Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit cc47bec99794c1ac7ad3cb16c3c087f659f10d7f) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Maciej Borzecki [Mon, 8 Aug 2016 08:11:24 +0000 (10:11 +0200)]
ca-certificates: remove -- separator
Options and directory separator -- slipped past the patch removing
Debianims, thus resulting in failures on hosts running Fedora.
Signed-off-by: Maciej Borzecki <maciej.borzecki@rndity.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit a8431689983f5860173548acd899e6806906e4d1) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Paul Eggleton [Thu, 2 Jun 2016 20:22:46 +0000 (08:22 +1200)]
ca-certificates: add dependency for native/nativesdk on openssl-native
When running update-ca-certificates on the build host, as we do during
do_install for ca-certificates-native (and nativesdk-ca-certificates),
as of OE-Core commit cea46e7b8d9463306779301fa97f651d750f380f we now
need openssl-native so it can run c_rehash.
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 523c99a2f12c20ce7bfa7755609f2c860dda6717) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Otavio Salvador [Fri, 27 May 2016 10:28:31 +0000 (07:28 -0300)]
ca-certificates: Add openssl as a runtime dependency
The update-ca-certificates script uses the c_rehash utility which is
installed by openssl. Add openssl as a runtime dependency to fulfill
the utility requirement.
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit a90ba07812444ebac93cd535d11dd54994897bfd) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Otavio Salvador [Mon, 23 May 2016 20:45:26 +0000 (17:45 -0300)]
ca-certificates: Use c_rehash utility
As now the c_rehash utility is available, we can use it. This removes
the patch to disable its usage allowing for a standard SSL behaviour.
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit cea46e7b8d9463306779301fa97f651d750f380f) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Max Krummenacher [Mon, 14 Nov 2016 19:35:40 +0000 (20:35 +0100)]
systemd: systemd should not depend on systemd-container
Currently systemd depends on systemd-container due to a dangling
symlink deployed with systemd.
Move the symlink to systemd-container.
| DEBUG: systemd contains dangling link /lib/systemd/system/systemd-machined.service
| DEBUG: target found in systemd-container
Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit e12912ac7484654c201d167831b302a821e14972) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Chen Qi [Wed, 26 Oct 2016 06:09:47 +0000 (14:09 +0800)]
systemd: CVE-2016-7795
The manager_invoke_notify_message function in systemd 231 and earlier allows
local users to cause a denial of service (assertion failure and PID 1 hang)
via a zero-length message received over a notify socket.
The patch is a backport from the latest git repo.
Please see the link below for more information.
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7795
Robert Yang [Thu, 21 Jul 2016 03:35:53 +0000 (20:35 -0700)]
systemd: install udev.pc
It provides udev, but doesn't install udev.pc, which causes other
recipes failed to figure out udevdir.
Fixed when systemd in DISTRO_FEATURES:
$ bitbake pcmciautils (or btrfs-tools):
Package udev was not found in the pkg-config search path.
Perhaps you should add the directory containing `udev.pc'
to the PKG_CONFIG_PATH environment variable
No package 'udev' found
Their udev rules file may not be installed according to each pkg's
implementation.
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
(cherry picked from commit a32dac24808bf8621fdbbecb654eff784acee47e) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Maciej Borzecki [Wed, 21 Sep 2016 08:19:58 +0000 (10:19 +0200)]
systemd: fix indentation
Signed-off-by: Maciej Borzecki <maciej.borzecki@rndity.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 170157602932aa454e721ea849fbf1679b573618) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
(cherry picked from commit 3fa84900b0a008993dfbf0d5af12416f4bc3980f) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
systemd_230.bb: Set journal RuntimeMaxSize to 64M as default
At this time systemd journald uses the /run tmpfs to store logs
by default systemd uses 15% of available space [1] of the /run
partition, when the space runs out journald starts to vaccum/store
the logs into /var/log [1].
It causes two problems one of them is timeout dev-ttySN.device's
when enable debug and use journal as systemd.log_target [2] the other
is related to don't find syslog entries into the journal log [3].
This problems are now more evident because i recently enabled the
systemd debug option in testimage [4].
One area of improvement will be add support in systemd journald to
read these parameters from the kernel cmdline like systemd.log_target,
if the support exists we could add that parameter at level of testimage.
Chen Qi [Fri, 19 Aug 2016 02:24:11 +0000 (10:24 +0800)]
systemd: split systemd-container
Split container/vm related units into a new package, systemd-container.
The split mainly references Fedora 24, with a few differences.
Apart from the bash and zsh completion files, the differences include
adding systemd-spawn@.service into the systemd-container package.
[YOCTO #9835]
Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 2a4bf6e4c96a8104733add315166210f04c02caf) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Joe Slater [Mon, 22 Aug 2016 22:12:31 +0000 (15:12 -0700)]
systemd-compat-units: do not inherit allarch
Even though we are just a script, we do depend on
systemd being on the target and need an RDEPENDS
which means we cannot also be allarch.
Signed-off-by: Joe Slater <jslater@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit ef5be3c8256419d5abec566ce266718fe317417e) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Richard Purdie [Thu, 18 Aug 2016 13:43:57 +0000 (14:43 +0100)]
systemd-compat-units: Only enable for systemd in DISTRO_FEATURES
This recipe only makes sense when systemd is enabled and otherwise causes
world build failures.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 5dca6cc2fcdb2799c19b1697f0647a16ce296290) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Joe Slater [Mon, 15 Aug 2016 23:04:53 +0000 (16:04 -0700)]
systemd-compat-units: pkg_postinst() does not work
The test for various files is wrong and will always be
true, even if init.d does not exist.
Exit if init.d does not exist, and correctly test for
file existence otherwise.
Signed-off-by: Joe Slater <jslater@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 8183309080aee45746daaff46b0506b09b5bd269) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Dmitry Rozhkov [Wed, 10 Aug 2016 09:47:56 +0000 (12:47 +0300)]
systemd: fix typo in avoid-using-system-auth.patch
The patch 0015-systemd-user-avoid-using-system-auth.patch
makes PAM session for systemd-user include common-account file
which doesn't contain any session related lines and that breaks
launching "systemd --user" with the error:
Jul 29 13:03:24 intel-corei7-64 systemd[691]: user@0.service: Failed
at step PAM spawning /lib/systemd/systemd: Operation not permitted
This change fixes the patch by including common-session file
instead.
Signed-off-by: Dmitry Rozhkov <dmitry.rozhkov@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit ecff74ab68ffca27ed856be6117124b8bc1ef2d6) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Python tests are not actually used, because systemd is configured
using --without-python
Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit acea8caa0ce4f8fd1a0d33c01c12d4b5a81508d8) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Roy Li [Tue, 10 May 2016 02:09:33 +0000 (10:09 +0800)]
systemd: re-enable mount propagation for udevd
With MountFlags=slave, those mounts then become private to the systemd-udevd
namespace and are no longer accessible from outside the namespace, which is
not expected
Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
(cherry picked from commit 73f43d857fe0102033f25491007b6dbe3d5fa8ee) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
libc-package.bbclass: split binary localedata even more if asked to
If GLIBC_SPLIT_LC_PACKAGES is set to a non-zero value, convert
glibc-binary-localedata-XX-YY to be a meta package depending on
glibc-binary-localedata-XX-YY-lc-address and so on. This enables
saving quite some space if someone doesn't need LC_COLLATE for
example.
Some regex code was removed from output_locale_binary_rdepends,
because legitimize_package_name already converts to lowercase.
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Busybox may offer a bash applet. If enabled, the alternatives mechanism
avoids breaking logins if bash gets deinstalled while /bin/bash is configured
as a login shell.
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Contains just enough to mount and unmount nfs volumes, i.e.
the same as nfs-utils-client before commit 39bb7e3 ("nfs-utils:
separate package as Debain style").
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
update-rc.d: ignore initscript in prerm and preinst when systemd is active
In hybrid systemd/sysvinit builds, if the recipe inherits systemd and systemd
is installed, we can safely assume that the service gets stopped by the prerm
script fragment from systemd.bbclass. This fixes deinstallation of packages
with initscripts returning errors when no running service was found. The preinst
shouldn't run the initscript either, because postinst will call systemctl restart.
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
connman: Simplify and fix packaging of VPN plug-ins
- Use simple static packaging.
- Move VPN runtime dependencies from connman to the individual plug-ins.
- Create a connmann-ppp package containing libppp-plugin.so, which is
a shared library needed by l2tp and pptp plug-ins.
- Let connman suggest VPN packages instead of recommending them, so they
don't get installed by default.
- Remove unknown configure options (--with-pptp --with-l2tp)
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
projects / thirdparty / openembedded / openembedded-core-contrib.git / log
