diff options
author | Martin Jansa <Martin.Jansa@gmail.com> | 2023-06-21 12:42:15 +0200 |
---|---|---|
committer | Armin Kuster <akuster808@gmail.com> | 2023-06-25 15:05:28 -0400 |
commit | ea97a23986d26f9d2b96c157964fdfdf5079ec6c (patch) | |
tree | 0db054f685173616526112a1734717cd9fd0a3f6 | |
parent | 2b052a616530a963d591165b36dd06a70badf917 (diff) | |
download | meta-security-ea97a23986d26f9d2b96c157964fdfdf5079ec6c.tar.gz |
*.patch: add Upstream-Status to all patches
There is new patch-status QA check in oe-core:
https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a
This is temporary work around just to hide _many_ warnings from
optional patch-status (if you add it to WARN_QA).
This just added
Upstream-Status: Pending
everywhere without actually investigating what's the proper status.
This is just to hide current QA warnings and to catch new .patch files being
added without Upstream-Status, but the number of Pending patches is now terrible:
0 (0%) meta-parsec
N/A (0%) meta-hardening
1 (100%) meta-integrity
15 (68%) meta-tpm
27 (61%) meta-security
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
12 files changed, 26 insertions, 0 deletions
diff --git a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0001-Do-not-get-generation-using-ioctl-when-evm_portable-.patch b/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0001-Do-not-get-generation-using-ioctl-when-evm_portable-.patch index 3624576..f0d8975 100644 --- a/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0001-Do-not-get-generation-using-ioctl-when-evm_portable-.patch +++ b/meta-integrity/recipes-security/ima-evm-utils/ima-evm-utils/0001-Do-not-get-generation-using-ioctl-when-evm_portable-.patch | |||
@@ -13,6 +13,8 @@ ioctl is not supported by the filesystem. | |||
13 | 13 | ||
14 | Signed-off-by: Stefan Berger <stefanb@linux.ibm.com> | 14 | Signed-off-by: Stefan Berger <stefanb@linux.ibm.com> |
15 | --- | 15 | --- |
16 | Upstream-Status: Pending | ||
17 | |||
16 | src/evmctl.c | 2 +- | 18 | src/evmctl.c | 2 +- |
17 | 1 file changed, 1 insertion(+), 1 deletion(-) | 19 | 1 file changed, 1 insertion(+), 1 deletion(-) |
18 | 20 | ||
@@ -30,6 +32,8 @@ index 6d2bb67..c35a28c 100644 | |||
30 | int fd = open(file, 0); | 32 | int fd = open(file, 0); |
31 | 33 | ||
32 | --- | 34 | --- |
35 | Upstream-Status: Pending | ||
36 | |||
33 | 2.39.2 | 37 | 2.39.2 |
34 | 38 | ||
35 | 39 | ||
diff --git a/meta-tpm/recipes-tpm1/openssl-tpm-engine/files/0001-create-tpm-key-support-well-known-key-option.patch b/meta-tpm/recipes-tpm1/openssl-tpm-engine/files/0001-create-tpm-key-support-well-known-key-option.patch index bed8b92..e6068af 100644 --- a/meta-tpm/recipes-tpm1/openssl-tpm-engine/files/0001-create-tpm-key-support-well-known-key-option.patch +++ b/meta-tpm/recipes-tpm1/openssl-tpm-engine/files/0001-create-tpm-key-support-well-known-key-option.patch | |||
@@ -1,3 +1,5 @@ | |||
1 | Upstream-Status: Pending | ||
2 | |||
1 | commit 16dac0cb7b73b8a7088300e45b98ac20819b03ed | 3 | commit 16dac0cb7b73b8a7088300e45b98ac20819b03ed |
2 | Author: Junxian.Xiao <Junxian.Xiao@windriver.com> | 4 | Author: Junxian.Xiao <Junxian.Xiao@windriver.com> |
3 | Date: Wed Jun 19 18:57:13 2013 +0800 | 5 | Date: Wed Jun 19 18:57:13 2013 +0800 |
diff --git a/meta-tpm/recipes-tpm1/openssl-tpm-engine/files/0002-libtpm-support-env-TPM_SRK_PW.patch b/meta-tpm/recipes-tpm1/openssl-tpm-engine/files/0002-libtpm-support-env-TPM_SRK_PW.patch index 2caaaf0..74def4f 100644 --- a/meta-tpm/recipes-tpm1/openssl-tpm-engine/files/0002-libtpm-support-env-TPM_SRK_PW.patch +++ b/meta-tpm/recipes-tpm1/openssl-tpm-engine/files/0002-libtpm-support-env-TPM_SRK_PW.patch | |||
@@ -1,3 +1,5 @@ | |||
1 | Upstream-Status: Pending | ||
2 | |||
1 | commit 16dac0cb7b73b8a7088300e45b98ac20819b03ed | 3 | commit 16dac0cb7b73b8a7088300e45b98ac20819b03ed |
2 | Author: Junxian.Xiao <Junxian.Xiao@windriver.com> | 4 | Author: Junxian.Xiao <Junxian.Xiao@windriver.com> |
3 | Date: Wed Jun 19 18:57:13 2013 +0800 | 5 | Date: Wed Jun 19 18:57:13 2013 +0800 |
diff --git a/meta-tpm/recipes-tpm1/openssl-tpm-engine/files/0003-tpm-openssl-tpm-engine-parse-an-encrypted-tpm-SRK-pa.patch b/meta-tpm/recipes-tpm1/openssl-tpm-engine/files/0003-tpm-openssl-tpm-engine-parse-an-encrypted-tpm-SRK-pa.patch index cc8772d..732961d 100644 --- a/meta-tpm/recipes-tpm1/openssl-tpm-engine/files/0003-tpm-openssl-tpm-engine-parse-an-encrypted-tpm-SRK-pa.patch +++ b/meta-tpm/recipes-tpm1/openssl-tpm-engine/files/0003-tpm-openssl-tpm-engine-parse-an-encrypted-tpm-SRK-pa.patch | |||
@@ -17,6 +17,8 @@ export TPM_SRK_ENC_PW=xxxxxxxx | |||
17 | 17 | ||
18 | Signed-off-by: Meng Li <Meng.Li@windriver.com> | 18 | Signed-off-by: Meng Li <Meng.Li@windriver.com> |
19 | --- | 19 | --- |
20 | Upstream-Status: Pending | ||
21 | |||
20 | e_tpm.c | 157 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++- | 22 | e_tpm.c | 157 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++- |
21 | e_tpm.h | 4 ++ | 23 | e_tpm.h | 4 ++ |
22 | e_tpm_err.c | 4 ++ | 24 | e_tpm_err.c | 4 ++ |
diff --git a/meta-tpm/recipes-tpm1/openssl-tpm-engine/files/0004-tpm-openssl-tpm-engine-change-variable-c-type-from-c.patch b/meta-tpm/recipes-tpm1/openssl-tpm-engine/files/0004-tpm-openssl-tpm-engine-change-variable-c-type-from-c.patch index 535472a..3cbfc3c 100644 --- a/meta-tpm/recipes-tpm1/openssl-tpm-engine/files/0004-tpm-openssl-tpm-engine-change-variable-c-type-from-c.patch +++ b/meta-tpm/recipes-tpm1/openssl-tpm-engine/files/0004-tpm-openssl-tpm-engine-change-variable-c-type-from-c.patch | |||
@@ -12,6 +12,8 @@ wrong case. | |||
12 | 12 | ||
13 | Signed-off-by: Meng Li <Meng.Li@windriver.com> | 13 | Signed-off-by: Meng Li <Meng.Li@windriver.com> |
14 | --- | 14 | --- |
15 | Upstream-Status: Pending | ||
16 | |||
15 | create_tpm_key.c | 3 ++- | 17 | create_tpm_key.c | 3 ++- |
16 | 1 file changed, 2 insertions(+), 1 deletion(-) | 18 | 1 file changed, 2 insertions(+), 1 deletion(-) |
17 | 19 | ||
diff --git a/meta-tpm/recipes-tpm1/tpm-tools/files/tpm-tools-extendpcr.patch b/meta-tpm/recipes-tpm1/tpm-tools/files/tpm-tools-extendpcr.patch index 40150af..d427d67 100644 --- a/meta-tpm/recipes-tpm1/tpm-tools/files/tpm-tools-extendpcr.patch +++ b/meta-tpm/recipes-tpm1/tpm-tools/files/tpm-tools-extendpcr.patch | |||
@@ -1,3 +1,5 @@ | |||
1 | Upstream-Status: Pending | ||
2 | |||
1 | Index: git/include/tpm_tspi.h | 3 | Index: git/include/tpm_tspi.h |
2 | =================================================================== | 4 | =================================================================== |
3 | --- git.orig/include/tpm_tspi.h | 5 | --- git.orig/include/tpm_tspi.h |
diff --git a/recipes-perl/perl/files/libwhisker2.patch b/recipes-perl/perl/files/libwhisker2.patch index c066366..4ea1ee5 100644 --- a/recipes-perl/perl/files/libwhisker2.patch +++ b/recipes-perl/perl/files/libwhisker2.patch | |||
@@ -7,6 +7,8 @@ Subject: [PATCH] Mandir and perl install dir were overwritten with faulty | |||
7 | 7 | ||
8 | Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com> | 8 | Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com> |
9 | --- | 9 | --- |
10 | Upstream-Status: Pending | ||
11 | |||
10 | Makefile.pl | 12 +++++++----- | 12 | Makefile.pl | 12 +++++++----- |
11 | 1 file changed, 7 insertions(+), 5 deletions(-) | 13 | 1 file changed, 7 insertions(+), 5 deletions(-) |
12 | 14 | ||
diff --git a/recipes-scanners/clamav/files/test.patch b/recipes-scanners/clamav/files/test.patch index a22b45d..8d94863 100644 --- a/recipes-scanners/clamav/files/test.patch +++ b/recipes-scanners/clamav/files/test.patch | |||
@@ -1,3 +1,5 @@ | |||
1 | Upstream-Status: Pending | ||
2 | |||
1 | Index: clamav-0.103.0/Makefile.am | 3 | Index: clamav-0.103.0/Makefile.am |
2 | =================================================================== | 4 | =================================================================== |
3 | --- clamav-0.103.0.orig/Makefile.am | 5 | --- clamav-0.103.0.orig/Makefile.am |
diff --git a/recipes-security/ecryptfs-utils/files/define_musl_sword_type.patch b/recipes-security/ecryptfs-utils/files/define_musl_sword_type.patch index 3b29be0..01b7dd8 100644 --- a/recipes-security/ecryptfs-utils/files/define_musl_sword_type.patch +++ b/recipes-security/ecryptfs-utils/files/define_musl_sword_type.patch | |||
@@ -1,3 +1,5 @@ | |||
1 | Upstream-Status: Pending | ||
2 | |||
1 | Index: ecryptfs-utils-111/src/utils/mount.ecryptfs_private.c | 3 | Index: ecryptfs-utils-111/src/utils/mount.ecryptfs_private.c |
2 | =================================================================== | 4 | =================================================================== |
3 | --- ecryptfs-utils-111.orig/src/utils/mount.ecryptfs_private.c | 5 | --- ecryptfs-utils-111.orig/src/utils/mount.ecryptfs_private.c |
diff --git a/recipes-security/isic/files/configure_fix.patch b/recipes-security/isic/files/configure_fix.patch index fc2a774..801fe0c 100644 --- a/recipes-security/isic/files/configure_fix.patch +++ b/recipes-security/isic/files/configure_fix.patch | |||
@@ -1,3 +1,5 @@ | |||
1 | Upstream-Status: Pending | ||
2 | |||
1 | isic: add with-libnet remove libnet test | 3 | isic: add with-libnet remove libnet test |
2 | 4 | ||
3 | Inappropriate - builds fine on non-oe systems. We need to exlude | 5 | Inappropriate - builds fine on non-oe systems. We need to exlude |
diff --git a/recipes-security/isic/files/isic-0.07-make.patch b/recipes-security/isic/files/isic-0.07-make.patch index 9cffa8a..838c873 100644 --- a/recipes-security/isic/files/isic-0.07-make.patch +++ b/recipes-security/isic/files/isic-0.07-make.patch | |||
@@ -1,3 +1,5 @@ | |||
1 | Upstream-Status: Pending | ||
2 | |||
1 | isic: Fixup makefile to support destination | 3 | isic: Fixup makefile to support destination |
2 | 4 | ||
3 | Backport: | 5 | Backport: |
diff --git a/recipes-security/isic/files/isic-0.07-netinet.patch b/recipes-security/isic/files/isic-0.07-netinet.patch index c4ea74e..4b03880 100644 --- a/recipes-security/isic/files/isic-0.07-netinet.patch +++ b/recipes-security/isic/files/isic-0.07-netinet.patch | |||
@@ -1,3 +1,5 @@ | |||
1 | Upstream-Status: Pending | ||
2 | |||
1 | isic: add missing header file | 3 | isic: add missing header file |
2 | 4 | ||
3 | Backport: | 5 | Backport: |