summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
...
* memcached: upgrade to 1.5.20Khem Raj2019-12-251-2/+2
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: disable guest access and anonymous queriesTrevor Gamblin2019-12-251-1/+5
| | | | | | | | | | | | | | | | | | Guest accounts for Samba are a known potential vulnerability (see https://www.tenable.com/plugins/nessus/26919) where info about the host can be obtained without proper access. The option "map to guest = bad user" allows login attempts with usernames that don't exist to map to the guest account, while the "restrict anonymous" value (implicitly set to 0 before this patch) would allow any queries to obtain user and group list information. Raise the default security level by setting "restrict anonymous" to "1" and "map to guest" to "never" to avoid providing user/group info to unauthenticated users and reject login attempts with an invalid password, respectively. Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cannelloni: Include stdexcept for runtime_errorKhem Raj2019-12-232-0/+33
| | | | | | | | | Fixes error: 'runtime_error' is not a member of 'std' throw std::runtime_error("Allocation error."); ^~~~~~~~~~~~~ Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ruli: Define OOP_LIB_DIR and INSTALL_LIB_DIRKhem Raj2019-12-201-1/+4
| | | | | | This helps in taking care of multilib install dir Signed-off-by: Khem Raj <raj.khem@gmail.com>
* civetweb: Upgrade to latest tipKhem Raj2019-12-201-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* firewalld: Package firewalld filesKhem Raj2019-12-201-0/+1
| | | | | | | | | ERROR: firewalld-0.7.2-r0 do_package: QA Issue: firewalld: Files/directories were installed but not shipped in any package: /usr/lib /usr/lib/firewalld /usr/lib/firewalld/zones Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: Package python scripts into nonarch libdirKhem Raj2019-12-201-1/+1
| | | | | | Helps fixing packaging errors on mulilib builds Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cannelloni: Update to latest and fix multilib buildsKhem Raj2019-12-202-2/+47
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openl2tp: update systemd service fileKai Kang2019-12-192-2/+2
| | | | | | | | | | | | | | | | It shows an warning of openl2tp in systemd log: | /lib/systemd/system/openl2tpd.service:8: PIDFile= references a path | below legacy directory /var/run/, updating /var/run/openl2tpd.pid → | /run/openl2tpd.pid; please update the unit file accordingly. Update the systemd service file to fix the warning. Update SRC_URI as well that the homepage openl2tp.org has been closed. Use archived file on sourceforge instead. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* kea: upgrade 1.7.0 -> 1.7.2Wang Mingyu2019-12-181-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: Expand PACKAGECONFIG, cleanup buildAlex Kiernan2019-12-171-8/+12
| | | | | | | | | | | | | | | | | Fill out PACKAGECONFIG options for json, mini-gmp, readline and xtables whilst matching existing behaviour. Drop PACKAGECONFIG to weak default. Fix upstream version matching so the very old 0.099 is rejected as the newest version. Drop seemingly redundant ASNEEDED which was added in 5477d5bcb727 ("nftables: Upgrade to 0.7") without explanation. Package python files from libdir not libdir_native; whilst they're the same thing, building a target package with native variables is odd. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 0.9.2 -> 0.9.3Todd Cunningham2019-12-162-3/+51
| | | | | | | | New patch: 0001-update-python3-nftables-reference.patch Signed-off-by: Todd Cunningham <tcunningham07@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: Replace pthread_yield with sched_yieldKhem Raj2019-12-162-0/+31
| | | | | | | | | | Fixes /usr/src/debug/rdma-core/26.1-r0/git/librdmacm/rsocket.c:3041: undefined reference to `pthread_yield' collect2: error: ld returned 1 exit status Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Kai Kang <kai.kang@windriver.com>
* rdma-core: 18.1 -> 27.0Kai Kang2019-12-166-127/+261
| | | | | | | | | | | | Upgrade rdma-core from 18.1 to 27.0 * remove 4 patches which have been merged by upstream * update context and remove more unbuildable manual in 0001-Remove-man-files-which-cant-be-built.patch * set services file for systemd Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: update to 1.6.8Leon Anavi2019-12-151-2/+2
| | | | | | | | | Bugfix release. For details, see: https://mosquitto.org/blog/2019/11/version-1-6-8-released/ Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* grpc: Define libdir and cmakedir in terms of multilibKhem Raj2019-12-151-1/+3
| | | | | | | | | | | | | | | | | | | | | This helps in avoiding packaging errors seen with distros enabling multilib Fixes ERROR: grpc-1.24.3-r0 do_package: QA Issue: grpc: Files/directories were installed but not shipped in any package: /usr/lib/libgrpc++.so.1.24.3 ... /usr/lib/cmake /usr/lib/cmake/grpc /usr/lib/cmake/grpc/gRPCConfigVersion.cmake /usr/lib/cmake/grpc/gRPCConfig.cmake /usr/lib/cmake/grpc/gRPCTargets-noconfig.cmake /usr/lib/cmake/grpc/gRPCTargets.cmake Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or de lete them within do_install. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* corosync: fix build error when package config rdma enabledKai Kang2019-12-152-1/+34
| | | | | | | | | | | Fix corosync build error when package config rdma enabled. * replace dependency librdmacm from layer meta-cloud-services with rdma-core from meta-networking * add patch to fix issue that fail to find rdma library via pkgconfig Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: fix wrong shebang for python3Changqing Li2019-12-131-2/+2
| | | | | | | fix wrong shebang "#!/usr/bin/env python3/" Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: upgrade 1.1.4 -> 1.1.5Todd Cunningham2019-12-133-300/+18
| | | | | | | | | | | | Remove obselete patch: 0001-Move-exports-before-symbol-definition.patch Refresh patch: 0002-avoid-naming-local-function-as-one-of-printf-family.patch Add one new file in this patch: src/obj/synproxy.c Signed-off-by: Todd Cunningham <tcunningham07@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netperf: add "intervals" and "histogram" PACKAGECONFIGsDenys Dmytriyenko2019-12-111-0/+2
| | | | | | | | | | | >From https://hewlettpackard.github.io/netperf/doc/netperf.html: Other optional configure-time settings include --enable-intervals=yes to give netperf the ability to “pace” its _STREAM tests and --enable-histogram=yes to have netperf keep a histogram of interesting times. Signed-off-by: Denys Dmytriyenko <denys@ti.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* blueman: disable appindicator supportKai Kang2019-12-101-0/+1
| | | | | | | | | libappindicator is a library to allow applications to export a menu into the Unity Menu bar. Unity is not supported in openembedded, so disable appindicator support for blueman. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: upgrade 3.0.6 -> 3.0.7Wang Mingyu2019-12-101-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netplan: add recipeJacopo Dall'Aglio2019-12-051-0/+58
| | | | | | | | Canonical's Netplan is a network configuration abstraction renderer written in Python. It's compatible with NetworkManager and systemd-networkd. Signed-off-by: Jacopo Dall'Aglio <jacopo.dallaglio@kynetics.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntp: split ntpdc into separate packageAndrej Valek2019-12-051-3/+4
| | | | | | | | A ntpdc is a special NTP query program. It shouldn't be part of ntp-utils which is depending on perl. Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lksctp-tools: Add RRECOMENDS kernel-module-sctp for pkg lksctp-toolsPau Espin Pedrol2019-12-051-0/+1
| | | | | | | | | Previously the kernel module was only pulled in for ${PN}-utils and ${PN}-ptest, but not for the library itself. As a result, appsexternal to this recipe using only the library fail because kernel module is not installed in the image. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: Fix documentation generationAlex Kiernan2019-12-031-1/+1
| | | | | | | | | | Switch PACKAGECONFIG from man to manpages so we are included when api-documentation is set. Ensure correct tools are available to build the documentation and avoid unsupported option failures by not passing `--enable-man-doc`. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dnsmasq.conf: fix dnsmasq pathChangqing Li2019-11-221-1/+1
| | | | | | | | we install dnsmasq under /usr/bin by default, correct the path in comments. Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: rename distro_features_check to features_checkDenys Dmytriyenko2019-11-215-5/+5
| | | | | | | Avoid warning due to the class rename in OE-Core. Signed-off-by: Denys Dmytriyenko <denys@ti.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ruli: Fix install step and build samples tooKhem Raj2019-11-205-135/+169
| | | | | | | | | | | do_install never executed as a result it was empty install Create ruli-bin package for utilities, so libraries can be packages granularily Drop the makefile patch which is no longer needed, set the make variables to get the needed bits set Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: do not deploy unnecessary udev rule fileStefan Agner2019-11-201-1/+4
| | | | | | | | | | | | | | | | | The 84-nm-drivers.rules is not required for systemd-udevd versions v210 and later. The file has been split into a separate file so distributions with a new enough systemd version can drop it. See also: https://github.com/NetworkManager/NetworkManager/commit/1e0375826252abf9aab2aef273a2a24cd08c9f42 I noticed this while investigating into a warning show during bootup: /usr/lib/udev/rules.d/84-nm-drivers.rules:10 Invalid value "/bin/sh -c 'ethtool -i $1 | sed -n s/^driver:\ //p' -- $env{INTERFACE}" for PROGRAM (char 24: invalid substitution type), ignoring, but please fix it. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dlm: Drop -fstack-clash-protection for clangKhem Raj2019-11-191-0/+4
| | | | | | -fstack-clash-protection is gcc-only option Signed-off-by: Khem Raj <raj.khem@gmail.com>
* grpc: Link with libatomic on clang/x86Khem Raj2019-11-181-0/+4
| | | | | | | | clang does delegate the atomic<double> calls to libatomic on x86 where as gcc tries to use intrinsics, its debatable who is right, but it does seem that clang is safe in case pointer is unaligned Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libldb: Do not require the "pam" distro feature to be enabledPeter Kjellerstedt2019-11-181-2/+1
| | | | | | | | | | It was only added because samba was a dependency, but was not removed again when the dependency on samba was removed in commit 6207331f. This effectively reverts commit a190c2e3. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* squid: upgrade 4.6 -> 4.9Martin Balik2019-11-151-2/+2
| | | | | | Signed-off-by: Martin Balik <martin.balik@siemens.com> Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: upgrade 2.16.2 -> 2.16.3Denys Dmytriyenko2019-11-131-2/+2
| | | | | | | | | | | | | | | | | * Mbed TLS 2.16.3 is a maintenance release of the Mbed TLS 2.16 branch, and provides bug fixes and minor enhancements. https://github.com/ARMmbed/mbedtls/releases/tag/mbedtls-2.16.3 Most importantly, this fixes breakage on ARMv5TE platforms: * Fix the build on ARMv5TE in ARM mode to not use assembly instructions that are only available in Thumb mode. https://github.com/ARMmbed/mbedtls/pull/2169 Signed-off-by: Denys Dmytriyenko <denys@ti.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lowpan-tools: Blacklist as its deprecated use wpan-tools insteadKhem Raj2019-11-132-1/+3
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.10.8 -> 4.10.10Yi Zhao2019-11-071-2/+2
| | | | | | | | | | | | | | | | Security fixes: CVE-2019-10218: Client code can return filenames containing path separators. CVE-2019-14833: Samba AD DC check password script does not receive the full password. CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync. See: https://www.samba.org/samba/history/samba-4.10.10.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libldb: upgrade 1.5.5 -> 1.5.6Yi Zhao2019-11-071-2/+2
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* grpc: Add dep on libnslKhem Raj2019-11-071-1/+1
| | | | | | | Some host distros e.g. tumbleweed will need it as well so its better to have own dependency always Signed-off-by: Khem Raj <raj.khem@gmail.com>
* autofs: install sysvinit script manually if systemd is enabledAndreas Oberritter2019-11-071-0/+5
| | | | | | | | | Update-rc.d complains if no sysvinit script is present. This happens in hybrid systemd/sysvinit builds, because autofs does not install the init script if configured with '--with-systemd'. Signed-off-by: Andreas Oberritter <obi@opendreambox.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* autofs: set some paths for configure scriptAndreas Oberritter2019-11-071-0/+6
| | | | | | | | The configure script used by autofs tries to detect paths on the build system. Avoid it by presetting fixed values. Signed-off-by: Andreas Oberritter <obi@opendreambox.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: fix installation for minimal buildAndreas Oberritter2019-11-071-7/+9
| | | | | | | | | chmod: cannot access '.../image/etc/sudoers.d': No such file or directory | sed: can't read .../image/usr/bin/samba-tool: No such file or directory Signed-off-by: Andreas Oberritter <obi@opendreambox.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nghttp2: allow to build a -native packageAndré Draszik2019-11-071-0/+3
| | | | | | | This will e.g. enable us to use it from nodejs-native. Signed-off-by: André Draszik <git@andred.net> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nghttp2: build more of this & fix packagingAndré Draszik2019-11-072-3/+53
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | nghttp2 also provides http client, server, and proxy. Add the necessary DEPENDS and build flags to enable those. They are all packaged into individual packages, with 'nghttp2' being a meta-package now and pulling in all of the above three applications. The shared library itself (the only part that this recipe had been building so far), is also being split into its own package, meaning existing users shouldn't be affected, as nobody should have an RDEPENDS on 'nghttp2' at the moment (due to bitbake's shlibs dependency tracking). The deflatehd and inflatehd binaries have been completely dropped, as they are (header) test applications for HTTP/2. Debian doesn't ship them either. The python script fetch-ocsp-response is (only) needed by the proxy, and itself calls out to openssl. We can easily make this python3 using a simple patch, though. Minor additional fixes: * sort DEPENDS alphabetically * drop python-dir, this is implied by pythonnative * inherit manpages so as to benefit from man-db processing (note that manpages are not generated here, we just want the automatic update of the package index caches) We need to add a PACKAGECONFIG, as manpages.bbclass requires it to be present, even though nghttp2 unconditionally installs them Signed-off-by: André Draszik <git@andred.net> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nghttp2: update to 1.39.2André Draszik2019-11-071-2/+2
| | | | | Signed-off-by: André Draszik <git@andred.net> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nghttp2: fix UPSTREAM_CHECK_URIAndré Draszik2019-11-071-1/+1
| | | | | | | | This was added incorrectly in the previous recipe update and doesn't actually work. Signed-off-by: André Draszik <git@andred.net> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libowfat: Fix parallel buildKhem Raj2019-11-062-1/+47
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netkit-rwho: Include stdint.h for int32_tKhem Raj2019-11-061-10/+11
| | | | | | | | | | This ensures that when libc does not include stdint.h indirectly then it still can compile Fixes | ../include/protocols/rwhod.h:57:2: error: unknown type name 'int32_t'; did you mean 'uint32_t'? Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: upgrade 878.200.35 -> 878.260.1Zheng Ruoqin2019-11-041-2/+2
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* miniupnpd: Build config.h before full buildKhem Raj2019-11-011-0/+1
| | | | | | | | | | | | This fixes a race condition e.g. testminissdp.c:15:10: fatal error: config.h: No such file or directory 15 | #include "config.h" | ^~~~~~~~~~ compilation terminated. <builtin>: recipe for target 'testminissdp.o' failed Signed-off-by: Khem Raj <raj.khem@gmail.com>