diff options
author | Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com> | 2019-07-31 23:24:51 +0300 |
---|---|---|
committer | Armin Kuster <akuster808@gmail.com> | 2019-08-04 13:13:38 -0700 |
commit | c2ddc05c2090d856e849b074d3dffa056a784bb5 (patch) | |
tree | 6577b9364ecec6bb9fd6290d32444ee5848e0775 | |
parent | c9c4e6c228556cc2054a4b49f85b282fd69fc25c (diff) | |
download | meta-security-c2ddc05c2090d856e849b074d3dffa056a784bb5.tar.gz |
ima-evm-utils: bump to release 1.2.1
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
5 files changed, 3 insertions, 182 deletions
diff --git a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0001-ima-evm-utils-link-to-libcrypto-instead-of-OpenSSL.patch b/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0001-ima-evm-utils-link-to-libcrypto-instead-of-OpenSSL.patch deleted file mode 100644 index 5ccb73d..0000000 --- a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0001-ima-evm-utils-link-to-libcrypto-instead-of-OpenSSL.patch +++ /dev/null | |||
@@ -1,65 +0,0 @@ | |||
1 | From 4feaf9b61f93e4043eca26b4ec9f9f68d0cf5e68 Mon Sep 17 00:00:00 2001 | ||
2 | From: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com> | ||
3 | Date: Wed, 6 Mar 2019 01:08:43 +0300 | ||
4 | Subject: [PATCH 1/4] ima-evm-utils: link to libcrypto instead of OpenSSL | ||
5 | |||
6 | There is no need to link to full libssl. evmctl uses functions from | ||
7 | libcrypto, so let's link only against that library. | ||
8 | |||
9 | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com> | ||
10 | --- | ||
11 | configure.ac | 4 +--- | ||
12 | src/Makefile.am | 9 ++++----- | ||
13 | 2 files changed, 5 insertions(+), 8 deletions(-) | ||
14 | |||
15 | diff --git a/configure.ac b/configure.ac | ||
16 | index 60f3684..32e8d85 100644 | ||
17 | --- a/configure.ac | ||
18 | +++ b/configure.ac | ||
19 | @@ -24,9 +24,7 @@ LT_INIT | ||
20 | # Checks for header files. | ||
21 | AC_HEADER_STDC | ||
22 | |||
23 | -PKG_CHECK_MODULES(OPENSSL, [ openssl >= 0.9.8 ]) | ||
24 | -AC_SUBST(OPENSSL_CFLAGS) | ||
25 | -AC_SUBST(OPENSSL_LIBS) | ||
26 | +PKG_CHECK_MODULES(LIBCRYPTO, [libcrypto >= 0.9.8 ]) | ||
27 | AC_SUBST(KERNEL_HEADERS) | ||
28 | AC_CHECK_HEADER(unistd.h) | ||
29 | AC_CHECK_HEADERS(openssl/conf.h) | ||
30 | diff --git a/src/Makefile.am b/src/Makefile.am | ||
31 | index d74fc6f..b81281a 100644 | ||
32 | --- a/src/Makefile.am | ||
33 | +++ b/src/Makefile.am | ||
34 | @@ -1,11 +1,11 @@ | ||
35 | lib_LTLIBRARIES = libimaevm.la | ||
36 | |||
37 | libimaevm_la_SOURCES = libimaevm.c | ||
38 | -libimaevm_la_CPPFLAGS = $(OPENSSL_CFLAGS) | ||
39 | +libimaevm_la_CPPFLAGS = $(LIBCRYPTO_CFLAGS) | ||
40 | # current[:revision[:age]] | ||
41 | # result: [current-age].age.revision | ||
42 | libimaevm_la_LDFLAGS = -version-info 0:0:0 | ||
43 | -libimaevm_la_LIBADD = $(OPENSSL_LIBS) | ||
44 | +libimaevm_la_LIBADD = $(LIBCRYPTO_LIBS) | ||
45 | |||
46 | include_HEADERS = imaevm.h | ||
47 | |||
48 | @@ -17,12 +17,11 @@ hash_info.h: Makefile | ||
49 | bin_PROGRAMS = evmctl | ||
50 | |||
51 | evmctl_SOURCES = evmctl.c | ||
52 | -evmctl_CPPFLAGS = $(OPENSSL_CFLAGS) | ||
53 | +evmctl_CPPFLAGS = $(LIBCRYPTO_CFLAGS) | ||
54 | evmctl_LDFLAGS = $(LDFLAGS_READLINE) | ||
55 | -evmctl_LDADD = $(OPENSSL_LIBS) -lkeyutils libimaevm.la | ||
56 | +evmctl_LDADD = $(LIBCRYPTO_LIBS) -lkeyutils libimaevm.la | ||
57 | |||
58 | INCLUDES = -I$(top_srcdir) -include config.h | ||
59 | |||
60 | CLEANFILES = hash_info.h | ||
61 | DISTCLEANFILES = @DISTCLEANFILES@ | ||
62 | - | ||
63 | -- | ||
64 | 2.17.1 | ||
65 | |||
diff --git a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0002-ima-evm-utils-replace-INCLUDES-with-AM_CPPFLAGS.patch b/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0002-ima-evm-utils-replace-INCLUDES-with-AM_CPPFLAGS.patch deleted file mode 100644 index 8237274..0000000 --- a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0002-ima-evm-utils-replace-INCLUDES-with-AM_CPPFLAGS.patch +++ /dev/null | |||
@@ -1,43 +0,0 @@ | |||
1 | From 5bb10f3da420f4c46e44423276a9da0d4bc1b691 Mon Sep 17 00:00:00 2001 | ||
2 | From: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com> | ||
3 | Date: Wed, 6 Mar 2019 01:17:12 +0300 | ||
4 | Subject: [PATCH 2/4] ima-evm-utils: replace INCLUDES with AM_CPPFLAGS | ||
5 | |||
6 | Replace INCLUDES variable with AM_CPPFLAGS to stop Automake from warning | ||
7 | about deprecated variable usage. | ||
8 | |||
9 | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com> | ||
10 | --- | ||
11 | src/Makefile.am | 6 +++--- | ||
12 | 1 file changed, 3 insertions(+), 3 deletions(-) | ||
13 | |||
14 | diff --git a/src/Makefile.am b/src/Makefile.am | ||
15 | index b81281a..164e7e4 100644 | ||
16 | --- a/src/Makefile.am | ||
17 | +++ b/src/Makefile.am | ||
18 | @@ -1,7 +1,7 @@ | ||
19 | lib_LTLIBRARIES = libimaevm.la | ||
20 | |||
21 | libimaevm_la_SOURCES = libimaevm.c | ||
22 | -libimaevm_la_CPPFLAGS = $(LIBCRYPTO_CFLAGS) | ||
23 | +libimaevm_la_CPPFLAGS = $(AM_CPPFLAGS) $(LIBCRYPTO_CFLAGS) | ||
24 | # current[:revision[:age]] | ||
25 | # result: [current-age].age.revision | ||
26 | libimaevm_la_LDFLAGS = -version-info 0:0:0 | ||
27 | @@ -17,11 +17,11 @@ hash_info.h: Makefile | ||
28 | bin_PROGRAMS = evmctl | ||
29 | |||
30 | evmctl_SOURCES = evmctl.c | ||
31 | -evmctl_CPPFLAGS = $(LIBCRYPTO_CFLAGS) | ||
32 | +evmctl_CPPFLAGS = $(AM_CPPFLAGS) $(LIBCRYPTO_CFLAGS) | ||
33 | evmctl_LDFLAGS = $(LDFLAGS_READLINE) | ||
34 | evmctl_LDADD = $(LIBCRYPTO_LIBS) -lkeyutils libimaevm.la | ||
35 | |||
36 | -INCLUDES = -I$(top_srcdir) -include config.h | ||
37 | +AM_CPPFLAGS = -I$(top_srcdir) -include config.h | ||
38 | |||
39 | CLEANFILES = hash_info.h | ||
40 | DISTCLEANFILES = @DISTCLEANFILES@ | ||
41 | -- | ||
42 | 2.17.1 | ||
43 | |||
diff --git a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0003-ima-evm-utils-include-hash-info.gen-into-distributio.patch b/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0003-ima-evm-utils-include-hash-info.gen-into-distributio.patch deleted file mode 100644 index 3d250d2..0000000 --- a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0003-ima-evm-utils-include-hash-info.gen-into-distributio.patch +++ /dev/null | |||
@@ -1,31 +0,0 @@ | |||
1 | From c587ec307a6259a990bfab727cea7db28dba4c23 Mon Sep 17 00:00:00 2001 | ||
2 | From: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com> | ||
3 | Date: Wed, 6 Mar 2019 01:22:30 +0300 | ||
4 | Subject: [PATCH 3/4] ima-evm-utils: include hash-info.gen into distribution | ||
5 | |||
6 | Include hash-info.gen into tarball and call it from the sourcedir to fix | ||
7 | out-of-tree build (and thus 'make distcheck'). | ||
8 | |||
9 | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com> | ||
10 | --- | ||
11 | src/Makefile.am | 3 ++- | ||
12 | 1 file changed, 2 insertions(+), 1 deletion(-) | ||
13 | |||
14 | diff --git a/src/Makefile.am b/src/Makefile.am | ||
15 | index 164e7e4..9c037e2 100644 | ||
16 | --- a/src/Makefile.am | ||
17 | +++ b/src/Makefile.am | ||
18 | @@ -11,8 +11,9 @@ include_HEADERS = imaevm.h | ||
19 | |||
20 | nodist_libimaevm_la_SOURCES = hash_info.h | ||
21 | BUILT_SOURCES = hash_info.h | ||
22 | +EXTRA_DIST = hash_info.gen | ||
23 | hash_info.h: Makefile | ||
24 | - ./hash_info.gen $(KERNEL_HEADERS) >$@ | ||
25 | + $(srcdir)/hash_info.gen $(KERNEL_HEADERS) >$@ | ||
26 | |||
27 | bin_PROGRAMS = evmctl | ||
28 | |||
29 | -- | ||
30 | 2.17.1 | ||
31 | |||
diff --git a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0004-ima-evm-utils-update-.gitignore-files.patch b/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0004-ima-evm-utils-update-.gitignore-files.patch deleted file mode 100644 index 4ada1a2..0000000 --- a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0004-ima-evm-utils-update-.gitignore-files.patch +++ /dev/null | |||
@@ -1,34 +0,0 @@ | |||
1 | From b9f327c5c513ccea9cb56d4bbd50c1f66d629099 Mon Sep 17 00:00:00 2001 | ||
2 | From: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com> | ||
3 | Date: Wed, 6 Mar 2019 01:24:04 +0300 | ||
4 | Subject: [PATCH 4/4] ima-evm-utils: update .gitignore files | ||
5 | |||
6 | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com> | ||
7 | --- | ||
8 | .gitignore | 1 + | ||
9 | src/.gitignore | 1 + | ||
10 | 2 files changed, 2 insertions(+) | ||
11 | create mode 100644 src/.gitignore | ||
12 | |||
13 | diff --git a/.gitignore b/.gitignore | ||
14 | index ca7a06e..cb82166 100644 | ||
15 | --- a/.gitignore | ||
16 | +++ b/.gitignore | ||
17 | @@ -45,6 +45,7 @@ cscope.* | ||
18 | ncscope.* | ||
19 | |||
20 | # Generated documentation | ||
21 | +*.1 | ||
22 | *.8 | ||
23 | *.5 | ||
24 | manpage.links | ||
25 | diff --git a/src/.gitignore b/src/.gitignore | ||
26 | new file mode 100644 | ||
27 | index 0000000..38e8e3c | ||
28 | --- /dev/null | ||
29 | +++ b/src/.gitignore | ||
30 | @@ -0,0 +1 @@ | ||
31 | +hash_info.h | ||
32 | -- | ||
33 | 2.17.1 | ||
34 | |||
diff --git a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils_git.bb b/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils_git.bb index 6d4f008..92c24c9 100644 --- a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils_git.bb +++ b/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils_git.bb | |||
@@ -6,9 +6,9 @@ DEPENDS += "openssl attr keyutils" | |||
6 | 6 | ||
7 | DEPENDS_class-native += "openssl-native keyutils-native" | 7 | DEPENDS_class-native += "openssl-native keyutils-native" |
8 | 8 | ||
9 | PV = "1.1+git${SRCPV}" | 9 | PV = "1.2.1+git${SRCPV}" |
10 | SRCREV = "782224f33cd711050cbf6146a12122cd73f9136b" | 10 | SRCREV = "3eab1f93b634249c1720f65fcb495b1996f0256e" |
11 | SRC_URI = "git://git.code.sf.net/p/linux-ima/ima-evm-utils" | 11 | SRC_URI = "git://git.code.sf.net/p/linux-ima/ima-evm-utils;branch=ima-evm-utils-1.2.y" |
12 | 12 | ||
13 | # Documentation depends on asciidoc, which we do not have, so | 13 | # Documentation depends on asciidoc, which we do not have, so |
14 | # do not build documentation. | 14 | # do not build documentation. |
@@ -21,12 +21,6 @@ SRC_URI += "file://evmctl.c-do-not-depend-on-xattr.h-with-IMA-defines.patch" | |||
21 | # Required for xargs with more than one path as argument (better for performance). | 21 | # Required for xargs with more than one path as argument (better for performance). |
22 | SRC_URI += "file://command-line-apply-operation-to-all-paths.patch" | 22 | SRC_URI += "file://command-line-apply-operation-to-all-paths.patch" |
23 | 23 | ||
24 | SRC_URI += "\ | ||
25 | file://0001-ima-evm-utils-link-to-libcrypto-instead-of-OpenSSL.patch \ | ||
26 | file://0002-ima-evm-utils-replace-INCLUDES-with-AM_CPPFLAGS.patch \ | ||
27 | file://0003-ima-evm-utils-include-hash-info.gen-into-distributio.patch \ | ||
28 | file://0004-ima-evm-utils-update-.gitignore-files.patch \ | ||
29 | " | ||
30 | S = "${WORKDIR}/git" | 24 | S = "${WORKDIR}/git" |
31 | 25 | ||
32 | inherit pkgconfig autotools | 26 | inherit pkgconfig autotools |