kern-tools: depend on git-replacement-native

Konstantin Aladyshev <aladyshev22@gmail.com> reported that the
kern-tools require git functionality that was introduced in
git versions greater than the minimum project requirements.

In particular:

   commit 923a9de418b3ca8592c3 [kgit-s2q: don't run verication hooks]

uses the --no-verify flag to prevent local git hooks from
running and breaking patching or introducing security
issues from the host configuration.

To ensure that we have a new enough git available for the tools,
we update our DEPENDS to git-native-replacement, and the version
available in oe-core will be built and used instead of the
host provided version.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

diff --git a/meta/recipes-kernel/kern-tools/kern-tools-native_git.bb b/meta/recipes-kernel/kern-tools/kern-tools-native_git.bb
index 941160ea9c07be9a229eb31d6a56545e70f3475c..8eff00821ad6773f3449d3f4aab8831c9b3ae585 100644 (file)
--- a/meta/recipes-kernel/kern-tools/kern-tools-native_git.bb
+++ b/meta/recipes-kernel/kern-tools/kern-tools-native_git.bb
@@ -9,7 +9,7 @@ LIC_FILES_CHKSUM = "\
        file://Kconfiglib/LICENSE.txt;md5=712177a72a3937909543eda3ad1bfb7c \
 "
 
-DEPENDS = "git-native"
+DEPENDS += "git-replacement-native"
 
 SRCREV = "7160ebe8b865dd6028aef278efa219433db93f7e"
 PV = "0.3+git"