From patchwork Thu Dec 25 19:21:50 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Gyorgy Sarvari X-Patchwork-Id: 77533 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 0AC30E7AD67 for ; Thu, 25 Dec 2025 19:22:03 +0000 (UTC) Received: from mail-wm1-f54.google.com (mail-wm1-f54.google.com [209.85.128.54]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.143463.1766690514852842079 for ; Thu, 25 Dec 2025 11:21:55 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=VqPV5cZD; spf=pass (domain: gmail.com, ip: 209.85.128.54, mailfrom: skandigraun@gmail.com) Received: by mail-wm1-f54.google.com with SMTP id 5b1f17b1804b1-47755de027eso39699465e9.0 for ; Thu, 25 Dec 2025 11:21:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1766690513; x=1767295313; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:from:to:cc:subject:date:message-id:reply-to; bh=bSy6wFShpbI37jR2+yapSDj8t+UbiXIVH46mHFV5fQg=; b=VqPV5cZDMozKdkxMrv0rNni75ewaaUB61f+mjoPRu23o08428+D//SIjLItlQWqdAy J76tGM7j5GvG8SMHnLMuLP/ni/wbYTWepZaC4lEJHxUS3idUTjGpkvYmdUdOd1xj/jl0 DmNj29Q4nNdAhZwwk7beqaL0SB/B83LrNJWIC9BFzJdo1UrmgNPecCnl7dHCj+oRCXT3 5CdM0G/aUdl/Qc40nleZ7cDWTs6YKPOXzR1MgGMkfgWJK0RIhht5738gQz+S584Te5mE SakASfFofimchBmkfti2IqQGRLtbiKVkx8ELYQO0LLDZDqaHK8z6kIwe3cFResZMVhL0 m7YQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1766690513; x=1767295313; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=bSy6wFShpbI37jR2+yapSDj8t+UbiXIVH46mHFV5fQg=; b=BwTJ3+F76Wee7bIoErb17Ot0lpiCJQ0rb/oy3MtXF4Ym/BQ2H3DNLOFzzYCpc2fFTc Eq7kk0AkZ1CmwjDnv9odDItFfg+Xlwk5HSdQIOJuGD/B2we3l/+dLxuoCSL3gFuzwqlk T9pKCvS6xwiON0m72lZ/dBi2OswkspElSrirGao81PDhYfOTGE41NSt+mSH6M9+z5st9 mTtrZwyAvpfmxfHiJzJ8HFZPpGmnYZ5shufX4cS1WdHJVA6SLYZdiQnujkBrwMvptIiZ Dio1N9q2h1dm7ADPMpQukxmEri7+dKmbCpsv4TV1fSklHfyI+xj3dYcvYQeqvWKc18p1 Kt9w== X-Gm-Message-State: AOJu0YzV1i2ZC/nL8N5FvMgUZrit6oBEapXNNH+36gOY0+6GAWyTyaYS +dOxGsZ0v6F9vNb+CYpuLdym2NqeiqaWTCbnL+oHiuqVL03w64j36c9RAGOHWQ== X-Gm-Gg: AY/fxX4XQunw3zFKSwyPW0lUJFamkrmPaj6Rf78tHyWjn3Fea7x7CktYDg4HfnAU55Y wMzTy0ryhqhbCN7ZjXRaf4TeEuh2bA8D0bfOCAsYMgRlI8Xk4H6tJjDiKzYY4RNyfW8D4vyjUdb He8F/RevA7H6km+bWeSfu0XGoAJcoOAcRDw/jFF9y9oyceA8O8GYKcO6kGsrn1OQZ3+6DhNqeB0 9PU189PKh0bbQTAlyWpHy/xTThv77WhGOmX1Np0CdCfIPhmU12sdEIu3PM+acvg5pCHrHs/mXbA 848hgiEnIweYeXakhR/Ew/wh+n3d+qcZHgCDPG9zZblu4AOVNBQaGVbh0agq5KzyP8YOVyabEl7 FPi+qkAPb4CUAX59XoJm3/Dl5EBMH6GOi+aftUVJSKbLAS3+9emOkSnP8luE7E37D3ZZas+WRgI UrvooD2PXC X-Google-Smtp-Source: AGHT+IG9eX1B9GQr1m+Ym0BG5NNa1rl4iBgRTmWuXUBggRMugnYUhIE3T60QZngdGd9AeCT+d/Tzfw== X-Received: by 2002:a05:6000:420a:b0:431:864:d492 with SMTP id ffacd0b85a97d-4324e50600dmr23135979f8f.36.1766690512695; Thu, 25 Dec 2025 11:21:52 -0800 (PST) Received: from desktop ([51.154.145.205]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4324ea1af2bsm41545758f8f.1.2025.12.25.11.21.52 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 25 Dec 2025 11:21:52 -0800 (PST) From: Gyorgy Sarvari To: openembedded-devel@lists.openembedded.org Subject: [meta-networking][PATCH 1/2] cifs-utils: upgrade 7.0 -> 7.4 Date: Thu, 25 Dec 2025 20:21:50 +0100 Message-ID: <20251225192151.3580069-1-skandigraun@gmail.com> X-Mailer: git-send-email 2.52.0 MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 25 Dec 2025 19:22:03 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/122931 Contains fix for CVE-2025-2312 The recipe installs two scripts in bindir - this is nothing new. But the shebang has changed from "/usr/bin/env python3" to "/usr/bin/python3" - these were always python scripts, but they weren't recognized as such during the QA checks, and python wasn't installed as a runtime dependency. Now QA check is complaining about missing python in RDEPENDS. To avoid mandatory python installation, package the scripts separately in cifs-utils-scripts package. Shortlog: cifs-utils: bump version to 7.4 mount.cifs: retry mount on -EINPROGRESS cifs.upcall: correctly treat UPTARGET_UNSPECIFIED as UPTARGET_APP cifscreds: use for basename getcifsacl, setcifsacl: use for basename cifs.upcall: fix memory leaks in check_service_ticket_exits() cifs-utils: bump version to 7.3 Fix regression in mount.cifs with guest mount option resolve_host.c: Initialize site_name cldap_ping: Fix socket fd leak cifs-utils: bump version to 7.2 getcifsacl: fix return code check for getting full ACL cifs-utils: add documentation for upcall_target cifs-utils: avoid using mktemp when updating mtab cldap_ping.c: add missing include configure.ac: libtalloc is now mandatory cifscreds: allow user to set the key's timeout cifscreds: use continue instead of break when matching commands Do not pass passwords with sec=none and sec=krb5 docs: add esize description docs: add max_cached_dirs description docs: update actimeo description Fix compiler warnings in mount.cifs CIFS.upcall to accomodate new namespace mount opt cifs-utils: Skip TGT check if valid service ticket is already available use enums to check password or password2 in set_password, get_password_from_file and minor documentation additions cifs-utils: support and document password2 mount option smbinfo: add bash completion support for filestreaminfo, keys, gettconinfo cifs-utils: bump version to 7.1 cifs: update documentation for sloppy mount option docs: add closetimeo description docs: add compress description checkopts: update it to work with latest kernel version cifs-utils: add documentation for multichannel and max_channels cifs-utils: smbinfo: add gettconinfo command Implement CLDAP Ping to find the closest site mount.cifs.rst: update section about xattr/acl support mount.cifs.rst: add missing reference for sssd getcifsacl, setcifsacl: add missing include for le32toh getcifsacl, setcifsacl: add missing include for XATTR_SIZE_MAX cifs-utils: Make automake treat /sbin as exec, not data pam_cifscreds: fix warning on NULL arg passed to %s in pam_syslog() cifs.upcall: fix UAF in get_cachename_from_process_env() cifs-utils: add documentation for acregmax and acdirmax setcifsacl: Fix uninitialized value. Use explicit "#!/usr/bin/python3" Signed-off-by: Gyorgy Sarvari --- .../cifs/{cifs-utils_7.0.bb => cifs-utils_7.4.bb} | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) rename meta-networking/recipes-support/cifs/{cifs-utils_7.0.bb => cifs-utils_7.4.bb} (84%) diff --git a/meta-networking/recipes-support/cifs/cifs-utils_7.0.bb b/meta-networking/recipes-support/cifs/cifs-utils_7.4.bb similarity index 84% rename from meta-networking/recipes-support/cifs/cifs-utils_7.0.bb rename to meta-networking/recipes-support/cifs/cifs-utils_7.4.bb index e2918503be..9c7b9e3246 100644 --- a/meta-networking/recipes-support/cifs/cifs-utils_7.0.bb +++ b/meta-networking/recipes-support/cifs/cifs-utils_7.4.bb @@ -4,8 +4,8 @@ SECTION = "otherosfs" LICENSE = "GPL-3.0-only & LGPL-3.0-only" LIC_FILES_CHKSUM = "file://COPYING;md5=d32239bcb673463ab874e80d47fae504" -SRCREV = "316522036133d44ed02cd39ed2748e2b59c85b30" -SRC_URI = "git://git.samba.org/cifs-utils.git;branch=master" +SRCREV = "edac7178bec9520fb57d14946e67f5dd33b82d43" +SRC_URI = "git://git.samba.org/cifs-utils.git;branch=master;tag=${BP}" DEPENDS += "libtalloc" @@ -38,6 +38,11 @@ do_install:append() { fi } +PACKAGE_BEFORE_PN = "${PN}-scripts" FILES:${PN} += "${base_libdir}/security" FILES:${PN}-dbg += "${base_libdir}/security/.debug" +# these scripts are python, package them separately so python +# won't be mandatory dependency +FILES:${PN}-scripts = "${bindir}/smb2-quota ${bindir}/smbinfo" +RDEPENDS:${PN}-scripts += "python3-core" RRECOMMENDS:${PN} = "kernel-module-cifs" From patchwork Thu Dec 25 19:21:51 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Gyorgy Sarvari X-Patchwork-Id: 77532 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 0C63CE7AD6A for ; Thu, 25 Dec 2025 19:22:03 +0000 (UTC) Received: from mail-wr1-f46.google.com (mail-wr1-f46.google.com [209.85.221.46]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.143464.1766690516078039920 for ; Thu, 25 Dec 2025 11:21:56 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=W8ya6syo; spf=pass (domain: gmail.com, ip: 209.85.221.46, mailfrom: skandigraun@gmail.com) Received: by mail-wr1-f46.google.com with SMTP id ffacd0b85a97d-42fbc305882so3328395f8f.0 for ; Thu, 25 Dec 2025 11:21:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1766690514; x=1767295314; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=Yi2BVDuzrG26X4sJ8cOvhd8Q6pfg3ExV0wOlswGc/zM=; b=W8ya6syoM5Xzkd9qisSrPjHyfrvJhgXdXPcAUjra7hd4gTRoyQ7ueBMnabjoFsdJOS 5JBtzm4/jTSXHjRk/U+ifvBee6lqP7cvTlpOe8ZhogtZnzBMg9Euammu69f4AYKOAIP5 lCZaMXjLVOQ6ZyaA6tlfa7o/SFQPh/K7b5L1wYGHTAkNByrw8fBQLR5M8rSvgv0jSSQJ Df1dtZMj3Lc73KZ34cUPtm5NtgsPfuer6ITrXBNvM6kyzl7tOkYtR7XXGxH0W17yv3hX KZyo8/0v/FGAkYXZucmv6dUG1LPXM7iuBU+YuBd7FoeBfnV5ec7m6EVIlUx9yHrGRfwK IKBg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1766690514; x=1767295314; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=Yi2BVDuzrG26X4sJ8cOvhd8Q6pfg3ExV0wOlswGc/zM=; b=YdGa5bNowJgDM2G4vj4jONqfGqjsC2laL3ST8rvjojuS7RXdfrHhLtR2e6Q9PqpcVJ 3idMcn26HOaerHuhXOI1f6uxw4k+Kor1CqdP04v0yt0EhLsqKGdDiR+ZjjezwzR4avvv BkY72AGKoz32VoQORa4Jo3ieHdLYp19MIkpDLMowmbIfOeodzDDQ5KYpuAwWtfB5QtDJ Im145IG3I9wyqDp9CleCHTsVf6+CSSIIti0/oDJgb15/hlRjX3+OuaJgY/HhF19bmOJW 0mqU86yd0Tweaic0Gszo5RZzm3MMQbcRJpS3hFGuVIoj7KqmTpXMng9IeX54UMMPrkuq uVLg== X-Gm-Message-State: AOJu0YxNRJXos/W5EfIQSoDFKBj9VLzGh7F7diM8xPZNs0Iwikei3E67 VYe9hH3TU16KAEQEJSkYY9QToGctmGZho30fxaB/FtmbLdGVXJEjYbtrcAcKBw== X-Gm-Gg: AY/fxX4FmUniFmb4BXlIKreFm7+F0DgO8kuEJAA7ZKAOEPWhY8QWJPk0ZwrJtxdlBIk 1kg3cweecTCeJCwRsJ9aNhdAcB6C/I+ZAH0s0QPuCzVCE/xeoBUkerjmX/g/12vJsomIWHl5kvW GvhR4UZ9NjnvtK9To/5vbM/Fs7V6zRm4dHPMIQELvAD8zL0oUKFvabLLVAUCOn2bvFn0huIewNT 51XWbu1GMHCc8BjSkjZVrVsIT+w9y61UG8zZ1QyzUfNMLRzTyqY6Gp508WVYh7oIgoAsCmD7mgI ngelPW4is+WdOsWVydFvvSdEaNNL19va3uWe6eKQ4PFt53ZYcmuMWk+MsqMjD2KNS1mRn468pyl Hf4W1B/T9ni1S6+m5QpW1C2GF864qLCRNSvbVfqE86/gafI7IIvHKda4/e7v7ciprf6ZawWjO5e IVcsSy+5AU X-Google-Smtp-Source: AGHT+IHjjUlctQDjIpRJqzUC+72DU/ip4hg4tkzJ9MUaWCllN3XtQM9y7oKe3dkOZvMesxHEQgd+lA== X-Received: by 2002:a5d:584d:0:b0:431:8f8:7f17 with SMTP id ffacd0b85a97d-4324e4bf5bamr24639700f8f.10.1766690514382; Thu, 25 Dec 2025 11:21:54 -0800 (PST) Received: from desktop ([51.154.145.205]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-4324ea1af2bsm41545758f8f.1.2025.12.25.11.21.52 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 25 Dec 2025 11:21:53 -0800 (PST) From: Gyorgy Sarvari To: openembedded-devel@lists.openembedded.org Subject: [meta-networking][PATCH 2/2] cifs-utils: fix broken PACKAGECONFIGs Date: Thu, 25 Dec 2025 20:21:51 +0100 Message-ID: <20251225192151.3580069-2-skandigraun@gmail.com> X-Mailer: git-send-email 2.52.0 In-Reply-To: <20251225192151.3580069-1-skandigraun@gmail.com> References: <20251225192151.3580069-1-skandigraun@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 25 Dec 2025 19:22:03 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/122932 Some PACKAGECONFIGs (cifsidmap, cifsacl, pam) were failing to build since a while, erroring out with: | ../sources/cifs-utils-7.4/resolve_host.c:23:10: fatal error: config.h: No such file or directory | 23 | #include "config.h" | | ^~~~~~~~~~ | compilation terminated. The config.h header is generated in the root of build folder, and it seems that the recipe can't be built 100% out of the source tree. To avoid this issue, add ${B} as an include folder to CFLAGS, so it finds the required header. Signed-off-by: Gyorgy Sarvari --- meta-networking/recipes-support/cifs/cifs-utils_7.4.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta-networking/recipes-support/cifs/cifs-utils_7.4.bb b/meta-networking/recipes-support/cifs/cifs-utils_7.4.bb index 9c7b9e3246..d8ab2dacb1 100644 --- a/meta-networking/recipes-support/cifs/cifs-utils_7.4.bb +++ b/meta-networking/recipes-support/cifs/cifs-utils_7.4.bb @@ -21,6 +21,8 @@ PACKAGECONFIG[pam] = "--enable-pam --with-pamdir=${base_libdir}/security,--disab inherit autotools pkgconfig +CFLAGS += "-I ${B}" + do_configure:prepend() { # want installed to /usr/sbin rather than /sbin to be DISTRO_FEATURES usrmerge compliant # must override ROOTSBINDIR (default '/sbin'),