summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com>2019-07-31 23:24:51 +0300
committerArmin Kuster <akuster808@gmail.com>2019-08-04 13:13:38 -0700
commitc2ddc05c2090d856e849b074d3dffa056a784bb5 (patch)
tree6577b9364ecec6bb9fd6290d32444ee5848e0775
parentc9c4e6c228556cc2054a4b49f85b282fd69fc25c (diff)
downloadmeta-security-c2ddc05c2090d856e849b074d3dffa056a784bb5.tar.gz
ima-evm-utils: bump to release 1.2.1
Signed-off-by: Dmitry Eremin-Solenikov <dmitry_eremin-solenikov@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
-rw-r--r--meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0001-ima-evm-utils-link-to-libcrypto-instead-of-OpenSSL.patch65
-rw-r--r--meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0002-ima-evm-utils-replace-INCLUDES-with-AM_CPPFLAGS.patch43
-rw-r--r--meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0003-ima-evm-utils-include-hash-info.gen-into-distributio.patch31
-rw-r--r--meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0004-ima-evm-utils-update-.gitignore-files.patch34
-rw-r--r--meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils_git.bb12
5 files changed, 3 insertions, 182 deletions
diff --git a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0001-ima-evm-utils-link-to-libcrypto-instead-of-OpenSSL.patch b/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0001-ima-evm-utils-link-to-libcrypto-instead-of-OpenSSL.patch
deleted file mode 100644
index 5ccb73d..0000000
--- a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0001-ima-evm-utils-link-to-libcrypto-instead-of-OpenSSL.patch
+++ /dev/null
@@ -1,65 +0,0 @@
1From 4feaf9b61f93e4043eca26b4ec9f9f68d0cf5e68 Mon Sep 17 00:00:00 2001
2From: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
3Date: Wed, 6 Mar 2019 01:08:43 +0300
4Subject: [PATCH 1/4] ima-evm-utils: link to libcrypto instead of OpenSSL
5
6There is no need to link to full libssl. evmctl uses functions from
7libcrypto, so let's link only against that library.
8
9Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
10---
11 configure.ac | 4 +---
12 src/Makefile.am | 9 ++++-----
13 2 files changed, 5 insertions(+), 8 deletions(-)
14
15diff --git a/configure.ac b/configure.ac
16index 60f3684..32e8d85 100644
17--- a/configure.ac
18+++ b/configure.ac
19@@ -24,9 +24,7 @@ LT_INIT
20 # Checks for header files.
21 AC_HEADER_STDC
22
23-PKG_CHECK_MODULES(OPENSSL, [ openssl >= 0.9.8 ])
24-AC_SUBST(OPENSSL_CFLAGS)
25-AC_SUBST(OPENSSL_LIBS)
26+PKG_CHECK_MODULES(LIBCRYPTO, [libcrypto >= 0.9.8 ])
27 AC_SUBST(KERNEL_HEADERS)
28 AC_CHECK_HEADER(unistd.h)
29 AC_CHECK_HEADERS(openssl/conf.h)
30diff --git a/src/Makefile.am b/src/Makefile.am
31index d74fc6f..b81281a 100644
32--- a/src/Makefile.am
33+++ b/src/Makefile.am
34@@ -1,11 +1,11 @@
35 lib_LTLIBRARIES = libimaevm.la
36
37 libimaevm_la_SOURCES = libimaevm.c
38-libimaevm_la_CPPFLAGS = $(OPENSSL_CFLAGS)
39+libimaevm_la_CPPFLAGS = $(LIBCRYPTO_CFLAGS)
40 # current[:revision[:age]]
41 # result: [current-age].age.revision
42 libimaevm_la_LDFLAGS = -version-info 0:0:0
43-libimaevm_la_LIBADD = $(OPENSSL_LIBS)
44+libimaevm_la_LIBADD = $(LIBCRYPTO_LIBS)
45
46 include_HEADERS = imaevm.h
47
48@@ -17,12 +17,11 @@ hash_info.h: Makefile
49 bin_PROGRAMS = evmctl
50
51 evmctl_SOURCES = evmctl.c
52-evmctl_CPPFLAGS = $(OPENSSL_CFLAGS)
53+evmctl_CPPFLAGS = $(LIBCRYPTO_CFLAGS)
54 evmctl_LDFLAGS = $(LDFLAGS_READLINE)
55-evmctl_LDADD = $(OPENSSL_LIBS) -lkeyutils libimaevm.la
56+evmctl_LDADD = $(LIBCRYPTO_LIBS) -lkeyutils libimaevm.la
57
58 INCLUDES = -I$(top_srcdir) -include config.h
59
60 CLEANFILES = hash_info.h
61 DISTCLEANFILES = @DISTCLEANFILES@
62-
63--
642.17.1
65
diff --git a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0002-ima-evm-utils-replace-INCLUDES-with-AM_CPPFLAGS.patch b/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0002-ima-evm-utils-replace-INCLUDES-with-AM_CPPFLAGS.patch
deleted file mode 100644
index 8237274..0000000
--- a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0002-ima-evm-utils-replace-INCLUDES-with-AM_CPPFLAGS.patch
+++ /dev/null
@@ -1,43 +0,0 @@
1From 5bb10f3da420f4c46e44423276a9da0d4bc1b691 Mon Sep 17 00:00:00 2001
2From: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
3Date: Wed, 6 Mar 2019 01:17:12 +0300
4Subject: [PATCH 2/4] ima-evm-utils: replace INCLUDES with AM_CPPFLAGS
5
6Replace INCLUDES variable with AM_CPPFLAGS to stop Automake from warning
7about deprecated variable usage.
8
9Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
10---
11 src/Makefile.am | 6 +++---
12 1 file changed, 3 insertions(+), 3 deletions(-)
13
14diff --git a/src/Makefile.am b/src/Makefile.am
15index b81281a..164e7e4 100644
16--- a/src/Makefile.am
17+++ b/src/Makefile.am
18@@ -1,7 +1,7 @@
19 lib_LTLIBRARIES = libimaevm.la
20
21 libimaevm_la_SOURCES = libimaevm.c
22-libimaevm_la_CPPFLAGS = $(LIBCRYPTO_CFLAGS)
23+libimaevm_la_CPPFLAGS = $(AM_CPPFLAGS) $(LIBCRYPTO_CFLAGS)
24 # current[:revision[:age]]
25 # result: [current-age].age.revision
26 libimaevm_la_LDFLAGS = -version-info 0:0:0
27@@ -17,11 +17,11 @@ hash_info.h: Makefile
28 bin_PROGRAMS = evmctl
29
30 evmctl_SOURCES = evmctl.c
31-evmctl_CPPFLAGS = $(LIBCRYPTO_CFLAGS)
32+evmctl_CPPFLAGS = $(AM_CPPFLAGS) $(LIBCRYPTO_CFLAGS)
33 evmctl_LDFLAGS = $(LDFLAGS_READLINE)
34 evmctl_LDADD = $(LIBCRYPTO_LIBS) -lkeyutils libimaevm.la
35
36-INCLUDES = -I$(top_srcdir) -include config.h
37+AM_CPPFLAGS = -I$(top_srcdir) -include config.h
38
39 CLEANFILES = hash_info.h
40 DISTCLEANFILES = @DISTCLEANFILES@
41--
422.17.1
43
diff --git a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0003-ima-evm-utils-include-hash-info.gen-into-distributio.patch b/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0003-ima-evm-utils-include-hash-info.gen-into-distributio.patch
deleted file mode 100644
index 3d250d2..0000000
--- a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0003-ima-evm-utils-include-hash-info.gen-into-distributio.patch
+++ /dev/null
@@ -1,31 +0,0 @@
1From c587ec307a6259a990bfab727cea7db28dba4c23 Mon Sep 17 00:00:00 2001
2From: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
3Date: Wed, 6 Mar 2019 01:22:30 +0300
4Subject: [PATCH 3/4] ima-evm-utils: include hash-info.gen into distribution
5
6Include hash-info.gen into tarball and call it from the sourcedir to fix
7out-of-tree build (and thus 'make distcheck').
8
9Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
10---
11 src/Makefile.am | 3 ++-
12 1 file changed, 2 insertions(+), 1 deletion(-)
13
14diff --git a/src/Makefile.am b/src/Makefile.am
15index 164e7e4..9c037e2 100644
16--- a/src/Makefile.am
17+++ b/src/Makefile.am
18@@ -11,8 +11,9 @@ include_HEADERS = imaevm.h
19
20 nodist_libimaevm_la_SOURCES = hash_info.h
21 BUILT_SOURCES = hash_info.h
22+EXTRA_DIST = hash_info.gen
23 hash_info.h: Makefile
24- ./hash_info.gen $(KERNEL_HEADERS) >$@
25+ $(srcdir)/hash_info.gen $(KERNEL_HEADERS) >$@
26
27 bin_PROGRAMS = evmctl
28
29--
302.17.1
31
diff --git a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0004-ima-evm-utils-update-.gitignore-files.patch b/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0004-ima-evm-utils-update-.gitignore-files.patch
deleted file mode 100644
index 4ada1a2..0000000
--- a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0004-ima-evm-utils-update-.gitignore-files.patch
+++ /dev/null
@@ -1,34 +0,0 @@
1From b9f327c5c513ccea9cb56d4bbd50c1f66d629099 Mon Sep 17 00:00:00 2001
2From: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
3Date: Wed, 6 Mar 2019 01:24:04 +0300
4Subject: [PATCH 4/4] ima-evm-utils: update .gitignore files
5
6Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
7---
8 .gitignore | 1 +
9 src/.gitignore | 1 +
10 2 files changed, 2 insertions(+)
11 create mode 100644 src/.gitignore
12
13diff --git a/.gitignore b/.gitignore
14index ca7a06e..cb82166 100644
15--- a/.gitignore
16+++ b/.gitignore
17@@ -45,6 +45,7 @@ cscope.*
18 ncscope.*
19
20 # Generated documentation
21+*.1
22 *.8
23 *.5
24 manpage.links
25diff --git a/src/.gitignore b/src/.gitignore
26new file mode 100644
27index 0000000..38e8e3c
28--- /dev/null
29+++ b/src/.gitignore
30@@ -0,0 +1 @@
31+hash_info.h
32--
332.17.1
34
diff --git a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils_git.bb b/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils_git.bb
index 6d4f008..92c24c9 100644
--- a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils_git.bb
+++ b/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils_git.bb
@@ -6,9 +6,9 @@ DEPENDS += "openssl attr keyutils"
6 6
7DEPENDS_class-native += "openssl-native keyutils-native" 7DEPENDS_class-native += "openssl-native keyutils-native"
8 8
9PV = "1.1+git${SRCPV}" 9PV = "1.2.1+git${SRCPV}"
10SRCREV = "782224f33cd711050cbf6146a12122cd73f9136b" 10SRCREV = "3eab1f93b634249c1720f65fcb495b1996f0256e"
11SRC_URI = "git://git.code.sf.net/p/linux-ima/ima-evm-utils" 11SRC_URI = "git://git.code.sf.net/p/linux-ima/ima-evm-utils;branch=ima-evm-utils-1.2.y"
12 12
13# Documentation depends on asciidoc, which we do not have, so 13# Documentation depends on asciidoc, which we do not have, so
14# do not build documentation. 14# do not build documentation.
@@ -21,12 +21,6 @@ SRC_URI += "file://evmctl.c-do-not-depend-on-xattr.h-with-IMA-defines.patch"
21# Required for xargs with more than one path as argument (better for performance). 21# Required for xargs with more than one path as argument (better for performance).
22SRC_URI += "file://command-line-apply-operation-to-all-paths.patch" 22SRC_URI += "file://command-line-apply-operation-to-all-paths.patch"
23 23
24SRC_URI += "\
25 file://0001-ima-evm-utils-link-to-libcrypto-instead-of-OpenSSL.patch \
26 file://0002-ima-evm-utils-replace-INCLUDES-with-AM_CPPFLAGS.patch \
27 file://0003-ima-evm-utils-include-hash-info.gen-into-distributio.patch \
28 file://0004-ima-evm-utils-update-.gitignore-files.patch \
29"
30S = "${WORKDIR}/git" 24S = "${WORKDIR}/git"
31 25
32inherit pkgconfig autotools 26inherit pkgconfig autotools