Complete Yocto mirror with license table for TQMa6UL (2038-compliance)
- 264 license table entries with exact download URLs (224/264 resolved) - Complete sources/ directory with all BitBake recipes - Build configuration: tqma6ul-multi-mba6ulx, spaetzle (musl) - Full traceability for Softwarefreigabeantrag - GCC 13.4.0, Linux 6.6.102, U-Boot 2023.04, musl 1.2.4 - License distribution: GPL-2.0 (24), MIT (23), GPL-2.0+ (18), BSD-3 (16)
This commit is contained in:
Siggi (OpenClaw Agent)
@@ -0,0 +1,47 @@
|
||||
From b1b58f122a3e05b5689358fdd3203ba110cca567 Mon Sep 17 00:00:00 2001
|
||||
From: Markus Volk <f_l_k@t-online.de>
|
||||
Date: Sun, 24 Sep 2023 22:20:42 +0200
|
||||
Subject: [PATCH] Reproducibility fix
|
||||
|
||||
This fixes:
|
||||
WARNING: udisks2-2.10.1-r0 do_package_qa: QA Issue: File /usr/lib/udisks2/modules/libudisks2_btrfs.so in package udisks2 contains reference to TMPDIR
|
||||
File /usr/lib/udisks2/modules/libudisks2_lvm2.so in package udisks2 contains reference to TMPDIR
|
||||
File /usr/libexec/udisks2/udisksd in package udisks2 contains reference to TMPDIR [buildpaths]
|
||||
|
||||
Upstream-Status: Inappropriate [oe-specific]
|
||||
|
||||
Signed-off-by: Markus Volk <f_l_k@t-online.de>
|
||||
---
|
||||
modules/lvm2/Makefile.am | 2 +-
|
||||
src/Makefile.am | 2 +-
|
||||
2 files changed, 2 insertions(+), 2 deletions(-)
|
||||
|
||||
diff --git a/modules/lvm2/Makefile.am b/modules/lvm2/Makefile.am
|
||||
index 67b8aa6b3..e4ae462e7 100644
|
||||
--- a/modules/lvm2/Makefile.am
|
||||
+++ b/modules/lvm2/Makefile.am
|
||||
@@ -16,7 +16,7 @@ CPPFLAGS = \
|
||||
-DLVM_HELPER_DIR=\""$(prefix)/lib/udisks2/"\" \
|
||||
-D_POSIX_PTHREAD_SEMANTICS -D_REENTRANT \
|
||||
-DUDISKS_COMPILATION \
|
||||
- -DBUILD_DIR=\"$(abs_top_builddir)/\" \
|
||||
+ -DBUILD_DIR=\"/usr/src/\" \
|
||||
$(POLKIT_GOBJECT_1_CFLAGS) \
|
||||
$(GLIB_CFLAGS) \
|
||||
$(GIO_CFLAGS) \
|
||||
diff --git a/src/Makefile.am b/src/Makefile.am
|
||||
index 5a174d1ab..0da3a497b 100644
|
||||
--- a/src/Makefile.am
|
||||
+++ b/src/Makefile.am
|
||||
@@ -20,7 +20,7 @@ CPPFLAGS = \
|
||||
-DUDISKS_MODULE_DIR=\"$(libdir)/udisks2/modules\" \
|
||||
-D_POSIX_PTHREAD_SEMANTICS -D_REENTRANT \
|
||||
-DUDISKS_COMPILATION \
|
||||
- -DBUILD_DIR=\"$(abs_top_builddir)/\" \
|
||||
+ -DBUILD_DIR=\"/usr/src/\" \
|
||||
$(POLKIT_GOBJECT_1_CFLAGS) \
|
||||
$(GUDEV_CFLAGS) \
|
||||
$(GLIB_CFLAGS) \
|
||||
--
|
||||
2.42.0
|
||||
|
||||
@@ -0,0 +1,51 @@
|
||||
From d0d04a381036b79df91616552706d515639bb762 Mon Sep 17 00:00:00 2001
|
||||
From: Tomas Bzatek <tbzatek@redhat.com>
|
||||
Date: Wed, 4 Jun 2025 15:26:46 +0200
|
||||
Subject: [PATCH] udiskslinuxfilesystemhelpers: Mount private mounts with
|
||||
'nodev,nosuid'
|
||||
|
||||
The private mount done in take_filesystem_ownership() should always
|
||||
default to 'nodev,nosuid' for security and 'errors=remount-ro' for
|
||||
selected filesystem types to handle an corrupted filesystem. This is
|
||||
consistent with mount options calculation for regular mounts.
|
||||
|
||||
CVE: CVE-2025-6019
|
||||
Upstream-Status: Backport [ https://github.com/storaged-project/udisks/commit/5e7277debea926370e587408517560afe87d28c9 ]
|
||||
|
||||
Signed-off-by: Changqing Li <changqing.li@windriver.com>
|
||||
---
|
||||
src/udiskslinuxfilesystemhelpers.c | 10 +++++++++-
|
||||
1 file changed, 9 insertions(+), 1 deletion(-)
|
||||
|
||||
diff --git a/src/udiskslinuxfilesystemhelpers.c b/src/udiskslinuxfilesystemhelpers.c
|
||||
index 7c5fc037..9eb7742c 100644
|
||||
--- a/src/udiskslinuxfilesystemhelpers.c
|
||||
+++ b/src/udiskslinuxfilesystemhelpers.c
|
||||
@@ -123,6 +123,7 @@ take_filesystem_ownership (const gchar *device,
|
||||
|
||||
{
|
||||
gchar *mountpoint = NULL;
|
||||
+ const gchar *mount_opts;
|
||||
GError *local_error = NULL;
|
||||
gboolean unmount = FALSE;
|
||||
gboolean success = TRUE;
|
||||
@@ -151,8 +152,15 @@ take_filesystem_ownership (const gchar *device,
|
||||
goto out;
|
||||
}
|
||||
|
||||
+ mount_opts = "nodev,nosuid";
|
||||
+ if (g_strcmp0 (fstype, "ext2") == 0 ||
|
||||
+ g_strcmp0 (fstype, "ext3") == 0 ||
|
||||
+ g_strcmp0 (fstype, "ext4") == 0 ||
|
||||
+ g_strcmp0 (fstype, "jfs") == 0)
|
||||
+ mount_opts = "nodev,nosuid,errors=remount-ro";
|
||||
+
|
||||
/* TODO: mount to a private mount namespace */
|
||||
- if (!bd_fs_mount (device, mountpoint, fstype, NULL, NULL, &local_error))
|
||||
+ if (!bd_fs_mount (device, mountpoint, fstype, mount_opts, NULL, &local_error))
|
||||
{
|
||||
g_set_error (error, UDISKS_ERROR, UDISKS_ERROR_FAILED,
|
||||
"Cannot mount %s at %s: %s",
|
||||
--
|
||||
2.34.1
|
||||
|
||||
@@ -0,0 +1,64 @@
|
||||
SUMMARY = "udisks provides dbus interfaces for disks and storage devices"
|
||||
LICENSE = "GPL-2.0-or-later & LGPL-2.0-or-later"
|
||||
LIC_FILES_CHKSUM = "file://COPYING;md5=dd79f6dbbffdbc8e86b086a8f0c0ef43"
|
||||
|
||||
DEPENDS = " \
|
||||
glib-2.0-native \
|
||||
libxslt-native \
|
||||
acl \
|
||||
libatasmart \
|
||||
polkit \
|
||||
libgudev \
|
||||
glib-2.0 \
|
||||
dbus-glib \
|
||||
libblockdev \
|
||||
"
|
||||
DEPENDS += "${@bb.utils.filter('DISTRO_FEATURES', 'systemd', d)}"
|
||||
|
||||
RDEPENDS:${PN} = "acl"
|
||||
|
||||
SRC_URI = " \
|
||||
git://github.com/storaged-project/udisks.git;branch=2.10.x-branch;protocol=https \
|
||||
file://0001-Makefile.am-Dont-include-buildpath.patch \
|
||||
file://CVE-2025-6019.patch \
|
||||
"
|
||||
SRCREV = "18c9faf089e306ad6f3f51f5cb887a6b9aa08350"
|
||||
S = "${WORKDIR}/git"
|
||||
|
||||
CVE_PRODUCT = "udisks"
|
||||
|
||||
inherit autotools-brokensep systemd gtk-doc gobject-introspection gettext features_check
|
||||
|
||||
REQUIRED_DISTRO_FEATURES = "polkit"
|
||||
|
||||
EXTRA_OECONF = "--disable-man --disable-gtk-doc"
|
||||
|
||||
do_configure:prepend() {
|
||||
# | configure.ac:656: error: required file 'build-aux/config.rpath' not found
|
||||
mkdir -p ${S}/build-aux
|
||||
touch ${S}/build-aux/config.rpath
|
||||
}
|
||||
|
||||
PACKAGECONFIG ?= ""
|
||||
|
||||
PACKAGECONFIG[lvm2] = "--enable-lvm2,--disable-lvm2,lvm2"
|
||||
PACKAGECONFIG[btrfs] = "--enable-btrfs,--disable-btrfs,,btrfs-tools"
|
||||
PACKAGECONFIG[lsm] = "--enable-lsm,--disable-lsm,libstoragemgmt"
|
||||
|
||||
FILES:${PN} += " \
|
||||
${datadir}/dbus-1/ \
|
||||
${datadir}/polkit-1 \
|
||||
${datadir}/bash-completion \
|
||||
${datadir}/zsh \
|
||||
${libdir}/polkit-1/extensions/*.so \
|
||||
${nonarch_base_libdir}/udev/* \
|
||||
${exec_prefix}${nonarch_base_libdir}/udisks2/* \
|
||||
${systemd_system_unitdir} \
|
||||
"
|
||||
|
||||
PACKAGES =+ "${PN}-libs"
|
||||
FILES:${PN}-libs = "${libdir}/lib*${SOLIBS}"
|
||||
FILES:${PN} += "${nonarch_libdir}/tmpfiles.d"
|
||||
|
||||
SYSTEMD_SERVICE:${PN} = "${BPN}.service"
|
||||
SYSTEMD_AUTO_ENABLE = "disable"
|
||||
Reference in New Issue
Block a user