summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-protocols
Commit message (Collapse)AuthorAgeFilesLines
...
* quagga: do not set PIDFile in service filesYi Zhao2021-03-116-6/+0
| | | | | | | | | | | | | | The systemd can not open the pid file because it is locked by quagga daemon. Fixes: $ systemctl status ospf6d.service Feb 25 05:53:26 intel-x86-64 systemd[1]: Starting OSPF routing daemon for IPv6... Feb 25 05:53:26 intel-x86-64 systemd[1]: ospf6d.service: Can't open PID file /run/quagga/ospf6d.pid (yet?) after start: Operation not permitted Feb 25 05:53:26 intel-x86-64 systemd[1]: Started OSPF routing daemon for IPv6. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: Whitelisted CVE-2007-0613 for mdnsSana Kazi2021-03-081-0/+13
| | | | | | | | | | | | | | | | | | CVE-2007-0613 is not applicable as it only affects Apple products i.e. ichat,mdnsresponder, instant message framework and MacOS. Also, https://www.exploit-db.com/exploits/3230 shows the part of code affected by CVE-2007-0613 which is not preset in upstream source code. Hence, CVE-2007-0613 does not affect other Yocto implementations and is not reported for other distros can be marked whitelisted. Links: https://vulmon.com/vulnerabilitydetails?qid=CVE-2007-0613 https://www.incibe-cert.es/en/early-warning/vulnerabilities/cve-2007-0613 https://security-tracker.debian.org/tracker/CVE-2007-0613 https://ubuntu.com/security/CVE-2007-0613 https://vulmon.com/vulnerabilitydetails?qid=CVE-2007-0613 Signed-off-by: Sana Kazi <Sana.Kazi@kpit.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netsnmp: remove --with-openssl=PATH configure optionMingli Yu2021-02-051-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The openssl already added in DEPENDS and the openssl related library will be in recipe-sysroot. So it's meanlingless to add the configure option "--with-openssl=${STAGING_EXECPREFIXDIR}" as the below help message. $ cd /prj/net-snmp-5.9/ $ ./configure --help [snip] --with-openssl=PATH Look for openssl in PATH/lib, or PATH may be "internal" to build with minimal copied OpenSSL code for USM only [snip] And there is also a side effect after add the above openssl configuration as the build path is added for NSC_LDFLAGS in /usr/bin/net-snmp-config. NSC_LDFLAGS="-L/prj/tmp/work/corei7-64-wrs-linux/net-snmp/5.9-r0/recipe-sysroot/usr/lib64 -Wl,-O1 -Wl,--hash-style=gnu -Wl,--as-needed -Wl,-z,relro,-z,now" To improve reproducibility for netsnmp as below. $ sed -i -e 's@${STAGING_DIR_HOST}@@g' -i ${D}${bindir}/net-snmp-config The NSC_LDFLAGS in net-snmp-config will be changed to below: NSC_LDFLAGS="-L/usr/lib64 -Wl,-O1 -Wl,--hash-style=gnu -Wl,--as-needed -Wl,-z,relro,-z,now" But it will result in other packages which depend on net-snmp such as corosync, quagga and etc uses the build host library and introduce below do_configure error. ERROR: QA Issue: This autoconf log indicates errors, it looked at host include and/or library paths while determining system capabilities. Rerun configure task after fixing this. [configure-unsafe] So remove the useless configuration to fix the issue. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: Remove hardcoded paths to build host in net-snmp-configKhem Raj2021-02-041-10/+8
| | | | | | | | | New autconf detects that NSC_LDFLAGS are hardcoded to use -L/usr/lib therefore edit these variables during build so that they have cross-compile friendly values when net-snmp-config is used during build of dependent packages Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: fix build with dashMartin Jansa2021-02-021-1/+1
| | | | | | | | | | * fixes: | make[1]: Leaving directory 'net-snmp/5.9-r0/net-snmp-5.9/mibs' | sed: can't read net-snmp/5.9-r0/image/usr/lib/pkgconfig/{netsnmp-agent.pc,netsnmp.pc}: No such file or directory | WARNING: exit code 2 from a shell command. Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: improve reproducibilityMingli Yu2021-01-292-2/+44
| | | | | | | | | Add a patch to fix the gap between 32bit and 64bit system when the configure option "--with-openssl=${STAGING_EXECPREFIXDIR}" passed in. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: control smux via PACKAGECONFIGDiego Santa Cruz2021-01-211-3/+5
| | | | | | | | | | | | | | | | Support for smux is always enabled by the recipe, but it can be a security risk since it makes the snmpd daemon listen on TCP port 199. This makes it contrallable via PACKAGECONFIG, so that it can be easily disabled from the distro or local config. The mechanism makes it easy to add control for other MIB modules via PACKAGECONFIG later if need be. For compatibility smux is added to the default PACKAGECONFIG, so there is no change in the default build configuration. Signed-off-by: Diego Santa Cruz <Diego.SantaCruz@spinetix.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: upgrade 1096.40.7 -> 1310.40.42Zheng Ruoqin2021-01-122-3/+3
| | | | | | | | Refresh the following patch: 0001-mdns-include-stddef.h-for-NULL.patch Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* quagga: unify volatiles file nameYi Zhao2020-11-031-2/+2
| | | | | | | Make the volatiles file name starts with digital. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freediameter: use /run instead of /var/run in systemd service fileQi.Chen@windriver.com2020-10-201-1/+1
| | | | | | | | /var/run has been deprecated by systemd, so use /run instead, as suggested by systemd. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: add BSD-3-Clause to LICENSEMikko Rapeli2020-09-081-1/+1
| | | | | | | | | | | | | | | | | | | | | The LICENSE file in source tree says: The majority of the source code in the mDNSResponder project is licensed under the terms of the Apache License, Version 2.0, available from: <http://www.apache.org/licenses/LICENSE-2.0> To accommodate license compatibility with the widest possible range of client code licenses, the shared library code, which is linked at runtime into the same address space as the client using it, is licensed under the terms of the "Three-Clause BSD License". The Linux Name Service Switch code, contributed by National ICT Australia Ltd (NICTA) is licensed under the terms of the NICTA Public Software Licence (which is substantially similar to the "Three-Clause BSD License", with some additional language pertaining to Australian law). Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: set CVE_PRODUCT to "apple:mdnsresponder"Mikko Rapeli2020-09-081-0/+2
| | | | | | | | This is used in CVEs like https://nvd.nist.gov/vuln/detail/CVE-2015-7987 Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: update to version 1096.40.7Mikko Rapeli2020-09-089-547/+224
| | | | | | | | | | | | | Refresh Makefile patch (build.patch) to properly cross compile mdns. Then try refresh patches which still apply. Following patches don't apply anymore due to refactoring done on mdns side so thus dropping patches: * 0005-Handle-noisy-netlink-sockets.patch * 0007-Indicate-loopback-interface-to-mDNS-core.patch Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* quagga,pimd: Use update-alternatives for pimdKhem Raj2020-09-011-1/+5
| | | | | | | pimd is provided by both quagga and pimd, prefer quagga over pimd when both are in image Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: upgrade 5.8 -> 5.9Ovidiu Panait2020-08-3116-416/+56
| | | | | | | | | | | | | Upgrade net-snmp 5.8 -> 5.9: * refresh patches * drop backports: https://github.com/net-snmp/net-snmp/commit/5f881d3bf24599b90d67a45cae7a3eb099cd71c9 https://github.com/net-snmp/net-snmp/commit/6e1329bde834e0edcfadb88d3c05e6015e945638 https://github.com/net-snmp/net-snmp/commit/abdcb6af8df352a257a7092c1649471af1e4e97b https://github.com/net-snmp/net-snmp/commit/21260fdd60c172839f997fb6f888a6e21c6825eb Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openlldp: Update to latest masterKhem Raj2020-08-1310-1/+882
| | | | | | | | | Backport patches from https://github.com/intel/openlldp/pull/55 to fix build with -fno-common Append SRCPV to PV since we are not at exact release point Signed-off-by: Khem Raj <raj.khem@gmail.com>
* quagga: Use -fcommon to compileKhem Raj2020-08-131-0/+2
| | | | | | | clang11 and gcc10 have switched to using -fno-common by default this hoowever still needs to use -fcommon until fixed Signed-off-by: Khem Raj <raj.khem@gmail.com>
* babeld: upgrade 1.9.1 -> 1.9.2Zheng Ruoqin2020-07-201-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp, openjpeg: add proper CVE tags to patchesMingde (Matthew) Zeng2020-07-161-1/+3
| | | | | Signed-off-by: Mingde (Matthew) Zeng <matthew.zeng@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: Security fix CVE-2019-20892Armin Kuster2020-06-262-0/+119
| | | | | | | | | | | | | | | | | Source: net-snmp.org MR: 104509 Type: Security Fix Disposition: Backport from https://github.com/net-snmp/net-snmp/commit/5f881d3bf24599b90d67a45cae7a3eb099cd71c9 ChangeID: 206d822029d48d904864f23fd1b1af69dffc26c8 Description: Fixes CVE-2019-20892 which affect net-snmp <= 5.8pre1 Had to fix up some file do to later code restructioning. "int refcnt;" addition was done in include/net-snmp/library/snmpusm.h Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freediameter: upgrade 1.3.2 -> 1.4.0Ovidiu Panait2020-06-231-2/+1
| | | | | Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: refresh patchesPatrick Williams2020-05-304-30/+33
| | | | | | | | | | | | | | | | | Refreshed patches for 5.8 due to the following: ERROR: net-snmp-5.8-r0 do_patch: Command Error: 'quilt --quiltrc .../net-snmp/5.8-r0/recipe-sysroot-native/etc/quiltrc push' exited with 0 Output: Applying patch 0001-Add-pkg-config-support-for-building-applications-and.patch patching file configure ... Hunk #1 succeeded at 32248 with fuzz 2 (offset 1826 lines). Hunk #2 FAILED at 31447. 1 out of 2 hunks FAILED -- rejects in file configure ... Patch 0001-Add-pkg-config-support-for-building-applications-and.patch does not apply (enforce with -f) Signed-off-by: Patrick Williams <patrick@stwcx.xyz> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: upgrade 878.260.1 -> 878.270.2Wang Mingyu2020-04-081-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* usrsctp: use UPSTREAM_CHECK_COMMITSPierre-Jean Texier2020-04-041-0/+2
| | | | | | | | | | | | Fixes: $: devtool check-upgrade-status usrsctp <...> INFO: usrsctp git UNKNOWN_BROKEN None f4e14ab5e12187cb2cf1ddbdc0ee5555aead3f72 Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: fix reproducibilty issues in net-snmp-configJeremy Puhlman2020-03-061-0/+3
| | | | | | | Both STAGING_HOST_DIR and -fmacro-prefix-map path to WORKDIR were encoded in the config. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: multilib fixesJeremy Puhlman2020-03-061-1/+5
| | | | | | | | | | | net-snmp/net-snmp-config.h: - encodes type sizes - encodes pathing into the libdir net-snmp-config: - encodes build configuration data and lib pathing. Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* babeld: add UPSTREAM_CHECK_GITTAGREGEXPierre-Jean Texier2020-03-061-0/+2
| | | | | | | | | | | | | Fixes: INFO: babeld, 1.9.1, 20110804, None, 794863e90f81ee38b9dddd72dfabcba634b2fc07 After this commit: INFO: Skip package babeld (status = MATCH, current version = 1.9.1, next version = 1.9.1) Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* quagga: make version.h a multilib headerJeremy Puhlman2020-03-061-1/+3
| | | | | | | | version.h contains the configure options passed during the build which differs between multilibs Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* quagga: fix reproducibily issue.Jeremy Puhlman2020-03-061-0/+1
| | | | | | | | version.h contains the options passed to configure, which includes the path to the recipe-sysroot on the build host. Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open-lldp: Add initial version 1.0.1Jonathan Richardson2020-02-274-0/+145
| | | | | | | | | Open-LLDP provides a Link Layer Discovery Protocol agent that supports DCB (Data Center Bridging). The tc utility from iproute is needed to manipulate traffic control settings in the kernel. Signed-off-by: Jonathan Richardson <jonathan.richardson@broadcom.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: Add pkgconfig file supportJeremy Puhlman2020-02-202-0/+171
| | | | | Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* quagga: install tmpfiles snippet to /usr/lib/tmpfiles.dCallaghan, Dan2020-02-191-2/+4
| | | | | | | | Package-owned tmpfiles snippets belong in /usr/lib/tmpfiles.d, /etc/tmpfiles.d is for administrator customisations. Signed-off-by: Dan Callaghan <dan.callaghan@opengear.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* quagga: fix tmpfiles snippet to refer to /run instead of /var/runCallaghan, Dan2020-02-191-1/+1
| | | | | | | | | | | | This fixes a complaint from systemd on boot: systemd-tmpfiles[393]: [/etc/tmpfiles.d/quagga.conf:1] Line references path below legacy directory /var/run/, updating /var/run/quagga → /run/quagga; please update the tmpfiles.d/ drop-in file accordingly. Signed-off-by: Dan Callaghan <dan.callaghan@opengear.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: improve numerous aspects of Posix backendMatt Hoosier2020-02-0612-0/+945
| | | | | | | | | | | | | | | | | | | | | Apple's default implementation of the Posix backend for mDNSResponder has a number of weaknesses. Address several of them, most notably: * Improve interface tracking, preventing confusion to mdns's state machine. Prevents spurious removal/republication cycles whenever network interfaces are added or removed. * Support network interfaces whose indeces are great than 31. Indices grow past that range surprisingly quickly, especially with multi- homed, mobile, wifi, Bluetooth, VPN, VLANs, or other interfaces present. * Correctly handle edge cases during removal of a network interface. The fixes are kept as a patch series for clarity. Signed-off-by: Matt Hoosier <matt.hoosier@garmin.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Inherit perlnative for pod2manKhem Raj2020-02-021-0/+2
| | | | | | | replace host version of pod2man perl-native provides, helps in improving reproducability Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openl2tp: update systemd service fileKai Kang2019-12-192-2/+2
| | | | | | | | | | | | | | | | It shows an warning of openl2tp in systemd log: | /lib/systemd/system/openl2tpd.service:8: PIDFile= references a path | below legacy directory /var/run/, updating /var/run/openl2tpd.pid → | /run/openl2tpd.pid; please update the unit file accordingly. Update the systemd service file to fix the warning. Update SRC_URI as well that the homepage openl2tp.org has been closed. Use archived file on sourceforge instead. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: rename distro_features_check to features_checkDenys Dmytriyenko2019-11-211-1/+1
| | | | | | | Avoid warning due to the class rename in OE-Core. Signed-off-by: Denys Dmytriyenko <denys@ti.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: upgrade 878.200.35 -> 878.260.1Zheng Ruoqin2019-11-041-2/+2
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: Mark as incompatible with muslAdrian Bunk2019-11-012-43/+2
| | | | | | | musl does not support mDNS or NSS plugins. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* babeld: upgrade 1.8.4 -> 1.9.1Zheng Ruoqin2019-11-011-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* usrsctp: Upgrade to a more recent git snapshotAdrian Bunk2019-11-012-30/+1
| | | | | | | Patch applied upstream removed. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* radiusclient: Clarify BSD license variantChristophe PRIOUZEAU2019-10-241-1/+1
| | | | | | | | The License of radiusclient is BSD-3-Clause and BSD-2-Clause and HPND. Signed-off-by: Christophe Priouzeau <christophe.priouzeau@st.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freediameter: Clarify BSD license variantChristophe PRIOUZEAU2019-10-241-1/+1
| | | | | | | The License of freediameter is BSD-3-Clause. Signed-off-by: Christophe Priouzeau <christophe.priouzeau@st.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* quagga: fix PIDFile path for service filesTrevor Gamblin2019-10-176-12/+12
| | | | | | | | | | | | | | | Multiple quagga service files are causing the following type of message to appear during boot: /lib/systemd/system/zebra.service:10: PIDFile= references a path below legacy directory /var/run/, updating /var/run/quagga/zebra.pid → /run/quagga/zebra.pid; please update the unit file accordingly. Update the service files included as part of the recipe to use /run instead of /var/run as the PIDFile path. Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: Fix PACKAGECONFIG for perlRobert Yang2019-09-301-4/+5
| | | | | | | | | | | | | | | | * Remove perl-lib since it had been removed by oe-core: commit 68552c353255188de3d5b42135360a30e7eac535 Author: Alexander Kanavin <alex.kanavin@gmail.com> Date: Sun Dec 2 12:46:37 2018 +0100 perl: remove the previous version of the recipe Now the files are in perl pacakge. * Fix perl paths when perl is enabled. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: update SRC_URIKai Kang2019-07-261-3/+3
| | | | | | | Replace source zip ball with tarball for net-snmp to avoid zip bomb issue. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freediameter: update to 1.2.1Oleksandr Kravchuk2019-07-101-3/+3
| | | | | | | License checksum changed due to modified copyright years. Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xl2tpd: Remove the old 1.3.6 versionAdrian Bunk2019-06-183-49/+38
| | | | | | | | | It started as one recipe for the latest stable release and one for the latest git, but after these became ancient release and latest release it no longer made sense to have two recipees. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: split net-snmp-config to package net-snmp-devHongxu Jia2019-06-151-1/+5
| | | | | | | | | | | | | | | | Move net-snmp-config in which contains build path from package net-snmp to net-snmp-dev. It refers ubuntu, here are we got from Ubuntu 18.04 $ dpkg -c /var/cache/apt/archives/libsnmp-dev_5.7.3+dfsg-1.8ubuntu3.1_amd64.deb drwxr-xr-x root/root 0 2018-10-15 22:16 ./usr/bin/ -rwxr-xr-x root/root 43797 2018-10-15 22:16 ./usr/bin/mib2c -rwxr-xr-x root/root 8780 2018-10-15 22:16 ./usr/bin/mib2c-update -rwxr-xr-x root/root 29427 2018-10-15 22:16 ./usr/bin/net-snmp-config -rwxr-xr-x root/root 3688 2018-10-15 22:16 ./usr/bin/net-snmp-create-v3-user Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: update to 878.200.35Oleksandr Kravchuk2019-05-231-4/+3
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-04 18:16:03 +0000