systemd and polkit are not directly related. It is just fine to build
with systemd but without polkit. Rename the systemd package config
to polkit and enable it depending on whether polkit is enabled in
DISTRO_FEATURES.
Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Currently polkit is enabled if systemd is in package config. Those
two things are orthogonal: NetworkManager can be used with systemd
and without polkit just fine.
Introduce a new polkit package config and enable it depending on
whether polkit is in DISTRO_FEATURES.
Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Make sure polkit is in DISTRO_FEATURERS if this package is being
installed. This will make sure that people who do use polkit in
their image also do enabled the recently introduced distro feature
polkit in their distro.
Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
As per Debian packaging - to use it, see
https://wiki.debian.org/Nginx/DirectoryStructure#Extra_Parameters
This file is most commonly included when Nginx is acting
as a reverse proxy:
include /etc/nginx/proxy_params;
proxy_pass http://localhost:8000;
Signed-off-by: André Draszik <andre.draszik@jci.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Restructure the main configuration file to simplify custom configuration:
* support inclusion of configuration fragments from subdirectories:
- /etc/nginx/modules-enabled/*.conf
- /etc/nginx/conf.d/*.conf
- /etc/nginx/sites-enabled/*
* default site (port 80):
- move into /etc/nginx/sites-available/default_server
and enable via symlink in /etc/nginx/sites-enabled/
- listen on IPv6
- drop unneeded example fragments
* configure and enable gzip
* update TLS settings to drop SSLv3 and enable TLSv1.3 for some safer
defaults
* update remaining bits to follow Debian standard configuration
62a54a8ba6/debian/conf/nginx.conf
* drop unneeded example configuration bits from /etc/nginx/*.default
These changes, in particular the configuration fragment
support allow to easily customise nginx based on individual
requirements.
In addition, it is now possible for other recipes / packages
to drop fragments into the respective directories in /etc/nginx
without having to meddle with /etc/nginx/nginx.conf
Signed-off-by: André Draszik <andre.draszik@jci.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Our systemd unit doesn't follow the official
recommendation, see
https://www.nginx.com/resources/wiki/start/topics/examples/systemd/
Most importantly:
* it should start after some additional specific
targets/units
* using PrivateTmp is a useful security feature, in
particular to avoid cross domain scripting via the
temp folder
* using systemd's $MAINPID, we can distinguish between
multiple running nginx instances correctly
Signed-off-by: André Draszik <andre.draszik@jci.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
RocksDB is still using CMake 2.8 and thus does not make use of importet targets.
This leads to hardcoded paths to the build directory in the resulting packaged files.
The workaround for the issue is to bypass CMakes detection and let the linker deal with finding the right library.
This is necessary until RocksDB moves to a more modern CMake.
It's also applied in the Poco recipe right now.
Signed-off-by: Pascal Bach <pascal.bach@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
1.Mv is used in the original code, which may cause "mv: cannot stat 'conf/': No such file or directory".
So we use cp instead of it.
Signed-off-by: Hong Liu <hongl.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
pyinotify depends on having asyncore.py available which is provided by
python2/3-smtpd.
Signed-off-by: Ioan-Adrian Ratiu <adrian.ratiu@ni.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The ATI drivers can work on non-x86 platforms such as RISC-V, remove the
x86 specific COMPATIBLE_MACHINE requirement.
Signed-off-by: Alistair Francis <alistair.francis@wdc.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Fallout caused by API change should be fixed in all recipes depending
fluidsynth. To make this happen I sent out patches to many projects during
last autumn.
* Add PACKAGECONFIG for profiling (disabled by default).
* ARM-NEON-patch was reworked and profiling runs were performed with and
without the patch. See patch description for profiling results.
* We need to split tool to generate parameter tables to native. Since target
and native builds do not share much in common we don't use BBCALLSEXTEND
* Add patch which allows clients to reduce useless copies of buffers.
Fluidsynth-DSSI (in meta-qt5-extra currently) is going to make use of this.
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Older versions of postgresql would generate MAJVER.MINVER in new clusters. 10+ do not. Update the regex to determine PGMAJORVERSION as a single int.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
cli11 is a c++ command line parser library that provides a simple
user interface with modern c++ semantics.
Signed-off-by: William A. Kennington III <wak@google.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Remove obsolete workarounds and improve the workarounds that remain.
For example, it hasn't been necessary to set ac_cv_linux_vers since
tcpdump 4.6.0:
a42fc6e764
Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The python-cryptography package is in fact not depending on
python-pycparser.
Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
anonscm.debian.org has been replaced with https://salsa.debian.org
however, lockdev has been dropped from debian packages, so its not
maintained at salsa.debian.org, therefore resort to archives and add few
more fixes to get it building from archive.
bump PE since version still remains 1.0.3 but we drop +git${...} from PV
Signed-off-by: Khem Raj <raj.khem@gmail.com>
A couple have still been missed in the past despite multiple
attempts at doing so (or simply have re-appeared?).
Search & replace made using the following command:
sed -e 's|\(d\.getVar \?\)( \?\([^,()]*\), \?True)|\1(\2)|g' \
-i $(git grep -E 'getVar ?\( ?([^,()]*), ?True\)' \
| cut -d':' -f1 \
| sort -u)
Signed-off-by: André Draszik <andre.draszik@jci.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
A couple have still been missed in the past despite multiple
attempts at doing so (or simply have re-appeared?).
Search & replace made using the following command:
sed -e 's|\(d\.getVar \?\)( \?\([^,()]*\), \?True)|\1(\2)|g' \
-i $(git grep -E 'getVar ?\( ?([^,()]*), ?True\)' \
| cut -d':' -f1 \
| sort -u)
Signed-off-by: André Draszik <andre.draszik@jci.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
A couple have still been missed in the past despite multiple
attempts at doing so (or simply have re-appeared?).
Search & replace made using the following command:
sed -e 's|\(d\.getVar \?\)( \?\([^,()]*\), \?True)|\1(\2)|g' \
-i $(git grep -E 'getVar ?\( ?([^,()]*), ?True\)' \
| cut -d':' -f1 \
| sort -u)
Signed-off-by: André Draszik <andre.draszik@jci.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
includes:
wnpa-sec-2019-01 The 6LoWPAN dissector could crash. Bug 15217. CVE-2019-5716.
wnpa-sec-2019-02 The P_MUL dissector could crash. Bug 15337. CVE-2019-5717.
wnpa-sec-2019-03 The RTSE dissector and other dissectors could crash. Bug 15373. CVE-2019-5718.
wnpa-sec-2019-04 The ISAKMP dissector could crash. Bug 15374. CVE-2019-5719.
For more info see: https://www.wireshark.org/docs/relnotes/wireshark-2.6.6.html
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Previously it was built with native perl headers, which was okay
with perl 5.24, but not with perl 5.28.
Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Previously perl-native headers were erroneously included,
which was causing issues with the new perl recipe.
Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Remove the useless checksum lines as the
source is git repo, not the tar file.
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
- Drop upstreamed patch
- Update COPYING file checksum: the copyright date changes
and there is a convertion to SPDX Format.
Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
guider [1] is a system-wide performance analyzer for platforms based
on linux kernel. It can measure a variety of system resource usage and
trace thread/process activities. It also reports vary meaningful
output to analyze system status.
[1] https://github.com/iipeace/guider
Signed-off-by: Peace Lee <iipeace5@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Don't use ${PN} for the source dir, it will break multilib builds.
The correct variable is ${BPN}.
Cc: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Weinberger <richard@nod.at>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Don't use ${PN} for the source dir, it will break multilib builds.
The correct variable is ${BPN}.
Cc: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Weinberger <richard@nod.at>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Don't use ${PN} for the source dir, it will break multilib builds.
The correct variable is ${BPN}.
Cc: Andreas Müller <schnitzeltony@googlemail.com>
Signed-off-by: Richard Weinberger <richard@nod.at>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Don't use ${PN} for the source dir, it will break multilib builds.
The correct variable is ${BPN}.
The bitbake defaults are:
BP = "${BPN}-${PV}"
S = "${WORKDIR}/${BP}"
Therefore we can remove this line.
Cc: Andreas Müller <schnitzeltony@googlemail.com>
Signed-off-by: Richard Weinberger <richard@nod.at>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Don't use ${PN} for the source dir, it will break multilib builds.
The correct variable is ${BPN}.
The bitbake defaults are:
BP = "${BPN}-${PV}"
S = "${WORKDIR}/${BP}"
Therefore we can remove this line.
Cc: Andreas Müller <schnitzeltony@googlemail.com>
Signed-off-by: Richard Weinberger <richard@nod.at>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
