From patchwork Mon Jul 29 01:06:29 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Armin Kuster X-Patchwork-Id: 46914 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 92777C3DA70 for ; Mon, 29 Jul 2024 01:06:40 +0000 (UTC) Received: from mail-yw1-f170.google.com (mail-yw1-f170.google.com [209.85.128.170]) by mx.groups.io with SMTP id smtpd.web11.46854.1722215196279075163 for ; Sun, 28 Jul 2024 18:06:36 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=K/SoHS26; spf=pass (domain: gmail.com, ip: 209.85.128.170, mailfrom: akuster808@gmail.com) Received: by mail-yw1-f170.google.com with SMTP id 00721157ae682-661369ff30aso12989687b3.2 for ; Sun, 28 Jul 2024 18:06:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1722215195; x=1722819995; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:from:to:cc:subject:date:message-id:reply-to; bh=5t7mSfFBpJJtic5iavgHTLUQCyqjtNIwwCZoT4aQ7gY=; b=K/SoHS26pMxi6FC1DsqY5jxN0UbFz3iErOXBf3Wk4yn/U5ctHoNVk8Hu9+ISzV8h+V rS5h/iaBIeDIHn1+1Ph7b2ZUjl2X2CeS55MglPspcfrTP4XKj+bBBYnjSkrGbhX8o+2Q XW55fo4s9iWJ5sM1bhwaiPidhReV/bdS1AHwxVi/T2B46IlLo68wVX4CJ/HOqyBEXoTl 6O08r66A6Zux44MRedeRl23xGJrsGxoQJUQ7Qlf8p5MjNhCU1mQg/oMxMnq8uSAqp9gn 8ONxPcpoDyDbrnmGsRKwCwQDx2lpp0XXhHkgjK7pksBrNf/SjFwHMEEirtkA7cS4f9I5 eG8w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1722215195; x=1722819995; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=5t7mSfFBpJJtic5iavgHTLUQCyqjtNIwwCZoT4aQ7gY=; b=jgNKyyjG1AFgNov7GtBAzYPF3cx91DGKbMprrV5zLAY68zm1oVM8yl7tvXY3Uoe3aO R2WdPzDqiaiY87YA6eX97sGsoD0PQTGYIlXJa5rZcCXHxv53tiP8OWre0WtM0+sJ57tS XMfQZmeWWF/319nJFTmj5TchORlThqiquBEH/1ZxONhdiiI1IC0fHtL6w2C6Y0Rr30f3 QnBvSAZZB5YxxBogw7/6klGuCBBjZeBx7NuN0mRpVv3OCIDR2Eqcqt0xrlSzx18EZOF5 MMSYiCyCQlMErYHEt3Buj6K7LgvpFgMszweNySPQZ1CsTKaCtl4R8BdbV/zHJCxQKQDX iTCQ== X-Gm-Message-State: AOJu0YyXmDO0uen/8JuJ4g9v4P0BoZDzDxYMRj3v+bKhBB10EHLRiDcB 01TO4k0toEFz6HFoDFVW8b3dgnMJvrrYFW1vhT4SdtvujGK8a7Chg2ZS1A== X-Google-Smtp-Source: AGHT+IE8RrRDKcP/RGKxitXGIKoNfDNN43RMIVFKJVr30JRjOOxNCTGUQGjXyAg0SD+ithaI8oXMQg== X-Received: by 2002:a81:7c82:0:b0:632:12b:8315 with SMTP id 00721157ae682-67a072bac7cmr62235297b3.22.1722215195180; Sun, 28 Jul 2024 18:06:35 -0700 (PDT) Received: from keaua.attlocal.net ([2600:1700:45dd:7000:47bc:453d:d517:b47]) by smtp.gmail.com with ESMTPSA id 00721157ae682-6756bc9edd8sm18543157b3.130.2024.07.28.18.06.34 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 28 Jul 2024 18:06:34 -0700 (PDT) From: Armin Kuster To: yocto-patches@lists.yoctoproject.org Subject: [meta-security][PATCH 1/6] apparmor: fix QA Warnings Date: Sun, 28 Jul 2024 21:06:29 -0400 Message-Id: <20240729010634.1991558-1-akuster808@gmail.com> X-Mailer: git-send-email 2.34.1 MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 29 Jul 2024 01:06:40 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/481 RROR: apparmor-3.1.3-r0 do_package_qa: QA Issue: File /usr/src/debug/apparmor/3.1.3/libraries/libapparmor/swig/perl/libapparmor_wrap.c in package apparmor-src contains reference to TMPDIR [buildpaths] ERROR: apparmor-3.1.3-r0 do_package_qa: QA Issue: File /usr/lib/python3.12/site-packages/LibAppArmor/.debug/_LibAppArmor.cpython-312-aarch64-linux-gnu.so in package apparmor-dbg contains reference to TMPDIR [buildpaths] ERROR: apparmor-3.1.3-r0 do_package_qa: QA Issue: File /usr/lib/perl5/vendor_perl/5.38.2/aarch64-linux/auto/LibAppArmor/.packlist in package apparmor contains reference to TMPDIR [buildpaths] ERROR: apparmor-3.1.3-r0 do_package_qa: Fatal QA errors were found, failing task. Signed-off-by: Armin Kuster --- recipes-mac/AppArmor/apparmor_3.1.3.bb | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/recipes-mac/AppArmor/apparmor_3.1.3.bb b/recipes-mac/AppArmor/apparmor_3.1.3.bb index 27c518c..49ab7a7 100644 --- a/recipes-mac/AppArmor/apparmor_3.1.3.bb +++ b/recipes-mac/AppArmor/apparmor_3.1.3.bb @@ -74,6 +74,8 @@ do_compile () { } do_install () { + sed -i -e 's#${RECIPE_SYSROOT}##g' ${B}/libraries/libapparmor/swig/perl/libapparmor_wrap.c + oe_runmake -C ${B}/libraries/libapparmor DESTDIR="${D}" install oe_runmake -C ${B}/binutils DESTDIR="${D}" install oe_runmake -C ${B}/utils DESTDIR="${D}" install @@ -102,6 +104,9 @@ do_install () { fi chown root:root -R ${D}/${sysconfdir}/apparmor.d chown root:root -R ${D}/${datadir}/apparmor + + find ${D}${libdir}/perl5/ -type f -name ".packlist" -delete + find ${D}${PYTHON_SITEPACKAGES_DIR}/LibAppArmor/ -type f -name "_LibAppArmor*.so" -delete } #Building ptest on arm fails. From patchwork Mon Jul 29 01:06:30 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Armin Kuster X-Patchwork-Id: 46918 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D3317C52CDA for ; Mon, 29 Jul 2024 01:06:40 +0000 (UTC) Received: from mail-yw1-f182.google.com (mail-yw1-f182.google.com [209.85.128.182]) by mx.groups.io with SMTP id smtpd.web11.46855.1722215196923825649 for ; Sun, 28 Jul 2024 18:06:37 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=g1cxGAqV; spf=pass (domain: gmail.com, ip: 209.85.128.182, mailfrom: akuster808@gmail.com) Received: by mail-yw1-f182.google.com with SMTP id 00721157ae682-6659e81bc68so15511027b3.0 for ; Sun, 28 Jul 2024 18:06:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1722215196; x=1722819996; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=RySEZOSlgxdsR7Kn6hryk72oVJVoq7xmCYRduosdzRo=; b=g1cxGAqVxUdXbYQLvEn+Bd1tTu04kt9n+aOFtu+grvXmyqwfeIQLO0x5Iu1uhjEl6F 9THDfr1hINTKboDUw6OEHwGhdBnAVLLSQ/0eCLxMbhQr+R+oBkWzu+2rd3QPPwFWsXeu aqNkkil+xbXtyIK2HK8om1MPRodaulgD1LfNC6ojElV6BnGHZoqN/vY8K4yjOzCaeYP3 4zi1ZSErfiEeP3FuHWzrtvvOWjTi5G11shoZt4jfxc49VioxsQMAumDvvkQY49f0vbqV p1ODH+9ZWtWPtaAIzh4Dts1PyO9s1RFUKJP0qA6xZM3olsWjWUnEZKAJWWgiABUiE5SP QEEg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1722215196; x=1722819996; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=RySEZOSlgxdsR7Kn6hryk72oVJVoq7xmCYRduosdzRo=; b=WzLIQLYDn5yueFyv6w+5sMiQvJpyVm81Re50t44G62Fp27KVKjpY3qq+Ca1itj/zAD vzZLPB3cU7tcvQMdWzMyCIfTHkas0bFr/QKbQamY02ji7JizRzvQJ4B0D12Y00tGQ8Zn 8vso+kywN0N24di3xwffdgAsxqycmRHO+rXOvmrfPnN0GIdQaNPPoII+vFbqxAkz2EaI gv70Zmr2TE0WvJwgruPqS5LC063wMM8TMn0Uzgd+quzfOOdO3yI0FRXGTw0sXoWI6MdE KI7l0kyQojoyAVv3WsU5fD3SlKypkEgLXEzQx+chOdQeZA9IvbJ4H0gbv88a5s9ELO4B QYrg== X-Gm-Message-State: AOJu0YylQ+ucWnp8a9FzSDrnI3WMxr8xgEPzF2bWyvktVx8wzz3CxrkM B7qIXgDSlEhhh1H0cgUuZJT9QYQlKz6QzymMZNbZNsek3URnXOX71oV4mg== X-Google-Smtp-Source: AGHT+IGudup1sEabBAS7iT4F7RxGq7HcNr5JXnvkHKfnQq1eEZ4vhrWI0Mf3iF3bfV5YVonlAWamXg== X-Received: by 2002:a81:8901:0:b0:64a:e7ec:f3d with SMTP id 00721157ae682-67a06a0c0f2mr68129257b3.18.1722215195940; Sun, 28 Jul 2024 18:06:35 -0700 (PDT) Received: from keaua.attlocal.net ([2600:1700:45dd:7000:47bc:453d:d517:b47]) by smtp.gmail.com with ESMTPSA id 00721157ae682-6756bc9edd8sm18543157b3.130.2024.07.28.18.06.35 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 28 Jul 2024 18:06:35 -0700 (PDT) From: Armin Kuster To: yocto-patches@lists.yoctoproject.org Subject: [meta-security][PATCH 2/6] python3-fail2ban: convert WORKDIR->UNPACKDIR Date: Sun, 28 Jul 2024 21:06:30 -0400 Message-Id: <20240729010634.1991558-2-akuster808@gmail.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: <20240729010634.1991558-1-akuster808@gmail.com> References: <20240729010634.1991558-1-akuster808@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 29 Jul 2024 01:06:40 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/482 Signed-off-by: Armin Kuster --- .../recipes-security/fail2ban/python3-fail2ban_git.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/dynamic-layers/meta-python/recipes-security/fail2ban/python3-fail2ban_git.bb b/dynamic-layers/meta-python/recipes-security/fail2ban/python3-fail2ban_git.bb index 1d0fb62..52d35f8 100644 --- a/dynamic-layers/meta-python/recipes-security/fail2ban/python3-fail2ban_git.bb +++ b/dynamic-layers/meta-python/recipes-security/fail2ban/python3-fail2ban_git.bb @@ -26,13 +26,13 @@ inherit systemd SYSTEMD_SERVICE:${PN} = "fail2ban.service" -S = "${WORKDIR}/git" +S = "${UNPACKDIR}/git" do_install:append () { rm -f ${D}/${bindir}/fail2ban-python install -d ${D}/${sysconfdir}/fail2ban install -d ${D}/${sysconfdir}/init.d - install -m 0755 ${WORKDIR}/initd ${D}${sysconfdir}/init.d/fail2ban-server + install -m 0755 ${UNPACKDIR}/initd ${D}${sysconfdir}/init.d/fail2ban-server if ${@bb.utils.contains('DISTRO_FEATURES', 'systemd', 'true', 'false', d)}; then install -d ${D}${systemd_system_unitdir} From patchwork Mon Jul 29 01:06:31 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Armin Kuster X-Patchwork-Id: 46916 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id C556CC3DA49 for ; Mon, 29 Jul 2024 01:06:40 +0000 (UTC) Received: from mail-yw1-f173.google.com (mail-yw1-f173.google.com [209.85.128.173]) by mx.groups.io with SMTP id smtpd.web10.46506.1722215197597103986 for ; Sun, 28 Jul 2024 18:06:37 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=mb8Svfxg; spf=pass (domain: gmail.com, ip: 209.85.128.173, mailfrom: akuster808@gmail.com) Received: by mail-yw1-f173.google.com with SMTP id 00721157ae682-66526e430e0so14436617b3.2 for ; Sun, 28 Jul 2024 18:06:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1722215196; x=1722819996; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=8VX7ESJZSJ+ruHr+2rQCLvMbWOjfCmx3vRkprKOJP/Y=; b=mb8SvfxgIFgsyDfdP7DBAnUB2iva8GbmPjfw07oGhnlKzcogCwe2M8ZZG32RItdZsa axy0dJRgE/Fpd1mVSzWGwvfH4LXCMUharn9jZxU6amrUWKa45khVPWsDX3Y/cxmMIdSs szpqJMdAIkaa7vwR3rGUIzemXJTxR4bZ4IkuN4ZBI996fnQWYUG2o/VJPM7qlozf53e4 d8/aQUscD5aso+M8kUaB34Cte2TNa5/AA+dyWockl0v0bId4sVUVL4fFntZcKsi6sO52 d6HmanTWN5XdVL9yEbbfOpFNuceFmOp4/XIWiS0p/bV0/gKgkb1BbYqnyXvDU9wyNpcG qnxQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1722215196; x=1722819996; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=8VX7ESJZSJ+ruHr+2rQCLvMbWOjfCmx3vRkprKOJP/Y=; b=Snr/Plk8eC7HfMn/KYb38Txx3Ckh6g12dIkMXTjSYo+AsNYXD34y+UOgMfIP339g63 Ip3WIGb5glJpmiVya4oU+qXHdnTLbBU0XiSqAQ7yDM2mKzNx2pdP7iYK6yA2TDUsixD6 hLrLOGwME5uSbSORWcbz9tF+/JkxM+Zco98rB+JXEcC1x3JJrPNquyKXuGPaCkwvxE9r xAV6+f0G8upQZRDc4idAxMMI2SmaVaF/MFm6QjB0RxKvvn9wJYCW5r1UDlc6LiJvGDxn 85lUpSxAXtSmbo+FdKeuoZoWPeGfgjsNbz3LbdPRbrRg2IMlJO1pBidswduNHoprDxtw ocog== X-Gm-Message-State: AOJu0YxIfRSaamCagP1q2vF8cA4qaRWfcVwKlg5+jxIX3L9ymrcQN+pO 9FF/mhpGdYGWzu1OEEA0BVEJPxgZCw0Pq5nrySiTuHiO1zQPPn6KXReShA== X-Google-Smtp-Source: AGHT+IEMLDd5y5/5NAKJhx+ysqkFn/pYtUD5zjfEwqzN+VOgzpX+2ya75ETp1WgRCiJMt12AgNs75g== X-Received: by 2002:a05:690c:3811:b0:64a:5f5a:b38c with SMTP id 00721157ae682-67a075a67d6mr76122357b3.26.1722215196629; Sun, 28 Jul 2024 18:06:36 -0700 (PDT) Received: from keaua.attlocal.net ([2600:1700:45dd:7000:47bc:453d:d517:b47]) by smtp.gmail.com with ESMTPSA id 00721157ae682-6756bc9edd8sm18543157b3.130.2024.07.28.18.06.36 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 28 Jul 2024 18:06:36 -0700 (PDT) From: Armin Kuster To: yocto-patches@lists.yoctoproject.org Subject: [meta-security][PATCH 3/6] krill: Fix QA warnings Date: Sun, 28 Jul 2024 21:06:31 -0400 Message-Id: <20240729010634.1991558-3-akuster808@gmail.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: <20240729010634.1991558-1-akuster808@gmail.com> References: <20240729010634.1991558-1-akuster808@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 29 Jul 2024 01:06:40 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/483 ERROR: krill-0.12.3-r0 do_package_qa: QA Issue: File /usr/bin/.debug/krill in package krill-dbg contains reference to TMPDIR File /usr/bin/.debug/krillc in package krill-dbg contains reference to TMPDIR File /usr/bin/.debug/krillup in package krill-dbg contains reference to TMPDIR [buildpaths] Signed-off-by: Armin Kuster --- recipes-security/krill/krill_0.12.3.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/recipes-security/krill/krill_0.12.3.bb b/recipes-security/krill/krill_0.12.3.bb index 2e200dd..d5917a1 100644 --- a/recipes-security/krill/krill_0.12.3.bb +++ b/recipes-security/krill/krill_0.12.3.bb @@ -26,6 +26,7 @@ do_install:append () { install -m 664 ${S}/defaults/krill.conf ${D}${sysconfdir}/. install ${S}/defaults/* ${D}${datadir}/krill/. + find ${D}${bindir}/ -name "krill*" -exec sed -i -e 's#${CARGO_HOME}/bitbake##g' {} + } KRILL_UID ?= "krill" @@ -38,5 +39,6 @@ USERADD_PARAM:${PN} = "--system -g ${KRILL_GID} --home-dir \ --shell /sbin/nologin ${BPN}" FILES:${PN} += "{sysconfdir}/defaults ${datadir}" +INSANE_SKIP:${PN} = "already-stripped" COMPATIBLE_HOST = "(i.86|x86_64|aarch64).*-linux" From patchwork Mon Jul 29 01:06:32 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Armin Kuster X-Patchwork-Id: 46917 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id C6966C52CDC for ; Mon, 29 Jul 2024 01:06:40 +0000 (UTC) Received: from mail-yw1-f179.google.com (mail-yw1-f179.google.com [209.85.128.179]) by mx.groups.io with SMTP id smtpd.web11.46856.1722215198137665758 for ; Sun, 28 Jul 2024 18:06:38 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=X+lmdj5/; spf=pass (domain: gmail.com, ip: 209.85.128.179, mailfrom: akuster808@gmail.com) Received: by mail-yw1-f179.google.com with SMTP id 00721157ae682-66493332ebfso14414667b3.3 for ; Sun, 28 Jul 2024 18:06:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1722215197; x=1722819997; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=ReE02gsRsLDdLVLXdegxbTLkHkrqUI9MohPGEHOtrSE=; b=X+lmdj5/dysSsIfBECQokXBMGpHBReCupnm9f6GIW2lFpb4+x/ayVcZ1pVDApszpbn HCWlQ5L7GuORnCP1Moc5RJvd2vb4495fP73l/fKb4zi/4i1sHP1rafRbGCEwH1x3SMV9 evCEBmlOXQSoTg5273uIJOKMHHpSwvJbVYgwOb8Q82xYqr2P9HItRfQajtCoQafut/Zc qMha026Myd9+qevr3P0nTokIdz/pu50fkEzjM6sjQZMEHiJZCzCwY5ast8p58SZXCBOT xMPz/qbmmUv+W89UyP9kV8IOJRgGthOPrdTZGzI0VfEPsGUNOEk3HNjgIILFtLFY3yKI Jh9Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1722215197; x=1722819997; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=ReE02gsRsLDdLVLXdegxbTLkHkrqUI9MohPGEHOtrSE=; b=s1QWwiz9TbedCDHMEXPX9KCg1Q8yF0+h67Ee/cr7RuYiNGzqa9cM5aHpPe1y5YUgyp I9r3wEDuLoD0I/xAAaa5uUs1/lDn4EyI6IdRiE+IkdmFkTgD1n1xotOgRi1Mr8U4Cjgz NPjzuruXc3HtZag70WuiTFLsB3mtaraIG4oUfM1R8k8tM9FM3HKNvJDXTUse/eeO+4g4 /gcwdBw/F0A9EqGcoGAmUTsXwM4+8v3OraPNFOMPf8zyfRWCGFWF/uRwiBeU9UY3H+gL Wx3DgQmcHXYFdx0t/ApBptv7MF/aWwY7KMvbj7URMyZPVwxKVelrK5ATClrRkf8tfE5P o2ZQ== X-Gm-Message-State: AOJu0YyQnUG4R7QSqd6GxaQ371odM6+s0GiYU8v6bf64emEEWMyKt5XO YeZL+tmfdbwcwuNND+JXSycRxXTH0/uYzHVmH3VpuGh2J9r/OEgv7DcRWA== X-Google-Smtp-Source: AGHT+IFqwGHyEa7WZ9eXEl+IPmPmKgj3J60jjQhLXXBmUQ4nxFc2O42wv23y1gTqgIW0E74+YrPmvw== X-Received: by 2002:a81:8682:0:b0:643:93dc:731c with SMTP id 00721157ae682-67a06ede635mr80232527b3.17.1722215197038; Sun, 28 Jul 2024 18:06:37 -0700 (PDT) Received: from keaua.attlocal.net ([2600:1700:45dd:7000:47bc:453d:d517:b47]) by smtp.gmail.com with ESMTPSA id 00721157ae682-6756bc9edd8sm18543157b3.130.2024.07.28.18.06.36 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 28 Jul 2024 18:06:36 -0700 (PDT) From: Armin Kuster To: yocto-patches@lists.yoctoproject.org Subject: [meta-security][PATCH 4/6] suricata: fix QA warnings Date: Sun, 28 Jul 2024 21:06:32 -0400 Message-Id: <20240729010634.1991558-4-akuster808@gmail.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: <20240729010634.1991558-1-akuster808@gmail.com> References: <20240729010634.1991558-1-akuster808@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 29 Jul 2024 01:06:40 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/484 ERROR: suricata-7.0.0-r0 do_package: QA Issue: File '/usr/bin/suricata' from suricata was already stripped, this will prevent future debugging! [already-stripped] Signed-off-by: Armin Kuster --- recipes-ids/suricata/suricata_7.0.0.bb | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/recipes-ids/suricata/suricata_7.0.0.bb b/recipes-ids/suricata/suricata_7.0.0.bb index a137498..9795e95 100644 --- a/recipes-ids/suricata/suricata_7.0.0.bb +++ b/recipes-ids/suricata/suricata_7.0.0.bb @@ -114,6 +114,10 @@ do_install () { sed -i -e "s:#!.*$:#!${USRBINPATH}/env python3:g" ${D}${bindir}/suricatasc sed -i -e "s:#!.*$:#!${USRBINPATH}/env python3:g" ${D}${bindir}/suricatactl sed -i -e "s:#!.*$:#!${USRBINPATH}/env python3:g" ${D}${libdir}/suricata/python/suricata/sc/suricatasc.py + # The build process dumps config logs into the binary, remove them. + sed -i -e 's#${RECIPE_SYSROOT}##g' ${D}${bindir}/suricata + sed -i -e 's#${RECIPE_SYSROOT_NATIVE}##g' ${D}${bindir}/suricata + sed -i -e 's#CFLAGS.*##g' ${D}${bindir}/suricata } pkg_postinst_ontarget:${PN} () { @@ -131,3 +135,4 @@ FILES:${PN} += "${systemd_unitdir} ${sysconfdir}/tmpfiles.d" FILES:${PN}-python = "${bindir}/suricatasc ${PYTHON_SITEPACKAGES_DIR}" CONFFILES:${PN} = "${sysconfdir}/suricata/suricata.yaml" +INSANE_SKIP:${PN} = "already-stripped" From patchwork Mon Jul 29 01:06:33 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Armin Kuster X-Patchwork-Id: 46915 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id AC25DC49EA1 for ; Mon, 29 Jul 2024 01:06:40 +0000 (UTC) Received: from mail-yw1-f171.google.com (mail-yw1-f171.google.com [209.85.128.171]) by mx.groups.io with SMTP id smtpd.web10.46508.1722215198365951379 for ; Sun, 28 Jul 2024 18:06:38 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=Es1LIMs7; spf=pass (domain: gmail.com, ip: 209.85.128.171, mailfrom: akuster808@gmail.com) Received: by mail-yw1-f171.google.com with SMTP id 00721157ae682-651da7c1531so15175327b3.0 for ; Sun, 28 Jul 2024 18:06:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1722215197; x=1722819997; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=0XtBtXbhyStijQgHklJK5BesMKz0d1cmksOuFBV8AZg=; b=Es1LIMs7PyKZjeGYJ+MJt0MNu8MeKrWNsB04tCGMVAOftZwqE7A+9JQ8acu0b+On2k AyT45SWcrMz2b64Z9SJ7wQ4Nbef4ccS7dPAo4r/P8jSj7PMDmxxkGt9HyikOa5yaRkc6 T0tAiM8F4x9aJ7vIpeWeXMThRjOjmEPolA8cczI7+hkaPZcjrVkG8i8hDv/pxC20Wr9k bB/7s8KlmkXjPEJdCoPFkRinOWgdljjV01mncyC13EmbPjzjT4Cg/KQ4QJ1y7dAPQjN5 pcT6lcl6W82iY7OPirkC7fbiyNHvkwhrd8oJ4db/VbZh8TbLtZ8PZFpgurHzrFpAp7PQ NZPQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1722215197; x=1722819997; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=0XtBtXbhyStijQgHklJK5BesMKz0d1cmksOuFBV8AZg=; b=rjjc2QO5XiKRnNVzEJ/Hw/VxZZD2f4tjxKHtFc234DzQTO8WLU5GcI2qdzaXCGekEL BR4iUeth1GPgXn+m8XYmoNzMuPlE4b2GYParthELwIjjgysXC/f2kWNRuLEdDJEr01SY Mro85Hw/vlJUpuAZ5MsPmooCZsjBFTmjuzdizKE99DudYneIJoYzVu8nq1F974Rb7wkR 9oZUY2ZR+FubvoyBHNMN81idK1c4YFNu84/ZR0mugyRwgJ2Y4vuAYEkJXCRaC8lip9wp y9rmbgBrG1FJRNUkbk5clbre+9RnXJ26TZX0Wux85EKv2JgCwcchgZJMAtSNYFOV4QjP 9Qig== X-Gm-Message-State: AOJu0YyatgXvC1NIh7P1dtZo/YVMdeGXyywGMb/uELtm3BZXM85kjZ3q FIvria2JzIqbxtelChtsM9Y0EWevTrjO/3YPsNZJFGWC8C1EIWpr7TAoWg== X-Google-Smtp-Source: AGHT+IGOjmsKO0bd4DuOynOdfYR8pT+Kx7BVYJSK5RLoKWS5ZjLJJkPj5rtkd84Rrir6XiX08r53jA== X-Received: by 2002:a0d:e446:0:b0:654:c11:602f with SMTP id 00721157ae682-67a0a1362d0mr62991567b3.40.1722215197396; Sun, 28 Jul 2024 18:06:37 -0700 (PDT) Received: from keaua.attlocal.net ([2600:1700:45dd:7000:47bc:453d:d517:b47]) by smtp.gmail.com with ESMTPSA id 00721157ae682-6756bc9edd8sm18543157b3.130.2024.07.28.18.06.37 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 28 Jul 2024 18:06:37 -0700 (PDT) From: Armin Kuster To: yocto-patches@lists.yoctoproject.org Subject: [meta-security][PATCH 5/6] isic: Fix config error Date: Sun, 28 Jul 2024 21:06:33 -0400 Message-Id: <20240729010634.1991558-5-akuster808@gmail.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: <20240729010634.1991558-1-akuster808@gmail.com> References: <20240729010634.1991558-1-akuster808@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 29 Jul 2024 01:06:40 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/485 configure: error: installation or configuration problem: C compiler cannot create executables. | NOTE: The following config.log files may provide further information. Signed-off-by: Armin Kuster --- recipes-security/isic/isic_0.07.bb | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/recipes-security/isic/isic_0.07.bb b/recipes-security/isic/isic_0.07.bb index 3e56091..d39184e 100644 --- a/recipes-security/isic/isic_0.07.bb +++ b/recipes-security/isic/isic_0.07.bb @@ -23,6 +23,10 @@ inherit autotools-brokensep EXTRA_OECONF += "--with-libnet-dir=${STAGING_DIR_HOST}${libdir} " +# many configure tests are failing with gcc-14 +CFLAGS += "-Wno-error=implicit-int -Wno-error=implicit-function-declaration" +BUILD_CFLAGS += "-Wno-error=implicit-int -Wno-error=implicit-function-declaration" + do_configure () { oe_runconf } From patchwork Mon Jul 29 01:06:34 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Armin Kuster X-Patchwork-Id: 46913 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 90E9DC3DA64 for ; Mon, 29 Jul 2024 01:06:40 +0000 (UTC) Received: from mail-yw1-f182.google.com (mail-yw1-f182.google.com [209.85.128.182]) by mx.groups.io with SMTP id smtpd.web10.46509.1722215198760231618 for ; Sun, 28 Jul 2024 18:06:38 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=Yd5Kmdlp; spf=pass (domain: gmail.com, ip: 209.85.128.182, mailfrom: akuster808@gmail.com) Received: by mail-yw1-f182.google.com with SMTP id 00721157ae682-654cf0a069eso12912387b3.1 for ; Sun, 28 Jul 2024 18:06:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1722215198; x=1722819998; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=dnG6WiVTx7KINQfPBncy8OO8Ud4T8KWAFeOcqUzAygM=; b=Yd5KmdlpyYl9X6c/PFfMbF/ZQJ3I0FXDfKySLT5wJQKa5Wcy/fL9IPF/bJOhblnI61 0SGgGJllR8nTs797KvvTcVtXHqCMToCe2OMcmhfZzh6GZo6vttd1inuTttpw9e2ja/aU mfgsahJQfEGO8nG7u4Yr+4swbR6fRAmZ7/w2u6miYV9s7tRQhX+9zMmF+IhqUG9ennh7 763eNUk3s1Qv5uMgIO42TBbC5jETCV53+swTQSl0/tjkHVddNV4C8x1POVu8daCBB4LL MrCrfwKODUX+LovBB+D93z4O5cWpRSXS22dWsBia/zRllAcMnKIW5XC8CVxkceF0u/xS ioBw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1722215198; x=1722819998; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=dnG6WiVTx7KINQfPBncy8OO8Ud4T8KWAFeOcqUzAygM=; b=uuYhStVjs7T2u7LaohluQaGbjyM11cQXR266hJ0S4H3Vn1I5bxIBAsOP52dW5N6Qk5 WIDccIhPLg/CmSDIvoUwMJQGF3cl1d33O7NnmWj5tbtMTwBRKAl3EtTkrjNGXyztHTSG 7yOdWmkoONczCBniOAYOJFQ5Y8+9Z2NwZZH/QaJ6VMwzzLCwGMFB970fwUjGSkRzJuPT Ag3Teth8kOrPPnzVfVfw04tkI9uJYrQWWxk6h4johVQ6KY3bA0Rh/bej4AicmGJgdoOW b8ACpkmiR6YW8SYI+egL+mUAucFXNiOeiEFICSq2IozRPbeKSemFiIhHxAzrhiapNX7F Ty5w== X-Gm-Message-State: AOJu0Yz9MzuGmsPUlNWxf8nTCypgiAw6IlZlsfteQyugYrvmcVQXV/7O WvuUr/dQPbOgob3a0oyt61M1STgqPVRZ+8E+rYrk5RvRGowuxNMIVhsHAg== X-Google-Smtp-Source: AGHT+IHS7m2b6PraF1r1fdkP91wfWeH6nlYuZTZzAm/wscQQFVG/EEj593oj3tR6eCuEq3RifcRl+w== X-Received: by 2002:a05:690c:ec4:b0:619:5176:5e34 with SMTP id 00721157ae682-67a06b021cbmr69058587b3.18.1722215197830; Sun, 28 Jul 2024 18:06:37 -0700 (PDT) Received: from keaua.attlocal.net ([2600:1700:45dd:7000:47bc:453d:d517:b47]) by smtp.gmail.com with ESMTPSA id 00721157ae682-6756bc9edd8sm18543157b3.130.2024.07.28.18.06.37 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 28 Jul 2024 18:06:37 -0700 (PDT) From: Armin Kuster To: yocto-patches@lists.yoctoproject.org Subject: [meta-security][PATCH 6/6] arpwatch: Fix compile error Date: Sun, 28 Jul 2024 21:06:34 -0400 Message-Id: <20240729010634.1991558-6-akuster808@gmail.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: <20240729010634.1991558-1-akuster808@gmail.com> References: <20240729010634.1991558-1-akuster808@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 29 Jul 2024 01:06:40 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/486 | ./dns.c:118:24: error: implicit declaration of function '_getshort'; did you mean '__putshort'? [-Wimplicit-function-declaration] upon others Signed-off-by: Armin Kuster --- recipes-scanners/arpwatch/arpwatch_3.3.bb | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/recipes-scanners/arpwatch/arpwatch_3.3.bb b/recipes-scanners/arpwatch/arpwatch_3.3.bb index cacfea7..84f93da 100644 --- a/recipes-scanners/arpwatch/arpwatch_3.3.bb +++ b/recipes-scanners/arpwatch/arpwatch_3.3.bb @@ -21,6 +21,10 @@ ARPWATCH_GID ?= "arpwatch" APRWATCH_FROM ?= "root " ARPWATH_REPLY ?= "${ARPWATCH_UID}" +# many configure tests are failing with gcc-14 +CFLAGS += "-Wno-error=implicit-int -Wno-error=implicit-function-declaration" +BUILD_CFLAGS += "-Wno-error=implicit-int -Wno-error=implicit-function-declaration" + PACKAGECONFIG ??= "" PACKAGECONFIG[email] = "-with-watcher=email=${APRWATCH_FROM} --with-watchee=email=${ARPWATH_REPLY}, , postfix, postfix postfix-cfg"