405f6)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-03-09 16:58:11 +00:00
Jens Rehsack 72f9e39975 avahi: make dbus optional but default
Since do_install fails when dbus is removed by .bbappend, add packageconfig
to allow users to get rid of desktop ipc helper dbus.

(From OE-Core rev: 93b6ac66a90a6f2cca18ee4cae15f899da7ecb15)

Signed-off-by: Jens Rehsack <sno@netbsd.org>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-03-09 16:58:11 +00:00
Ross Burton 70b4f36fc2 openssl: add a patch to fix parallel builds
Apply a patch taken from Gentoo to hopefully fix the remaining parallel make
races.

(From OE-Core rev: 3d806d59a4c5e8ff35c7e7c5a3a6ef85e2b4b259)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-03-07 00:11:39 +00:00
Armin Kuster 73a43fc15e openssl: Security fix Drown via 1.0.2g update
CVE-2016-0800
CVE-2016-0705
CVE-2016-0798
CVE-2016-0797
CVE-2016-0799
CVE-2016-0702
CVE-2016-0703
CVE-2016-0704

https://www.openssl.org/news/secadv/20160301.txt

Updated 2 debian patches to match changes in 1.0.2g

(From OE-Core rev: 7933fbbc6372ec8edaec82dd5c7b44fa2d15a4d5)

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-03-03 10:49:00 +00:00
Mariano Lopez 89140b0883 dhcp: CVE-2015-8605
ISC DHCP allows remote attackers to cause a denial of
service (application crash) via an invalid length field
in a UDP IPv4 packet.

(From OE-Core rev: f9739b7fa8d08521dc5e42a169753d4c75074ec7)

Signed-off-by: Mariano Lopez <mariano.lopez@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-03-02 22:39:42 +00:00
Maxin B. John 3a82e2e5dd avahi: update to version 0.6.32
0.6.31 -> 0.6.32

a. Switched to the new repository hosted in github.
b. Removed the following Upstreamed/Backported patches
   1. 0001-Don-t-log-warnings-about-invalid-packets-Fixes-lathi.patch
   2. 0001-avahi-fix-avahi-status-command-error-prompt.patch
   3. avahi_fix_install_issue.patch
   4. fix_for_automake_1.12.x.patch
   5. out-of-tree.patch
   6. reuseport-check.patch
c. Added UPSTREAM_CHECK_URI

[YOCTO #7553]

(From OE-Core rev: 5ba7df63c4f0ac56f8513f9aecdbf3b12a121cd1)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18 07:39:32 +00:00
Ulrich Ölmann 3df8701689 nfs-utils: bugfix: adjust name of statd service unit
Upstream nfs-utils use 'rpc-statd.service' and Yocto introduced
'nfs-statd.service' instead but forgot to update the mount.nfs helper
'start-statd' accordingly.

(From OE-Core rev: cda5b219d62fece0e67ee766290e73a6636bd652)

Signed-off-by: Ulrich Ölmann <u.oelmann@pengutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18 07:39:31 +00:00
Khem Raj 0b1c3240ad socat: Fix build with musl
NETDB_INTERNAL is a glibc define

(From OE-Core rev: eb513884519804b3b8d600eeb7aadf3ec54e0345)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-18 07:39:30 +00:00
Maxin B. John 79d5041a9c iproute2: update to version 4.4.0
4.3.0 -> 4.4.0

a) Added iproute2-fix-building-with-musl.patch to fix build with
musl.
b) Include below listed utilities that are not yet enabled/packaged
in the iproute2 recipe:
1. lnstat
2. ifstat
3. genl
4. rtacct
5. nstat
6. ss

(From OE-Core rev: 4e94ba3b0b8b476e46441707d3b1ead13da4ea76)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-11 12:27:49 +00:00
Maxin B. John 0e62f01559 iproute2: update to version 4.4.0
4.3.0 -> 4.4.0

Added iproute2-fix-building-with-musl.patch to fix build with
musl.

(From OE-Core rev: c8a7fdb2ac37b42a97f666cae6b3f5061a01ad45)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-11 12:27:48 +00:00
Jussi Kukkonen e65a29e311 openssh: Properly skip ptrace test if tools are missing
Without the exit there will be a SKIP and a FAIL for the same test.
Also fix typo in a message.

(From OE-Core rev: d44a2ec730fe52d2266c5e4d184cd4c881e172d1)

Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-11 12:27:47 +00:00
Jussi Kukkonen e1a1e0ba8d openssh: Fix regex that sets sftp-server path for tests
[YOCTO #9049]

(From OE-Core rev: b4dc73b6d6d082cd9e907998ff61dc3da7df2018)

Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-11 12:27:47 +00:00
Jussi Kukkonen 04454b22a4 wpa-supplicant: Only depend on libgcrypt when needed
(From OE-Core rev: 8490c3da1a84f654a05254cb7b12871f89fda976)

Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-11 12:27:47 +00:00
Andre McCurdy 659d755673 openssl.inc: drop obsolete mtx-1 and mtx-2 over-rides
Machine specific over-rides for mtx-1 (aka MeshCube) and
mtx-2 (aka SurfBox 2nd generation) don't belong in oe-core.

(From OE-Core rev: cf0b94629d135b2fa211fae89f48e00469974279)

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-06 23:10:44 +00:00
Ross Burton d09a25e862 socat: upgrade to 1.7.3.1
This fixes Socat Security Advisory 7 (MSVR-1499) and 8.

[ YOCTO #9024 ]

(From OE-Core rev: 4be6104e8466e977e2ea45d068d277c089b2a9d1)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-04 23:39:03 +00:00
Mike Crowe 2d3e6f303b openssl: Explicitly set EXTRA_OEMAKE as required
The openssl recipe currently relies on EXTRA_OEMAKE having been set to
"-e MAKEFLAGS=" in bitbake.conf to operate. It is necessary to make this
explicit so that the default in bitbake.conf can be changed.

(From OE-Core rev: a384ab5cb4701fd1c1475bca4449def66b42c799)

Signed-off-by: Mike Crowe <mac@mcrowe.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-04 13:09:56 +00:00
Khem Raj 07a91a6e31 libnss-mdns: Check for nss.h before using
nss.h is not available on all libcs
so check for it and if its not there provide
the needed data types.

Fixed buil with musl
../../nss-mdns-0.10/src/nss.c:32:17: fatal error: nss.h: No such file or
directory
compilation terminated.
make[2]: *** [libnss_mdns4_la-nss.lo] Error 1

(From OE-Core rev: 94f780e889f194b67a48587ac68b3200288bee10)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-02-02 14:44:16 +00:00
Andre McCurdy adbe63d5ee openssl: update 1.0.2e -> 1.0.2f ( CVE-2016-0701 CVE-2015-3197 )
Major changes between OpenSSL 1.0.2e and OpenSSL 1.0.2f [28 Jan 2016]

  o DH small subgroups (CVE-2016-0701)
  o SSLv2 doesn't block disabled ciphers (CVE-2015-3197)

Updated LICENSE hash due to change in copyright year.

(From OE-Core rev: b451e3efc79d29c39c85f7da2dc75becf3fdf5a2)

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-30 11:37:04 +00:00
Maxin B. John 51cebbfdd2 connman: fix crash with iptables 1.6
The struct of xtables_globals has been modified in iptables 1.6.
If connman runs with iptables 1.6, it can crash.

Program received signal SIGSEGV, Segmentation fault.
0x00000000 in ?? ()
0xb7dea89c in xtables_find_target () from /usr/lib/libxtables.so.11
0xb7deac1c in ?? () from /usr/lib/libxtables.so.11
0xb7dea793 in xtables_find_target () from /usr/lib/libxtables.so.11

The the missing function item of xtables is added to xtables_globals.
It can fix the above issue.

(From OE-Core rev: ae64dc3af8c49ef53ab3e847f7761cf5e59c5998)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-30 11:37:04 +00:00
Joshua Lock d74325e22e connman: tidy up connman-conf usage
connman-conf is now a systemd oneshot and therefore doesn't need to
be sed'ed in to the ConnMan service file.

Note: this doesn't affect sysvinit where we provide a ConnMan
init script which checks for the presence of the wired-networking
script and, if it exists, executes it as part of the connman init.

[YOCTO #8399]

(From OE-Core rev: 20c897d34ba4ea3985723383a0effa3631cd925e)

Signed-off-by: Joshua Lock <joshua.lock@collabora.co.uk>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-30 11:37:00 +00:00
Joshua Lock 79f4495244 connman-conf: convert to systemd oneshot
Install a oneshot unit file that is started before ConnMan to
configure a wired network inteface with the wired-setup script,
rather than requiring this script to be manually run some how.

(From OE-Core rev: 530c4525f278bff72d8184035d00020c10b8f8b4)

Signed-off-by: Joshua Lock <joshua.lock@collabora.co.uk>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-30 11:37:00 +00:00
Ross Burton 44e9c3b779 meta: fix capitalisation in Upstream-Status
(From OE-Core rev: 4084bd02796358abd432104607d9c6569a7e0238)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-26 22:31:59 +00:00
bmouring@ni.com a2848ee32e avahi: Add patch to fix Win10 mDNS issues
Windows 10 will respond to mDNS messages when it  really shouldn't,
resulting in a lot of logging. Pulling the change from avahi upstream.
This will be fixed in avahi 0.6.32

External References:
https://bugs.launchpad.net/ubuntu/+source/avahi/+bug/1342400
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=794145
https://bugzilla.redhat.com/show_bug.cgi?id=1240711
https://social.technet.microsoft.com/Forums/en-US/b334e797-ef80-4525-b74a-b4830420a14e/windows-10-spams-network-with-invalid-mdns-response-packets?forum=win10itpronetworking

(From OE-Core rev: 72027dea342a6f3a9fe35f1a04ce59728e21863a)

Signed-off-by: Brad Mouring <brad.mouring@ni.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-26 22:31:59 +00:00
Derek Straka 9967746a35 bind: update to 9.10.3-P3
Addresses CVE-2015-8704 and CVE-2015-8705

CVE-2015-8704
Allows remote authenticated users to cause a denial of service via a malformed Address Prefix List record

CVE-2015-8705:
When debug loggin is enabled, allows remote attackers to cause a denial of service or have possibly unspecified impact via OPT data or ECS option

[YOCTO 8966]

References:
https://kb.isc.org/article/AA-01346/0/BIND-9.10.3-P3-Release-Notes.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8704
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8705

(From OE-Core rev: 58d47cdf91076cf055046ce9ec5f3e2e21dae1c0)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-26 22:31:59 +00:00
Khem Raj 226c45083e portmap: Point to tirpc headers and libraries on musl
(From OE-Core rev: 68442d149158a4d6ca817bbaedb2400e43d3957f)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-24 09:40:30 +00:00
Khem Raj 5512c2f952 nfs-utils: Disable tcp-wrappers for musl
Doesnt build with musl

(From OE-Core rev: 8c41bdc5252bbe119ab91a119cc3b9c285a7c16c)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-24 09:40:30 +00:00
Khem Raj c0976fc725 irda-utils: Fix header inclusions
Helps compile with musl

(From OE-Core rev: b16f41b43f1955331baf95ea17965332fe4556a2)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-24 09:40:29 +00:00
Khem Raj a3f9721399 iproute2: Fix build with musl
(From OE-Core rev: e24ca9a02c0c66796c9815752679594e78821127)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-24 09:40:29 +00:00
Khem Raj 87c3e9855a connman: include config.h for HAVE_STRUCT_IN6_PKTINFO_IPI6_ADDR
We now check at configure time of libc has pktinfo struct

(From OE-Core rev: bf8559bc78853c3d8d3470967debb9241e726442)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-24 09:40:26 +00:00
Khem Raj 68f88a5a88 ppp: Fix build with musl
Therer are assumptions about glibc headers and features which needs to
be addressed for musl

(From OE-Core rev: 1949b128b87f89a56a2794ad056f2e4f4dbf6a3c)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-24 09:40:26 +00:00
Armin Kuster a2f23fa628 openssh: CVE-2016-1907
This issue requires three commits:
https://anongit.mindrot.org/openssh.git/commit/?id=ed4ce82dbfa8a3a3c8ea6fa0db113c71e234416c
https://anongit.mindrot.org/openssh.git/commit/?id=f98a09cacff7baad8748c9aa217afd155a4d493f
https://anongit.mindrot.org/openssh.git/commit/?id=2fecfd486bdba9f51b3a789277bb0733ca36e1c0

(From OE-Core rev: a42229df424552955c0ac62da1063461f97f5938)

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-18 11:47:08 +00:00
Maxin B. John cd7910df1d connman: upgrade to 1.31
1.30 -> 1.31

Included newly introduced connman-wait-online service.

(From OE-Core rev: dd329d28ab3f47c8b03563e88703f6b1c09ce72b)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-18 11:47:07 +00:00
Alexander Kanavin b1256dbc59 openssh: update to 7.1p2
This fixes a number of security issues.

(From OE-Core rev: b3b679d5be86f73d1a06c7230cb00872f0a407b5)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-15 15:44:57 +00:00
Chen Qi c88efae14b resolvconf: upgrade to 1.78
(From OE-Core rev: 1d7593380ab241dcbf858de7c901bcc10c014aed)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-15 11:54:49 +00:00
Hongxu Jia 38901a79ac dhcp: 4.3.2 -> 4.3.3
- Rebase: fix-external-bind.patch and fixsepbuild.patch for 4.3.3

(From OE-Core rev: 5e6c27c1860a0610b6d11468ffc7283ee0fc869c)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-15 11:54:48 +00:00
Awais Belal 5d2f783e99 dhcp: search libxml2 for bind
libdns requires libxml2 if bind was built with libxml2 support
enabled. Compilation will fail for omapip/test.c in case
-lxml2 isn't used during the build. So, we add losely coupled
search path which will pick up the lib if it is present.

(From OE-Core rev: a9e4edb2b5304e7493b791f3b3f76d37af5433ff)

Signed-off-by: Awais Belal <awais_belal@mentor.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-15 11:54:48 +00:00
Mariano Lopez e5c011b041 Add "CVE:" tag to current patches in OE-core
The currnet patches in OE-core doesn't have the "CVE:"
tag, now part of the policy of the patches.

This is patch add this tag to several patches. There might
be patches that I miss; the tag can be added in the future.

(From OE-Core rev: 065ebeb3e15311d0d45385e15bf557b1c95b1669)

Signed-off-by: Mariano Lopez <mariano.lopez@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-11 23:26:32 +00:00
Hongxu Jia 72e69328b3 connman.inc: add missing RDEPENDS
All of the connman-tools, connman-tests and connman-client
runtime depends connman.

(From OE-Core rev: bcb5a6866e9233bcb69a9ee06faed622280a6c22)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-11 23:26:31 +00:00
Ed Bartosh 675ff42c60 meta: rename perl-native-runtime
The code in native.bbclass adds -native suffix to the package
names that don't have it. perl-native-runtime becomes
perl-native-runtime-native because of this.

Renamed perl-native-runtime -> hostperl-runtime-native to avoid
mangling it and to conform with the naming convetion for native
packages.

(From OE-Core rev: f4dade8e765a8c7bfd131728b9e0a34631e24950)

Signed-off-by: Ed Bartosh <ed.bartosh@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-11 23:26:31 +00:00
Maxin B. John 8f2ab19b25 bluez5: upgrade to 5.37
5.36 -> 5.37

Remove the backported patch:
core-profile-Fix-possible-crash-when-registering-pro.patch

Build bluez5 only when DISTRO_FEATURES include bluez5

(From OE-Core rev: 0a556af62b509f9defd8ac5b3a6648bdfe1dff67)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-11 23:26:30 +00:00
Martin Jansa 2cd061a29a bluez5: include the patch only for 5.36
* it's backport so it probably won't be needed for newer version and it doesn't
  apply for older versions, so it just prevents to easily use bluez5.inc

(From OE-Core rev: 1568f4fa1c8f8abd9b365ecd264841cd4f6b66b1)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-28 13:02:11 +00:00
Kai Kang c2e8079e87 bind: 9.10.2-P4 -> 9.10.3-P2
Upgrade bind from 9.10.2-P4 to 9.10.3-P2.

* update context of 0001-build-use-pkg-config-to-find-libxml2.patch
* add PACKAGECONFIGs readline and libedit. They provide same library, so
  should not be set at same time.

(From OE-Core rev: b49751e7febd262b754043e4e523e6690bfbbfaa)

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-28 09:25:17 +00:00
Alexander Kanavin cefc24d6af mobile-broadband-provider-info: update to tagged release 20151214
After three years, there is finally a tagged release, so let's start
using those instead of updating to latest commit periodically.

(From OE-Core rev: 415fc571fdc568eb496ad0d135a04986aa66bbc9)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-28 09:25:16 +00:00
Alexander Kanavin 516d8c9759 nfs-utils: update to 1.3.3
ipv6 support now requires libtirpc, so un-disable and add it to dependencies.

(From OE-Core rev: 219d74d9df6a4a819d03091f35205a5634b268c7)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-16 12:12:17 +00:00
Ross Burton 455ff32426 meta: more removals of redunant FILES_${PN}-dbg
In some recipes overly-split -dbg packages were merged into PN-dbg.  Unless
there's a very good reason, recipes should have a single -dev and -dbg package.

(From OE-Core rev: a3b000643898d7402b9e57c02e8d10e677cc9722)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-16 11:56:30 +00:00
Richard Purdie e0890b662e meta: Drop now pointless manual -dbg packaging
With the autodebug package generation logic, specifically setting FILES_${PN}-dbg
isn't needed in most cases, we can remove them.

(From OE-Core rev: 3ab59d49dd7c18e194b58d1248b4b87709b5a738)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-16 11:56:30 +00:00
Khem Raj 33bab59f8e openssl: Add musl configuration support
use termios instead of termio

(From OE-Core rev: 753b6233e5da66d9e64952b8089589a1beebf8a9)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-12 23:42:55 +00:00
Alexander Kanavin 1672a1840a mobile-broadband-provider-info: update to current commit
(From OE-Core rev: 6309935a1a8a5282e835e0bb195c29eacb5243dc)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-12 23:42:54 +00:00
Alexander Kanavin b3535e2436 openssl: update to 1.0.2e
[YOCTO #8765]
[YOCTO #8758]

(From OE-Core rev: 2dbc06d880cc2e764fb2970de37ea5206b080445)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-12 23:42:53 +00:00
Cristian Iorga c147782535 bluez5: upgrade to 5.36
Backported a fix for a segfault crash.

(From OE-Core rev: 66dcceb295a063aea7acc3e581298d46f2b79650)

Signed-off-by: Cristian Iorga <cristian.iorga@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-12 23:42:53 +00:00
Alexander Kanavin 976f0e35c6 package_regex.inc: split the rest of the entries to their recipes
(From OE-Core rev: 73e2555cc7d529a93362b3fcfea3fbc7a4c60ca1)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-08 10:20:52 +00:00
Alexander Kanavin aa5df2adc2 package_regex.inc: split Debian-related entries into their own recipes
(From OE-Core rev: 2a5e1848c11bd9a3c64cf8fcc0cb334c738bc5c5)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-08 10:20:51 +00:00
Ross Burton b82221674e neard: fix libdir/libexecdir confusion
These binaries are installed to $libexecdir/nfc not $libdir/$BPN.

(From OE-Core rev: 32da30e39b3b847a80d99e1d2a527f460e33590d)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-08 10:20:50 +00:00
Maxin B. John 35945fd3c5 iw: upgrade to version 4.3
Refreshed the following patches to work with this release:
 1) 0001-iw-version.sh-don-t-use-git-describe-for-versioning.patch
 2) separate-objdir.patch

(From OE-Core rev: 11e6536bbed515a360870e3f0491c93dd8c9e098)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-01 21:32:15 +00:00
Roy Li 19a626d6b3 openssh: redesign ssh-agent.sh regression test case
ssh-agent regression test case should be run by non-root user,
but non-root user will has issue to run other testcase, so
rewrite it on run-ptest

(From OE-Core rev: 5ca6bb9b73bf09c1847ec3e5a7477829bd3d77b5)

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-01 21:32:13 +00:00
Ross Burton 51b64eec92 openssl: enable parallel make
openssl 1.0.2d fixes the parallel make problems (commit 8e6bb99), so enable
parallel make again.

[ YOCTO #7347 ]

(From OE-Core rev: ea89857f17a374b6095371ebe2422d2e83735cee)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-01 21:32:12 +00:00
Maxin B. John 744e89f6eb ofono: upgrade to version 1.17
Removed the patch 0001-backtrace-Disable-for-non-glibc-C-libraries.patch,
as it is included in the new sources.

(From OE-Core rev: 4ffa6d6950f23afa549116ff2bfb30e687888914)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-01 21:32:09 +00:00
Roy Li 9470956e68 iproute2: install bridge tool by default
bridge is a tool used frequently, so install it

(From OE-Core rev: b1f67c7ea87bb9bd0fb642b33e66ea5595789afc)

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-01 21:32:09 +00:00
Fan Xin 012ca02e17 wpa-supplicant: upgrade to 2.5
wpa-supplicant: upgrade to 2.5

1. upgrade to 2.5
2. remove eight patches since they have been applied in 2.5
3. update SRC_URI, HOMEPAGE and BUGTRACKER to use w1.fi instead

(From OE-Core rev: 80af821d1240a1fc2b32379b75801571db562657)

Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-01 21:32:08 +00:00
Maxin B. John 2f479b12fa libpcap: update to 1.7.4
Update libpcap from version 1.6.2 to 1.7.4

LICENSE checksum has changed because of the removal of additional
spaces in the file.

(From OE-Core rev: 0256743e7ad6e430aa2380ce51c84b3ce5928a1f)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-01 21:32:07 +00:00
Maxin B. John 14086424d4 iproute2: update to 4.3.0
4.1.1 -> 4.3.0

(From OE-Core rev: 9d48756fc3961920ede177a0d94b05071e6a0e0f)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-12-01 21:32:07 +00:00
Christopher Larson add3451fb2 connman: depend on readline
When the client is enabled, which we do by default, readline is required.
Currently it gets pulled in by other dependencies of connman, indirectly,
but we should be explicit rather than relying on this.

(From OE-Core rev: 8d10de63e09754ed600ad3130b685bb1624eba5e)

Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-11-25 08:08:16 +00:00
Christopher Larson 1732a8a924 bluez5: enable sysvinit support
This is from Shrikant Bobade <Shrikant_Bobade@mentor.com>.

(From OE-Core rev: f4c16f53af27ad459e77ae7f43e7bf1bad70645a)

Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-11-25 08:08:15 +00:00
Maxin B. John 16d7bfd5e2 wireless-tools: remove unused files
Remove wireless-tools.if-pre-up and zzz-wireless.if-pre-up.
As per the comment, these files were not in use from 20/8/08.

(From OE-Core rev: 85ed9f581184d4028d407cd69f1ae6c58836aa77)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-11-25 08:08:09 +00:00
Wenzong Fan 9a4da3c590 openssl: fix ptest issues
* follow symbolic links while copying sources from test/*
* install required target files to remove Make errors:

  make[2]: *** No rule to make target 'xxx', needed by 'yyy'.

* fix hardcode pathes:
  /usr/lib -> ${libdir}, /usr/bin -> ${bindir}

(From OE-Core rev: 928adfc807d3c812fcd748e2cf65f392eebd852c)

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-11-25 08:08:07 +00:00
Ross Burton 2e8efb1045 openssl: use subdir= instead of moving files in do_configure_prepend()
For clarity and correctness of source archiving, don't move find.pl from WORKDIR
to S in do_configure_prepend but tell the fetcher to put it in the right place
when unpacking.

Also re-order the files in SRC_URI so that patches are grouped together.

(From OE-Core rev: a960b6024f1b17994b0f4683a4e70fd2a079bd90)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-11-25 07:50:32 +00:00
Ross Burton 036d2dc77f openssl: sanity check that the bignum module is present
The crypto_use_bigint_in_x86-64_perl patch uses the "bigint" module to
transparently support 64-bit integers on 32-bit hosts.  Whilst bigint (part of
bignum) is a core Perl module not all distributions install it (notable Fedora
23).

As the error message when bignum isn't installed is obscure, add a task to check
that it is available and alert the user if it isn't.

[ YOCTO #8562 ]

(From OE-Core rev: 2f9a2fbc46aa435a0a7f7662bb62029ac714f25a)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-11-25 07:50:32 +00:00
Paul Eggleton 1f6599bef5 meta: Fix typos in Upstream-Status labels
We need these to be consistent so they are possible to programmatically
read.

(From OE-Core rev: c64fdfd27103a4962c74c88f4ef7940cda6832eb)

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-11-16 11:39:38 +00:00
Wenzong Fan a1ca788092 openssl: fix mips64 configure support
Match target name linux-mips64 as well, all mips64 targets will have
mips(32) userspace.

(From OE-Core rev: 245113ca1075bc3f0c47952e80b437229f855080)

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-11-16 11:39:34 +00:00
Kai Kang 73284790cd openssh: enable X11Forwarding if distro feature x11 is set
When distro feature x11 is set, it is better enable X11Forwarding for
ssh daemon. For contrast, dropbear enable X11 forward by default.

It does NOT need to modify ${WORKDIR}/sshd_config, so drop the modification.

(From OE-Core rev: 0dc68d745f97753fc9fde896f6ee1943c1e071b3)

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-11-16 11:39:32 +00:00
Chen Qi 42a5378647 nfs-utils/statd: fix a segfault
Fix the segfault by separating the socket used in statd from the sockets
of RPC core.

(From OE-Core rev: 1f2ef653f5fb0b46daa17e08485468cc235cfbcc)

Signed-off-by: Shan Hai <shan.hai@windriver.com>
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-11-16 11:39:30 +00:00
Jussi Kukkonen 63a0311497 connman: Move wired-setup to ${datadir}
wired-setup script should not be in ${libdir} as it's not arch
dependent.

This also fixes (or works around) a practical issue where a multilib
build installs the wrong version of connman-conf and then connman
can't find the script.

[YOCTO #8550]

(From OE-Core rev: 38a6ecf0070a60eb14b353b158b70ddc919ad328)

Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-10-29 07:31:16 +00:00
Chen Qi abeaed959c openssh: fix file permission for /etc/pam.d/sshd
The file permission should be 0644 instead of 0755.

(From OE-Core rev: 38567f910130f8559c2ba6935e0bfad61f6b1f4f)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-10-21 22:56:04 +01:00
Maxin B. John 6396d6a482 irda-utils: clean up bugtracker info
Update bugtracker web address

(From OE-Core rev: 67d92be599ab6f679d67a882493be70d906ee5cc)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-10-12 14:36:28 +01:00
Jussi Kukkonen 7cb07658d1 xuser-account: Take over xuser specific D-Bus policy
Move connmans xuser-related D-Bus policy to a separate file that
xuser-account installs: This way connman does not need to depend on
xuser-account. Add policies for bluez and ofono in the same file.

(From OE-Core rev: 9f37ce18b7d79135a67474187b6119980e0130ae)

Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-10-01 15:07:49 +01:00
Jussi Kukkonen cdaa8fd960 bluez5: Use upstream D-Bus policy
The Bluez D-Bus policy is much too open and affects not just bluez but
all system services: Use upstream policy configuration instead.

This change has a chance of affecting other D-Bus services: the bug
that is fixed here may have hidden problems in other policies.

[YOCTO #8414]

(From OE-Core rev: 0f6f87c60a6ffeff6b3f53d25f4023749103e262)

Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-10-01 15:07:49 +01:00
Alexander Kanavin 299806d0dc openssh: fix sshd key generation when systemd is in use and rootfs is readonly
[YOCTO #8365]

(From OE-Core rev: d5ea131fe94939daabee1afe8219683de259b7a3)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-10-01 07:43:37 +01:00
Robert Yang 38f0ffaf43 meta: fix build with gettext 0.16.1
The gettext 0.16.1 doesn't install any m4 files to sysroot, please see
the following commit:

  commit 9e10db5bdf
  Author: Christopher Larson <kergoth@gmail.com>
  Date:   Mon Mar 17 18:10:54 2014 +0000

      gettext-0.16.1: kill target m4 macros from sysroot

This is aim for using gettext-native's macros(gettext-native-0.19.4),
but when we set:
  PREFERRED_VERSION_gettext = "0.16.1"
And build the recipes like pcmanfm, we would get errors when
do_configure:

configure:5164: error: possibly undefined macro: AM_NLS

This is because autotools_copy_aclocals doesn't copy the native macros
for target unless they're direct dependencies.

Add gettext-native to DEPENDS will fix the problem.

(From OE-Core rev: 48c168334bb60937653ab782026948d139603f8e)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-10-01 07:43:34 +01:00
Maxin B. John 7c96fcfb2e openssl: fix ptest failures
Remove dependencies for test targets. Otherwise, during ptest
execution, "make" tries to rebuild those executables and fails
there.

[YOCTO #8059]

(From OE-Core rev: 0efdd2236ec7f16f99847c6c372f372f81c56869)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-10-01 07:43:33 +01:00
Richard Purdie 5bfcd13c07 classes/meta: Add DISTRO_FEATURES check for gtk+/gtk3+
If you currently do a DISTRO_FEATURES_remove = "x11" with OE-Core, you
see failures due to dependency problems. The work in resolving this was
partially completed a while back. This adds in the markup mainly for
gtk/gtk3+ recipes and means "bitbake world" will work successfully.

Rather than code the gtk/gtk+ specific distro features into each recipe,
a shared variable is used.

(From OE-Core rev: ef967c70182eeccb59c7511d838a7ecb0b2315c1)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-10-01 07:43:32 +01:00
Chen Qi f8da3b616c iproute2: fix the configure process
Previously, the iproute2's configure script is actually run in the
do_compile stage. There's a Makefile rule 'all: Config' which makes
the configure process run to generate the Config file.

However, this makes it hard to fix the dependency problems. We need
to generate the Config file in the do_configure stage.

Add do_configure_append to separate the configure process from the
compile process.

Besides, explicitly disable ATM support for iproute2, otherwise we'll
sometimes meet errors like below when building.

  ld: cannot find -latm
  collect2: error: ld returned 1 exit status
  Makefile:154: recipe for target 'q_atm.so' failed
  make[1]: *** [q_atm.so] Error 1

(From OE-Core rev: a6967f6e441eca758058ced9982b715984ee9b5b)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-09-28 12:00:29 +01:00
Jussi Kukkonen adeba9a4cb connman: Don't use a blanket "allow" D-Bus policy
There are already "allow" rules for root and conditionally xuser to
send messages to connman: there should be no reason for a default
allow policy.

Also, conditionally add a policy to allow xuser to send to the
connman vpn service (similar to main service).

(From OE-Core rev: 7c75981944e92b5534b054058407d19de2a8a78c)

Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-09-28 12:00:23 +01:00
Jussi Kukkonen 907c8a7068 connman: Depend on xuser-account unconditionally
This means dragging in xuser-account even when it's not used but
that's a lesser evil than the recipe depending on machine specific
settings.

This also prevents a warning on connman service startup when
ROOTLESS_X is not set:
  Unknown username "xuser" in message bus

[YOCTO #8005]

(From OE-Core rev: b791b8f1d175a73fcb9e48b3fcd56ebbc6bf6de1)

Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-09-28 12:00:23 +01:00
Marek Vasut 217cccd0af openssl: Add mapping for nios2
Map nios2 architecture to linux-generic32 target.

(From OE-Core rev: f601a0df106fb1da188a4b1f1155d85fad4627bb)

Signed-off-by: Marek Vasut <marex@denx.de>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-09-28 12:00:19 +01:00
Khem Raj d36384e61d connman: Fix build with musl
(From OE-Core rev: d08f9d7145ba14ce9fbf320719c05560be69212f)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-09-23 09:53:03 +01:00
Robert Yang c6b52f32af bind: fix too long error from gen
gen.c uses 512 as the path length which is a little short when build in
deep dir, and cause "too long" error, use PATH_MAX if defined.

(From OE-Core rev: 10e017fd3de3ff1ab0c1b32ac7a9610a04f8ff13)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-09-23 09:52:51 +01:00
Ross Burton 1c914a844b meta: Fix Upstream-Status statements
Fix a variety of problems such as typos, bad punctuations, or incorrect
Upstream-Status values.

(From OE-Core rev: bd220fe6ce8c3a0805f13a14706d3130ea872604)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-09-12 23:01:53 +01:00
Cristian Iorga 302ec46650 connman: upgrade to 1.30
Bugfixes.

build-create-dirs-before-putting-files-in-them.patch
patch removed, patch included upstream.

(From OE-Core rev: 080ae179e1de7f507263c550de8c02e3e224a964)

Signed-off-by: Cristian Iorga <cristian.iorga@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-09-12 22:48:44 +01:00
Khem Raj 5ee0383697 irda-utils: Weak Define the build TARGETS
This will help one to disable the targets via bbappends if needed
e.g. musl can not compile irdaping since it uses includes
net/if_packet.h, which (on GLIBC) only defines struct sockaddr_pkt but
not in other libc e.g. musl that makes irdaping specific to glibc

(From OE-Core rev: 6369bff034a6ee8fbf7fd47d3f9ba46c3ac1a367)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-09-12 22:48:37 +01:00
Chen Qi 1dbb37d3e5 bind: fix compile failure when building path is long
Fix the building path is long, when building bind, we would meet the following
error.

    ".../long/path/to/bind/9.10.2-P3-r0/bind-9.10.2-P3/lib/dns" too long

This is because the in gen.c, DIRNAMESIZE is limited to 256. But in OE, the
path length limit is more than 400. So we change it to 512.

(From OE-Core rev: 2f22eb1ce8083afb929cce432b8dda84682520e8)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-09-12 22:48:35 +01:00
Armin Kuster 79af375397 bind: update to 9.10.2-p4
fixes two secruity issues:
CVE-2015-5722 and CVE-2015-5986.

see release notes for more information.
ftp://ftp.isc.org/isc/bind9/9.10.2-P4/RELEASE-NOTES.bind-9.10.2-P4.html

(From OE-Core rev: 0dab62934e69019557ebae392dc8cb25e37748c2)

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-09-09 14:27:54 +01:00
Joshua Lock 1e9ed16b82 nfs-utils: don't force use of /sbin as sbindir
The Makefile for mount and osd_login utilities forces
/sbin as asbindir, however on a merged /usr system this directory
might not exist. Instead sed in the system sbindir.

(From OE-Core rev: da8269ed0fd609699b23c2e3e6c61bc54f7b2832)

Signed-off-by: Joshua Lock <joshua.lock@collabora.co.uk>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-09-06 15:26:21 +01:00
Joshua Lock b7a6484ba1 bluez: handle udev dir being 2 levels below /
When building with a merged /usr dir the udev directory
lives at /usr/lib/udev - update the FILES pattern to also
pick up udev files installed two levels below the / to
ensure a merged /usr works.

(From OE-Core rev: 9a55950eee49d1105d3593efed719a0a21dc3da3)

Signed-off-by: Joshua Lock <joshua.lock@collabora.co.uk>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-09-06 15:26:20 +01:00
Cristian Iorga fc6e967c73 iproute2: upgrade to 4.1.1
libelf is now a build dependency.

(From OE-Core rev: 4edaa7498f98977e60381bd9e5f8778abfb9fe30)

Signed-off-by: Cristian Iorga <cristian.iorga@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-09-03 12:43:22 +01:00
Jussi Kukkonen 0491a7e765 openssh: Upgrade 7.0p1 -> 7.1p1
This is a bugfix release.

(From OE-Core rev: 6089c32738dc0979968bebda03c80450afe74be2)

Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-09-01 11:44:04 +01:00
Christopher Larson 464f4e2079 iw: support and enable separate build dir
(From OE-Core rev: bc5401009332eb639d73fa4cbba217ff6899c787)

Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-09-01 11:43:57 +01:00
Christopher Larson fbb8b53730 iw: obey our target path variables
(From OE-Core rev: f20463ceb90c7f188cc63d554ce70cfea49df985)

Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-09-01 11:43:57 +01:00
Christopher Larson eced78085a iw: inherit pkgconfig
We want the dep on pkgconfig-native, not pkgconfig, and the convention is to
inherit pkgconfig when running pkg-config at build time.

(From OE-Core rev: db71dca8fea9cb95858f1f1ec4e417a7a5f3aab4)

Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-09-01 11:43:57 +01:00
Christopher Larson fc4a2097bf iw: add recipe from meta-networking
iw uses cfg80211/nl80211, which is the way of the future. wireless-tools uses
WEXT, which uses ioctl, which is in deep maintenance mode. See
http://wireless.kernel.org/en/developers/Documentation/Wireless-Extensions.
Also https://wireless.wiki.kernel.org/en/users/Documentation/iw indicates "The
old tool iwconfing, which uses Wireless Extensions interface, is deprecated
and it's strongly recommended to switch to iw and nl80211."

(From OE-Core rev: a2a7c73e08f7366030dd5165b490403a13d1d7a8)

Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-09-01 11:43:56 +01:00
Ross Burton 5c0e6f8e95 bind: remove dependency on bind in bind-dev
bind doesn't ship shared libraries only static libraries, so the default
dependency on PN from PN-dev is pointless and means that an image with bind-dev
installed (via dhcp-dev's automatic dependency) ends up with named installed and
started on boot which is rarely intended.

If and when we ship bind's shared libraries we should ensure that the libraries
go into a separate package.

Also remove an old comment about --enable-exportlib which isn't supported by
configure anymore.

[ YOCTO #8216 ]

(From OE-Core rev: f28757a4b89447ea528cba987f0396b92aa0bbfe)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-08-29 13:38:04 +01:00
Jussi Kukkonen ee80b725aa openssh: build regression test binaries
ptests were failing and many more were being silently skipped because
required binaries were not being built.

Build the binaries in regress/ and set SUDO environment variable in
run-ptests: after this all tests in regress/ are now run. Continue to
skip building binaries in regress/unittests/: unittest runtime is
excessive.

On a NUC running intel-corei7-64 core-image-sato, new results are:
PASS: 55, SKIP: 3, FAIL: 0

[YOCTO #8153]

(From OE-Core rev: 1f7aaf76f4aa7875f05f4b838a5ec4594a4c35dc)

Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-08-24 23:46:54 +01:00
Roy Li c8b8749073 openssh: Upgrade 6.9p1 -> 7.0p1
7.0p1 includes the fix for CVE-2015-5600, and release note is in:
http://www.openssh.com/txt/release-7.0

(From OE-Core rev: a98f4aedb241aa4352e644b5ef7c275f467c0c48)

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-08-19 18:05:37 +01:00
Jussi Kukkonen 0183d7c406 openssh: Upgrade 6.8p1 -> 6.9p1
6.9p1 is primarily a bugfix release.

(From OE-Core rev: b971bdb52ab709b60b42be56b5175f43c96304b1)

Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-08-16 22:40:52 +01:00
Alexander Kanavin 654ac86364 bluez5: update to 5.33
(From OE-Core rev: 82d85bdee7707896cbd432b143eb0ac22c8e3451)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-08-11 09:28:50 -07:00
Otavio Salvador a71ef70b7e wpa-supplicant: Fix CVE-2015-4142
The original commit "wpa-supplicant: Fix CVE-2015-4142" included the
patch file but didn't apply it into the recipe, so the backport has
not been effective.

Reported-by: Adam Moore <adam.moore@savantsystems.com>
(From OE-Core rev: 2a8944b63b7249500f1b6b292ce1a87b82699f3d)

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-08-11 09:28:48 -07:00
Roy Li 9527cd040d bind: upgrade to 9.10.2-p3
9.10.2-p3 includes the fix for CVE-2015-5477:
  BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote
  attackers to cause a denial of service (REQUIRE assertion failure
  and daemon exit) via TKEY queries.

(From OE-Core rev: 5094354a2811825e6d60963f03959daa349cab23)

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-08-10 12:40:32 -07:00
Chen Qi 5f1615e80a resolvconf: upgrade to 1.77
(From OE-Core rev: 33f087fe5d82446e7714f9a0a9fad3f4c41cae94)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-08-10 12:40:22 -07:00
Fan Xin d31f89bd81 wpa-supplicant: Fix CVE-2015-4141, CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, CVE-2015-4146
wpa-supplicant: backport patch to fix CVE-2015-4141,
 CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, CVE-2015-4146

Backport patch to fix CVE-2015-4141, CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, CVE-2015-4146.
This patch is originally from:

For CVE-2015-4141:
http://w1.fi/security/2015-2/0001-WPS-Fix-HTTP-chunked-transfer-encoding-parser.patch

For CVE-2015-4143:
http://w1.fi/security/2015-4/0001-EAP-pwd-peer-Fix-payload-length-validation-for-Commi.patch
http://w1.fi/security/2015-4/0002-EAP-pwd-server-Fix-payload-length-validation-for-Com.patch

For CVE-2015-4144 and CVE-2015-4145:
http://w1.fi/security/2015-4/0003-EAP-pwd-peer-Fix-Total-Length-parsing-for-fragment-r.patch
http://w1.fi/security/2015-4/0004-EAP-pwd-server-Fix-Total-Length-parsing-for-fragment.patch

For CVE-2015-4146:
http://w1.fi/security/2015-4/0005-EAP-pwd-peer-Fix-asymmetric-fragmentation-behavior.patch

(From OE-Core rev: ce16e95de05db24e4e4132660d793cc7b1d890b9)

Signed-off-by: Fan Xin <fan.xin at jp.fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-08-09 00:13:59 -07:00
Zhixiong Chi 52328c26d9 dhcp: fix installed not shipped warning for lib32
Modify the dhcp.inc with using the variable ${PN} instead of direct
packagename, so that the content will not be override after expanding
while we build the lib32-dhcp package with FILES_${PN}-xxxx_append.

(From OE-Core rev: c758dcc3109a5b491d13373073214bf526943497)

Signed-off-by: Zhixiong Chi <zhixiong.chi@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-08-01 22:24:13 +01:00
Roy Li 133ad63987 bind: upgrade to 9.10.2-P2
upgrade to fix CVE-2015-4620:
    name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x
    before 9.10.2-P2, when configured as a recursive resolver with DNSSEC
    validation, allows remote attackers to cause a denial of service (REQUIRE
    assertion failure and daemon exit) by constructing crafted zone data and
    then making a query for a name in that zone.

(From OE-Core rev: d12befdf03500a0c72b661caf1a8fe81a20b6163)

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-07-31 10:32:44 +01:00
Ross Burton 7942e645b3 neard: merge .inc file
The .inc file contains so much version-dependent logic (for example behaviour of
libexecdir and location of installed daemon) that there's not really any point
in having the two split.

(From OE-Core rev: 40ffba7a7f0f32f0c8073a457a393891a31f8555)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-07-20 10:40:41 +01:00
Ross Burton a2d67457cb neard: remove overridden do_install
Overriding libexecdir was required when neard did funky things in the Makefile,
but it doesn't anymore.

(From OE-Core rev: a01b29fdcf37c5231846265b97ee599e8321cdee)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-07-20 10:40:41 +01:00
Martin Jansa e20f81041b connman-conf: fix SRC_URI_append
* add leading space so that it works even with some .bbappend adding
  additional files to SRC_URI without trailing space

(From OE-Core rev: 0f282f1d4946ac6e81959c66172c115405632a26)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-07-16 15:09:24 +01:00
Cristian Iorga 0ae9afd526 bluez5: upgrade to 5.32
Mostly a bug fix release.

Fixes in several different areas, including OPP,
ATT and advertising (instance number handling in particular).
Fix for handling a sudden disconnect when a connection setup
process hasn’t yet completed.
New feature: ability to select between letting the stack
handle ATT security elevation or doing the respective
error handling in higher layers.

(From OE-Core rev: 705c276caa9d30828887ebc3d85d49ca496d991e)

Signed-off-by: Cristian Iorga <cristian.iorga@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-07-12 22:55:38 +01:00
Jan Wetter b80ddb0229 openssl: upgrade to 1.0.2d
This upgrade fixes CVE-2015-1793
Removed openssl-fix-link.patch. The linking issue has been fixed in openssl.

(From OE-Core rev: 631632addbc81b06b7accfca8f8a9871d6b09111)

Signed-off-by: Jan Wetter <jan.wetter@mikrom.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-07-10 13:35:40 +01:00
Chen Qi 5de2efa167 nfs-utils: fix to start nfs-server correctly in systemd
Add /etc/modules-load.d/nfsd.conf so that the system loads nfsd at start-up.

Add proc-fs-nfsd.mount systemd unit file because it's needed for nfs server
to start correctly.

After this change, in a systemd based image, we can use `systemctl start
nfs-server' to start the nfs server and things would work correctly.

(From OE-Core rev: 3d4380bb36eb108dc75fee7215b615f7800b0990)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-07-09 18:00:18 +01:00
Li xin 44f0c01f31 dhcp: modify dhcpd.service to make it start successfully and add systemd service files dhcpd6.service
(From OE-Core rev: b8eeac1b85c253c49f4324ac36db8ff98b286688)

Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-07-08 00:01:19 +01:00
fan.xin 563269fd1e wpa-supplicant: Fix CVE-2015-4142
wpa-supplicant: backport patch to fix CVE-2015-4142

Backport patch to fix CVE-2015-4142. This patch is originally from:

http://w1.fi/security/2015-3/0001-AP-WMM-Fix-integer-underflow-in-WMM-Action-frame-par.patch

(From OE-Core rev: 61f2a6a18dcda22d7b0e236f9150674bff2764a7)

Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-07-01 15:40:00 +01:00
Li Wang 63873d02c0 nfs-utils: debianize start-statd
make start-statd command to use nfscommon configure, too.

(From OE-Core rev: 98d3607697da77bd79b367b2879ef6944e59d0a3)

Signed-off-by: Henrik Riomar <henrik.riomar@ericsson.com>
Signed-off-by: Li Wang <li.wang@windriver.com>
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-07-01 15:40:00 +01:00
Li Wang 703108c986 nfs-utils: Reexport all directories when start
call "exportfs -r" to reexport all directories when start the nfsserver.
This change does follow debian and nfs-utils stardard.

(From OE-Core rev: 967aa21662930fe5584485d820eb7959a29815bb)

Signed-off-by: Li Wang <li.wang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-07-01 15:40:00 +01:00
Roy Li 2d65e23f2d openssl: upgrade to 1.0.2c
upgrade to fix the CVE: CVE-2015-1788..CVE-2015-1792 and CVE-2014-8176
remove a backport patch
update the c_rehash-compat.patch

(From OE-Core rev: 5a70e45b8c6cb0fa7ea4fe1b326ad604508d00cb)

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-07-01 15:39:59 +01:00
Cristian Iorga e8af6ad793 bluez5: upgrade to 5.31
Mostly a bug fix release,
with the the following improvements:
- support for handling BNEP setup response;
- support for setting GATT database security flags;
- support for setting discovery filters interface;
- support for user controlled advertising interface.

(From OE-Core rev: 72bf99d2d9a4a8030cec47b39aa18811752ca254)

Signed-off-by: Cristian Iorga <cristian.iorga@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-06-27 22:42:50 +01:00
Ross Burton 8cef098d2c bluez5: fix lib/libexecdir confusion
Use $libexecdir and $libdir as appropriate so the files are packaged correctly
when libexecdir != $libdir/$BPN.

(From OE-Core rev: 53c5a6b97f254725ae5d19af4977486ab84d1ea5)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-06-27 22:42:50 +01:00
Otavio Salvador 18e902b2dc wpa-supplicant: Revert "Make SystemD D-Bus config conditional"
The D-Bus config is not systemd-specific. It is required for the D-Bus
communication to be operational.

This reverts commit e658ee16dc026b96f67a4c9666d3eb7bf7027de3.

(From OE-Core rev: 2587b83faabdc8858e8746201805369ed8d53ba8)

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-06-24 14:04:14 +01:00
Ross Burton dcb441c6e0 neard: remove unused service file
Upstream ships a systemd service file now, so we don't need this anymore.

(From OE-Core rev: 9a685d60b0549626cccea5fea8f22a57c2306f81)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-06-23 11:47:40 +01:00
Cristian Iorga 83836c5dba openssl: fix building on x32 systems
Fix build on Fedora 21 i686.

When building on x32 systems where the default type is 32bit,
make sure that 64bit integers can be represented transparently.

(From OE-Core rev: cd3eddcf2842b9a360f72caf4337ab2968462bb2)

Signed-off-by: Cristian Iorga <cristian.iorga@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-06-23 11:46:58 +01:00
Robert Yang e344dc152d libpcap: add a dummy PACKAGECONFIG for bluez5
The BLUEZ is default to bluez5, but there is only PACKAGECONFIG[bluez4],
no PACKAGECONFIG[bluez5], add a dummy PACKAGECONFIG for bluez5 to avoid
confusing the user, and avoid the warning.

(From OE-Core rev: f2a09e6170e68f4892f3c7cb9d27a4365efa94e8)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-06-23 11:46:57 +01:00
Robert Yang 00a3872b8e bluez5: remove alsa from PACKAGECONFIG
The PACKAGECONFIG[alsa] had been removed when upgraded to 5.12 since it
was not supported any more.

(From OE-Core rev: 503c7025522baa1b70336f84a26a15896e3303f3)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-06-23 11:46:57 +01:00
Paul Gortmaker 6119f30d83 bind: ensure searching for json headers searches sysroot
Bind can fail configure by detecting headers w/o libs, or
it can fail the host contamination check.  More details
are within the commit log in the contained patch.

(From OE-Core rev: 6fa5671c5cf8e5e88c5ad1e39742d59453e02695)

Signed-off-by: Paul Gortmaker <paul.gortmaker@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-06-11 23:59:16 +01:00
Khem Raj e092f1585b openssl: Backport upstreamed version of patch to fix build on mips64
Previous patch had a concern as well and this is a direct backport of
the patch fixing the problem.

(From OE-Core rev: 3d48bb6d2d65d0837dcacc262633a55053652e5f)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-05-30 22:26:13 +01:00
Yue Tao 46bca1b829 wpa-supplicant: upgrade to 2.4
1. upgrade to 2.4
2. update the checksum, and license checksum since date in it is changed
3. Backport a patch to fix CVE-2015-1863
4. remove two deprecated patches

(From OE-Core rev: fd0880c2b0958b72d641a6821ddd6d6790a92b7a)

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-05-29 10:17:15 +01:00
Roy Li 2d2d5e6977 ppp: Security Advisory - CVE-2015-3310
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3310

Buffer overflow in the rc_mksid function in plugins/radius/util.c in
Paul's PPP Package (ppp) 2.4.6 and earlier, when the PID for pppd is
greater than 65535, allows remote attackers to cause a denial of
service (crash) via a start accounting message to the RADIUS server.

oe-core is using ppp 2.4.7, and this CVE say ppp 2.4.7 was not
effected, but I found this buggy codes are same between 2.4.6 and
2.4.7, and 2.4.7 should have this issue.

(From OE-Core rev: 5b549c6d73e91fdbd0b618a752d618deb1449ef9)

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-05-29 10:17:15 +01:00
Richard Purdie ed1555c2ff avahi: Fix key expansion variable masking
bitbake -b avahi_ -e | grep FILES_avahi=

shows this code from http://git.yoctoproject.org/cgit.cgi/poky/commit/?h=master&id=093149d22461a3a76980635bc46cdba1c7c0b181
doesn't do what is expected. This is due to key expansion. Change to use ${PN}
to avoid warnings with new versions of bitbake.

(From OE-Core rev: 676309f25ae57794bc270994fede31e8c7b9c83c)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-05-29 10:17:14 +01:00
Khem Raj fa00c9a930 openssl: Fix build with gcc5 on mips64
Patch is submitted upstream as well

(From OE-Core rev: 40016c7c19abdbdae4fcd86fab9672631f26712b)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-05-24 07:19:21 +01:00
Roy Li a497998f9e openssl: drop the padlock_conf.patch
padlock_conf.patch will enable the padlock engine by default,
but this engine does not work on some 32bit machine, and lead
to openssl unable to work

(From OE-Core rev: f7d186abca6ed9b48ae7393b8f244e1bfb46cb41)

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-05-24 07:19:19 +01:00
Robert Yang b92a75c218 socat: fix for parallel build
Fixed:
vsnprintf_r.o: file not recognized: File truncated
collect2: error: ld returned 3 exit status
Makefile:122: recipe for target 'filan' failed

Let filan depend on vsnprintf_r.o and snprinterr.o to fix the issue.

(From OE-Core rev: ee0a4412d66a2dd001defae7615f02e0617d91ed)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-05-14 11:43:59 +01:00
Robert Yang 7a483d1194 bind: separate B and S
Fix B != S and separate them.

(From OE-Core rev: 1938a4435cd77494e539961bdfa907ae32a01147)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-05-14 11:43:59 +01:00
Robert Yang 57aeb9e45f openssl/orc: virtclass-native -> class-native
The virtclass-native is out of date.

(From OE-Core rev: ed51b382928ee5f14d524e08a00a0c8931c491c5)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-05-14 11:43:56 +01:00
Ross Burton c4fc58e029 bind: disable the HTTP statistics service by default
Rename the "libxml2" PACKAGECONFIG to "httpstats" so that is is meaningful, and
disable it by default as a web frontend to the server statistics shouldn't be
enabled by default.

(From OE-Core rev: 27ab6150f87bee605dc229a948e737a750559759)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-05-09 22:26:43 +01:00
Ross Burton 4b042c2447 bind: update libxml2 detection patch
Refresh the libxml2 detection patch to directly call pkg-config instead of
attempting to use xml2-config, which will always return an error in OE.

(From OE-Core rev: 76c53feaec1b8c1045aaf2a78a9225a732a37f1f)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-05-09 22:26:43 +01:00
Roy Li 05956671a2 bind: upgrade to 9.10.2
1. Remove two unneeded CVE patches, 9.10.2 fixed the CVE-2015-1349 also
2. Remove bind-subdirs-run-serially.patch and cross-build-fix.patch,
similar fixes are merged into 9.10.2
3. update the dont-test-on-host.patch
4. update the Copyright file checksum, since the date in it has been changed.
5. replace the hardcode lib dir with $base_libdir in bind-add-crosscripts*.patch

(From OE-Core rev: 41d53f0139a9cb29679dbcaaab8311a1364c65f4)

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-05-09 22:26:42 +01:00
Kevron Rees 78ec80a39f bluez: update to 5.30
(From OE-Core rev: 52d5ab7fcea7028ff1d10b3e2416c0179128ba71)

Signed-off-by: Kevron Rees <kevron.m.rees@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-05-07 13:40:37 +01:00
Cristian Iorga fd584e0ad7 connman: upgrade to 1.29
- Add support for Ethernet and VLAN usage;
- Fixes.

Added build-create-dirs-before-putting-files-in-them.patch,
already submitted upstream.

(From OE-Core rev: 4563788a21fb1715920cd5056b43d85c69563c32)

Signed-off-by: Cristian Iorga <cristian.iorga@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-05-05 22:15:18 +01:00
Cristian Iorga 1f6d4cc971 connman: code cleanup
- cleanup multiple inherit lines;
- RDEPENDS cleanup, use PACKAGECONFIG[] instead.

(From OE-Core rev: 993594c018c845cc1cd58348d999dc9e52b778a4)

Signed-off-by: Cristian Iorga <cristian.iorga@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-05-05 22:15:18 +01:00
Cristian Iorga dbdf1ed58d bluez: remove bluez4 recipes
BlueZ 4.x and associated recipes
are now obsolete.
(bluez4,bluez-hcidump, gst-plugin-bluetooth).
Will be moved into recipes-connectivity
collection of meta-openembedded.
BlueZ 4.x is still usable in poky/YP.

(From OE-Core rev: 7d298ecf733c1698e9f42ba79937eca394930b55)

Signed-off-by: Cristian Iorga <cristian.iorga@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-05-03 11:43:52 +01:00
Cristian Iorga 11981a5c59 bluez4: add proper systemd support
(From OE-Core rev: 12d5c09107fb3bc76101379b4e1d9f56d589c76e)

Signed-off-by: Cristian Iorga <cristian.iorga@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-05-03 11:43:51 +01:00
Robert Yang 39bd94a290 bind: remove 5 backport patches
They are backport patches, and verified that the patches are in the
source.

(From OE-Core rev: 6e4a10ab030c192e2437592538e4713b1ee2032b)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-05-03 11:43:51 +01:00
Wenlin Kang 90972c9518 openssh: fix login fails for ssh -o Batchmode=yes with empty passwords
The patch fixes the login fails for ssh -o Batchmode=yes when passwords is
empty and without authorized_keys file even if set "PermitEmptyPasswords yes"
in sshd_config file.

Here, to fix this issue, we remove the file auth2-none.c-avoid-authenticate-
empty-passwords-to-m.patch, that fixed broken pipe while sshd with pam,
but it isn't needed any more now, because we make it has gone by change
ChallengeResponseAuthentication value in sshd_config file.

(From OE-Core rev: f879a7406d8fce37e8baf5fe724d7ed0042d57f8)

Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-05-03 11:43:50 +01:00
Robert Yang 636cbe6011 openssl: remove 3 patches
Removed:
 - openssl-avoid-NULL-pointer-dereference-in-dh_pub_encode.patch
 - upgate-vegsion-script-for-1.0.2.patch
   Since they are already in the source.
 - make-targets.patch
   It removed test dir from DIRS, which is not needed any more since we
   need build it.

(From OE-Core rev: 5fa533c69f92f2dd46c795509b0830b36413b814)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-04-30 23:04:13 +01:00
Khem Raj 9e901d8de3 libnfsidmap: Include sys/types.h for u_int32_t
Exposed using musl

Change-Id: Ia155850b3dfe62cd7d10b207b94ff3cc1f0244fc
(From OE-Core rev: 65e30309ac66bdd7785eb3790b91245a9ac5277a)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-04-21 07:20:25 +01:00
Khem Raj 5688e6c739 openssh: Upgrade 6.7 - > 6.8
Its a major releaseof openssh, should be fully
compatible with 6.7 additionally works with musl

Change-Id: I903d31247b8a318b9be1c21f764ffe56b5971ca9
(From OE-Core rev: 4ac2974f463f8e2970d9e44e3b273c672a3cab8c)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-04-21 07:20:24 +01:00
Armin Kuster 1da17afed8 crypto: use bigint in x86-64 perl
on some hosts openssl fails to build with this error:

ghash-x86_64.s: Assembler messages:
ghash-x86_64.s:890: Error: junk '.15473355479995e+19' after expression

backported fix from community.

(From OE-Core rev: 8230f873921d5c16106e3ebf57053a646bc6ad78)

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-04-15 14:19:45 +01:00
Khem Raj a543a574b5 ppp: Add extra include dirs
Just run configure, the configure script is not really
a autoconf generated script so just run it

Include path is needed to be there since
the headers from it are used during build in subcomponents

Change-Id: Ib1f24fd18bc8564e3c74ab834b7cf0fdf955d0e1
(From OE-Core rev: c64c9f7ffc88018404afdde373dfd7ef2bdf7ae8)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-04-13 22:33:22 +01:00
Cristian Iorga b77b25e283 bluez5: upgrade to 5.29
- Large release with over a month and 475 commits since 5.28;
- Internal GATT library received lots of updates;
- Fix for AVCTP key repeat timeout;
- Added support for the Multi Profile Specification (MPS).

(From OE-Core rev: 6a85e15eef1cfc0333a3b676976e454093f07ce1)

Signed-off-by: Cristian Iorga <cristian.iorga@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-04-10 18:10:28 +01:00
Khem Raj 83f9ab73a2 bluez4: Fix encrypt symbol namespace collision
| Makefile:3352: recipe for target 'test/l2test.o' failed
| make[1]: *** [test/l2test.o] Error 1
| make[1]: *** Waiting for unfinished jobs....
| test/rctest.c:82:12: error: 'encrypt' redeclared as different kind of
symbol
|  static int encrypt = 0;
|             ^
| In file included from test/rctest.c:33:0:

Change-Id: Iaf2f644ef3cef6f96c6e4bc421c9e78a0e23e674
(From OE-Core rev: 795a409919774f3a2a4c859799de36f1064efd83)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-04-10 18:10:27 +01:00
Andre McCurdy 6cbfe0f354 libpcap.inc: consolidate inherit and PACKAGECONFIG lines
(From OE-Core rev: ce9fa5588acdf56e32bbdf9da512aa4071cf7266)

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-04-10 18:10:26 +01:00
Andre McCurdy ddb122fa9a libpcap.inc: remove obsolete libnl1 PACKAGECONFIG
There's no libnl1 recipe in oe-core (or any other layer in the layer
index).

Keeping the libnl1 PACKAGECONFIG is likely to cause problems for the
libnl PACKAGECONFIG since libnl and libnl1 both use --with-libnl and
--without-libnl.

(From OE-Core rev: 4c820481147e9c11160b00f7df7ca8c329b23eac)

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-04-10 18:10:26 +01:00
Jukka Rissanen bf8aa743d9 connman: Create connman.service at proper moment
ConnMan commit ac332c5d01b0737c18cb58c8ccc67cf6b0427e1d changes
how the connman.service file is created from .in file. After
that commit, the file is created by Makefile instead of configure.
This means that we need to tweak the service file in compile
time instead of configure time because the generated file will not
be there after the configuration.

This commit can be used even with older ConnMan version as the
connman.service file is there when the compilation happens.

(From OE-Core rev: 32839103727d92a6580f916b6dd8e4439b2347c8)

Signed-off-by: Jukka Rissanen <jukka.rissanen@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-04-10 18:10:24 +01:00
Khem Raj ab16cd13de wpa-supplicant: Replace non-standard base defines with c99 compliant ones
Makes it more portable

Change-Id: I033787934cd91243ce8f8ce3a974a157aa5cfd6a
(From OE-Core rev: 1ee774c8a70d83011a1a4ed5da9ea056ed0f0c96)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-04-08 10:53:29 +01:00
Khem Raj be8ffcd261 ofono: Disable backtrace for non-glibc libraries
It uses glibc backtrace() API which is not implemented
everywhere e.g. musl

Change-Id: I96380b994c27968542dba6dae220adfecaeda556
(From OE-Core rev: 4dd6bca8cdf538a7da9ffcb36faf70c3436b4f19)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-04-08 10:53:28 +01:00
Robert Yang 86e6a37e87 dhcp: 4.3.1 -> 4.3.2
Removed dhcp-xen-checksum.patch since already merged.

(From OE-Core rev: f6962dc2d60be508f251944130f9bd1bd1e4941b)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-04-08 10:53:27 +01:00
Robert Yang 8bdf8b9012 socat: 1.7.2.4 -> 1.7.3.0
Removed fix-cross-compiling-failed.patch and
socat-1.7.2.4-linux-3.17.patch since upstream has fixed them.

Updated README's LIC_FILES_CHKSUM, there is a word changed (GPL ->
GPLv2, it should be GPLv2 as COPYING shows), its license is already
"GPL-2.0+-with-OpenSSL-exception", so we just update the md5 is OK.

(From OE-Core rev: 1c09d06ab8694612e1bd5cc63ad660d1e1ea4d64)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-04-08 10:53:27 +01:00
Otavio Salvador 3c284cfd05 wpa-supplicant: Make SystemD D-Bus config conditional
The SystemD D-Bus configuration should only to be installed when
SystemD support is enabled.

(From OE-Core rev: e54f2569f4fb880387edc6a99d790b765ae33080)

Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-03-31 22:23:18 +01:00
Richard Purdie df6d275d74 openssl: 1.0.2 -> 1.0.2a
Patch updated to drop TERMIO flags since these are the default on
Linux anyway (see https://git.openssl.org/?p=openssl.git;a=commit;h=64e6bf64b36136d487e2fbf907f09612e69ae911)

Also drop patch merged upstream.

(From OE-Core rev: 6cc1315b77bbdcc8f3a0d1e3132ad79ebbeeb2de)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-03-25 12:39:46 +00:00
Andreas Oberritter 43d84d82c9 connman: only depend on xuser-account if ROOTLESS_X is set
* Copied from xserver-nodm-init.

(From OE-Core rev: a09cfe460b6366edffacbd868af4d976bfe16520)

Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-03-25 12:39:42 +00:00
Cristian Iorga b4578680f6 neard: fix the install path in init scripts
The neard make scripts will place the daemon executable
in /usr/lib/neard/nfc/neard. Change the path accordingly
in init scripts.

Fixes [YOCTO #7390].

(From OE-Core rev: bd277f3a46e7fc764cc55c5354d2136fcfddc3c1)

Signed-off-by: Cristian Iorga <cristian.iorga@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-03-22 14:42:14 +00:00
Rob Woolley 1cdf38677b nfs-utils: Identify CONFFILES
Some package formats explicitly track which files are configuration files
so that they are not overwritten on updates. We must use an explicit list
instead of a wildcard as nfs-utils-client provides files under
${localstatedir}/lib/nfs that are not configuration files.

Signed-off by: Rob Woolley <rob.woolley@windriver.com>

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-03-16 17:42:04 +00:00
Rob Woolley f6c9b4f0eb nfs-utils: Install nfsmount.conf
The file nfsmount.conf is present in nfs-utils but not installed to the
filesystem.  It has been added to nfs-utils-client as it seemed to be
missing accidentally rather than being removed intentionally.  The binary
files in nfs-utils-client have a hard-coded reference to it and we
already provide the manpage for it in nfs-utils-doc.

Signed-off by: Rob Woolley <rob.woolley@windriver.com>

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-03-16 17:42:04 +00:00
Robert Yang 28c986c94d resolvconf: fix SRC_URI
Fixed:
WARNING: Failed to fetch URL ftp://ftp.debian.org/debian/pool/main/r/resolvconf/resolvconf_1.76.tar.xz, attempting MIRRORS if available

(From OE-Core rev: f4db91f5228129d5e8cf65f9c4919b4fdfc5306b)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-03-16 17:42:00 +00:00
Saul Wold f5e4349011 openssl: Upgrade to 1.0.2
Rebased numerous patches
removed aarch64 initial work since it's part of upstream now
Imported a few additional patches from Debian to support the version-script
and blacklist additional bad certificates.

(From OE-Core rev: 10b689033551c37d6cafa284d82bdccd43f6113e)

Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-03-10 10:47:46 +00:00
Joe MacDonald de638414f7 libpcap: add pkg-config support
libpcap was not previously installing a pkg-config file.  Add a basic one
that will allow using 'pkg-config --libs libpcap', for example, in recipes
rather than 'pcap-config', which frequently returns incorrect information.

(From OE-Core rev: 0f51c1260ac53aa4843e29b00cd600eb64074260)

Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-02-27 07:38:41 +00:00
Richard Purdie a509e276b2 Revert "bind: fix and enable parallel build"
This reverts commit b003df0335.

We keep seeing parallel make failures on the autobuilder

(From OE-Core rev: af46b9f5dd5436b3d48f2fcd7a69f32343b62442)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-02-23 17:37:41 +00:00
Richard Purdie 687c797728 Revert "openssl: fix and enable parallel build"
This reverts commit 7502fa5feb.

We keep seeing parallel make failures in openssl :(

(From OE-Core rev: 9afc85a7be203c5a0eac1977e777a24504cb3088)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-02-23 17:37:41 +00:00
Robert Yang 32018182f3 bind: Fix parallel make issue
Fixed:
unix/os.o: file not recognized: File truncated
collect2: error: ld returned 1 exit status

This is because os.o was built twice:
* The implicity rule (depends on unix/os.o)
* The "make all" in unix subdir (depends on unix/os.o)

Depend on subdirs which is unix only rather than unix/os.o will fix the
problem.

(From OE-Core rev: 1af699e1af2552659b90a1fadd8de73d780226ba)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-02-19 07:51:39 +00:00
Brendan Le Foll 0a5395738b openssl: disable SSLv3 by default
Because of the SSLv3 POODLE vulnerability, it's preferred to simply disable
SSLv3 even if patched with the TLS_FALLBACK_SCSV

(From OE-Core rev: 4e691d06ffdb4d1fd940996f419308fe53454df7)

Signed-off-by: Brendan Le Foll <brendan.le.foll@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-02-19 07:51:39 +00:00
Peter A. Bigot 8633e18d28 connman: depend on distro provider of bluez
connman currently supports both bluez4 and bluez5 without distinguishing
them at configuration time.

(From OE-Core rev: 420ab90167e434d6972702c44271104881f08fc9)

Signed-off-by: Peter A. Bigot <pab@pabigot.com>
Signed-off-by: Cristian Iorga <cristian.iorga@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-02-17 13:43:39 +00:00
Peter A. Bigot 4e2642e449 ofono: select distro preference for bluez provider
(From OE-Core rev: acb49c962be8c3fd7136d8d03f3be55f713cf9f0)

Signed-off-by: Peter A. Bigot <pab@pabigot.com>
Signed-off-by: Cristian Iorga <cristian.iorga@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-02-17 13:43:39 +00:00
Peter A. Bigot 8596c29d2d libpcap: select distro preference for bluez provider
(From OE-Core rev: 4c2a993735b668c6fbe9889a910dfa07b65cdff3)

Signed-off-by: Peter A. Bigot <pab@pabigot.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-02-17 13:43:39 +00:00
Peter A. Bigot 47dea14069 neard: select distro preference for bluez provider
(From OE-Core rev: 33b3164c2627d20315ff716e7d78ced86871c472)

Signed-off-by: Peter A. Bigot <pab@pabigot.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-02-17 13:43:39 +00:00
Maxin B. John d88555ba64 openssl: upgrade to 1.0.1k
Upgrade includes 8 CVE bug fixes

(From OE-Core rev: 5dc197f0b2a088d8a88480da0afc886c745f551b)

Signed-off-by: Maxin B. John <maxin.john@enea.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-02-15 21:58:28 +00:00
Robert Yang 60ae5c2eb0 meta: enable parallel build for several recipes
I used a for loop to build these packages more than 520 times, these
recipes never failed.

(From OE-Core rev: 7957c5bc2771a763d26e50e716733c6335cef3c2)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-02-15 21:58:27 +00:00
Robert Yang 7502fa5feb openssl: fix and enable parallel build
Fixed:
Cannot create directory image/usr: File exists
make: *** [install_sw] Error 17

Create /usr to avoid race issues.

(From OE-Core rev: a831cbe6cce67396148b41d56cbc12f99a972bd1)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-02-15 21:58:27 +00:00
Robert Yang b003df0335 bind: fix and enable parallel build
(From OE-Core rev: af851c7cdeab0ef53f00866da3da1a96b96bd63a)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-02-15 21:58:26 +00:00
Nathan Rossi 3dff11ca2c openssl: Add mapping for microblaze architecture
Map the microblaze architecture to the linux-generic32 target.

(From OE-Core rev: 7ea1979f687777bcafec393b6ab126ec11017074)

Signed-off-by: Nathan Rossi <nathan.rossi@xilinx.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-02-15 21:58:26 +00:00
Robert Yang f404ab2563 neard: do not ship version.h
The HEADERS' name has been changed to pkginclude_HEADERS, so use
nodist_pkginclude_HEADERS, otherwise version.h would be shipped.

It would cause other pkgs failed to build if ship version.h to
usr/include/version.h

(From OE-Core rev: 2025284acf8999d254c671b5e259587a4171858f)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-02-15 21:58:26 +00:00
Peter A. Bigot ef072602ea bluez5: upgrade to 5.28
- Fixes to GATT service discovery & probing
- Fix for bearer selection with dual-mode devices
- Fix potential crash when removing devices
- Fix issue with incomplete names in EIR data
- Fix parsing GATT name characteristics
- Fix AVCTP long press & key repetition handling
- Fixes for GATT notification handling

hex2hcd graduated to installed tool; two new noinst tools

See: http://www.bluez.org/release-of-bluez-5-28/
(From OE-Core rev: c8da28df187b22f1260b0f806854e8c357bccde4)

Signed-off-by: Peter A. Bigot <pab@pabigot.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-02-15 21:58:25 +00:00
Cristian Iorga 51b6021179 ofono: upgrade to 1.16
- Fix issue with PIN retry handling;
- Fix issue with HFP and multiple calls;
- Add support for Distracted Driving Reduction;
- Add support for available technologies property;
- Add support for Telit location reporting driver;
- Add support for u-blox SARA-U270 modems;
- Add support for Quectel UC15 modems.

(From OE-Core rev: b3e7ecc75f5a2b0cf6dde03fb7b2972e89457c0d)

Signed-off-by: Cristian Iorga <cristian.iorga@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-02-15 21:58:25 +00:00
Cristian Iorga 9e93803372 connman: upgrade to 1.28
- Fixes an issue with DHCPv6 retransmission timer
calculation that causes system load to jump to 100%;
- All WiFi P2P issues encountered with Miracast have been addressed;
- ConnMan no longer hands off foreground autoscanning to
wpa_supplicant as it causes issues when finding hidden WiFi networks;

Other changes and fixes include:

- Several fixes for handling IPv6 contexts via oFono;
- Fix memory deallocation in exit code paths;
- Use OPEN auth_alg for wpa_supplicant open WiFi networks;
- A WiFi Access Point with unknown strength now has a proper
minimum value which translates to a service 'Strenght' property of 30;
- Fix byte order in DHCP server identifier;
- Properly cancel an ongoing service connect if the Agent exits.

(From OE-Core rev: fa718d0d2d74893bf8e532a132f8ede26552d2be)

Signed-off-by: Cristian Iorga <cristian.iorga@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-02-14 08:40:59 +00:00
Rob Woolley 2c2b003de5 dhcp-client: Ignore partial checksums
dhclient will fail to get an IP address if run inside a guest when traffic is
flowing over a virtual network interface.  The user will see the error
message:

  5 bad udp checksums in 5 packets
  No DHCPOFFERS received.
  Unable to obtain a lease on first try.  Exiting.
  Failed to bring up eth0.

This is because Linux only uses partial checksums for packets that go over
virtual network interfaces and dhclient does not like this.

  See linux kernel commit 78ea85f17b15390e30d8b47488ec7b6cf0790663
  ("net: skbuff: improve comment on checksumming")

An application can detect this behaviour by checking for the
TP_STATUS_CSUMNOTREADY flag in the tp_status field.

  See linux kernel commit 8dc4194474159660d7f37c495e3fc3f10d0db8cc
  ("Add optional checksum computation for recvmsg")

An extra parameter is added to decode_udp_ip_header() in dhclient to indicate
whether or not dhclient should ignore partial checksums.  This is used
when the TP_STATUS_CSUMNOTREADY bit is set by the guest kernel.

This fix has been included in Fedora and Ubuntu, however it has not yet been
accepted by ISC upstream.  Likely because it is specific to behaviour in Linux
and other UNIX variants do not seem to be affected.

The patch was imported from the dhcp source RPM in Fedora 21
  (http://pkgs.fedoraproject.org/cgit/dhcp.git/tree/dhcp-xen-checksum.patch?h=f21)

Originally contributed to fedora-cvs-commit by David Cantrell on Jan 30 2007
  (https://www.redhat.com/archives/fedora-cvs-commits/2007-January/msg01442.html)

Submitted to dhcp-bugs@isc.org - [ISC-Bugs #22806] - by Michael S. Tsirkin
  (http://comments.gmane.org/gmane.comp.emulators.kvm.devel/65236)
  (https://lists.isc.org/pipermail/dhcp-hackers/2010-April/001835.html)

Upstream-Status: Submitted [dhcp-bugs@isc.org]
(From OE-Core rev: 99b598927b7a3837621d9e83e69b3b4fd83afed1)

Signed-off-by: Rob Woolley <rob.woolley@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-02-14 08:40:57 +00:00