]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
glibc: exclude child recipes from CVE scanning
authorRoss Burton <ross.burton@intel.com>
Tue, 16 Jul 2019 12:47:21 +0000 (13:47 +0100)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 17 Jul 2019 08:36:29 +0000 (09:36 +0100)
commit1f9a963b9ff7ebe052ba54b9fcbdf7d09478dd17
tree414fefa62c886e7c42d5c4fab68a05cf8216630e
parent5388ed6d1378d647a65912dbd537f9ef3cb5760a
glibc: exclude child recipes from CVE scanning

As glibc will be scanned for CVEs, we don't need to scan glibc-locale,
glibc-mtrace, and glibc-scripts which are all separate recipes for technical
reasons.

Exclude the recipes by setting CVE_PRODUCT in the recipe, instead of using the
global whitelist.

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/classes/cve-check.bbclass
meta/recipes-core/glibc/glibc-locale.inc
meta/recipes-core/glibc/glibc-mtrace.inc
meta/recipes-core/glibc/glibc-scripts.inc