aboutsummaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-filter
AgeCommit message (Collapse)Author
2018-11-12nftables: Upgrade to 0.9.0Alex Kiernan
Drop all the backports as they're upstream Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-12libnftnl: Upgrade to 1.1.1Alex Kiernan
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-19nftables: add dependency on bison-nativeMartin Jansa
* fixes: checking whether yytext is a pointer... no checking for bison... no checking for byacc... no *** Error: No suitable bison/yacc found. *** Please install the 'bison' package. Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-05-29ebtables: add RECIPE_UPSTREAM_VERSIONYi Zhao
Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-05-17recipes: Link with libtirpcKhem Raj
glibc no longer provides rpc implementation Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13libnetfilter-cthelper: refresh patchesArmin Kuster
WARNING: libnetfilter-cthelper-1.0.0-r0 do_patch: Some of the context lines in patches were ignored. This can lead to incorrectly applied patches. The context lines in the patches can be updated with devtool: devtool modify <recipe> devtool finish --force-patch-refresh <recipe> <layer_path> Then the updated patches and the source tree (in devtool's workspace) should be reviewed to make sure the patches apply in the correct place and don't introduce duplicate lines (which can, and does happen when some of the context is ignored). Further information: http://lists.openembedded.org/pipermail/openembedded-core/2018-March/148675.html https://bugzilla.yoctoproject.org/show_bug.cgi?id=10450 Details: Applying patch libnetfilter-cthelper-visibility-hidden.patch patching file doxygen.cfg.in patching file src/internal.h patching file src/libnetfilter_cthelper.c Hunk #2 succeeded at 118 with fuzz 2. Now at patch libnetfilter-cthelper-visibility-hidden.patch Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-06ebtables: Fix duplicate definition errors due to netinet/ether.hKhem Raj
Make the patch musl specific as it is regressing glibc 2.27 Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-04-06ebtables: enable KERNEL_64_USERSPACE_32 for armLi Zhou
On arm64 board, run the kernel as 64bit with 32bit userpace ebtables, then run ebtables command: ebtables -A OUTPUT -p arp -o eth3 -j DROP Below error occurs: kernel msg: ebtables bug: please report to author: Standard target size too big To solve this, enable KERNEL_64_USERSPACE_32 for arm as the commit <ebtables: enable KERNEL_64_USERSPACE_32 for powerpc> do. Use TARGET_ARCH to replace KARCH here because that KARCH can't always get value by default. Signed-off-by: Li Zhou <li.zhou@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-02-05ebtables: Remove bashismsJoshua Watt
Removes the bashism of prefacing shell functions with "function" and renames the clear function to not conflict with the command of the same name. Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-10-16libmnl: Move to oe-coreMark Hatle
Moved to oe-core, remove this version. Signed-off-by: Mark Hatle <mark.hatle@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-10-11ebtables: Add HOMEPAGE info into recipe file.Huang Qiyu
Signed-off-by: Huang Qiyu <huangqy.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-09-08ebtables: replace ebtables-save perl script with bash rewriteAndre McCurdy
Fedora provides a bash replacement for the default ebtables-save perl script. Using it allows the ebtables run-time dependency on perl to be replaced with a runtime dependency on bash - which is lower overhead and more likely to be present on typical embedded systems already. https://bugzilla.redhat.com/show_bug.cgi?id=746040 http://pkgs.fedoraproject.org/cgit/rpms/ebtables.git/tree/ebtables-save Since ebtables-save no longer contains a references to /usr, the previous QA issue workaround of moving it from ${base_sbindir} to ${sbindir} is no longer required. http://git.openembedded.org/meta-openembedded/commit/?id=a7c6fcebee7d9f86c356ea92de445d89e714ff62 Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-08-31recipes: remove blacklisted recipesMartin Jansa
* as PNBLACKLIST message says, these recipes are blacklisted for long time and nobody showed any interest to fix them * remove all unused .patch and .inc files as well Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-06-28nftables: backport a few ICMP & ICMPv6 fixesAndré Draszik
- assign network ctx for ICMP & ICMPv6 - additional ICMPv6 types - allow update of net base w. meta l4proto ipv6-icmp - l4 proto fixes The initial trigger was that ICMPv6 type 143 (mld2-listener-report) wasn't working as expected. Signed-off-by: André Draszik <adraszik@tycoint.com> Acked-by: Sylvain Lemieux <slemieux@tycoint.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25libnetfilter-conntrack: Upgrade to 1.0.6Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25conntrack-tools: Upgrade to 1.4.4Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25libnetfilter-acct: Fix build with clangKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25libnetfilter-queue: Fix symbol visibility bug found with clangKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25libnetfilter-cthelper, libnetfilter-cttimeout: Backport patches to fix ↵Khem Raj
symbol visibility These are needed for building it with clang Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25nftables: Upgrade to 0.7Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25libnftnl: Upgrade to 1.0.7Khem Raj
Fix build with clang while here Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25nfacct: fixed SRC_URI and dropped workdir statementOliver Graute
Signed-off-by: Oliver Graute <oliver.graute@neuhaus.de> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25libnetfilter-queue: Update to git for SRC_URIKhem Raj
brings in the fixes to build on musl Add a typo fix patch Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25libnetfilter-log: Switch to git URIKhem Raj
Move to tip of tree which has needed fixes for musl build add missing dependency on libmnl Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25ebtables: Fix build with muslKhem Raj
Backport upstream fixes and add fixes to make it work with musl Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25libnfnetlink: Backport patches to fix musl buildKhem Raj
There are few upstream patches that are required for getting it working with musl, backport these patches on top of 1.0.1 Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-03-23ebtables: Move files only when src != dst.Amarnath Valluri
While moving files from ${base_sbindir} to ${sbindir} check if both are same. Signed-off-by: Amarnath Valluri <amarnath.valluri@intel.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2016-12-14arno-iptables-firewall: Add recipeKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2016-12-02remove True option to getVar callsJoshua Lock
getVar() now defaults to expanding by default, thus remove the True option from getVar() calls with a regex search and replace. Search made with the following regex: getVar ?\(( ?[^,()]*), True\) Signed-off-by: Joshua Lock <joshua.g.lock@intel.com>
2016-11-14libmnl, nftables: Update versionsKhem Raj
libmnl -> 1.0.4 nftables -> 0.6 Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2016-10-20nfacct: added nfacct recipe to meta-networkingOliver Graute
this patch adds nfacct to meta-networking Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2016-10-20libnetfilter-acct: added new recipe for libnetfilter-acct 1.0.3Oliver Graute
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2016-08-16libnftnl: 1.0.5 -> 1.0.6Kai Kang
Upgrade libnftnl from 1.0.5 to 1.0.6. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2016-02-29ebtables: enable KERNEL_64_USERSPACE_32 for powerpcRoy Li
Enable KERNEL_64_USERSPACE_32 when powerpc is using 64bit kernel and 32bit userspace. Some structs, which is used to communicate between user space and kernel, have the alignment issue on 64bit kernel with 32 bit userspace. To fix this issue, ebtables redefines these struct, not use the kernel(sysroot) include/uapi/linux/netfilter_bridge/ebtables.h, like ebt_entry_target: The kernel's: struct ebt_entry_target { union { char name[EBT_FUNCTION_MAXNAMELEN]; struct xt_target *target; } u; /* size of data */ unsigned int target_size; unsigned char data[0] __attribute__ ((aligned (__alignof__(struct ebt_replace)))); }; The ebtables: struct ebt_entry_target { union { char name[EBT_FUNCTION_MAXNAMELEN]; struct ebt_target *target; } u; /* size of data */ unsigned int target_size; |#ifdef KERNEL_64_USERSPACE_32 unsigned int pad; |#endif unsigned char data[0] __attribute__ ((aligned (__alignof__(struct ebt_replace)))); }; If the MLPREFIX of package matchs "lib.?32", the 32bit multilib package on 64bit kernel is being built, then enable KERNEL_64_USERSPACE_32. Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-10-21nftables: update nftables userland tools from 0.4 to 0.5Jens Rehsack
Update nftables tools from 0.4 to 0.5, for ChangeLog see http://git.netfilter.org/nftables/log/ Signed-off-by: Jens Rehsack <sno@netbsd.org> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-10-21libnftnl: update from 1.0.3 to 1.0.5Jens Rehsack
Update libnftnl from 1.0.3 to 1.0.5 (for Changelog see http://git.netfilter.org/libnftnl/log/) Signed-off-by: Jens Rehsack <sno@netbsd.org> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-10-21libnetfilter: Avoid using VLAsKhem Raj
VLAs in composite data types like structures and unions are not a standard feature of C language, gcc has specific implementations for but other compilers dont have that done specifically clang, and the community refuses to implement it since its non standard. Change-Id: I6ae24adb455bf262fe9406a1c8e3b3a4a0cf77d4 Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-09-11conntrack-tools: upgrade to 1.4.2Roy Li
1. upgrade to 1.4.2 2. backport a patch to fix CVE-2015-6496: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-6496 Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-09-11libnetfilter-conntrack: upgrade to 1.0.4Roy Li
Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-06-05meta-networking: standardize SECTION valuesJoe MacDonald
SECTION has been used inconsistently throughout the recipes in this layer. Convert them to all use the same convention. Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-06-05nftables: create nftables recipe under meta-networkingRoy Li
http://netfilter.org/projects/nftables/index.html Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2015-06-05libnftnl: create recipe under meta-networkingRoy Li
libnftnl is needed by nftable, so add it Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-10-21ebtables: fix for sysvinit and systemdChen Qi
The solution mainly references Fedora20. Extract the common part of the code and install it into ${sbindir}. Add systemd service file. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-06-21recipes: add missing pkgconfig class inheritsRichard Purdie
* These recipes all use pkg-config in some way but were missing dependencies on the tool, this patch adds them. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-15conntrack-tools: inherit autotools-brokensepRobert Yang
It needs autotools-brokensep, otherwise do_install error: install: cannot stat `doc/sync/ftfw/conntrackd.conf': No such file or directory Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-05-21conntrack-tools: add depends on bison-nativeJackie Huang
Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-02-23recipes: convert remaining SUMMARY/DESCRIPTION cosmetic issuesMatthieu CRAPET
Changes: - rename SUMMARY with length > 80 to DESCRIPTION - rename DESCRIPTION with length < 80 to (non present tag) SUMMARY - drop final point character at the end of SUMMARY string - remove trailing whitespace of SUMMARY line Note: don't bump PR Signed-off-by: Matthieu Crapet <Matthieu.Crapet@ingenico.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-02-14libnetfilter-log: add newrecipe for version 1.0.1Matthieu Crapet
This library is usefull for userspace netfilter log messages (c.f. iptables and -j NFLOG target). libnetfilter-conntrack, libnetfilter-cttimeout, libnetfilter-cthelper and libnetfilter-queue are already available since december of 2012. Signed-off-by: Matthieu Crapet <Matthieu.Crapet@ingenico.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
2013-11-01recipes: Remove PR = r0 from all recipesMartin Jansa
* Remove all PR = "r0" from all .bb files in meta-oe repo. This was done with the command sed -e '/^PR.*=.*r0\"/d' meta*/recipes*/*/*.bb -i * We've switching to the PR server, PR bumps are no longer needed and this saves people either accidentally bumping them or forgetting to remove the lines (r0 is the default anyway). Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2013-07-30ebtables: Load ebtables kernel moduleMihai Prica
Ebtables needs some kernel configs options to work properly. The standard yocto kernel config includes these as modules. Add code to load the ebtables module. Signed-off-by: Mihai Prica <mihai.prica@intel.com> Signed-off-by: Joe MacDonald <joe.macdonald@windriver.com>