summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorKai Kang <kai.kang@windriver.com>2020-06-17 11:41:00 +0800
committerArmin Kuster <akuster808@gmail.com>2020-10-16 07:14:05 -0700
commit9fdaf248f55065e97abd58e9809b453e1eda683a (patch)
tree16f50773d2f1b13d015ed627bd72efb0ffadf7ce
parent36d732f97c7e3809db67a811b279f86cd21f8eb3 (diff)
downloadmeta-security-9fdaf248f55065e97abd58e9809b453e1eda683a.tar.gz
sssd: disable build secrets
It requires http_parser.h to build secrets: | configure: error: | You must have the header file http_parser.h installed to build sssd | with secrets responder. If you want to build sssd without secret responder | then specify --without-secrets when running configure. The header file is from package http-parser[1] rather than apache2. But there is no recipe http-parser in openembedded. So disable build secrets for sssd and remove related systemd service and socket files. Reference: 1. https://github.com/nodejs/http-parser Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit 7831969f8caa399d88d49833800fafe7324b8a59)
-rw-r--r--recipes-security/sssd/sssd_1.16.4.bb7
1 files changed, 3 insertions, 4 deletions
diff --git a/recipes-security/sssd/sssd_1.16.4.bb b/recipes-security/sssd/sssd_1.16.4.bb
index 7ea1586..2c3c803 100644
--- a/recipes-security/sssd/sssd_1.16.4.bb
+++ b/recipes-security/sssd/sssd_1.16.4.bb
@@ -39,8 +39,7 @@ PACKAGECONFIG += "${@bb.utils.contains('DISTRO_FEATURES', 'systemd', 'systemd',
39 39
40PACKAGECONFIG[autofs] = "--with-autofs, --with-autofs=no" 40PACKAGECONFIG[autofs] = "--with-autofs, --with-autofs=no"
41PACKAGECONFIG[crypto] = "--with-crypto=libcrypto, , libcrypto" 41PACKAGECONFIG[crypto] = "--with-crypto=libcrypto, , libcrypto"
42PACKAGECONFIG[curl] = "--with-secrets --with-kcm, --without-secrets --without-kcm, curl jansson" 42PACKAGECONFIG[curl] = "--with-kcm, --without-kcm, curl jansson"
43PACKAGECONFIG[http] = "--with-secrets, --without-secrets, apache2"
44PACKAGECONFIG[infopipe] = "--with-infopipe, --with-infopipe=no, " 43PACKAGECONFIG[infopipe] = "--with-infopipe, --with-infopipe=no, "
45PACKAGECONFIG[manpages] = "--with-manpages, --with-manpages=no" 44PACKAGECONFIG[manpages] = "--with-manpages, --with-manpages=no"
46PACKAGECONFIG[nl] = "--with-libnl, --with-libnl=no, libnl" 45PACKAGECONFIG[nl] = "--with-libnl, --with-libnl=no, libnl"
@@ -60,6 +59,7 @@ EXTRA_OECONF += " \
60 --without-python2-bindings \ 59 --without-python2-bindings \
61 --enable-pammoddir=${base_libdir}/security \ 60 --enable-pammoddir=${base_libdir}/security \
62 --without-python2-bindings \ 61 --without-python2-bindings \
62 --without-secrets \
63" 63"
64 64
65do_configure_prepend() { 65do_configure_prepend() {
@@ -85,6 +85,7 @@ do_install () {
85 # Remove /var/run as it is created on startup 85 # Remove /var/run as it is created on startup
86 rm -rf ${D}${localstatedir}/run 86 rm -rf ${D}${localstatedir}/run
87 87
88 rm -f ${D}${systemd_system_unitdir}/sssd-secrets.*
88} 89}
89 90
90pkg_postinst_ontarget_${PN} () { 91pkg_postinst_ontarget_${PN} () {
@@ -109,8 +110,6 @@ SYSTEMD_SERVICE_${PN} = " \
109 sssd-pam-priv.socket \ 110 sssd-pam-priv.socket \
110 sssd-pam.service \ 111 sssd-pam.service \
111 sssd-pam.socket \ 112 sssd-pam.socket \
112 sssd-secrets.service \
113 sssd-secrets.socket \
114 sssd.service \ 113 sssd.service \
115" 114"
116SYSTEMD_AUTO_ENABLE = "disable" 115SYSTEMD_AUTO_ENABLE = "disable"