summaryrefslogtreecommitdiffstats
path: root/meta/recipes-core
AgeCommit message (Collapse)Author
2021-03-31cve-update-db-native: Allow to overrule the URL in a bbappend.jan
With this small patch, it's possible to overrule the public URL with a local mirror for those without Internet access. (From OE-Core rev: 2d903126e8bbece3a5171c3488c3deae1f0aa3ee) Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-28packagegroups: delete useless "PROVIDES" linesRobert P. J. Day
There is apparently no functional value to "PROVIDES" lines anymore in packagegroup recipe files, so remove the lonely couple of examples left. (From OE-Core rev: 6f2c9602bc5fc6794b852ec20f40ea62a55ada1e) Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-28util-linux-libuuid: Simplify recipe and rename from util-linux-uuidRichard Purdie
Rename the recipe from util-linux-uuid to util-linux-libuuid which means we can drop the custom PACKAGES and FILES defintions which simplifies things. Also move the LICENSE setting to the libuuid recipe so that it is correctly applied to the right packages. This means the standard definitions from bitbake.conf are used, avoiding errors from situations where users have customised settings causing failures. (From OE-Core rev: 65efd76198ad805060fe28714765cd423fa748dc) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-28initramfs-framework:rootfs: fix some conditional checkMing Liu
Drop a duplicated check for "PARTLABEL=", also change to use elif to avoid go through all the checks for root parameter. (From OE-Core rev: 29e1e2ad0b6fd0db0e099831ba331b4ffa2b094b) Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-23build-appliance-image: Update to master head revision3.3_M3Richard Purdie
(From OE-Core rev: 7ae12e4278e98c5b916a1067ae0b48c2da6e82cd) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-20libxcrypt: fix sporadic failures in nativesdk-libxcrypt-compatAlexander Kanavin
(From OE-Core rev: ee1dca4ad342455c800b4ff38f375f5c40cfbdf6) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-20systemd: upgrade 247.3 -> 247.4wangmy@fujitsu.com
refresh the following patches: systemd/0001-systemd.pc.in-use-ROOTPREFIX-without-suffixed-slash.patch systemd/0006-Include-netinet-if_ether.h.patch (From OE-Core rev: 5db15aec00517e5b6f6585b534a2314c226841bf) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-20cve-update-db-native: consider version suffix when update CVE dbLee Chee Yang
some record from NVD can merge or split suffix from version, for example: CVE-2017-15906 "cpe23Uri" : "cpe:2.3:a:openbsd:openssh:5.0:p1:*:*:*:*:*:*" "cpe23Uri" : "cpe:2.3:a:openbsd:openssh:4.7p1:*:*:*:*:*:*:*" in such case include the suffix into version when update local CVE db. (From OE-Core rev: 13cc68197f81bb7c76fa1abecc5dd720b8bdb8d5) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-20ovmf: make output binaries reproducibleRoss Burton
OVMF is mostly reproducible, but the final .efi binaries have a 'NM10' segment in that references the original input file, and this input file has the build path in. This can be solved by passing --zero to GenFw so that this segment is zero'd out in release builds. [ YOCTO #14264 ] (From OE-Core rev: 8b4e5a3b8c3eabfbb94ab577529240b2e270efa7) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-20util-linux: backport patch to skip build of unused objectsLuca Boccassi
util-linux-uuid does not need libtcolors.a and libcommon.a but they get build regardless. Backport a patch from upstream to skip them and save some compilation time. https://github.com/karelzak/util-linux/commit/c65953d72bbc7412f32e566d9fa6e780d84f0696 (From OE-Core rev: 9353c4338acd51e1bc4172554fca018c4044829f) Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-15build-appliance-image: Update to master head revisionRichard Purdie
(From OE-Core rev: fa1e1fbc082e82e41ccfeae58af97fe048c9aac7) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-15build-appliance-image: Update to master head revisionRichard Purdie
(From OE-Core rev: aeacc675fcf0cf02ad0bc8e247285638fd72023d) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-14glib-2.0: Drop volatile qualifierKhem Raj
Fixes glib/gatomic.h:112:5: error: argument 2 of '__atomic_load' discards 'volatile' qualifier [-Werror=incompatible-pointer-types] (From OE-Core rev: 06ac55a06f2300fa5442ec73a28c3f52022cc640) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-14ovmf: upgrade 202011 -> 202102Wang Mingyu
0003-ovmf-enable-long-path-file.patch removed since it is not available in 202102. (From OE-Core rev: c364d64adcb8c7fdfe196186efa868381f8630e7) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-14libucontext: Recognize ppc64le architectureKhem Raj
(From OE-Core rev: 03dec80604ae363c31a5f2b68eb3efdba7c35f1a) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-14glibc: fix pthread_cond_destroy hangs with process-shared mutexYanfei Xu
This bug can cause pthread_cond_destroy hang with process-shared mutex. And it is since glibc-2.32, will be fixed in glibc-2.34. (From OE-Core rev: 7d9c50a12d1b47474536c214f44dc4ff72c54402) Signed-off-by: Yanfei Xu <yanfei.xu@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-14glibc: Fix CVE-2021-27645Khairul Rohaizzat Jamaluddin
CVE: CVE-2021-27645 (From OE-Core rev: 0d6b266c469a35628a3602590611d05ebbf4d562) Signed-off-by: Khairul Rohaizzat Jamaluddin <khairul.rohaizzat.jamaluddin@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-14uninative-tarball: Add a dependency on nativesdk-glibc-dbgPeter Kjellerstedt
This adds the debug symbols for the binaries included in the uninative tar ball. These are needed if one wants to run valgrind on a native binary when uninative is used. Or get complete backtraces using gdb. (From OE-Core rev: 13775feac21f0df50d4b3db19f6c79f10cf397f5) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-12busybox-inittab: rename for PV to match with busybox's PVMartin Jansa
(From OE-Core rev: 0c22fbc91655873f29cbedad6d55a7981482d257) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-12busybox: refresh the defconfig from 1.33.0Martin Jansa
(From OE-Core rev: 4335cd240c30db677fdd1849eefe9ed3277681a8) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-12util-linux: split uuid in separate recipe to allow bootstrappingLuca Boccassi
Recently util-linux gained an (optional) build dependency on libcryptsetup. But libcryptsetup build-depends on util-linux for blkid (optional, can be disabled) and uuid (mandatory). Split out util-linux-uuid in a different recipe to break the cycle. https://github.com/karelzak/util-linux/pull/898 (From OE-Core rev: 5f204796e73f37ee67d0a86512ce3ab6f19f9ed0) Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-11inittab: Add getty launch on hvc0 for qemuppc64Khem Raj
(From OE-Core rev: be3a6b97913cd9e17cd434a2abec1aa3445a3c05) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-10glibc: Backport patch to fix _SC_LEVEL1_ICACHE_LINESIZEAndrei Gherzan
(From OE-Core rev: 89b38e4e7be9e136c71d5860ddca5369f9628393) Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-09build-appliance-image: Drop kernel module handlingRichard Purdie
kernel-devsrc is a dependency of the image so we no longer need the symlink creation code or the module-base inherit/dependency as it is included in that recipe. The KERNEL_VERSION usage was broken anyway as the module usage would have needed a: do_image[depends] += "build-appliance-image:do_configure" which wasn't present so it was indeterminate if KERNEL_VERSION was set correctly. (From OE-Core rev: a46b43bb67b2f87ec370480e50a2e2d111555b75) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-06systemd-conf: do not ask for DHCP if configured on kernel command lineStefan Schmidt
In cases where we configure the IP address and more on the kernel command line with ip= we should not ask for DHCP with systemd-networkd later on. We have such a setup with our runqemu script. With this match in place we can also deploy this unit on qemu systems. (From OE-Core rev: 8c4981e740c0e630200dbc77c9e3dfd3e43b790b) Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-06glib-2.0: show an error about --cross-file only when such file existsMartin Jansa
(From OE-Core rev: 6bd44129a76bdae1320f76035b23568a9c2b4e57) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-06glib-2.0: call os.path.normpath on THISDIRMartin Jansa
* some build environments have relative paths in THISDIR, e.g. from OEROOT set in: https://github.com/96boards/oe-rpb-manifest/blob/1e3345c26c56f77f3a15a3978f412a25955d2606/conf/bblayers.conf#L4 and then the paths in filename normalized in: filename = os.path.normpath(os.path.join(path, meson.cross.d, element)) don't match. * COREBASE used here before didn't have this issue because the value is already normalized when set in: meta/conf/layer.conf:COREBASE = '${@os.path.normpath("${LAYERDIR}/../")}' (From OE-Core rev: 7977ff07d181d269bd52f98852d1076b268db614) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-06systemd-container: recommends StartExecPre modulesVivien Didelot
The systemd-nspawn@.service file uses the following line to try loading the tun, loop and dm-mod kernel modules, in a non fatal way: ExecStartPre=-/sbin/modprobe -abq tun loop dm-mod A non-zero return code from modprobe will not stop the service from starting, but it would be convenient to inform the user about this optional support, so add these modules to RRECOMMENDS. (From OE-Core rev: 9644285dc8a7e7c52b5f7554ef06d9ff53167832) Signed-off-by: Vivien Didelot <vdidelot@pbsc.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-06systemd-container: recommend tarVivien Didelot
If systemd is configured with importd, "machinectl import-*" can be used to add container trees under /var/lib/machines. But "machinectl import-tar" makes use of "tar --numeric-owner" which is not supported by the busybox binary, as shown below: # machinectl import-tar /tmp/container.tar.xz Enqueued transfer job 1. Press C-c to continue download in background. Importing '/tmp/container.tar.xz', saving as 'container'. Imported 0%. tar: unrecognized option '--numeric-owner' BusyBox v1.31.1 () multi-call binary. Usage: tar c|x|t [-ZzJjahmvokO] [-f TARFILE] [-C DIR] [-T FILE] [-X FILE] [FILE]... Failed to decode and write: Broken pipe Exiting. To fix this, recommend the standard tar package. Cc: Chen Qi <Qi.Chen@windriver.com> (From OE-Core rev: 801658f0161270c76829a123a4f531ca5a1f73db) Signed-off-by: Vivien Didelot <vdidelot@pbsc.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-06systemd-container: sort RRECOMMENDS alphabeticallyVivien Didelot
Sort packages in RRECOMMENDS_${PN}-container alphabetically to avoid subjective sorting and ease future additions. (From OE-Core rev: 636c048b9d49b0f0bf083add688b4de80f3e37cd) Signed-off-by: Vivien Didelot <vdidelot@pbsc.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-02sysvinit: upgrade 2.98 -> 2.99zhengruoqin
(From OE-Core rev: d096fa4c412e6e562846282a9160dd5c38731aed) Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-02libxcrypt-compat: upgrade 4.4.17 -> 4.4.18zhengruoqin
When the libxcrypt version is updated, libxcrypt-compat is omitted. (From OE-Core rev: a353882899da414b109acbb3b7882239265fe248) Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-02coreutils: use u-a for base32Martin Jansa
* busybox 1.33.0 added base32 applet and now do_rootfs for read-only images is failing with: do_rootfs: busybox.postinst returned 1, marking as unpacked only, configuration required on target. ERROR: image-devel-1.0-r2 do_rootfs: Postinstall scriptlets of ['busybox'] have failed. If the intention is to defer them to first boot, then please place them into pkg_postinst_ontarget_${PN} (). Deferring to first boot via 'exit 1' is no longer supported. Details of the failure are in image-devel/1.0-r2/temp/log.do_rootfs. and log.do_rootfs shows: update-alternatives: Error: not linking image-devel/1.0-r2/rootfs/usr/bin/base32 to /usr/bin/busybox.nosuid since image-devel/1.0-r2/rootfs/usr/bin/base32 exists and is not a link (From OE-Core rev: d2365442568c206a13165f8c71a7b7a5d0c6ff4e) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-02glibc: Disable CPU ISA level requirement checkHe Zhe
We experience the following error and fail to boot on qemu64 machine /lib64/libc.so.6: CPU ISA level is lower than required Kernel panic - not syncing: Attempted to kill init! exitcode=0x00007f00 As stated in [1], Passing -march= causes glibc to add annotations not compatible to run result on -march= as too high ISA level is inferred. ISA level is a new feature of 2.33 release. Until it's fixed let's disable ISA level inference with libc_cv_include_x86_isa_level=no (no better configure option yet). [1] https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5dbd6a821ff753e3b41324c4fb7c58cf65eeea33 (From OE-Core rev: 91264e14a088013b138e82520744f79fa7c8d585) Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-03-01eudev: upgrade 3.2.9 -> 3.2.10Wang Mingyu
(From OE-Core rev: 9c36b944502c146e4160fb9363ec8dfeac608cc2) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-27glibc: Fix rawmemchrKhem Raj
This is to help gcc bug upstream https://gcc.gnu.org/bugzilla/show_bug.cgi?id=98512 (From OE-Core rev: ae9cad4e0554c8fe91d64030ad5c7e6d67b713d6) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-27glib-2.0: replace THISDIR instead of COREBASE in find_meson_cross_files ↵Martin Jansa
--cross-file paths * COREBASE works correctly only as long as this recipe is inside of COREBASE directory and leaves the full absolute paths if you copy this recipe into your own layer (e.g. to backport newer version) * use THISDIR as all FILESPATH should be relative to that, unless there is a .bbappend not only extending FILESPATH, but also adding meson.cross.d files there (at which point it also didn't work with COREBASE replacements as well already) - show an ERROR in such case, I don't think it's common scenario to spend more time to support that. (From OE-Core rev: 314cfc7d6a8f9b00db7da5424890ff955a5ce971) Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26packagegroup-base: do not force hdparm and e2fsprogsDiego Santa Cruz
The hdparm and (base) e2fsprogs are not always useful in all machines having ext2 in MACHINE_FEATURES, so do not force them to b installed, make them recommendations instead. (From OE-Core rev: 17ec69be55a6b7572947704c07d8693d47d7f1d1) Signed-off-by: Diego Santa Cruz <Diego.SantaCruz@spinetix.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26packagegroup-base: use amixer instead of alsamixerDiego Santa Cruz
Including alsamixer, which is an ncurses based interactive program, does not seem to make sense as a base package in embedded systems, replace it by the command line mixer utility amixer instead; it is scriptable and has no ncurses dependencies. (From OE-Core rev: 5e80b093a893600ed402701251fe0bdc9c10bb45) Signed-off-by: Diego Santa Cruz <Diego.SantaCruz@spinetix.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26meta/recipes-core: Add HOMEPAGE / DESCRIPTIONDorinda
Added HOMEPAGE and DESCRIPTION for recipes with missing decriptions or homepage [YOCTO #13471] (From OE-Core rev: be8d3d0fa6bbc2924ffbdbaa66e9ffaef2b96de6) Signed-off-by: Dorinda Bassey <dorindabassey@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26busybox: update 1.33.0Oleksandr Kravchuk
Removed upstreamed patch. (From OE-Core rev: 79708b961b310a77b4b2e71fedf6dad4acd47507) Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26libxcrypt: upgrade 4.4.17 -> 4.4.18Wang Mingyu
file LICENSING updated: directory of files changed from m4 to build-aux (From OE-Core rev: 6d9f47e5303d8d223419d85554e14491e9fb3421) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23musl: Install /lib directoryKhem Raj
loader is installed into /lib and ${base_libdir} may not be always pointing to /lib, while here we want to create the directory where ldso will reside (From OE-Core rev: 76795b5a4452b531c342df2c8a3bbb264cc8a8d2) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23systemd: Fix importd requirements commentVivien Didelot
The comment above the importd config states curl, which does not exist in PACKAGECONFIG. Adding it results in the following error (and then misleading compilation failures): WARNING: systemd-1_244.5-r0 do_configure: QA Issue: systemd: invalid PACKAGECONFIG: curl [invalid-packageconfig] Support for curl is currently enabled through journal-upload: PACKAGECONFIG[journal-upload] = "-Dlibcurl=true,-Dlibcurl=false,curl" While it might be more appropriate to deprecate "journal-upload" in favor of a "curl" PACKAGECONFIG entry, simply fix the importd comment for now by stating upload-journal instead of curl. (From OE-Core rev: e6a0bced605da58ff43ff06ea6a1d67e84c98d91) Signed-off-by: Vivien Didelot <vdidelot@pbsc.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23ell: update to 0.38Oleksandr Kravchuk
Changelog: - Fix issue with DHCP v6 Rapid Commit option check. - Fix issue with handling RFC8018/RFC1423 padding. (From OE-Core rev: f9c01ad1fc86706c76b0ef708d049267342bb5ec) Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-21util-linux: upgrade 2.36.1 -> 2.36.2Wang Mingyu
0001-build-sys-do-not-build-plymouth-ctrl.c-w-disabled-pl.patch 0001-hwclock-do-not-assume-__NR_settimeofday_time32.patch removed since they are included in 2.36.2 (From OE-Core rev: 4db0babf6a69a90df14363103f5f6b643f208b12) Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-21glibc: Unify wordsize.h with arm multilibszhengruoqin
wordsize.h should be the same under arm and aarch64, othersise the following error happens: "file /usr/include/bits/wordsize.h conflicts between attempted installs of lib32-libc6-dev-2.33-r0.armv7ahf_neon and libc6-dev-2.33-r0.aarch64" (From OE-Core rev: cf487df7d58ea89fcef5c4bc30c2ca1ceded9508) Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-21glibc-package.inc: Fix arm multlib header issue with struct_stat.hzhengruoqin
Fix build error under multilib as following: "file /usr/include/bits/struct_stat.h conflicts between attempted installs of lib32-libc6-dev-2.33-r0.armv7ahf_neon and libc6-dev-2.33-r0.aarch64" (From OE-Core rev: 163ec51715e939fe9ff3f87c2af46a77e1a8edea) Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-21recipes: Update common-licenses references to match new namesRichard Purdie
The licenses were renamed to match their SPDX names, fix the references in LIC_FILES_CHKSUM in OE-Core. (From OE-Core rev: 9af48917cfe583d2db9e1e088c7e396fcf638949) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-19systemd: add hostname fallback when polkit is not availableLuca Boccassi
When polkit is not available, networkd will not have permissions to call hostnamed's dbus methods, as it runs without privileges. To solve this, when building without polkit, make a new PACKAGECONFIG 'polkit_hostnamed_fallback' available which changes hostnamed so that it runs as the 'systemd-network' user, the same as networkd, so that the authorization works (and also with CAP_SYS_ADMIN since it loses root). Also run it with a separate 'systemd-hostname' group which also owns the bus, to avoid giving the 'systemd-network' additional privileges. (From OE-Core rev: 07a8f1629662d4d66d056d95be3cb9e749242274) Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-03 10:39:42 +0000