summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorYi Zhao <yi.zhao@windriver.com>2019-07-05 15:51:12 +0800
committerJoe MacDonald <joe_macdonald@mentor.com>2019-07-08 22:24:12 -0400
commit11daa2cca45bf395fb3a3a784f7f08f37654bd17 (patch)
treeef20c03bb75c57ae3c00183724bd3fff84007554
parentbb0c9c3abcb935e4b362eb57985e1ee7fec0bfe0 (diff)
downloadmeta-selinux-11daa2cca45bf395fb3a3a784f7f08f37654bd17.tar.gz
audit: upgrade 2.8.4 -> 2.8.5
* Drop backport patch: 0001-Remove-strdupa-as-suggested-in-pull-request-25.patch * Refresh all patches. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
-rw-r--r--recipes-security/audit/audit/0001-Remove-strdupa-as-suggested-in-pull-request-25.patch47
-rw-r--r--recipes-security/audit/audit/Add-substitue-functions-for-strndupa-rawmemchr.patch (renamed from recipes-security/audit/audit/0002-Add-substitue-functions-for-strndupa-rawmemchr.patch)23
-rw-r--r--recipes-security/audit/audit/audit-python-configure.patch10
-rw-r--r--recipes-security/audit/audit/audit-python.patch8
-rwxr-xr-xrecipes-security/audit/audit/auditd2
-rw-r--r--recipes-security/audit/audit/fix-swig-host-contamination.patch22
-rw-r--r--recipes-security/audit/audit_2.8.5.bb (renamed from recipes-security/audit/audit_2.8.4.bb)7
7 files changed, 35 insertions, 84 deletions
diff --git a/recipes-security/audit/audit/0001-Remove-strdupa-as-suggested-in-pull-request-25.patch b/recipes-security/audit/audit/0001-Remove-strdupa-as-suggested-in-pull-request-25.patch
deleted file mode 100644
index 38029aa..0000000
--- a/recipes-security/audit/audit/0001-Remove-strdupa-as-suggested-in-pull-request-25.patch
+++ /dev/null
@@ -1,47 +0,0 @@
1From a1782b58b687b74249dc8b2411a3f646b821ebd6 Mon Sep 17 00:00:00 2001
2From: Steve Grubb <sgrubb@redhat.com>
3Date: Thu, 4 Oct 2018 08:45:47 -0400
4Subject: [PATCH] Remove strdupa as suggested in pull request #25
5
6---
7 src/auditd.c | 11 ++++++-----
8 1 file changed, 6 insertions(+), 5 deletions(-)
9
10Origin: https://github.com/linux-audit/audit-userspace/commit/a1782b58b687b74249dc8b2411a3f646b821ebd6
11Applied-Upstream: yes
12
13diff --git a/src/auditd.c b/src/auditd.c
14index b0952db..c826ec0 100644
15--- a/src/auditd.c
16+++ b/src/auditd.c
17@@ -209,21 +209,22 @@ static void cont_handler(struct ev_loop *loop, struct ev_signal *sig,
18
19 static int extract_type(const char *str)
20 {
21- const char *tptr, *ptr2, *ptr = str;
22+ const char *ptr2, *ptr = str;
23 if (*str == 'n') {
24 ptr = strchr(str+1, ' ');
25 if (ptr == NULL)
26 return -1; // Malformed - bomb out
27 ptr++;
28 }
29+
30 // ptr should be at 't'
31 ptr2 = strchr(ptr, ' ');
32- // get type=xxx in a buffer
33- tptr = strndupa(ptr, ptr2 - ptr);
34+
35 // find =
36- str = strchr(tptr, '=');
37- if (str == NULL)
38+ str = strchr(ptr, '=');
39+ if (str == NULL || str >= ptr2)
40 return -1; // Malformed - bomb out
41+
42 // name is 1 past
43 str++;
44 return audit_name_to_msg_type(str);
45--
462.20.1
47
diff --git a/recipes-security/audit/audit/0002-Add-substitue-functions-for-strndupa-rawmemchr.patch b/recipes-security/audit/audit/Add-substitue-functions-for-strndupa-rawmemchr.patch
index c948aa3..bb6c61e 100644
--- a/recipes-security/audit/audit/0002-Add-substitue-functions-for-strndupa-rawmemchr.patch
+++ b/recipes-security/audit/audit/Add-substitue-functions-for-strndupa-rawmemchr.patch
@@ -1,12 +1,11 @@
1From 5346b6af0ca67a2965ca5846ae150f3021a2aa17 Mon Sep 17 00:00:00 2001 1From bdcdc3dff4469aac88e718bd15958d5ed4b9392a Mon Sep 17 00:00:00 2001
2From: Steve Grubb <sgrubb@redhat.com> 2From: Steve Grubb <sgrubb@redhat.com>
3Date: Tue, 26 Feb 2019 18:33:33 -0500 3Date: Tue, 26 Feb 2019 18:33:33 -0500
4Subject: [PATCH] Add substitue functions for strndupa & rawmemchr 4Subject: [PATCH] Add substitue functions for strndupa & rawmemchr
5 5
6Upstream-Status: Backport
7[https://github.com/linux-audit/audit-userspace/commit/d579a08bb1cde71f939c13ac6b2261052ae9f77e]
6--- 8---
7Origin: https://github.com/linux-audit/audit-userspace/commit/d579a08bb1cde71f939c13ac6b2261052ae9f77e
8Applied-Upstream: yes
9
10 auparse/auparse.c | 12 +++++++++++- 9 auparse/auparse.c | 12 +++++++++++-
11 auparse/interpret.c | 9 ++++++++- 10 auparse/interpret.c | 9 ++++++++-
12 configure.ac | 14 +++++++++++++- 11 configure.ac | 14 +++++++++++++-
@@ -14,7 +13,7 @@ Applied-Upstream: yes
14 4 files changed, 43 insertions(+), 4 deletions(-) 13 4 files changed, 43 insertions(+), 4 deletions(-)
15 14
16diff --git a/auparse/auparse.c b/auparse/auparse.c 15diff --git a/auparse/auparse.c b/auparse/auparse.c
17index f84712e..3764046 100644 16index 650db02..2e1c737 100644
18--- a/auparse/auparse.c 17--- a/auparse/auparse.c
19+++ b/auparse/auparse.c 18+++ b/auparse/auparse.c
20@@ -1,5 +1,5 @@ 19@@ -1,5 +1,5 @@
@@ -24,7 +23,7 @@ index f84712e..3764046 100644
24 * All Rights Reserved. 23 * All Rights Reserved.
25 * 24 *
26 * This library is free software; you can redistribute it and/or 25 * This library is free software; you can redistribute it and/or
27@@ -1100,6 +1100,16 @@ static int str2event(char *s, au_event_t *e) 26@@ -1118,6 +1118,16 @@ static int str2event(char *s, au_event_t *e)
28 return 0; 27 return 0;
29 } 28 }
30 29
@@ -42,7 +41,7 @@ index f84712e..3764046 100644
42 static int extract_timestamp(const char *b, au_event_t *e) 41 static int extract_timestamp(const char *b, au_event_t *e)
43 { 42 {
44diff --git a/auparse/interpret.c b/auparse/interpret.c 43diff --git a/auparse/interpret.c b/auparse/interpret.c
45index 1846f9d..8540bd1 100644 44index 51c4a5e..67b7b77 100644
46--- a/auparse/interpret.c 45--- a/auparse/interpret.c
47+++ b/auparse/interpret.c 46+++ b/auparse/interpret.c
48@@ -853,6 +853,13 @@ err_out: 47@@ -853,6 +853,13 @@ err_out:
@@ -69,7 +68,7 @@ index 1846f9d..8540bd1 100644
69 break; 68 break;
70 *ptr = ' '; 69 *ptr = ' ';
71diff --git a/configure.ac b/configure.ac 70diff --git a/configure.ac b/configure.ac
72index ede7109..97b547f 100644 71index 54bdbf1..aef07fb 100644
73--- a/configure.ac 72--- a/configure.ac
74+++ b/configure.ac 73+++ b/configure.ac
75@@ -1,7 +1,7 @@ 74@@ -1,7 +1,7 @@
@@ -101,7 +100,7 @@ index ede7109..97b547f 100644
101 ALLWARNS="" 100 ALLWARNS=""
102 ALLDEBUG="-g" 101 ALLDEBUG="-g"
103diff --git a/src/ausearch-lol.c b/src/ausearch-lol.c 102diff --git a/src/ausearch-lol.c b/src/ausearch-lol.c
104index 4fbfbae..5eecefe 100644 103index 5d17a72..758c33e 100644
105--- a/src/ausearch-lol.c 104--- a/src/ausearch-lol.c
106+++ b/src/ausearch-lol.c 105+++ b/src/ausearch-lol.c
107@@ -1,6 +1,6 @@ 106@@ -1,6 +1,6 @@
@@ -112,8 +111,8 @@ index 4fbfbae..5eecefe 100644
112 * All Rights Reserved. 111 * All Rights Reserved.
113 * 112 *
114 * This software may be freely redistributed and/or modified under the 113 * This software may be freely redistributed and/or modified under the
115@@ -131,6 +131,16 @@ static int inline events_are_equal(event *e1, event *e2) 114@@ -152,6 +152,16 @@ static int compare_event_time(event *e1, event *e2)
116 return 1; 115 return 0;
117 } 116 }
118 117
119+#ifndef HAVE_STRNDUPA 118+#ifndef HAVE_STRNDUPA
@@ -130,5 +129,5 @@ index 4fbfbae..5eecefe 100644
130 * This function will look at the line and pick out pieces of it. 129 * This function will look at the line and pick out pieces of it.
131 */ 130 */
132-- 131--
1332.20.1 1322.7.4
134 133
diff --git a/recipes-security/audit/audit/audit-python-configure.patch b/recipes-security/audit/audit/audit-python-configure.patch
index cb62ec3..37096b0 100644
--- a/recipes-security/audit/audit/audit-python-configure.patch
+++ b/recipes-security/audit/audit/audit-python-configure.patch
@@ -1,9 +1,9 @@
1From be689ee1748c6aa531dbca982e0218d077ac901c Mon Sep 17 00:00:00 2001 1From 6a2710db094061e1956fac3ed81114d0e958ea21 Mon Sep 17 00:00:00 2001
2From: Li xin <lixin.fnst@cn.fujitsu.com> 2From: Li xin <lixin.fnst@cn.fujitsu.com>
3Date: Sun, 19 Jul 2015 00:49:13 +0900 3Date: Sun, 19 Jul 2015 00:49:13 +0900
4Subject: [PATCH] audit: python cross-compile 4Subject: [PATCH] audit: python cross-compile
5 5
6Upstream-Status: pending 6Upstream-Status: Inappropriate [embedded specific]
7 7
8Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com> 8Signed-off-by: Xin Ouyang <Xin.Ouyang@windriver.com>
9Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com> 9Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
@@ -14,10 +14,10 @@ Signed-off-by: T.O. Radzy Radzykewycz <radzy@windriver.com>
14 1 file changed, 2 insertions(+), 15 deletions(-) 14 1 file changed, 2 insertions(+), 15 deletions(-)
15 15
16diff --git a/configure.ac b/configure.ac 16diff --git a/configure.ac b/configure.ac
17index 1f48cb4..cdb5219 100644 17index 6e345f1..54bdbf1 100644
18--- a/configure.ac 18--- a/configure.ac
19+++ b/configure.ac 19+++ b/configure.ac
20@@ -94,21 +94,8 @@ if test x$use_python = xno ; then 20@@ -99,21 +99,8 @@ if test "x$use_python" = xno ; then
21 else 21 else
22 AC_MSG_RESULT(testing) 22 AC_MSG_RESULT(testing)
23 AM_PATH_PYTHON 23 AM_PATH_PYTHON
@@ -42,5 +42,5 @@ index 1f48cb4..cdb5219 100644
42 AM_CONDITIONAL(HAVE_PYTHON, test ${python_found} = "yes") 42 AM_CONDITIONAL(HAVE_PYTHON, test ${python_found} = "yes")
43 43
44-- 44--
451.9.1 452.7.4
46 46
diff --git a/recipes-security/audit/audit/audit-python.patch b/recipes-security/audit/audit/audit-python.patch
index 0c2dc1c..c1a2595 100644
--- a/recipes-security/audit/audit/audit-python.patch
+++ b/recipes-security/audit/audit/audit-python.patch
@@ -1,8 +1,10 @@
1From 9c8fd14feabe985242ef08e52c3e866d7755fa6e Mon Sep 17 00:00:00 2001 1From 9d95d7e28a2c4cbefa998d375de180c731a151b1 Mon Sep 17 00:00:00 2001
2From: Li xin <lixin.fnst@cn.fujitsu.com> 2From: Li xin <lixin.fnst@cn.fujitsu.com>
3Date: Sun, 19 Jul 2015 01:40:48 +0900 3Date: Sun, 19 Jul 2015 01:40:48 +0900
4Subject: [PATCH] Remove hard coded python include directory 4Subject: [PATCH] Remove hard coded python include directory
5 5
6Upstream-Status: Inappropriate [embedded specific]
7
6Signed-off-by: Mark Hatle <mark.hatle@windriver.com> 8Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
7--- 9---
8 bindings/Makefile.am | 8 +++++++- 10 bindings/Makefile.am | 8 +++++++-
@@ -11,7 +13,7 @@ Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
11 3 files changed, 12 insertions(+), 4 deletions(-) 13 3 files changed, 12 insertions(+), 4 deletions(-)
12 14
13diff --git a/bindings/Makefile.am b/bindings/Makefile.am 15diff --git a/bindings/Makefile.am b/bindings/Makefile.am
14index cc68df3..998b990 100644 16index 5b5c576..7a15205 100644
15--- a/bindings/Makefile.am 17--- a/bindings/Makefile.am
16+++ b/bindings/Makefile.am 18+++ b/bindings/Makefile.am
17@@ -22,4 +22,10 @@ 19@@ -22,4 +22,10 @@
@@ -58,5 +60,5 @@ index 8c98b94..ae7c52b 100644
58 pyexec_LTLIBRARIES = _audit.la 60 pyexec_LTLIBRARIES = _audit.la
59 pyexec_SOLIBRARIES = _audit.so 61 pyexec_SOLIBRARIES = _audit.so
60-- 62--
611.8.4.2 632.7.4
62 64
diff --git a/recipes-security/audit/audit/auditd b/recipes-security/audit/audit/auditd
index fcd96c9..cda2e43 100755
--- a/recipes-security/audit/audit/auditd
+++ b/recipes-security/audit/audit/auditd
@@ -30,7 +30,7 @@ SCRIPTNAME=/etc/init.d/"$NAME"
30 30
31. /etc/default/rcS 31. /etc/default/rcS
32 32
33. /etc/init.d/functions 33. /etc/init.d/functions
34 34
35# 35#
36# Function that starts the daemon/service 36# Function that starts the daemon/service
diff --git a/recipes-security/audit/audit/fix-swig-host-contamination.patch b/recipes-security/audit/audit/fix-swig-host-contamination.patch
index faeeeeb..184f515 100644
--- a/recipes-security/audit/audit/fix-swig-host-contamination.patch
+++ b/recipes-security/audit/audit/fix-swig-host-contamination.patch
@@ -1,4 +1,4 @@
1From d7577e1e55595123e3bcec78fa4a79fe8a314fe5 Mon Sep 17 00:00:00 2001 1From bd70f570ffb82991feb7a539ac1abf3165d417a4 Mon Sep 17 00:00:00 2001
2From: Li xin <lixin.fnst@cn.fujitsu.com> 2From: Li xin <lixin.fnst@cn.fujitsu.com>
3Date: Sun, 19 Jul 2015 02:42:58 +0900 3Date: Sun, 19 Jul 2015 02:42:58 +0900
4Subject: [PATCH] audit: Fixed swig host contamination issue 4Subject: [PATCH] audit: Fixed swig host contamination issue
@@ -8,17 +8,17 @@ Unfortunately, the swig info file references host include
8directories. Some of these were previously noticed and 8directories. Some of these were previously noticed and
9eliminated, but the one fixed here was not. 9eliminated, but the one fixed here was not.
10 10
11Upstream Status: pending 11Upstream-Status: Inappropriate [embedded specific]
12 12
13Signed-off-by: Anders Hedlund <anders.hedlund@windriver.com> 13Signed-off-by: Anders Hedlund <anders.hedlund@windriver.com>
14Signed-off-by: Joe Slater <jslater@windriver.com> 14Signed-off-by: Joe Slater <jslater@windriver.com>
15--- 15---
16 bindings/swig/python/Makefile.am | 3 ++- 16 bindings/swig/python/Makefile.am | 3 ++-
17 bindings/swig/src/auditswig.i | 4 ++-- 17 bindings/swig/src/auditswig.i | 2 +-
18 2 files changed, 4 insertions(+), 3 deletions(-) 18 2 files changed, 3 insertions(+), 2 deletions(-)
19 19
20diff --git a/bindings/swig/python/Makefile.am b/bindings/swig/python/Makefile.am 20diff --git a/bindings/swig/python/Makefile.am b/bindings/swig/python/Makefile.am
21index ae7c52b..d1bb93c 100644 21index ae7c52b..c580bc0 100644
22--- a/bindings/swig/python/Makefile.am 22--- a/bindings/swig/python/Makefile.am
23+++ b/bindings/swig/python/Makefile.am 23+++ b/bindings/swig/python/Makefile.am
24@@ -22,6 +22,7 @@ 24@@ -22,6 +22,7 @@
@@ -34,25 +34,23 @@ index ae7c52b..d1bb93c 100644
34 nodist__audit_la_SOURCES = audit_wrap.c 34 nodist__audit_la_SOURCES = audit_wrap.c
35 audit.py audit_wrap.c: ${srcdir}/../src/auditswig.i 35 audit.py audit_wrap.c: ${srcdir}/../src/auditswig.i
36- swig -o audit_wrap.c ${SWIG_FLAGS} ${SWIG_INCLUDES} ${srcdir}/../src/auditswig.i 36- swig -o audit_wrap.c ${SWIG_FLAGS} ${SWIG_INCLUDES} ${srcdir}/../src/auditswig.i
37+ swig -o audit_wrap.c ${SWIG_FLAGS} ${SWIG_INCLUDES} -I$(STDINC) ${srcdir}/../src/auditswig.i 37+ swig -o audit_wrap.c ${SWIG_FLAGS} ${SWIG_INCLUDES} -I$(STDINC) ${srcdir}/../src/auditswig.i
38 38
39 CLEANFILES = audit.py* audit_wrap.c *~ 39 CLEANFILES = audit.py* audit_wrap.c *~
40 40
41diff --git a/bindings/swig/src/auditswig.i b/bindings/swig/src/auditswig.i 41diff --git a/bindings/swig/src/auditswig.i b/bindings/swig/src/auditswig.i
42index 9364ac4..48667d4 100644 42index 7ebb373..424fb68 100644
43--- a/bindings/swig/src/auditswig.i 43--- a/bindings/swig/src/auditswig.i
44+++ b/bindings/swig/src/auditswig.i 44+++ b/bindings/swig/src/auditswig.i
45@@ -39,8 +39,8 @@ signed 45@@ -39,7 +39,7 @@ signed
46 #define __attribute(X) /*nothing*/ 46 #define __attribute(X) /*nothing*/
47 typedef unsigned __u32; 47 typedef unsigned __u32;
48 typedef unsigned uid_t; 48 typedef unsigned uid_t;
49-%include "/usr/include/linux/audit.h" 49-%include "/usr/include/linux/audit.h"
50+%include "linux/audit.h" 50+%include "linux/audit.h"
51 #define __extension__ /*nothing*/ 51 #define __extension__ /*nothing*/
52-%include "/usr/include/stdint.h" 52 #include <stdint.h>
53+%include "stdint.h"
54 %include "../lib/libaudit.h" 53 %include "../lib/libaudit.h"
55
56-- 54--
571.8.4.2 552.7.4
58 56
diff --git a/recipes-security/audit/audit_2.8.4.bb b/recipes-security/audit/audit_2.8.5.bb
index 594786a..bd09873 100644
--- a/recipes-security/audit/audit_2.8.4.bb
+++ b/recipes-security/audit/audit_2.8.5.bb
@@ -11,14 +11,13 @@ SRC_URI = "http://people.redhat.com/sgrubb/${BPN}/${BPN}-${PV}.tar.gz \
11 file://audit-python-configure.patch \ 11 file://audit-python-configure.patch \
12 file://audit-python.patch \ 12 file://audit-python.patch \
13 file://fix-swig-host-contamination.patch \ 13 file://fix-swig-host-contamination.patch \
14 file://0001-Remove-strdupa-as-suggested-in-pull-request-25.patch \ 14 file://Add-substitue-functions-for-strndupa-rawmemchr.patch \
15 file://0002-Add-substitue-functions-for-strndupa-rawmemchr.patch \
16 file://auditd \ 15 file://auditd \
17 file://auditd.service \ 16 file://auditd.service \
18 file://audit-volatile.conf \ 17 file://audit-volatile.conf \
19" 18"
20SRC_URI[md5sum] = "ec9510312564c3d9483bccf8dbda4779" 19SRC_URI[md5sum] = "9455e5773670afdbccaeb92681b2e97d"
21SRC_URI[sha256sum] = "a410694d09fc5708d980a61a5abcb9633a591364f1ecc7e97ad5daef9c898c38" 20SRC_URI[sha256sum] = "0e5d4103646e00f8d1981e1cd2faea7a2ae28e854c31a803e907a383c5e2ecb7"
22 21
23inherit autotools pythonnative update-rc.d systemd 22inherit autotools pythonnative update-rc.d systemd
24 23