Li Wang [Mon, 29 Jun 2015 06:22:35 +0000 (14:22 +0800)]
nfs-utils: debianize start-statd
make start-statd command to use nfscommon configure, too.
Signed-off-by: Henrik Riomar <henrik.riomar@ericsson.com> Signed-off-by: Li Wang <li.wang@windriver.com> Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 98d3607697da77bd79b367b2879ef6944e59d0a3) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Rob Woolley [Mon, 9 Mar 2015 23:52:56 +0000 (19:52 -0400)]
nfs-utils: Install nfsmount.conf
The file nfsmount.conf is present in nfs-utils but not installed to the
filesystem. It has been added to nfs-utils-client as it seemed to be
missing accidentally rather than being removed intentionally. The binary
files in nfs-utils-client have a hard-coded reference to it and we
already provide the manpage for it in nfs-utils-doc.
Signed-off by: Rob Woolley <rob.woolley@windriver.com>
Chen Qi [Fri, 7 Nov 2014 08:47:19 +0000 (16:47 +0800)]
nfs-utils: change owner/group of directories in do_install
Previously, the owners/groups of directories like /var/lib/nfs/statd
are changed in the init script, /etc/init.d/nfscommon. This is actually
a workaround. We need to change them at do_install time.
This patch fixes the above problem by changing owners/groups at do_install
time.
Besides, configuration option '--with-staduser=nobody' is changed to be
'--with-statduser=rpcuser'. And /var/lib/nfs/statd/state is modified to have
permission 0644, just like other distros (ubuntu, fedora, etc.) do.
Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 8c27a1e25ae42a435ab7d290cab40f94f9286243) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Roy.Li [Mon, 20 Oct 2014 05:38:14 +0000 (13:38 +0800)]
nfs-utils: fix start-statd
1. add /bin to PATH of start-statd, otherwise systemctl can not be found.
2. drop error when systemd fails to start statd.service; since if it failed,
rpc.statd will be called directly.
Signed-off-by: Roy.Li <rongqing.li@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 048130996300e1762bc6d714ba09aac5a326843d) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Roy Li [Wed, 15 Oct 2014 09:21:34 +0000 (17:21 +0800)]
nfs-utils: fix a Gcc undefined behavior
Calling strncpy with NULL second argument, even when the size is 0,
is undefined behavior, which leads to GCC to drop the check old
variable with NULL in following code.
Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit af56e7559d31cb9cb84b85a7dedd8e12cf1f06cd) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Ross Burton [Tue, 30 Dec 2014 18:04:05 +0000 (18:04 +0000)]
gstreamer1.0-rtsp-server: upgrade to 1.4.5
Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 6398ae1d40c86a3b848ac79a1dce25520bd088c6) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Jukka Rissanen [Wed, 8 Apr 2015 11:36:19 +0000 (14:36 +0300)]
connman: Create connman.service at proper moment
ConnMan commit ac332c5d01b0737c18cb58c8ccc67cf6b0427e1d changes
how the connman.service file is created from .in file. After
that commit, the file is created by Makefile instead of configure.
This means that we need to tweak the service file in compile
time instead of configure time because the generated file will not
be there after the configuration.
This commit can be used even with older ConnMan version as the
connman.service file is there when the compilation happens.
Signed-off-by: Jukka Rissanen <jukka.rissanen@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 32839103727d92a6580f916b6dd8e4439b2347c8) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Cristian Iorga [Tue, 10 Feb 2015 12:54:23 +0000 (14:54 +0200)]
connman: upgrade to 1.28
- Fixes an issue with DHCPv6 retransmission timer
calculation that causes system load to jump to 100%;
- All WiFi P2P issues encountered with Miracast have been addressed;
- ConnMan no longer hands off foreground autoscanning to
wpa_supplicant as it causes issues when finding hidden WiFi networks;
Other changes and fixes include:
- Several fixes for handling IPv6 contexts via oFono;
- Fix memory deallocation in exit code paths;
- Use OPEN auth_alg for wpa_supplicant open WiFi networks;
- A WiFi Access Point with unknown strength now has a proper
minimum value which translates to a service 'Strenght' property of 30;
- Fix byte order in DHCP server identifier;
- Properly cancel an ongoing service connect if the Agent exits.
Signed-off-by: Cristian Iorga <cristian.iorga@intel.com>
(cherry picked from commit fa718d0d2d74893bf8e532a132f8ede26552d2be) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Robert Yang [Tue, 13 Jan 2015 03:08:51 +0000 (19:08 -0800)]
connman: fix B != S
And bump the PR to avoid:
configure: error: source directory already configured; run "make distclean" there first
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
(cherry picked from commit 38aa1ef57392fcb726fcdd0b708b9d76f0279c77) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Cristian Iorga [Fri, 31 Oct 2014 17:44:26 +0000 (19:44 +0200)]
connman: upgrade to 1.26
- WiFi P2P support in ConnMan has been significantly improved;
- Applications can now register WiFi Display, UPnP or Bonjour P2P services;
- Various bug fixes.
Signed-off-by: Cristian Iorga <cristian.iorga@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 3aad6d51a303d0330205eebfeac58c2ccb612e77) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Cristian Iorga [Wed, 27 Aug 2014 18:10:01 +0000 (21:10 +0300)]
connman: upgrade to 1.25
build-libppp-plugin-without-versioning-info.patch
no longer needed, removed.
Changelog:
Fix issue with handling rebind timer for DHCPv6.
Fix issue with handling DHCP renew transaction.
Fix issue with user supplied proxy settings and DHCP.
Fix issue with extra status codes from captive portals.
Fix issue with service idle state reset on failure.
Fix issue with DNS label compression handling.
Add support for experimental P2P Peer service.
Signed-off-by: Cristian Iorga <cristian.iorga@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit f53c5e7914ea37338817fcb7efbd42414045e07c) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Contains just enough to mount and unmount nfs volumes, i.e.
the same as nfs-utils-client before commit 39bb7e3 ("nfs-utils:
separate package as Debain style").
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
update-rc.d.bbclass: ignore initscript in prerm and preinst when systemd is active
In hybrid systemd/sysvinit builds, if the recipe inherits systemd and systemd
is installed, we can safely assume that the service gets stopped by the prerm
script fragment from systemd.bbclass. This fixes deinstallation of packages
with initscripts returning errors when no running service was found. The preinst
shouldn't run the initscript either, because postinst will call systemctl restart.
This works by running 'systemctl is-enabled <initscript>', which outputs the current
enable status, if the script name is handled by systemd, either because it's masked
or because a systemd unit exists with that name. Otherwise, or if systemctl doesn't
exist, no output is generated.
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
With OE's long build paths, __FILE__ can get annoyingly long and makes
it hard to read debug output of some programs, e.g. lighttpd. So reduce
it to the filename and let's hope nothing breaks.
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
package.bbclass: Add SYSTEMD_SERVICE to list of package specific variables
Changes to SYSTEMD_SERVICE should change the sstate checksum. To make that
happen, it needs to be listed in the list of package specific variables,
therefore add it.
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
connman: Simplify and fix packaging of VPN plug-ins
- Use simple static packaging.
- Move VPN runtime dependencies from connman to the individual plug-ins.
- Create a connmann-ppp package containing libppp-plugin.so, which is
a shared library needed by l2tp and pptp plug-ins.
- Let connman suggest VPN packages instead of recommending them, so they
don't get installed by default.
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
The field_end function in libavcodec/h264.c in FFmpeg before 1.1.2
allows remote attackers to have an unspecified impact via crafted H.264
data, related to an SPS and slice mismatch and an out-of-bounds array
access.
Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 464123172c92d92fa08e2125c04653590ad654c7) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
libavcodec/h264.c in FFmpeg before 0.11.4 allows remote attackers to
cause a denial of service (crash) via vectors related to alternating bit
depths in H.264 data.
Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 6a029bee3da097b9ed8c421fcd5ea61cd1a31b34) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Ross Burton [Thu, 16 Oct 2014 16:18:11 +0000 (17:18 +0100)]
openssl: upgrade to 1.0.1j
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 390916b8400a46088c71183aef6e17b947cf4b74) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Ross Burton [Thu, 25 Sep 2014 23:05:18 +0000 (00:05 +0100)]
bash: fix CVE-2014-6271
CVE-2014-6271 aka ShellShock.
"GNU Bash through 4.3 processes trailing strings after function definitions in
the values of environment variables, which allows remote attackers to execute
arbitrary code via a crafted environment."
Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 798d833c9d4bd9ab287fa86b85b4d5f128170ed3) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Richard Purdie [Tue, 23 Sep 2014 19:01:01 +0000 (20:01 +0100)]
layer.conf: Mark opkg-utils as ABISAFE for update-alternatives usage
Currently linux-firmware rebuilds for each machine due to its usage of
update-alternatives which in turn means a dependency on opkg-utils.
Marking opkg-utils as ABISAFE is the only option we have right now
to avoid this.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 6829c0e161c4a8cde6624f211865922fce62d4fa) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Richard Purdie [Tue, 23 Sep 2014 19:00:31 +0000 (20:00 +0100)]
update-rc.d/systemd: Remove OVERRIDES dependency
Taking run-postinsts and building for two machines which have different
OVERRIDES leads to two different sets of stamps for an allarch package.
We don't need to depend on OVERRIDES in these classes, the end resulting
variables are good enough. We can therefore exclude the dependency
and allow a single package to be generated for run-postinsts.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit fdc949154e64afb41dd4db3a97be74a15963128d) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Richard Purdie [Tue, 23 Sep 2014 19:01:28 +0000 (20:01 +0100)]
layer.conf: Add in useradd dependencies as ABISAFE dependencies
Currently allarch recipes using useradd rebuild each time MACHINE
changes which is not desireable. Adding the useradd dependencies
to this list ensures they do not change under these circumstances.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 7743a309017f0fb9286f00b1f6f546ee95c05303) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
libssh2 isn't an oe-core recipe, disable it for now.
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
(cherry picked from commit 0cc59247ece1ea134d060d3ff064b5561972a92b) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Marie Kowalczyk [Fri, 12 Sep 2014 08:54:49 +0000 (10:54 +0200)]
gstreamer1.0-plugins-bad.inc: Add rtmp support in gstreamer.
RTMP feature depends on rtmpdump.
Signed-off-by: Marie Kowalczyk <marie.kowalczyk@vodalys.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 8d3dc353c8857d27957c9db4ced8b2009f2e9b2a) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
The user site-packages gets inserted into sys.path ahead of the
system site directories, so a site package installed there will
be used in preference to what's in our sysroot, causing less
deterministic builds, and potential build breakage, depending
on what the user has installed there. Disable it for our native
python, so they don't affect our builds.
Signed-off-by: Christopher Larson <kergoth@gmail.com> Signed-off-by: Yasir-Khan <yasir_khan@mentor.com> Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit c448bf3629ab5d930ed845d4ba48e37e4a85d2a3) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
libjpeg is automatically linked to if present. This cannot be turned off.
Adding DEPENDS on jpeg ensures that a proper dependency is established.
Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 4c13eced019eac49f047a620994c1b56af5d4951) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
* Replace --disable/enable-gl with the individual EGL, GLES, GL switches
(--disable-gl turns off GL support entirely)
* Put the default opengl packageconfig into its own variable to make it
easier for distros and BSP layers to define what to use (GL, GLES,
or neither)
* Add libglu as a dependency for desktop GL
* Patch configure.ac to ensure libraries are only searched and linked to
if the corresponding API isn't disabled (this prevents cases where
libgstgl is linked to GLU even though desktop GL is dis- and GLES
enabled)
Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 7bf062f2e2b92c2401fa2386b6281aae023b21a8) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
libpng is automatically linked to if present. This cannot be turned off.
Adding DEPENDS on libpng ensures that a proper dependency is established.
Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 413d5665cedd740125862e5eec5ca1f3b38b8363) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
gstreamer1.0-omx: Add DEPENDS on gstreamer1.0-plugins-bad
gst-omx links to libgstgl if it is present, and libgstgl is built by
gstreamer1.0-plugins-bad. Adding it as a DEPENDS ensures a proper
dependency is established.
Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a9790695e207ef989a691d97658d63b022144c7c) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
gstreamer1.0-plugins-bad: add opencv haar cascade XML files to package
Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit fbd886eff693135bcd9fbe62cfd37f255798ca78) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Muzaffar Mahmood [Mon, 25 Aug 2014 11:51:06 +0000 (16:51 +0500)]
libtiff: fix CVE-2013-1961
Integrate community fix for the issue CVE-2013-1961
and migrated to version 4.0.3.
Stack-based buffer overflow in the t2p_write_pdf_page function
in tiff2pdf in libtiff before 4.0.3 allows remote attackers to
cause a denial of service (application crash) via a crafted
image length and resolution in a TIFF image file.
Signed-off-by: Priyanka Shobhan <priyanka_shobhan@mentor.com> Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Muzaffar Mahmood <muzaffar_mahmood@mentor.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit f24e3456c60951d2985d7c23bdcc1f8c15d6c167) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Khem Raj [Mon, 25 Aug 2014 23:45:01 +0000 (16:45 -0700)]
openssl: Re-add linux-uclibc tuple
With last restructuring for musl, some of uclibc targets got ignored
fsl/ppc and ARM worked ok since they use special target triplets which
were already considered but other like mips, x86 and so on failed
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 63ab0ce2103bcf3a42ce5812a22409779126e114) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Li Wang [Tue, 26 Aug 2014 08:33:24 +0000 (16:33 +0800)]
nss: CVE-2014-1544
the patch comes from:
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-1544
https://hg.mozilla.org/projects/nss/rev/204f22c527f8
author Robert Relyea <rrelyea@redhat.com>
https://bugzilla.mozilla.org/show_bug.cgi?id=963150
Bug 963150: Add nssCertificate_AddRef and nssCertificate_Destroy calls
to PK11_ImportCert to prevent nssTrustDomain_AddCertsToCache from
freeing the CERTCertificate associated with the NSSCertificate. r=wtc.
Signed-off-by: Li Wang <li.wang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 7ef613c7f4b9e4ff153766f31dae81fc4810c0df) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Richard Purdie [Tue, 19 Aug 2014 12:38:34 +0000 (13:38 +0100)]
sstatesig: Only squash dependencies for allarch packagegroups
The idea of squashing packagegroup dependencies was to avoid allarch
packages rebuilding upon tune/arch changes. Now that the allarch class
inclusion is conditional, we can narrow down the packagegroup squashing
to be specifically applied to allarch recipes.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit bd8018792155ae842952432900c8431feeaffe30) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Martin Jansa [Fri, 8 Aug 2014 13:57:52 +0000 (15:57 +0200)]
gst-ffmpeg: add PACKAGECONFIG for libav9 and patch from Gentoo
* apply the patch only when PACKAGECONFIG is selected, because the changes
aren't backwards compatible
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 7324d7deb18b81943100bc35301b0c4aa22dc404) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 466268fc86c3a08fab0ba45243c32bfaad613a96) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>