Commit Graph

401 Commits

Author SHA1 Message Date
Kai Kang
3d563139b0 polarssl: add dependency openssl
polarssl compiles with openssl to build unit test cases. If openssl
doesn't exist, native libssl.so will be used. Then causes error:

| .../bitbake_build/tmp/sysroots/x86_64-linux/usr/lib/libssl.so: error adding symbols: File in wrong format

Add dependency openssl for polarssl to fix it.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-26 17:45:46 -08:00
Armin Kuster
f6faa7b431 wireshark: update to 1.12.2
The following vulnerabilities have been fixed.
* wnpa-sec-2014-20
  SigComp UDVM buffer overflow. (Bug 10662)
  CVE-2014-8710
* wnpa-sec-2014-21
  AMQP crash. (Bug 10582)
  CVE-2014-8711
* wnpa-sec-2014-22
  NCP crashes. (Bug 10552, Bug 10628)
  CVE-2014-8712, CVE-2014-8713
* wnpa-sec-2014-23
  TN5250 infinite loops. (Bug 10596)
  CVE-2014-8714

Reference:
https://www.wireshark.org/docs/relnotes/wireshark-1.12.2.html

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-01 14:24:53 +01:00
Roy Li
2b6d61791f net-snmp: fix for Security Advisory - CVE-2014-3565
snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used,
allows remote attackers to cause a denial of service (snmptrapd crash) via
a crafted SNMP trap message, which triggers a conversion to the variable
type designated in the MIB file, as demonstrated by a NULL type in an ifMtu
trap message.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3565

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-12-01 14:24:50 +01:00
Ben Shelton
9efaed9912 openvpn: bypass check for /sbin/ip on the host
In the commit 'openvpn: use default iproute2 path', the configure flag
to explicitly set the iproute2 path was removed, since busybox now
provides the 'ip' applet at the default path.  However, setting this
flag is necessary to bypass the configure-time check for /sbin/ip on the
host, which will otherwise fail if iproute2 is not installed on the
host.  Add back the flag (pointing to the correct path), and add a
comment to describe why this is necessary.

Signed-off-by: Ben Shelton <ben.shelton@ni.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-10-30 09:15:31 +01:00
Armin Kuster
3f7b49d039 update maintainer info in README's for dizzy
* This is the first time meta-python is being taged with a release

Acked-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-10-30 09:07:58 +01:00
Roy.Li
e3f2ac1d1b inetutils: inherit texinfo
inherit texinfo to use native command instead of host command

Signed-off-by: Roy.Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-10-30 09:00:09 +01:00
Chong.Lu@windriver.com
d47b4c7ca0 squid: Add a PACKAGECONFIG for libnetfilter-conntrack
This solves the following warning:

WARNING: QA Issue: squid rdepends on libnetfilter-conntrack, but it isn't a
build dependency? [build-deps]

Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-10-30 08:59:31 +01:00
Hongjun.Yang
9088088006 tcpdump: Add ptest
Add ptest supports for tcpdump

Signed-off-by: Hongjun.Yang <hongjun.yang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-10-30 08:59:31 +01:00
Chen Qi
350139ba63 radvd: fix daemon start-up
1. Fix radvd.service to start daemon correctly.
2. Make the daemon run under 'radvd' user by default.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-10-21 15:07:12 -04:00
Jackie Huang
d63401ea24 wireshark: add PACKAGECONFIG for krb5
* fixes floating dependency:
WARNING: QA Issue: wireshark rdepends on krb5, but it isn't a build dependency? [build-deps]

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-10-21 15:07:12 -04:00
Wenzong Fan
273ae8399e ntp: add status for initscript
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-10-21 15:07:12 -04:00
Jackie Huang
c78397ecdf net-snmp: add ac_cv_header_valgrind_* to CACHED_CONFIGUREVARS
There have been occasions that net-snmp sees valgrind and then later it's
not available, adding this setting ensures determinism by disabling it by
default

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-10-21 15:07:12 -04:00
Roy.Li
4cc73f63aa tftp-hpa: fix the empty file writing error
make write_behind to return 0 if a empty file is written, to
distinguish a true writing failure[on which the write_behind
will return -1], then the annoying wrong log will disappear.
    ____
    |Error code 3: Disk full or allocation exceeded
    -----
Signed-off-by: Roy.Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-10-21 14:54:11 -04:00
Roy.Li
15ccbddc6d Revert "tftp-hpa: bug fix on empty file put error"
This reverts commit b2eb21a5fbcb065e84ed582e87de21bdc3082f00.

It make 3d8520a0b411[tftp-hpa: add error check for disk filled up]
unable to work

Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-10-21 14:54:11 -04:00
Eduardo Silva
4851bb16c3 PolarSSL: update package description
Signed-off-by: Eduardo Silva <eduardo@monkey.io>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-10-21 14:44:45 -04:00
Kang Kai
1ecd7bbba8 postfix: remove overriding config config_directory
postfix 2.11.1 adds overriding config check. In postinstall script, it
calls command newaliases to read configure file main.cf_2.0.
config_directory is set in config main.cf_2.0, but it is an overriding
config and warning shows when build an image:

WARNING: log_check: There is a warn message in the logfile
WARNING: log_check: Matched keyword: [warn]
WARNING: log_check: newaliases: warning:
/buildarea3/kkang/poky/qemuarm-build/tmp/work/qemuarm-poky-linux-gnueabi/core-
image-minimal/1.0-r0/rootfs/etc/postfix/main.cf, line 27: overriding
earlier entry: config_directory=/buildarea3/kkang/
poky/qemuarm-build/tmp/work/qemuarm-poky-linux-gnueabi/core-image-minimal/1.0-r0/rootfs/etc/postfix

Remove config_directory setting in main.cf_2.0 to avoid this warning.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-10-21 14:33:03 -04:00
Chong.Lu@windriver.com
d6f4b66e3f quagga: remove watchquagga when start with systemd
When we start with sysvinit, watchquagga uses quagga init script to
monitor zebra daemon. But we need not do this in systemd environment.

Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-10-21 14:23:25 -04:00
Chen Qi
fd7b22c3f5 ebtables: fix for sysvinit and systemd
The solution mainly references Fedora20.
Extract the common part of the code and install it into ${sbindir}.
Add systemd service file.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-10-21 14:02:14 -04:00
Jackie Huang
b310b1daf8 squid: add new recipe
squid is a fully-featured http proxy and web-cache daemon for Linux.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-10-16 07:00:59 +02:00
Wenzong Fan
6814131578 ntp: fix path to drift file
The default path of ntp drift file is /etc/ntp.drift, ntp daemon
maybe fails to create this file since the user ntp is not always
permitted to write /etc.

Refer to other distributions such as RedHat, Debian, just moving
the file to /var/lib/ntp which the home dir of user ntp.

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-10-14 11:48:58 +02:00
Peter Bigot
657b3642c4 ntp: create and package ntp home directory
This allows the base recipe and bbappends to reference persistent
mutable state such as a drift file.

Signed-off-by: Peter A. Bigot <pab@pabigot.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-10-14 11:48:58 +02:00
pieterg
1cd3c1a945 openvpn: use default iproute2 path
Since busybox 1.21, the 'ip' applet has the default
path (/sbin/ip)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-10-10 12:47:34 +02:00
Eduardo Silva
bde313a105 PolarSSL: new recipe for polarssl v1.3.8
PolarSSL is a lightweight crypto and SSL/TLS library with a strong
focus on embedded systems.

Signed-off-by: Eduardo Silva <eduardo@monkey.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-10-06 01:07:52 +02:00
Chong.Lu@windriver.com
07e13c6b94 quagga: add systemd service file
Add systemd service for quagga.

Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-10-04 00:30:29 +02:00
Chong.Lu@windriver.com
a97b89e72f quagga: add subpkgs to RDEPENDS
We need subpkgs to start quagga, so add them to RDEPENDS.

Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-10-04 00:30:29 +02:00
Chen Qi
3efc0c1974 vsftpd: add systemd service file
Add systemd service for vsftpd.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-10-04 00:28:31 +02:00
Chen Qi
fd7973168a vsftpd: fix pkg_postinst
Fix pkg_postinst to not exit if "$D" is not empty.
Otherwise, postinsts from update-rc.d.bbclass would not run and the
symlinks under /etc/rc?.d/ would not be created.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-10-04 00:28:31 +02:00
Roy Li
9ff0361317 iscsi-initiator-utils: add recipe file
The package provides the server daemon for the iSCSI protocol, as
well as the utility programs used to manage it. iSCSI is a protocol
for distributed disk access using SCSI commands sent over Internet
Protocol networks

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-09-26 05:42:54 +02:00
Chen Qi
da6908e1d3 radvd: add systemd service file
Add systemd service for for radvd.
The unit is disabled by default, just as Fedora20 does.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-09-26 05:42:53 +02:00
YangHaibo
061e952c67 ssmping: add recipe for ssmping-0.9.1
Signed-off-by: YangHaibo <b40869@freescale.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-09-26 05:42:53 +02:00
zhangxiao
ed698c4dba tftp-hpa: bug fix on empty file put error
With the feature that checking the disk filled up, the return value of
function write_behind was checked and used to detect the disk status.
While for empty file, without data being written, this function will
return -1 thus the disk filled up error was miss-raised. Fix it.

Signed-off-by: Zhang Xiao <xiao.zhang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-09-26 05:41:54 +02:00
Hongxu Jia
af971abbf0 proftpd: fix integer overflow CVE-2013-4359
Integrate a patch from proftpd upstream to fix an integer overflow bug
described in the CVE-2013-4359, which allows remote attachers to cause
a denial of service (memory consumption) attack.

Refer: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4359

Signed-off-by: Shan Hai <shan.hai@windriver.com>

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-09-26 05:41:52 +02:00
Robert Yang
1443c68987 memcached: add bash to RDEPENDS_memcached
Bashism:
possible bashism in memcached/etc/init.d/memcached line 40 (bash arrays, ${name[0|*|@]}):
if [ -r "${FILES[0]}" ]; then
possible bashism in memcached/etc/init.d/memcached line 42 (bash arrays, ${name[0|*|@]}):
  for FILE in "${FILES[@]}";
possible bashism in memcached/etc/init.d/memcached line 53 (should be VAR="${VAR}foo"):
      CONFIGS+=($NAME)
possible bashism in memcached/etc/init.d/memcached line 54 (should be 'b = a'):
    elif [ "memcached_$2" == "$NAME" ];
possible bashism in memcached/etc/init.d/memcached line 62 (bash arrays, ${name[0|*|@]}):
  if [ ${#CONFIGS[@]} == 0 ];
possible bashism in memcached/etc/init.d/memcached line 71 (bash arrays, ${name[0|*|@]}):
CONFIG_NUM=${#CONFIGS[@]}
possible bashism in memcached/etc/init.d/memcached line 72 ('((' should be '$(('):
for ((i=0; i < $CONFIG_NUM; i++)); do
possible bashism in memcached/etc/init.d/memcached line 73 (bash arrays, ${name[0|*|@]}):
  NAME=${CONFIGS[${i}]}

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
2014-09-26 05:41:51 +02:00
Robert Yang
57b9899fcb proftpd: add perl to RDEPENDS_proftpd
Perl:
proftpd/usr/bin/ftpasswd:#!/usr/bin/perl
proftpd/usr/bin/ftpquota:#!/usr/bin/perl

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
2014-09-26 05:41:51 +02:00
Robert Yang
2ddc60b4d8 stunnel: add perl to RDEPENDS_stunnel
Perl:
stunnel/usr/bin/stunnel3:#!/usr/bin/perl

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
2014-09-26 05:41:51 +02:00
Robert Yang
e018cb345a ndisc6: add perl to RDEPENDS_ndisc6-misc
Perl:
ndisc6-misc/usr/bin/dnssort:#! /usr/bin/perl

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
2014-09-26 05:41:51 +02:00
Robert Yang
d041cc7bcc arptables: remove bashism
Bashism:
possible bashism in arptables/etc/init.d/arptables line 14 (should be '.', not 'source'):
source /etc/init.d/functions
possible bashism in arptables/etc/init.d/arptables line 96 ($"foo" should be eval_gettext "foo"):
        echo $"Usage $0 {start|stop|restart|condrestart|save|status}"

Use "." to replace of "source", and change /bin/bash to /bin/sh, the
echo $"foo" works well in our busybox.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
2014-09-26 05:41:50 +02:00
Robert Yang
5b17d7cf94 autofs: remove bashism
The autofs.init can work with /bin/sh in busybox, so remove bashsim.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
2014-09-26 05:41:50 +02:00
Robert Yang
7d6091297f aoetools: no bashism in aoe-stat
So use /bin/sh.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
2014-09-26 05:41:50 +02:00
Joe Slater
e997f028f7 radvd: update to 1.14
No changes except to source version.

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-09-23 22:00:14 -04:00
YangHaibo
0d130d71c4 pimd: add recipe for pimd-2.1.8
Signed-off-by: YangHaibo <b40869@freescale.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-09-23 22:00:10 -04:00
Roy.Li
bb62e5fd88 wireshark: not put the CC options into CFLAGS_FOR_BUILD
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-09-23 22:00:07 -04:00
Armin Kuster
1fbaf1ca73 wireshark: update to 12.1
following security fixes included:
MEGACO dissector infinite loop. (Bug 10333) CVE-2014-6423
Netflow dissector crash. (Bug 10370) CVE-2014-6424
CUPS dissector crash. (Bug 10353) CVE-2014-6425
HIP dissector infinite loop. CVE-2014-6426
RTSP dissector crash. (Bug 10381) CVE-2014-6427
SES dissector crash. (Bug 10454) CVE-2014-6428
Sniffer file parser crash. (Bug 10461) CVE-2014-6429 CVE-2014-6430 CVE-2014-6431 CVE-2014-6432

re-org'd dd file to be more in-line with style guide.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-09-23 22:00:01 -04:00
Joe Slater
2fab4b8902 vftpd: update to version 3.0.2
No changes other than source checksum.

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-09-23 21:59:56 -04:00
Joe Slater
f2715a5652 ptpd: update to version 2.3.1-rc2
Add a little processing to find correct directory
for source upstream.

Update LIC_FILES_CHKSUM since the latest package
doesn't include a COPYRIGHT file anymore.

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-09-23 21:59:42 -04:00
Roy Li
28e26a9b0a tcpslice: add recipe under tcpdump
tcpslice is a tool for extracting parts of a tcpdump packet trace,
so put it under tcpdump dir

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-09-09 10:32:51 -04:00
Joe MacDonald
d6929e3019 dnsmasq: uprev it to 2.71
Refreshed lua.patch due to whitespace changes in top-level Makefile.

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-09-09 10:32:01 -04:00
Jackie Huang
f9b71625e4 ipsec-tools: Fix pfkey UPDATE failure caused by EINTR
While kernel is processing the UPDATE message which is sent from racoon,
it maybe interrupted by certain system signal and if this case happens,
kernel responds with an EINTR message to racoon and kernel fails to
establish the corresponding SA.
Fix this problem by resend the UPDATE message when EINTR(Interrupted
system call) error happens.

Signed-off-by: Xufeng Zhang <xufeng.zhang@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-09-09 09:14:59 -04:00
Roy Li
a39f60d812 inetutils: uprev to 1.9.2
1. remove unneeded patches:
 inetutils-1.9.1/disable-pre-ANSI-compilers.patch
 inetutils-1.9.1/remove-gets.patch
2. Update the version from 1.9.1 to 1.9.2 in version.patch
3. remove PR

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-09-08 16:57:27 -04:00
Roy Li
1db575c270 aoetools: uprev to version 36
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-09-08 16:57:27 -04:00