summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
* ipsec-tools: Fix build with glibc 2.20Khem Raj2014-09-082-0/+24
| | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* memcached: add knob to detect whether hugetlbfs are checkedChong Lu2014-09-082-3/+42
| | | | | | | | | Add knob to detect whether hugetlbfs are checked or not. This patch fixed the error: ld: cannot find -lhugetlbfs Signed-off-by: Chong Lu <Chong.Lu@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* meta-networking: Update layer dependency informationKhem Raj2014-09-082-2/+8
| | | | | | | | | | | | | | | | since python recipes are now spun out into its own layer and there are recipes like crda which depend on M2Crypto python module, of which the recipe is now moved from meta-oe into meta-python, we need to express this change of layers otherwise if you are not using meta-python then you end up with errors e.g. Nothing PROVIDES 'python-m2crypto-native' (but meta-networking/recipes-connectivity/crda/crda_1.1.3.bb DEPENDS on or otherwise requires it). Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* ntp: add deterministic support for KPPS interfacePeter Bigot2014-09-011-0/+2
| | | | | | | | | | | | | | ntp checks for presence of sys/timepps.h to determine whether the kernel supports the RFC 2783 KPPS interface. Under Linux the pps-tools package installs this header. Without this feature the ATOM clock driver does not work, and other drivers like NMEA have reduced precision. Remove the feature non-determinism and increase ntpd capabilities by adding an explicit dependency. See: http://doc.ntp.org/4.2.6/kernpps.html Signed-off-by: Peter A. Bigot <pab@pabigot.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* ntp: re-enable server debugging and control by PACKAGECONFIGPeter Bigot2014-09-012-25/+3
| | | | | | | | | | | | | | | | | | The description in a previous patch to disable debugging is incorrect. Although the option is default-enabled in configure.ac, configure does respect the option that disables it. In ntp 4.2.7 the option code is refactored to ntp_debug.m4 and has an effect in sntp as well. Adding --disable-debugging to the top-level configure options overrides the default for both 4.2.6 and 4.2.7 without patching the distribution. Make the selection explicit and configurable, but restore the historical default. Absence of debugging capability in the server makes it difficult to validate complex configurations. Signed-off-by: Peter A. Bigot <pab@pabigot.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* autofs: uprev it to 5.1.0Roy Li2014-08-2157-3931/+176
| | | | | | | | | | 1. Uprev it to 5.1.0, add remove the unneed patches 2. fix a building failure since not include stdarg.h 3. using pkg-config to check xml and krb5 4. force STRIP to empty to not strip the file Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* strongswan: uprev to version 5.2.0Jackie Huang2014-08-213-68/+2
| | | | | | | | | * removed two patches which were already integrated in 5.2.0: strongswan-4.3.3-5.1.1_asn1_unwrap.patch strongswan-5.0.0-5.1.2_reject_child_sa.patch Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* traceroute: uprev it to 2.0.20Roy Li2014-08-211-7/+5
| | | | | | | | | | | | | | 1. uprev to 2.0.20 2. Update the license md5sum, since the address is changed in COPYING*: From: Copyright (C) 1989, 1991 Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA To: Copyright (C) 1989, 1991 Free Software Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* tcpdump: uprev it to 4.6.1Roy Li2014-08-218-98/+6
| | | | | | | | | 1. uprev to 4.6.1 2. remove three obsolete patches 3. use PACKAGECONFIG, and the default value is ipv6 openssl Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* wireshark: add libsmi portaudio to PACKAGECONFIGRoy.Li2014-08-211-1/+3
| | | | | Signed-off-by: Roy.Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* ntp: fix CVE-2013-5211Zhang Xiao2014-08-212-0/+113
| | | | | | | | | | | The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013. Signed-off-by: Zhang Xiao <xiao.zhang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* ntp: Disable debugging by defaultXufeng Zhang2014-08-212-0/+24
| | | | | | | | | | There is a problem in configure.ac file that whether or not '--enable-debugging' is specified in configure cmdline, debugging is always enabled. We should disable ntp debugging by default. Signed-off-by: Xufeng Zhang <xufeng.zhang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* cyassl: add recipelchristina262014-08-151-0/+17
| | | | | Signed-off-by: Leah Thompson <lchristina26@hotmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* net-snmp: uprev it to 5.7.2.1Roy Li2014-08-133-159/+3
| | | | | Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* inetutils: not use auto-detected login for telnetdTing Liu2014-08-131-0/+1
| | | | | | | | | Below error appears as login was auto-detected by default: | telnetd: /usr/bin/login -p -h 192.168.2.1 : No such file or directory. | Connection closed by foreign host. Signed-off-by: Ting Liu <ting.liu@freescale.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* quagga: uprev it to 0.99.23Roy Li2014-08-1313-563/+12
| | | | | | | | uprev it to 0.99.23 remove patches which have been in the latest version Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* curlpp: fix do_compile failed since gcc upgrade to 4.9Hongxu Jia2014-08-132-2/+48
| | | | | | | | | | | | | The deprecated test code was no longer used, so remove it to avoid compiling failure with -Werror=unused-function ... | example21.cpp:51:8: error: 'size_t {anonymous}::readData(char*, size_t, size_t)' defined but not used [-Werror=unused-function] | size_t readData(char *buffer, size_t size, size_t nitems) ... Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* ipsec-tools: uprev it to 0.8.2Roy Li2014-08-132-39/+2
| | | | | | | Remove 0001-Fix-warning-with-gcc-4.8.patch, it has been in 0.8.2 Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* ifenslave: add recipesRoy Li2014-08-131-0/+18
| | | | | Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* dnsmasq: add packageconfigs for idn, conntrack, luaChristopher Larson2014-08-131-4/+10
| | | | | Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* dnsmasq: look for lua.pc, not lua5.1.pcChristopher Larson2014-08-133-1/+20
| | | | | Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* dnsmasq: move parallel make patch to .bb, add upstream-statusChristopher Larson2014-08-133-1/+3
| | | | | | | | Patches really belong in the recipe, not the .inc, given patches are generally version-bound. Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* dnsmasq: obey CFLAGS & LDFLAGSChristopher Larson2014-08-131-0/+4
| | | | | Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* dnsmasq: add missing inherit pkgconfigChristopher Larson2014-08-131-1/+1
| | | | | | | dnsmasq runs pkg-config to get cflags/libs for its dependencies. Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* snort: add dependency on util-linuxMartin Jansa2014-08-111-1/+1
| | | | | | | * fixes floating dependency: WARNING: QA Issue: snort rdepends on util-linux-libuuid but it isn't a build dependency? [build-deps] Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* stunnel: add dependency on zlib and tcp-wrappersMartin Jansa2014-08-111-1/+1
| | | | | | | * fixes floating dependency: stunnel/stunnel/latest lost dependency on libwrap zlib Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* netcf: init script should be installed under /etc/init.d/Roy Li2014-08-101-0/+4
| | | | | | | init script should be installed under /etc/init.d/, not /etc/rc.d/init.d Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* dnsmasq: fix parallel make failureShrikant Bobade2014-08-102-0/+19
| | | | | | | | | | | | The dnsmasq target depends on .configured and $(objs). .configured does an rm -f *.o. Yet the only thing telling make to build the .configured target before the $(objs) target was the order of the dependencies of the dnsmasq target. We can't rely on that order when doing a paralllel make build, so add an explicit rule to enforce that order. Signed-off-by: Christopher Larson <kergoth@gmail.com> Signed-off-by: Shrikant Bobade <Shrikant_Bobade@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* wireshark: update configuration and epochJoe MacDonald2014-08-061-1/+3
| | | | | | | | | | Commit 6d781369 warranted a PE bump but didn't include it. Update it, correct a typo in EXTRA_OECONF and explicitly disable c-ares resolver at the same time. Acked-by: Armin Kuster <akuster@mvista.com> Acked-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* wireshark: update README instructionsJoe MacDonald2014-08-061-2/+10
| | | | | | | | | Minor tweaks to the README to make the email suggestion follow the format used in other meta-openembedded README files and adding clarification on building wireshark in a GUI environment. Acked-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* README: Update layer dependenciesJoe MacDonald2014-08-061-0/+8
| | | | | | | There are a few recipes in meta-networking that depend unconditionally on components in meta-oe, so indicate that in the README. Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* wireshark: update to latest stable versionJoe MacDonald2014-08-062-104/+5
| | | | | | Version 1.12.0 is out, update the SRC_URI and associated variables. Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* znc: Fix for CVE-2013-2130Xufeng Zhang2014-08-052-1/+61
| | | | | | | | | | | | ZNC 1.0 allows remote authenticated users to cause a denial of service (NULL pointer reference and crash) via a crafted request to the (1) editnetwork, (2) editchan, (3) addchan, or (4) delchan page in modules/webadmin.cpp. Per: http://cwe.mitre.org/data/definitions/476.html CWE-476: NULL Pointer Dereference Signed-off-by: Xufeng Zhang <xufeng.zhang@windriver.com> Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* quagga: Security Advisory - quagga - CVE-2013-2236Yue Tao2014-08-052-0/+107
| | | | | | | | | | | | | Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-2236 Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* strongswan: Security Advisory - strongswan - CVE-2014-2891Yue Tao2014-08-052-0/+29
| | | | | | | | | | | | strongSwan before 5.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a crafted ID_DER_ASN1_DN ID payload. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2891 Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* wireshark: fix build dependsArmin Kuster2014-08-011-1/+1
| | | | | | | | | This should address issues found in test-dependencies 2014-07-25 wireshark/wireshark/latest lost dependency on libcap libnl libnl-genl libnl-nf libnl-route portaudio-v19 sbc Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* wireshark: Add missing pkgconfig dependencyRichard Purdie2014-08-011-1/+1
| | | | Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* wireshark: fix build for armArmin Kuster2014-08-012-1/+102
| | | | | | | * Backported Arm build fix Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* wireshark: Add recipe 1.12.0-rc2Armin Kuster2014-08-012-0/+78
| | | | | | | | * Inital wireshark support on gtk+, gtk3 * README with additional info Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* tnftp: add openssl PACKAGECONFIG and inherit pkgconfigRoy Li2014-07-301-1/+4
| | | | | Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* ipsec-tools: enable Dead Peer Detection and NAT traversalTing Liu2014-07-301-0/+2
| | | | | | | | | | | * Dead peer detection (DPD) is a method that network devices use to verify the current existence and availability of other peer devices. * NAT traversal (sometimes abbreviated as NAT-T) is a general term for techniques that establish and maintain Internet protocol connections traversing network address translation (NAT) gateways Signed-off-by: Ting Liu <b28495@freescale.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* ipsec-tools: several fixesRoy Li2014-07-304-1/+127
| | | | | | | | 1. use PACKAGECONFIG 2. add three patches which will add the address check, to avoid SEGFAULT Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* snort: do not hardcode the libdirRoy.Li2014-07-302-0/+280
| | | | | | | libdir is defined as ${pref_exec}/lib/, but we want it to support multilib path Signed-off-by: Roy.Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* openvpn: not use the hardcoded libdirRoy Li2014-07-301-1/+1
| | | | | | | | | | | it will lead to QA failure, since .debug dir can not be installed into dbg package ERROR: QA Issue: non debug package contains .debug directory: openvpn path /work/core2-64-wrs-linux/openvpn/2.3.4-r0/packages-split/openvpn/usr/lib64i /openvpn/plugins/.debug/openvpn-plugin-down-root.so [debug-files] Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* snort: move files from 'files' to 'snort' for faster lookupMartin Jansa2014-07-244-0/+0
| | | | Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* snort: add openssl PACKAGECONFIGMartin Jansa2014-07-241-0/+6
| | | | | | | | | | | | | | * otherwise the result isn't deterministic WARN: packages/armv5te-oe-linux-gnueabi/snort/snort/latest lost dependency on libcrypto * enable it by default, disabling currently doesn't work, because there are --with flags for openssl, but then configure.in still checks for sha.h header with AC_CHECK_HEADERS([openssl/sha.h],, SHA_H="no") and autodetects it, I'll leave patching configure to someone who is actually using snort (this issue was reported many times and nobody seems to care). Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* snort: add missing pkgconfig inheritMartin Jansa2014-07-241-1/+1
| | | | | | | | | | | | * otherwise m4 eats all memory and is killed by OOMK [1051138.019784] Out of memory: Kill process 26264 (m4) score 860 or sacrifice child [1051138.019788] Killed process 26264 (m4) total-vm:23062712kB, anon-rss:15066516kB, file-rss:100kB * very strange, but m4 and snort sometimes have strange side-effects, from first google result: http://www.hipforums.com/newforums/showthread.php?t=466568 Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* lksctp-tools: blacklist because it fails to link against sctp_connectx symbolMartin Jansa2014-07-241-0/+6
| | | | Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* openvpn: update and enable iproute2 supportRichard Tollerton2014-07-222-27/+31
| | | | | | | | | | | | | | | | | - Added .bb for version 2.3.4. - The download URL was broken; it's changed to reflect where the website points to. - Force use of iproute2, which is generally recommended when running OpenVPN as an unprivileged user. Ref: http://community.openvpn.net/openvpn/wiki/UnprivilegedUser - Explicitly add libpam to DEPENDS if pam is enabled, and disable the auth-pam plugin if pam is not enabled. - Pass the path to the 'ip' utility to the configure script to keep it from trying to find it on the host. Signed-off-by: Richard Tollerton <rich.tollerton@ni.com> Signed-off-by: Ben Shelton <ben.shelton@ni.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* mtr: Use "foreign" automake strictnessRichard Purdie2014-07-222-0/+13
| | | | Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-04 09:00:28 +0000