aboutsummaryrefslogtreecommitdiffstats
path: root/meta-networking
AgeCommit message (Collapse)Author
2017-06-28ruli: FIx build with hardening flagsKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28ruli: Fix build with hardening flagsKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28geoipupdate 2.2.2 -> 2.4.0susanbian
Upgrade geoipupdate from 2.2.2 to 2.4.0 License checksum changed, since the following function are added. 1. database directory is writable 2. ${datarootdir}/GeoIP is now created on make install. 3. prints out additional information from the server when download reques results. Signed-off-by: susanbian <bianyq@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28snort: fix for snort.confJackie Huang
The /etc/snort/snort.conf doesn't work since there are hardcoded paths and lib names, and it tries to include many rules that are not provided. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28squid: Fix build with hardeningKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28rdist: add new recipeJackie Huang
rdist is a remote file distribution client and server. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28rdate: add new recipeJackie Huang
rdate is a tool for getting the date/time from a remote machine. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28strongswan: 5.5.1 -> 5.5.3fan.xin
Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28squid: Upgrade to 3.5.26Khem Raj
Fix build errors with gcc7 along the way Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28nftables: backport a few ICMP & ICMPv6 fixesAndré Draszik
- assign network ctx for ICMP & ICMPv6 - additional ICMPv6 types - allow update of net base w. meta l4proto ipv6-icmp - l4 proto fixes The initial trigger was that ICMPv6 type 143 (mld2-listener-report) wasn't working as expected. Signed-off-by: André Draszik <adraszik@tycoint.com> Acked-by: Sylvain Lemieux <slemieux@tycoint.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28linux-atm: Fix build with hardening flagsKhem Raj
Port to build on musl while here Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28relayd: Fix build with hardening flags and glibcKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28relayd: Upgrade to latestKhem Raj
Fixes build with hardening flags Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28vlan: Fix build with security flags turned onKhem Raj
Limit the license checksum to the file header Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28freeradius: Upgrade to 3.0.14Khem Raj
Fix a cross compile issue where it was looking for samba headers in build host. in src/modules/rlm_mschap/config.log Fix cc1: warning: include location "/usr/include/samba-4.0/" is unsafe for cross-compilation [-Wpoison-system-directories] Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28iscsi-initiator-utils: do not regenerate prom_lex.cJoe Slater
prom_lex.c is provided in source. If we try to remake it from prom_lex.l, we will not find "lex" since it is not in recipe-sysroot-native. If we do manage to provide lex, the new source will not compile. Signed-off-by: Joe Slater <jslater@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28samba: upgrade to 4.6.5Johannes Pointner
This includes a security fix that adresses the following defect: CVE-2017-7494 (Remote code execution from a writable share) * Detail release note: - https://www.samba.org/samba/history/samba-4.6.5.html * Remove 00-fix-typos-in-man-pages.patch which has been fixed upstream a long time ago Signed-off-by: Johannes Pointner <johannes.pointner@br-automation.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28ippool: add new recipeYi Zhao
IpPool is a userspace daemon for managing one or more pools of IP addresses. It was developed as part of the OpenL2TP project but has since been repackaged so that it may be used independently of OpenL2TP. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28wireshark: Upgrade to 2.2.7fan.xin
Upgrade wireshark from 2.2.6 to 2.2.7 Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28samba: Fix build with muslKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28proftpd: Update to 1.3.6 releaseKhem Raj
Use the new gnu-config files for musl support Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28openvpn: Upgrade 2.3.9 -> 2.4.2fan.xin
Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28cifs-utils 6.6 -> 6.7Zheng Ruoqin
Upgrade cifs-utils from 6.6 to 6.7 Signed-off-by: zhengrq <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28nopoll: Disable doc generationKhem Raj
This also fixes installed-vs-shipped build QA errors like ERROR: nopoll-0.4.2.b297-r0 do_package: QA Issue: nopoll: Files/directories were installed but not shipped in any package: /usr/bin Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28traceroute: Move manual pages from mandir to man8 under itLi Zhou
Traceroute's manual pages are installed in /usr/share/man, which should be placed in /usr/share/man/man8. Correct this. Signed-off-by: Li Zhou <li.zhou@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28net-snmp: supported cross compile for the perl embedded and perl modulesWenlin Kang
The patch solves two issues: 1. Supported cross compile for the perl embedded and perl modules. 2. Solved runtime depend issue. Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28snort: enable static daqKai Kang
When start snort, it shows error and quit: | --== Initializing Snort ==-- | Initializing Output Plugins! | ERROR: Can't find pcap DAQ! | Fatal Error, Quitting.. Fix by enable static daq for snort and enable static build for daq. snort calls command daq-modules-config which is from daq-native to get required daq static libraries and library path. Add package daq-native and add patch for snort to filter library path out to avoid host contamination issue. Add daq-native's dependency libnet-native too. And daq-native also depends on libpcap-native from layer oe-core. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28dante: fix unknown-configure-option QA issueQi.Chen@windriver.com
Fix the following QA issue. dante-1.4.1: dante: configure was passed unrecognised options: --disable-krb5 [unknown-configure-option] Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28open-isns: fix QA issueQi.Chen@windriver.com
Fix the following QA issue. ERROR: open-isns-0.97-r0 do_package: QA Issue: open-isns: Files/directories were installed but not shipped in any package: /usr/lib /usr/lib/systemd /usr/lib/systemd/system /usr/lib/systemd/system/isnsd.socket /usr/lib/systemd/system/isnsd.service Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28opensaf: Add -latomic to LDFLAGSMingli Yu
* Add "-Wl,--as-needed -latomic -Wl,--no-as-needed" to LDFLAGS to let the libatomic handled automatically if required to fix below build error as atomic operations on some arch such as x86 are supplied by the compiler. For other arch which lacks the instructions, a standardized external call provided by external library libatomic will be made to perform the operation. | src/amf/amfd/bin_osafamfd-main.o: In function `std::__atomic_base<unsigned long long>::load(std::memory_order) const': | $Prj/build/tmp/work/ppc7400-wrs-linux/opensaf/5.2.0-r0/recipe-sysroot/usr/include/c++/6.3.0/bits/atomic_base.h:396: undefined reference to `__atomic_load_8' | $Prj/build/tmp/work/ppc7400-wrs-linux/opensaf/5.2.0-r0/recipe-sysroot/usr/include/c++/6.3.0/bits/atomic_base.h:396: undefined reference to `__atomic_load_8' | collect2: error: ld returned 1 exit status | make[2]: *** [Makefile:8200: bin/osafamfd] Error 1 | make[2]: *** Waiting for unfinished jobs.... | make[2]: Leaving directory '$Prj/build/tmp/work/ppc7400-wrs-linux/opensaf/5.2.0-r0/build' | make[1]: *** [Makefile:19749: all-recursive] Error 1 | make[1]: Leaving directory '$Prj/build/tmp/work/ppc7400-wrs-linux/opensaf/5.2.0-r0/build' | make: *** [Makefile:6175: all] Error 2 Reference: https://gcc.gnu.org/wiki/Atomic/GCCMM/LIbrary#line-23 Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28drbd-utils: remove /var/lock to avoid conflictJackie Huang
Remove the empty /var/lock to avoid conflict with base-files: | Error: Transaction check error: file /var/lock conflicts between attempted installs of drbd-utils-8.9.6-r0.core2_64 and base-files-3.0.14-r89.qemux86_64 Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28ifenslave: 2.7 -> 2.9Huang Qiyu
1) Upgrade ifenslave from 2.7 to 2.9. 2) License checksum changed,since the copyright's Format were changed. Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ Signed-off-by: Huang Qiyu <huangqy.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28vblade: update to version 22Jackie Huang
Update to version 22 and add support for systemd and sysvinit, the scripts and conf files are taken from Fedora. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28keepalived: add new recipeJackie Huang
keepalived is a High Availability monitor built upon LVS, VRRP and service pollers. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28freeradius: add new recipeJackie Huang
FreeRADIUS is an Internet authentication daemon, which implements the RADIUS protocol, as defined in RFC 2865 (and others). Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28wireguard: bump version to latest snapshot 0.0.20170517Stefan Agner
Use the latest available snapshot 0.0.20170517 of WireGuard. Signed-off-by: Stefan Agner <stefan@agner.ch> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-05-09drbd-utils: fix dependency for perl under small-fsYadi.hu
Perl script drbd-overview fails to run due to some of perl's lib noexists under small rootfs,fixing it through adding explicit definitions Signed-off-by: Marius Tiplea <marius.tiplea@windriver.com> Signed-off-by: Yadi.hu <yadi.hu@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-05-09openhpi: Fix build with gcc7Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-05-09netcat-openbsd: correct subdir for SRC_URIMingli Yu
* Correct subdir to let the second source file netcat-openbsd_${PV}-7.debian.tar.gz unpacked under the correct folder to avoid below error when do_patch in multilib env. | DEBUG: Executing python function do_patch | DEBUG: Executing shell function netcat_do_patch | No patch removed | No series file found | WARNING: exit code 2 from a shell command. Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-05-09wireguard: module install cleanupJoe MacDonald
The module_install target shouldn't be used, just installing the module to the sysroot directly seems more appropriate. Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-05-01wireguard: blacklistJoe MacDonald
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-27wireguard: add dependencies and kernel build optionsJoe MacDonald
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-27wireguard: add WireGuard kernel module and toolsStefan Agner
WireGuard is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography. It aims to be faster, simpler, leaner, and more useful than IPSec, while avoiding the massive headache. The recipes add the current experimental snapshot v0.0.20170421 out-of-tree kernel module and tools. The kernel module has some kernel configuration dependencies such as some configuration part of features/netfilter/netfilter.scc, hence netfilter.scc should be part of KERNEL_EXTRA_FEATURES (which is the case by default). Since wireguard-tools is TUNE_PKGARCH and depends on wireguard-module which is MACHINE_ARCH (like all kernel modules) we need to add this dependency to SIGGEN_EXCLUDE_SAFE_RECIPE_DEPS. Signed-off-by: Stefan Agner <stefan@agner.ch> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-27strongswan: Split pluginsDavid Vincent
strongSwan offers a plugin mechanism therefore it should not be mandatory to install all of them when installing the package. Each plugin is now a self-contained package with the library and its configuration. To remain compatible with the current configuration, a default set of plugins has been selected as RDEPENDS of the main package. This default list is based on the default strongSwan list minus some plugins enabled via PACKAGECONFIG (see https://wiki.strongswan.org/projects/strongswan/PluginList). Signed-off-by: David Vincent <freesilicon@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-27opensaf: Upgrade to 5.2.0Khem Raj
Fix build with gcc7 Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-27openhpi: add new recipeJackie Huang
OpenHPI is an open source project created with the intent of providing an implementation of the SA Forum's Hardware Platform Interface (HPI). Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-26waf-samba.bbclass: redefine WAF_CROSS_ANSWERS_PATHMingli Yu
* Redefine WAF_CROSS_ANSWERS_PATH in waf-samba.bbclass to fix checksum mismatch for those packages which inherit waf-samba.bbclass when install eSDK # bitbake-diffsigs $Prj/build/sdkext_dir/tmp/stamps/core2-64-wrs-linux/libtalloc/2.1.8-r0.do_configure.sigdata.8a0fd2871f1e464f4586c32f0e67378f $Prj/build/tmp/stamps/core2-64-wrs-linux/libtalloc/2.1.8-r0.do_configure.sigdata.16b87e6ddccb52ca5e988e928f111e5a basehash changed from ea2fea38e7efe710a11fa9d13c7ad94c to 943a7ead4ed10ce794532a942569bcf9 Variable WAF_CROSS_ANSWERS_PATH value changed from '$Prj/build/sdkext_dir/layers/meta-networking/files/waf-cross-answers' to '$Prj/layers/meta-openembedded/meta-networking/files/waf-cross-answers' * Remove the previous WAF_CROSS_ANSWERS_PATH definition in layer.conf Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-26postfix: do NOT create directory /var/spool/mailKai Kang
postfix installs directory /var/spool/mail which conflicts with package shadow. | Error: Transaction check error: | file /var/spool/mail conflicts between attempted installs of | postfix-3.1.1-r0.ppc64e6500 and shadow-4.2.1-r0.1.ppc64e6500 Make postfix not create /var/spool/mail that it does NOT create the directory on Fedora and Ubuntu either. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25autofs: Upgrade to 5.1.2 releaseKhem Raj
Add patches to make it work when SECURITY_FLAGS are enabled Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25dovecot: 2.2.25 -> 2.2.29Huang Qiyu
Upgrade dovecot from 2.2.25 to 2.2.29. Signed-off-by: Huang Qiyu <huangqy.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>