summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
* inetutils: move daemon servers from bin to sbin directoryLi Wang2015-07-151-5/+5
| | | | | | | | | move daemon servers from bin to sbin directory: tftpd, telnetd, rshd, rexecd and rlogind Signed-off-by: Li Wang <li.wang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* postfix: Add explict getVar expansion parameterRichard Purdie2015-07-151-1/+1
| | | | | | | | | | | | | Bitbake is likely to require this parameter in future, add the default value. Patch generated with the command: sed -e 's:\(getVar([^,()]*\)\s*):\1, False):g' -i `grep -ril getVar *` Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* drbd ufw linux-atm: correct certain packaging errorJoe Slater2015-07-063-4/+11
| | | | | | | | | | The named packages explicitly install some items under /lib, but the recipes assume they are in base_libdir. We change the recipes. Signed-off-by: Joe Slater <jslater@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* postfix: update daemon_directory in main.cf_2.0Kang Kai2015-07-062-1/+3
| | | | | | | | | | daemon_directory is set to /usr/lib/postfix which causes daemon postfix fails to start on 64 bits target if enable multilib. Set daemon_directory with libexecdir to fix it. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* wireshark: update to 1.12.6Armin Kuster2015-07-061-2/+2
| | | | | | | | | | | | | | include a security fixes but no CVE # The following vulnerabilities have been fixed. * [1]wnpa-sec-2015-19 WCCP dissector crash. ([2]Bug 11153) * [3]wnpa-sec-2015-20 GSM DTAP dissector crash. ([4]Bug 11201) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* quagga: bug fixLi xin2015-07-067-6/+20
| | | | | | | | | The bug is: after the service stopped,the pid file still exists. So modidy the service files. Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* proftpd: upgrade to 1.3.5aRoy Li2015-07-061-2/+3
| | | | | | | | | | | 1. 1.3.5a includes the fix for CVE-2015-3306: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3306 2. replace the proftpd generated libtool with the native libtool which support the sysroot Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* mbedtls: upgrade to 1.3.10Roy Li2015-06-051-4/+6
| | | | | | | | | 1. PolarSSL is now rebranded as mbed TLS. 2. upgrade to include CVE-2015-1182 fix: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1182 Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* wireshark: update to 12.5Armin Kuster2015-06-051-9/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | fixed broken url and cleaned up the PACKAGECONFIG removed patch as it is included in this release The following vulnerabilities have been fixed. * [1]wnpa-sec-2015-12 The LBMR dissector could go into an infinite loop. ([2]Bug 11036) [3]CVE-2015-3808 [4]CVE-2015-3809 * [5]wnpa-sec-2015-13 The WebSocket dissector could recurse excessively. ([6]Bug 10989) [7]CVE-2015-3810 * [8]wnpa-sec-2015-14 The WCP dissector could crash while decompressing data. ([9]Bug 10978) [10]CVE-2015-3811 * [11]wnpa-sec-2015-15 The X11 dissector could leak memory. ([12]Bug 11088) [13]CVE-2015-3812 * [14]wnpa-sec-2015-16 The packet reassembly code could leak memory. ([15]Bug 11129) [16]CVE-2015-3813 * [17]wnpa-sec-2015-17 The IEEE 802.11 dissector could go into an infinite loop. ([18]Bug 11110) [19]CVE-2015-3814 * [20]wnpa-sec-2015-18 The Android Logcat file parser could crash. Discovered by Hanno Böck. ([21]Bug 11188) [22]CVE-2015-3815 Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* Fix postfix-native on Linux 4.0Szombathelyi György2015-06-051-12/+8
| | | | | | | Make postfix compilable on 4.0 kernel. Signed-off-by: Gyorgy Szombathelyi <gyurco@freemail.hu> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* meta-networking: standardize SECTION valuesJoe MacDonald2015-06-05102-81/+103
| | | | | | | SECTION has been used inconsistently throughout the recipes in this layer. Convert them to all use the same convention. Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* dovecot: add systemd support and add user dovecot dovenull which is need to ↵Li xin2015-06-053-3/+51
| | | | | | | | start dovecot service. Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* rp-pppoe: add systemd support and fix error in the step of do_configure.Li xin2015-06-053-2/+82
| | | | | | | | | | | The error is as follows: error: unrecognized command line option '-V' conftest.c:9:28: fatal error: ac_nonexistent.h: No such file or directory #include <ac_nonexistent.h>. Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* ipsec-tools: Security Advisory - CVE-2015-4047Roy Li2015-06-052-0/+37
| | | | | | | | | This fixed the CVE-2015-4047: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-4047 Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* nftables: create nftables recipe under meta-networkingRoy Li2015-06-052-0/+43
| | | | | | | | http://netfilter.org/projects/nftables/index.html Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* libnftnl: create recipe under meta-networkingRoy Li2015-06-051-0/+13
| | | | | | | | libnftnl is needed by nftable, so add it Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* stunnel: upgrade to 5.17Roy Li2015-06-051-2/+2
| | | | | | | | | upgrade to include the fix for CVE-2015-3644: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-3644 Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* ntimed: add recipe to meta-networking (git version)Christopher Larson2015-06-052-0/+57
| | | | | | | | | | | Ntimed is an unreleased ntpd replacement being sponsored by the Linux Foundation. Currently it only includes a work-in-progress client, but for future use this recipe emits an ntimed-client package and an ntimed meta package which will pull in client and server. Signed-off-by: Christopher Larson <kergoth@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* autofs: fix a building failureRoy Li2015-06-052-0/+63
| | | | | | Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* geoipupdate: update to 2.2.1Lei Maohui2015-06-053-5/+5
| | | | | | | | | | | | | - `geoipupdate` now verifies the MD5 of the new database before deploying it. If the database MD5 does not match the expected MD5, `geoipupdate` will exit with an error. - The copy of `base64.c` and `base64.h` was switched to a version under GPL 2+ to prevent a license conflict. - The `LICENSE` file was added to the distribution. - Several issues in the documentation were fixed. Signed-off-by: Lei Maohui <leimaohui@cn.fujitsu.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* ntp: control refclock driver support via PACKAGECONFIGAndre McCurdy2015-05-131-2/+3
| | | | | | | | | | | | The default configuration of ntp includes a large number of reference clock drivers. Provide a PACKAGECONFIG to allow control over whether or not these refclock drivers are built. Leave enabled by default. http://doc.ntp.org/4.2.8/refclock.html Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* tcpdump: upgrade to 4.7.4Roy Li2015-05-137-56/+2
| | | | | | | Remove two unneeded patches, configure.patch and tcpdump-cross-getaddrinfo.patch Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* strongswan: upgrade to 5.3.0Roy Li2015-05-131-2/+2
| | | | | Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* daq: move recipe to meta-networkingArmin Kuster2015-05-112-0/+54
| | | | | | | | | | | | | | | ERROR: Nothing PROVIDES 'libdnet' (but /home/akuster/oss/clean/meta-openembedded/meta-oe/recipes-connectivity/daq/daq_2.0.2.bb DEPENDS on or otherwise requires it). Close matches: libnet libnewt libidn ERROR: Required build target 'daq' has no buildable providers. Missing or unbuildable dependency chain was: ['daq', 'libdnet'] world build fails for meta-oe. move daq to meta-networking where snort and libdnet both reside. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* netkit-telnet: support the cross-compileRoy Li2015-05-112-1/+53
| | | | | | | | when check the CC, only compile the object by CC, not run the object. MCONFIG file includes more configuration, we can not clear it Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* net-snmp: fix CVE-2014-2285Junling Zheng2015-05-082-0/+50
| | | | | | | | | | | | | The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a denial of service (snmptrapd crash) via an empty community string in an SNMP trap, which triggers a NULL pointer dereference within the newSVpv function in Perl. Refer to: https://bugzilla.redhat.com/show_bug.cgi?id=1072044 Signed-off-by: Junling Zheng <zhengjunling@huawei.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* cifs-utils: upgrade to 6.4Roy Li2015-05-081-3/+2
| | | | | | | | | | | 6.4 fixed a CVE defect: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2830 Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pam_cifscreds, allows remote attackers to have unspecified impact via unknown vectors. Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* ipsec-tools: set SYSTEMD_SERVICE correctly to avoid building warning.Bian Naimeng2015-05-081-0/+5
| | | | | | | | | | | | ipsec-tools-0.8.2: ipsec-tools: Files/directories were installed but not shipped /lib /lib/systemd /lib/systemd/system /lib/systemd/system/racoon.service [installed-vs-shipped] Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* opensaf: RDEPENDS on python and bashRobert Yang2015-05-081-0/+2
| | | | | | | | | | | | | | | | | | | python: opensaf/usr/share/opensaf/samples/immsv/immom_python/immom.py bash: opensaf/usr/share/opensaf/immxml/verify.sh opensaf/usr/share/opensaf/immxml/immxml-modify-config opensaf/usr/share/opensaf/immxml/immxml-configure opensaf/usr/share/opensaf/immxml/immxml-clustersize opensaf/usr/share/opensaf/immxml/immxml-nodegen opensaf/usr/share/opensaf/samples/INSTALL opensaf/usr/share/opensaf/samples/smfsv/campaigns/smf-verify opensaf/usr/lib/opensaf/configure_tipc Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* opensaf: install opensafd.serviceRobert Yang2015-05-081-0/+3
| | | | | | | | | Fixed when systemd: ERROR: Function failed: SYSTEMD_SERVICE_opensaf value opensafd.service does not exist Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* netcat-openbsd: add LIC_FILES_CHKSUMChunrong Guo2015-05-081-0/+1
| | | | | | Signed-off-by: Chunrong Guo <B40290@freescale.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* vsftpd: fix the CVE-2015-1419Roy Li2015-05-082-0/+78
| | | | | | | | | Taken Patch from fedora to fix CVE-2015-1419, deny_file parsing to do more what is expected. Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* ntp: uprev to 4.2.8p2Roy Li2015-05-082-172/+3
| | | | | | | | | ntp 4.2.8p2 has more CVE fixes, like CVE-2015-1799, CVE-2015-1798; and remove ntp-4.2.8-ntp-keygen-no-openssl.patch which 4.2.8p2 has integrated Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* lksctp-tools: make -utils and -ptest recommend sctp kernel moduleDmitry Eremin-Solenikov2015-05-081-0/+3
| | | | | | | | | Neither -utils nor -ptest packages make sense w/o actual kernel support for SCTP protocol. Make both packages RRECOMMEND kernel-module-sctp. Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* postfix: add LSB init infosWenzong Fan2015-04-151-0/+8
| | | | | | | | Keep compatibility with chkconfig tool. Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* vsftpd / init: add LSB init infosWenzong Fan2015-04-151-0/+9
| | | | | | | | Keep compatibility with chkconfig tool. Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* vpnc: don't rdepend on kernel-module-tunAndreas Oberritter2015-04-151-1/+2
| | | | | | | | Kernel modules may be built-in, so rrecommend it instead. Signed-off-by: Andreas Oberritter <obi@opendreambox.org> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* wolfssl: change name from cyassl to wolfssl, update to version 3.4.0lchristina262015-04-152-18/+21
| | | | | | | | | CyaSSL is now called wolfSSL. Recipe updates included RPROVIDE and PROVIDE lines, with updates to sha/md5 sums. Signed-off-by: lchristina26 <leah@wolfssl.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* ipvsadm: Add version 1.26 (initial recipe)Jianchuan Wang2015-04-154-0/+234
| | | | | | | | * add ipvs administration tool Signed-off-by: Jianchuan Wang <jianchuan.wang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* ypbind-mt: Add systemd dependencyJoe MacDonald2015-04-071-1/+4
| | | | | | | | When building for a system including systemd ypbind-mt will link against libsystemd creating an implicit dependency. Make that explicit. Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* smcroute: add version 2.0.0 with /usr/sbin and endless loop fixesDenys Dmytriyenko2015-03-211-0/+13
| | | | | Signed-off-by: Denys Dmytriyenko <denys@ti.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* GeoIP: update checksumsJoe MacDonald2015-03-181-9/+8
| | | | Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* openflow: add libcrypto to static openflow libraryJoe MacDonald2015-03-131-2/+5
| | | | | | | | An update in OpenSSL removed the -lcrypto from libssl's pkg-config options. The old behaviour always linked it with -lssl, so revert to that for now. Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* postfix: get rid of useless codeBian Naimeng2015-03-111-1/+0
| | | | | | | | We should set group of ${localstatedir}/lib/postfix to 'nogroup' not 'postfix', actually it's done at the below, so remove this useless code. Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* net-snmp: add ptest packageJackie Huang2015-03-113-2/+72
| | | | | | | | | | | | | | | | | Issue: TA79430 - Change to use append for PACKAGES so that: * ptest package is added from ptest bbcalss * the PN is back, allow empty and add rdepends on net-snmp-client in case the user try to add net-snmp to the image - Add a patch to fix the output format for ptest - Add run-ptest - Add rdepends on perl for ptest (LOCAL REV: NOT UPSTREAM) -- Sent to meta-networking on 20150114 Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* net-snmp: move net-snmp-config to client packageJackie Huang2015-03-111-1/+1
| | | | | | | | | Since net-snmp-config is a common tool, move it from dev package to client package. Signed-off-by: yzhu1 <yanjun.zhu@windriver.com> Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* net-snmp: init script fixesJackie Huang2015-03-112-35/+27
| | | | | | | | | | | | | Changes: 1. Add source function and status command. 2. make it possible to change the start arguments with a default file in the same way as debian. 3. change the default INITSCRIPT_PARAMS 4. Add PIDFILE and fix restart 5. remove the postrm sicne we use the one from update-rc.d Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* net-snmp: fix "libtool --finish"Jackie Huang2015-03-112-0/+26
| | | | | | | | | | | | | | LIB_LDCONFIG_CMD failed since it is using a host dir $(libdir) which is /usr/lib64 does not exist on host when compile 64bit image. In fact, configuring dynamic linker run-time bindings is meaningless at this step, If it is needed, Poky would write ldconfig scripts to rpm-postinst for each recipe while do_package, in package.bbclass. Signed-off-by: Roy.Li <rongqing.li@windriver.com> Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* net-snmp: move persistent dir to /var/lib/net-snmpJackie Huang2015-03-112-0/+3
| | | | | | | | | Move persistent dir to /var/lib/net-snmp and fix security contexts for them. Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* net-snmp: have mib-modules=smux enabledJackie Huang2015-03-111-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | According to the following commit, net-snmp needs to have mib-modules=smux enabled: commit f64db3011c04ada0a8ac04b9eddde05b67d21eec Author: Aws Ismail <aws.ismail@windriver.com> Date: Mon Mar 25 11:30:06 2013 -0400 Quagga has no snmp support, unrecognized options --enable-tcp-md5 1. Quagga's tcp-md5 has been renamed to linux24-tcp-md5 2. net-snmp needs to have mib-modules=smux enabled to enable quagga to support snmp. Make the net-snmp option dependent on the DISTRO_FEATURE snmp. 3. Misc: install the sample conf files for quagga. Also, Make sure that the post install script is being run on the target rather than during the rootfs creation stage. Signed-off-by: Amy Fong <amy.fong@windriver.com> Signed-off-by: Aws Ismail <aws.ismail@windriver.com> Signed-off-by: Joe MacDonald <joe.macdonald@windriver.com> Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-05 07:14:07 +0000