From patchwork Wed May 7 08:27:17 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Mikko Rapeli X-Patchwork-Id: 62576 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id CC28AC3ABC5 for ; Wed, 7 May 2025 08:27:41 +0000 (UTC) Received: from mail-lf1-f53.google.com (mail-lf1-f53.google.com [209.85.167.53]) by mx.groups.io with SMTP id smtpd.web11.3808.1746606455132758169 for ; Wed, 07 May 2025 01:27:35 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@linaro.org header.s=google header.b=VVotX5P6; spf=pass (domain: linaro.org, ip: 209.85.167.53, mailfrom: mikko.rapeli@linaro.org) Received: by mail-lf1-f53.google.com with SMTP id 2adb3069b0e04-54d6f933152so9024069e87.1 for ; Wed, 07 May 2025 01:27:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; t=1746606453; x=1747211253; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=AON9W7B2B9IdsWYTsVLe/gbcHHrXk1kbUEo+qu1I1Z4=; b=VVotX5P6zUjSaPf30vEQ3f+SplGVIphHgJZTE05tLuHLA7/msyl5DeyHI65CFGSUiw p7Y7xbYg2/PvzLUSWHi6D8Jxbeec3PfRPTDoCYbILljveUzIwgtmhVdHB9xYheLZJGSv K1K++HjCN8FrK+29ynhZyPEvsw5sBNPgkJbGty4HknplVLuLJVqpJd0O4d9aErl76WCV Vr3CpymEWayN5ezAWM8lb+Or+NcsNBCB5J3Tqip10m7RRvopCuh5VS89//3xIvXuNEFu PlqsM5XOO+6WdXjwcH2q/aaZfCgGX6XKDOH8Oqriymc7kGo4S6IqC4W7ooDg0UUg8IWT FB3A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1746606453; x=1747211253; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=AON9W7B2B9IdsWYTsVLe/gbcHHrXk1kbUEo+qu1I1Z4=; b=pNiMDTaPWOL1N2DOo2FVEriWUeiWarCIzca0ae7Xo5Wa4rQl3R5H+sOBV6CaWmHJOC SRM9CnTxVvZ8jjsFUnqksx49t4gXNhdtJgDhD/ev6tgYi1krwFKupMymqsdDfDngorGL 01/02OM052MQ/g6sFiD5DQb+9+w53y9nmW0ZgZvYOAdBHy37/4nyVErmRk2lXeJ2K+gs jwUSlog883kgKBwKEKo6B07AOqt3VzOy2omPHTjrMDFujDDCAvOhdWkgLxlITxC0GkIx 18QjJMTCTKqUnxmxuchPfntyEk5UMt4yuCaYyyEd3ybDrT6anYKDlulhMNLuutnF2XBS Wljw== X-Gm-Message-State: AOJu0Yw4x1vxgemlcRKH38JdJv6vj0Ho0H5HJVZSBm7o0xTbvAl+sUBY YV2aSmJK5duD3/uXB9bHKbqvPMBwX+5X1PLYDvfEZ4leJwLZGPxs6FZoIOpSRFMgWlMztNkFjyE ZIGw= X-Gm-Gg: ASbGncuJGYYfeQUylVn2uLO4FlLn4ZaQpFAbxjJG0U1KEZLZ/+W0WJDx1GIWeGMrvPb QkeAja7JV5hpDxhg1eNYloytuq650qTCK3POVCoOEChNAYLTCkQH60v9qLSC/NTwIV1su3rqMvZ pwFVNnSppi7p6GqYZhVN6cZoAH/Vda6gMfy2DrGvtgDXf3FvTIDyt+GZRpAyggwWCDmIF4kgiTR J3Tdkwf7xpmFsGKjUSqJvARcnYhBgr/5kveYw/W+kG6rhOecTnLwTqMEuN0tewb9yyZlLnu7+iK PCOzWmUabFKG4SvgGYHQSQedqNgw+mcu7LSSdeVVTCfA6wGdq2A7N5/NiwUYtrbcYsXcxIDey4p oZ3sMt+1sAUeOc/NE4w== X-Google-Smtp-Source: AGHT+IEUnDB/zN2Tb6xdH7CrkGzGTs97cx6RNkg7GB3I6s+KxoPzoRtZQ9z+k3kZxtmcyNS8zzhHyw== X-Received: by 2002:a05:6512:220c:b0:549:8d67:c48e with SMTP id 2adb3069b0e04-54fb96035b2mr752125e87.29.1746606453255; Wed, 07 May 2025 01:27:33 -0700 (PDT) Received: from localhost.localdomain (87-100-218-141.bb.dnainternet.fi. [87.100.218.141]) by smtp.gmail.com with ESMTPSA id 2adb3069b0e04-54ea94c8e7bsm2266719e87.101.2025.05.07.01.27.32 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 07 May 2025 01:27:33 -0700 (PDT) From: Mikko Rapeli To: yocto-patches@lists.yoctoproject.org Cc: Mikko Rapeli Subject: [meta-security][PATCH 1/3] systemd-boot: whitespace fix Date: Wed, 7 May 2025 11:27:17 +0300 Message-ID: <20250507082719.1220303-1-mikko.rapeli@linaro.org> X-Mailer: git-send-email 2.49.0 MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 07 May 2025 08:27:41 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/1522 To fix warnings from new bitbake. Signed-off-by: Mikko Rapeli --- meta-tpm/recipes-core/systemd/systemd-boot_%.bbappend | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-tpm/recipes-core/systemd/systemd-boot_%.bbappend b/meta-tpm/recipes-core/systemd/systemd-boot_%.bbappend index 712a764..55323aa 100644 --- a/meta-tpm/recipes-core/systemd/systemd-boot_%.bbappend +++ b/meta-tpm/recipes-core/systemd/systemd-boot_%.bbappend @@ -2,6 +2,6 @@ DEPENDS += "\ ${@bb.utils.contains('DISTRO_FEATURES', 'tpm2', 'tpm2-tss libtss2 libtss2-tcti-device', '', d)} \ " -EXTRA_OEMESON:append= "\ +EXTRA_OEMESON:append = "\ ${@bb.utils.contains('DISTRO_FEATURES', 'tpm2', '-Dtpm2=true', '', d)} \ " From patchwork Wed May 7 08:27:18 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Mikko Rapeli X-Patchwork-Id: 62577 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id CED79C3ABC0 for ; Wed, 7 May 2025 08:27:41 +0000 (UTC) Received: from mail-lf1-f53.google.com (mail-lf1-f53.google.com [209.85.167.53]) by mx.groups.io with SMTP id smtpd.web10.3751.1746606456531898284 for ; Wed, 07 May 2025 01:27:36 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@linaro.org header.s=google header.b=QIxpekkM; spf=pass (domain: linaro.org, ip: 209.85.167.53, mailfrom: mikko.rapeli@linaro.org) Received: by mail-lf1-f53.google.com with SMTP id 2adb3069b0e04-549b159c84cso7411981e87.3 for ; Wed, 07 May 2025 01:27:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; t=1746606455; x=1747211255; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=6tS2YSNKFqXLf9ZbNvdr6UKE6isHzZkHwwhpzalvs20=; b=QIxpekkMYBfMKY4YUvF5v00Uv+MmvZ8pxKe+hxlnMgaqWaOWvUNmFn6ksWdhl4t7nu r+uPlegaZZrwxVVjr1Qw26YN9KJ5/SG5vafODW5FXbrYlkRZGVPoXw9L7lE76dcy5NgP f3dOn32foZIRW/RylxuC91oQ9KoduxKbc4DS2EOvi53seysuiVd4L0uSr2fVSe0aOWKg R4G4U/fUBBhIG1/b1WMQegJXV5SvnPWlhaDoAauv6pv556QHTLv5c2xyOUYamNu/q5Ow I+0oTUzZfqf345N+zQn6DR+le8NEo3QnoMrWYhuX0w8AikIptMv3ZVrzUzPt9Pkq5XmN XbFQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1746606455; x=1747211255; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=6tS2YSNKFqXLf9ZbNvdr6UKE6isHzZkHwwhpzalvs20=; b=oteh6vjolDDAzVFoPHijSiWLDXH6yOkpfS9tkAJF5/61iLj8yLRfWwBlDh1lof/H5i zB/q4OXx6O3qfitRT+1D4jKn6M3+jG7khpEzwQlh6cMo8DCWRqCMP/I3XKxxSdvLBAZw dx57oMI/kQ9RuK9FmZMZvpZi6R97H08otmQfpfUtxjS+7tOTUayfPxPIvQPw4HVG2Plk /CV4Bakj4llmu5RjfXgHK26JC4v4XG1r/nYB4rQLhmwnX5Zazcopub12ilRJmYltKgnV MBkFLvYkOCV2rX0/PrQrCEo7sSb9IlorHOgKTrPnd+GYmyt1kALi4dINOoqwyInShxVn FnIg== X-Gm-Message-State: AOJu0YyJaYrwLzLp7SeNHOFaCECWRtmf6X+VV81wdSFGCk4GWNMeWhYC 6dUk1X9lCmb4Tku6nPPeHPR1tBC3MosYJjnWarZhWMA4iQHcpIdzquJGfYelrOltfS+qe3/MSU8 45tc= X-Gm-Gg: ASbGncvFIyoP5h9OvIFCZkgwLC8AOp9x2B9iEfyxFk2Gt/IEYC81sV/atqiD93CsWLA LbzUfP3W4J8qP+K6kAk+gTrMhi7QraQDzSF5QWdyCitfL3V8o6lZ7xj6t1Zaa6jeo/VYrXwtuAj DWEH287zcgU97PaKRLHLFzdDqQEn+gK+lCOV0Ai7Ygu9zEh1emqPRDQY4wu62F9YeCVuCvIm3Cr 1gwhayrN5LxNgfLtRBze9860X1AQkwwzAA9V0fMiWtJVptS6si1eZoeg3Vv7JL9+A0gfdkMm4LS qqRDqd1Syhek/zkmPemnD/FbwxhsIy2S9RJIdK/dOiGPIlO4o0KKLZUFXmV7eA37HaXU5ClwHgG JHgTWAWEmASN3EgxigQ== X-Google-Smtp-Source: AGHT+IHt6G06PAskMo7T1jM4t75T0T7P3CG29S1duhPIVs1MEl3SqJ5g5h57Niorb11dLUTuuXUJKw== X-Received: by 2002:ac2:4c53:0:b0:54d:67e3:91d2 with SMTP id 2adb3069b0e04-54fb963001bmr896900e87.39.1746606454651; Wed, 07 May 2025 01:27:34 -0700 (PDT) Received: from localhost.localdomain (87-100-218-141.bb.dnainternet.fi. [87.100.218.141]) by smtp.gmail.com with ESMTPSA id 2adb3069b0e04-54ea94c8e7bsm2266719e87.101.2025.05.07.01.27.34 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 07 May 2025 01:27:34 -0700 (PDT) From: Mikko Rapeli To: yocto-patches@lists.yoctoproject.org Cc: Mikko Rapeli Subject: [meta-security][PATCH 2/3] systemd: fix empty file list with sed Date: Wed, 7 May 2025 11:27:18 +0300 Message-ID: <20250507082719.1220303-2-mikko.rapeli@linaro.org> X-Mailer: git-send-email 2.49.0 In-Reply-To: <20250507082719.1220303-1-mikko.rapeli@linaro.org> References: <20250507082719.1220303-1-mikko.rapeli@linaro.org> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 07 May 2025 08:27:41 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/1523 If measured-uki support is not enabled or build is continuing from previous stages, then the matching file list can be empty. Fixes build failure where sed says no input files. Signed-off-by: Mikko Rapeli --- meta-tpm/recipes-core/systemd/systemd_%.bbappend | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/meta-tpm/recipes-core/systemd/systemd_%.bbappend b/meta-tpm/recipes-core/systemd/systemd_%.bbappend index 82b79ba..c53b1e8 100644 --- a/meta-tpm/recipes-core/systemd/systemd_%.bbappend +++ b/meta-tpm/recipes-core/systemd/systemd_%.bbappend @@ -11,7 +11,10 @@ PACKAGECONFIG:append = " \ # TODO: use swtpm-native to calculate TPM measurements do_install:append() { if "${@bb.utils.contains('DISTRO_FEATURES', 'tpm2', 'true', 'false', d)}"; then - sed -i -e "s/^ConditionSecurity=measured-uki/ConditionSecurity=tpm2/g" \ - $( grep -rl ^ConditionSecurity=measured-uki ${D} ) + FILES=$( grep -rl ^ConditionSecurity=measured-uki ${D} || true ) + if [ "$FILES" != "" ]; then + sed -i -e "s/^ConditionSecurity=measured-uki/ConditionSecurity=tpm2/g" \ + "$FILES" + fi fi } From patchwork Wed May 7 08:27:19 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Mikko Rapeli X-Patchwork-Id: 62578 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id B4E6CC3ABC5 for ; Wed, 7 May 2025 08:27:51 +0000 (UTC) Received: from mail-lf1-f44.google.com (mail-lf1-f44.google.com [209.85.167.44]) by mx.groups.io with SMTP id smtpd.web11.3809.1746606464134266611 for ; Wed, 07 May 2025 01:27:44 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@linaro.org header.s=google header.b=lBRHGN5y; spf=pass (domain: linaro.org, ip: 209.85.167.44, mailfrom: mikko.rapeli@linaro.org) Received: by mail-lf1-f44.google.com with SMTP id 2adb3069b0e04-54d6f933152so9024180e87.1 for ; Wed, 07 May 2025 01:27:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; t=1746606462; x=1747211262; darn=lists.yoctoproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=Nm6znr5clwOYE3PL4WI29yaYIrrH6L5OIh9g+a7uykg=; b=lBRHGN5ybpCMVVEJGb2c3HwYK7ZrXST0RYyURR8VM6LkYVunkE4SWYbYtlzJVPKYel SjC3HbkuoYHYDnmfVbg64uMsa8Br1o/ihIDmpjmeh/gV8SkytSKJhQB7hjObvuROJGoO kDNKmpk2sHJ1M+V11GfUq9jqJROZHOVA629JupYyXau3jRolaz4VtNi8DmYmzxg6+olE dfpx3xNgc1Nas/w8Vvzob89XNnt3Zmob4qSKCeZ30yIM2B/e6Z9yfwVifsgFS8gAGisV 25QfSekUdtFyMKsZ/WNR0vv6DGFg572+e0u3fUTBBH8kl/Z3JTzlKQmCeXOwqm+pp2Ko dNww== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1746606462; x=1747211262; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=Nm6znr5clwOYE3PL4WI29yaYIrrH6L5OIh9g+a7uykg=; b=BaHcUymt5wLmDA3yajHHe9wBXeSsqf67DCFCbIpci7fjIibON1YadVhzV9Xfr/PONS 3QsiYbaG1A1m2DzCCRhQhuOF1JhhSyQXKbUFtObchnoGV9TNPBhHniizztDiQWimwV+I 1TAzr3t5r9Y7lrQv1oUuFAhiSAIAqJLagLuidOklhV6fbwtj7WpGhIn8Zndoeg/D44x+ JUR29ZjyF2znVLS1E8Lw0zDkrjwiiChQLqqR7blzRzz3qKQ5fqsTOHavVlwQzu21PpN3 RD4AjgYwb/MTE5jBLFaxIBdeX+R21Mw6a0R2/jIc/DsCu2QOlK2r9Iv4Iovh3Fqy6NH4 uOiw== X-Gm-Message-State: AOJu0Yxj/+rJbQU+nsee0iRvUTLLJAsl+EBehckVmzBu+EhNlcIcUREj wvUeV4IlkWvl2NtfsQftl2WbkY7ijft8kDDkOfVtomlD8PV0A3DCSYky3kGqv7NJ2jdw1cO86EW gSvw= X-Gm-Gg: ASbGnctSeo/zh1WmBPSDjGptFPnFq5lhXHQv3IrnkD1SN5DWOHo8qHb7daF5IYgcN31 t/GL1XppUpKp4ETCvur5o5DjDNi/PbCUn0D5gV7nE+5pnWKzUcT/uYCK+SDxyjWUy/gVvreJJ8Y SfXyeTlu4BCXp4T3RSkAwxFMf+uhtd3B7fJTWOtzGvrzVIHTt+X4/fa+E8IEm8FjJWYsZeTFOri vzwi8wn/2YgBzS3bHR9KI8jK8nHBMsNtwW77LSN1S2mDTIQQpZKXoADJDeuoBgFSUjwjDfjCsSa qE2pYl/xcF3jCy2W6CsXi6RHKaDp/vjUXOyL/DPggqk1aYg+EbALURpTv7vg5GcUp12SgrJyKVL dffjy1FS6QfN6hrMpmJRuDKh2fOpu X-Google-Smtp-Source: AGHT+IGm00VcUtEQVKjIVqbEs1MmZs4xszdsRzW0/H15ZSkpSsdYVtTl5CBQXoEG5wWlWj0hAAkKWA== X-Received: by 2002:a05:6512:308f:b0:54e:9097:6cb6 with SMTP id 2adb3069b0e04-54fb9630137mr802113e87.40.1746606462182; Wed, 07 May 2025 01:27:42 -0700 (PDT) Received: from localhost.localdomain (87-100-218-141.bb.dnainternet.fi. [87.100.218.141]) by smtp.gmail.com with ESMTPSA id 2adb3069b0e04-54ea94c8e7bsm2266719e87.101.2025.05.07.01.27.41 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 07 May 2025 01:27:41 -0700 (PDT) From: Mikko Rapeli To: yocto-patches@lists.yoctoproject.org Cc: Mikko Rapeli , Sathishkumar Duraisamy , Khem Raj , Max Krummenacher Subject: [meta-security][PATCH 3/3] systemd: disable linker warnings as errors on aarch64 Date: Wed, 7 May 2025 11:27:19 +0300 Message-ID: <20250507082719.1220303-3-mikko.rapeli@linaro.org> X-Mailer: git-send-email 2.49.0 In-Reply-To: <20250507082719.1220303-1-mikko.rapeli@linaro.org> References: <20250507082719.1220303-1-mikko.rapeli@linaro.org> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 07 May 2025 08:27:51 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto-patches/message/1524 openssl asm code is missing GCS branch protections and linker throws a warning which currently fails the build. Ignore the warnings for now since some branch protection is still applied and only GCS is missing. Works around: .../recipe-sysroot/usr/lib/libcrypto.so: warning: GCS is required by -z gcs, but this shared library lacks the necessary property note. The dynamic loader might not enable GCS or refuse to load the program unless all the shared library dependencies have the GCS marking. collect2: error: ld returned 1 exit status Cc: Sathishkumar Duraisamy Cc: Khem Raj Cc: Max Krummenacher Signed-off-by: Mikko Rapeli --- ...ild-disable-linker-warnings-as-error.patch | 31 +++++++++++++++++++ .../recipes-core/systemd/systemd_%.bbappend | 3 ++ 2 files changed, 34 insertions(+) create mode 100644 meta-tpm/recipes-core/systemd/files/0001-systemd-meson.build-disable-linker-warnings-as-error.patch diff --git a/meta-tpm/recipes-core/systemd/files/0001-systemd-meson.build-disable-linker-warnings-as-error.patch b/meta-tpm/recipes-core/systemd/files/0001-systemd-meson.build-disable-linker-warnings-as-error.patch new file mode 100644 index 0000000..457921d --- /dev/null +++ b/meta-tpm/recipes-core/systemd/files/0001-systemd-meson.build-disable-linker-warnings-as-error.patch @@ -0,0 +1,31 @@ +From 3bb29e3e924af117c0ade4f38d7c051897dd84e0 Mon Sep 17 00:00:00 2001 +From: Mikko Rapeli +Date: Wed, 7 May 2025 08:02:17 +0000 +Subject: [PATCH] systemd meson.build: disable linker warnings as errors + +aarch64 builds with GCS branch protection have issues when linking +to asm code in libraries without GCS support and linking fails. +This happens with openssl. Ignore the non-fatal error for now. + +Signed-off-by: Mikko Rapeli +--- + meson.build | 1 - + 1 file changed, 1 deletion(-) + +Upstream-Status: Inappropriate [configuration] + +diff --git a/meson.build b/meson.build +index 957e00ecadf..0295a65253c 100644 +--- a/meson.build ++++ b/meson.build +@@ -455,7 +455,6 @@ endif + # --as-needed and --no-undefined are provided by meson by default, + # run 'meson configure' to see what is enabled + possible_link_flags = [ +- '-Wl,--fatal-warnings', + '-Wl,-z,now', + '-Wl,-z,relro', + ] +-- +2.43.0 + diff --git a/meta-tpm/recipes-core/systemd/systemd_%.bbappend b/meta-tpm/recipes-core/systemd/systemd_%.bbappend index c53b1e8..ca470fe 100644 --- a/meta-tpm/recipes-core/systemd/systemd_%.bbappend +++ b/meta-tpm/recipes-core/systemd/systemd_%.bbappend @@ -1,3 +1,6 @@ +FILESEXTRAPATHS:prepend := "${THISDIR}/files:" +SRC_URI:append:aarch64 = " file://0001-systemd-meson.build-disable-linker-warnings-as-error.patch" + PACKAGECONFIG:append = " ${@bb.utils.contains('DISTRO_FEATURES', 'tpm2', 'tpm2', '', d)}" # for encrypted filesystems