[meta-cgl][PATCH] samhain: add new recipe

[meta-cgl][PATCH] samhain: add new recipe

[Li xin]

Samhain is an open source file integrity and intrusion detection
system for Unix that uses cryptographic checksums of files to
detect modifications, and allows you to trace: what changes have
occured in your system, when these changes have occured, and who
was logged into the system at the respective time.

Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
---
 .../samhain/0001-Makefile.in-error-fix.patch       | 31 ++++++++++++
 .../samhain/samhain/config-site.samhain-3.1.3      |  2 +
 .../recipes-cgl/samhain/samhain_3.1.3.bb           | 58 ++++++++++++++++++++++
 3 files changed, 91 insertions(+)
 create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
 create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
 create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb

diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
new file mode 100644
index 0000000..cd646f6
--- /dev/null
+++ b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
@@ -0,0 +1,31 @@
+From a9ce38c56bf7072f292d685a48b912e6e59260a6 Mon Sep 17 00:00:00 2001
+From: Li xin <lixin.fnst@cn.fujitsu.com>
+Date: Wed, 10 Dec 2014 14:45:28 +0900
+Subject: [PATCH] Makefile.in: error fix
+
+error:File '/usr/sbin/samhain' from samhain was already stripped,
+this will prevent future debugging!
+
+Upstream-Status: pending
+
+Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
+---
+ Makefile.in | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/Makefile.in b/Makefile.in
+index b1904d9..000de49 100644
+--- a/Makefile.in
++++ b/Makefile.in
+@@ -54,7 +54,7 @@ selectconfig = @selectconfig@
+ top_builddir = .
+ 
+ INSTALL = @INSTALL@
+-INSTALL_PROGRAM = @INSTALL@ -s -m 700
++INSTALL_PROGRAM = @INSTALL@ -m 700
+ INSTALL_SHELL = @INSTALL@ -m 700
+ INSTALL_DATA = @INSTALL@ -m 600
+ INSTALL_MAN = @INSTALL@ -m 644
+-- 
+1.8.4.2
+
diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3 b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
new file mode 100644
index 0000000..2ce3769
--- /dev/null
+++ b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
@@ -0,0 +1,2 @@
+ssp_cv_lib=no
+sh_cv_va_copy=yes
diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
new file mode 100644
index 0000000..22c8577
--- /dev/null
+++ b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
@@ -0,0 +1,58 @@
+SUMMARY = "File Integrity and Intrusion Detection System"
+DESCRIPTION = "Samhain is an open source file integrity and intrusion detection \
+system for Unix that uses cryptographic checksums of files to \
+detect modifications, and allows you to trace: what changes have \
+occured in your system, when these changes have occured, and who \
+was logged into the system at the respective time."
+
+HOMEPAGE = "http://la-samhna.de/samhain/"
+SECTION = "Filesystem"
+
+SRC_URI = "http://la-samhna.de/samhain/samhain-current.tar.gz;extract=samhain-3.1.3.tar.gz \
+   file://0001-Makefile.in-error-fix.patch"
+SRC_URI[md5sum] = "64572a4dbfdc8065d6e9f7ca0eab0a34"
+SRC_URI[sha256sum] = "c234afaf9ba3c6b7d240858b74423f935185de66e996405b3016ec4a288a7e1e"
+LICENSE = "GPLv2"
+LIC_FILES_CHKSUM = "file://LICENSE;md5=8ca43cbc842c2336e835926c2166c28b"
+
+DEPENDS = "libpthread-stubs acl zlib attr"
+inherit autotools-brokensep pkgconfig
+
+do_unpack2() {
+    cd ${WORKDIR}
+    tar zxvf ${PN}-${PV}.tar.gz
+}
+
+S = "${WORKDIR}/${BP}"
+
+addtask unpack2 after do_unpack before do_patch
+do_configure() {
+    export CONFIG_SITE=./config-site.${BP}
+    ./configure \
+        --host=${HOST_SYS} \
+        --build=${BUILD_SYS} \
+        --prefix=${prefix} \
+        --sbindir=${sbindir} \
+        --mandir=${mandir} \
+        --sysconfdir=${sysconfdir} \
+        --localstatedir=${localstatedir} \
+        --with-config-file=/etc/samhain/samhainrc \
+        --with-state-dir=/var/samhain \
+        --with-html-file=/var/samhain/samhain.html \
+        --with-data-file=/var/samhain/samhain.data \
+        --with-pid-file=/var/samhain/samhain.pid \
+        --with-log-file=/var/samhain/samhain.log \
+        --enable-login-watch \
+        --disable-khide \
+        --enable-suidcheck \
+        --with-trusted=0
+}
+
+do_install() {
+    install -d -m 755 ${D}/var/samhain
+    install -d  ${D}/${mandir}
+    oe_runmake DESTDIR=${D} install-program install-man install-data
+    chmod -R a+r ${D}/${mandir}
+    install -d ${D}/etc/samhain
+    install -c -m 644  samhainrc.linux ${D}/etc/samhain/samhainrc
+}
-- 
1.8.4.2

Re: [meta-cgl][PATCH] samhain: add new recipe

[Khem Raj]

> On Dec 10, 2014, at 12:33 AM, Li xin <lixin.fnst@cn.fujitsu.com> wrote:
> 
> Samhain is an open source file integrity and intrusion detection
> system for Unix that uses cryptographic checksums of files to
> detect modifications, and allows you to trace: what changes have
> occured in your system, when these changes have occured, and who
> was logged into the system at the respective time.
> 
> Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
> ---
> .../samhain/0001-Makefile.in-error-fix.patch       | 31 ++++++++++++
> .../samhain/samhain/config-site.samhain-3.1.3      |  2 +
> .../recipes-cgl/samhain/samhain_3.1.3.bb           | 58 ++++++++++++++++++++++
> 3 files changed, 91 insertions(+)
> create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> 
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> new file mode 100644
> index 0000000..cd646f6
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> @@ -0,0 +1,31 @@
> +From a9ce38c56bf7072f292d685a48b912e6e59260a6 Mon Sep 17 00:00:00 2001
> +From: Li xin <lixin.fnst@cn.fujitsu.com>
> +Date: Wed, 10 Dec 2014 14:45:28 +0900
> +Subject: [PATCH] Makefile.in: error fix
> +
> +error:File '/usr/sbin/samhain' from samhain was already stripped,
> +this will prevent future debugging!
> +
> +Upstream-Status: pending
> +
> +Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
> +---
> + Makefile.in | 2 +-
> + 1 file changed, 1 insertion(+), 1 deletion(-)
> +
> +diff --git a/Makefile.in b/Makefile.in
> +index b1904d9..000de49 100644
> +--- a/Makefile.in
> ++++ b/Makefile.in
> +@@ -54,7 +54,7 @@ selectconfig = @selectconfig@
> + top_builddir = .
> + 
> + INSTALL = @INSTALL@
> +-INSTALL_PROGRAM = @INSTALL@ -s -m 700
> ++INSTALL_PROGRAM = @INSTALL@ -m 700
> + INSTALL_SHELL = @INSTALL@ -m 700
> + INSTALL_DATA = @INSTALL@ -m 600
> + INSTALL_MAN = @INSTALL@ -m 644
> +-- 
> +1.8.4.2
> +
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3 b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> new file mode 100644
> index 0000000..2ce3769
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> @@ -0,0 +1,2 @@
> +ssp_cv_lib=no
> +sh_cv_va_copy=yes
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> new file mode 100644
> index 0000000..22c8577
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> @@ -0,0 +1,58 @@
> +SUMMARY = "File Integrity and Intrusion Detection System"
> +DESCRIPTION = "Samhain is an open source file integrity and intrusion detection \
> +system for Unix that uses cryptographic checksums of files to \
> +detect modifications, and allows you to trace: what changes have \
> +occured in your system, when these changes have occured, and who \
> +was logged into the system at the respective time."
> +
> +HOMEPAGE = "http://la-samhna.de/samhain/"
> +SECTION = "Filesystem"
> +
> +SRC_URI = "http://la-samhna.de/samhain/samhain-current.tar.gz;extract=samhain-3.1.3.tar.gz \
> +   file://0001-Makefile.in-error-fix.patch"
> +SRC_URI[md5sum] = "64572a4dbfdc8065d6e9f7ca0eab0a34"
> +SRC_URI[sha256sum] = "c234afaf9ba3c6b7d240858b74423f935185de66e996405b3016ec4a288a7e1e"
> +LICENSE = "GPLv2"
> +LIC_FILES_CHKSUM = "file://LICENSE;md5=8ca43cbc842c2336e835926c2166c28b"
> +
> +DEPENDS = "libpthread-stubs acl zlib attr"
> +inherit autotools-brokensep pkgconfig
> +
> +do_unpack2() {
> +    cd ${WORKDIR}
> +    tar zxvf ${PN}-${PV}.tar.gz
> +}

why is this needed ? can’t do_fetch/do_unpack do it ?

> +
> +S = "${WORKDIR}/${BP}"
> +
> +addtask unpack2 after do_unpack before do_patch
> +do_configure() {
> +    export CONFIG_SITE=./config-site.${BP}
> +    ./configure \
> +        --host=${HOST_SYS} \
> +        --build=${BUILD_SYS} \
> +        --prefix=${prefix} \
> +        --sbindir=${sbindir} \
> +        --mandir=${mandir} \
> +        --sysconfdir=${sysconfdir} \
> +        --localstatedir=${localstatedir} \
> +        --with-config-file=/etc/samhain/samhainrc \
> +        --with-state-dir=/var/samhain \
> +        --with-html-file=/var/samhain/samhain.html \
> +        --with-data-file=/var/samhain/samhain.data \
> +        --with-pid-file=/var/samhain/samhain.pid \
> +        --with-log-file=/var/samhain/samhain.log \
> +        --enable-login-watch \
> +        --disable-khide \
> +        --enable-suidcheck \
> +        --with-trusted=0
> +}

you might not need do_configure override. Just specify additional opts in EXTRA_OECONF

> +
> +do_install() {
> +    install -d -m 755 ${D}/var/samhain
> +    install -d  ${D}/${mandir}
> +    oe_runmake DESTDIR=${D} install-program install-man install-data
> +    chmod -R a+r ${D}/${mandir}
> +    install -d ${D}/etc/samhain
> +    install -c -m 644  samhainrc.linux ${D}/etc/samhain/samhainrc
> +}


This should be do_install_append

> -- 
> 1.8.4.2
> 
> -- 
> _______________________________________________
> yocto mailing list
> yocto@yoctoproject.org
> https://lists.yoctoproject.org/listinfo/yocto

Re: [meta-cgl][PATCH] samhain: add new recipe

[Joe MacDonald]

[-- Attachment #1: Type: text/plain, Size: 5600 bytes --]

[[yocto] [meta-cgl][PATCH] samhain: add new recipe] On 14.12.10 (Wed 16:33) Li xin wrote:

> Samhain is an open source file integrity and intrusion detection
> system for Unix that uses cryptographic checksums of files to
> detect modifications, and allows you to trace: what changes have
> occured in your system, when these changes have occured, and who
> was logged into the system at the respective time.

Samhain is already in meta-security at the same version (though without
the patch you've included here.)

Since meta-cgl depends on meta-security today, I think you probably
should submit whatever updates are appropriate to the samhain recipe
to meta-security, so as to avoid duplicating / diverging recipes.

-J.

> 
> Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
> ---
>  .../samhain/0001-Makefile.in-error-fix.patch       | 31 ++++++++++++
>  .../samhain/samhain/config-site.samhain-3.1.3      |  2 +
>  .../recipes-cgl/samhain/samhain_3.1.3.bb           | 58 ++++++++++++++++++++++
>  3 files changed, 91 insertions(+)
>  create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
>  create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
>  create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> 
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> new file mode 100644
> index 0000000..cd646f6
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> @@ -0,0 +1,31 @@
> +From a9ce38c56bf7072f292d685a48b912e6e59260a6 Mon Sep 17 00:00:00 2001
> +From: Li xin <lixin.fnst@cn.fujitsu.com>
> +Date: Wed, 10 Dec 2014 14:45:28 +0900
> +Subject: [PATCH] Makefile.in: error fix
> +
> +error:File '/usr/sbin/samhain' from samhain was already stripped,
> +this will prevent future debugging!
> +
> +Upstream-Status: pending
> +
> +Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
> +---
> + Makefile.in | 2 +-
> + 1 file changed, 1 insertion(+), 1 deletion(-)
> +
> +diff --git a/Makefile.in b/Makefile.in
> +index b1904d9..000de49 100644
> +--- a/Makefile.in
> ++++ b/Makefile.in
> +@@ -54,7 +54,7 @@ selectconfig = @selectconfig@
> + top_builddir = .
> + 
> + INSTALL = @INSTALL@
> +-INSTALL_PROGRAM = @INSTALL@ -s -m 700
> ++INSTALL_PROGRAM = @INSTALL@ -m 700
> + INSTALL_SHELL = @INSTALL@ -m 700
> + INSTALL_DATA = @INSTALL@ -m 600
> + INSTALL_MAN = @INSTALL@ -m 644
> +-- 
> +1.8.4.2
> +
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3 b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> new file mode 100644
> index 0000000..2ce3769
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> @@ -0,0 +1,2 @@
> +ssp_cv_lib=no
> +sh_cv_va_copy=yes
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> new file mode 100644
> index 0000000..22c8577
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> @@ -0,0 +1,58 @@
> +SUMMARY = "File Integrity and Intrusion Detection System"
> +DESCRIPTION = "Samhain is an open source file integrity and intrusion detection \
> +system for Unix that uses cryptographic checksums of files to \
> +detect modifications, and allows you to trace: what changes have \
> +occured in your system, when these changes have occured, and who \
> +was logged into the system at the respective time."
> +
> +HOMEPAGE = "http://la-samhna.de/samhain/"
> +SECTION = "Filesystem"
> +
> +SRC_URI = "http://la-samhna.de/samhain/samhain-current.tar.gz;extract=samhain-3.1.3.tar.gz \
> +   file://0001-Makefile.in-error-fix.patch"
> +SRC_URI[md5sum] = "64572a4dbfdc8065d6e9f7ca0eab0a34"
> +SRC_URI[sha256sum] = "c234afaf9ba3c6b7d240858b74423f935185de66e996405b3016ec4a288a7e1e"
> +LICENSE = "GPLv2"
> +LIC_FILES_CHKSUM = "file://LICENSE;md5=8ca43cbc842c2336e835926c2166c28b"
> +
> +DEPENDS = "libpthread-stubs acl zlib attr"
> +inherit autotools-brokensep pkgconfig
> +
> +do_unpack2() {
> +    cd ${WORKDIR}
> +    tar zxvf ${PN}-${PV}.tar.gz
> +}
> +
> +S = "${WORKDIR}/${BP}"
> +
> +addtask unpack2 after do_unpack before do_patch
> +do_configure() {
> +    export CONFIG_SITE=./config-site.${BP}
> +    ./configure \
> +        --host=${HOST_SYS} \
> +        --build=${BUILD_SYS} \
> +        --prefix=${prefix} \
> +        --sbindir=${sbindir} \
> +        --mandir=${mandir} \
> +        --sysconfdir=${sysconfdir} \
> +        --localstatedir=${localstatedir} \
> +        --with-config-file=/etc/samhain/samhainrc \
> +        --with-state-dir=/var/samhain \
> +        --with-html-file=/var/samhain/samhain.html \
> +        --with-data-file=/var/samhain/samhain.data \
> +        --with-pid-file=/var/samhain/samhain.pid \
> +        --with-log-file=/var/samhain/samhain.log \
> +        --enable-login-watch \
> +        --disable-khide \
> +        --enable-suidcheck \
> +        --with-trusted=0
> +}
> +
> +do_install() {
> +    install -d -m 755 ${D}/var/samhain
> +    install -d  ${D}/${mandir}
> +    oe_runmake DESTDIR=${D} install-program install-man install-data
> +    chmod -R a+r ${D}/${mandir}
> +    install -d ${D}/etc/samhain
> +    install -c -m 644  samhainrc.linux ${D}/etc/samhain/samhainrc
> +}
> -- 
> 1.8.4.2
> 
-- 
-Joe MacDonald.
:wq

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 501 bytes --]

Re: [meta-cgl][PATCH] samhain: add new recipe

[Alexandru Vaduva]

[-- Attachment #1: Type: text/plain, Size: 6132 bytes --]

Thanks Joe,
I added Armin for to this discussion as a head-up regarding those updates, since it was the one working on samhain recipe on meta-security.

Alex Vaduva 

     On Thursday, December 11, 2014 2:48 AM, Joe MacDonald <Joe_MacDonald@mentor.com> wrote:
   

 [[yocto] [meta-cgl][PATCH] samhain: add new recipe] On 14.12.10 (Wed 16:33) Li xin wrote:

> Samhain is an open source file integrity and intrusion detection
> system for Unix that uses cryptographic checksums of files to
> detect modifications, and allows you to trace: what changes have
> occured in your system, when these changes have occured, and who
> was logged into the system at the respective time.

Samhain is already in meta-security at the same version (though without
the patch you've included here.)

Since meta-cgl depends on meta-security today, I think you probably
should submit whatever updates are appropriate to the samhain recipe
to meta-security, so as to avoid duplicating / diverging recipes.

-J.

> 
> Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
> ---
>  .../samhain/0001-Makefile.in-error-fix.patch      | 31 ++++++++++++
>  .../samhain/samhain/config-site.samhain-3.1.3      |  2 +
>  .../recipes-cgl/samhain/samhain_3.1.3.bb          | 58 ++++++++++++++++++++++
>  3 files changed, 91 insertions(+)
>  create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
>  create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
>  create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> 
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> new file mode 100644
> index 0000000..cd646f6
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> @@ -0,0 +1,31 @@
> +From a9ce38c56bf7072f292d685a48b912e6e59260a6 Mon Sep 17 00:00:00 2001
> +From: Li xin <lixin.fnst@cn.fujitsu.com>
> +Date: Wed, 10 Dec 2014 14:45:28 +0900
> +Subject: [PATCH] Makefile.in: error fix
> +
> +error:File '/usr/sbin/samhain' from samhain was already stripped,
> +this will prevent future debugging!
> +
> +Upstream-Status: pending
> +
> +Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
> +---
> + Makefile.in | 2 +-
> + 1 file changed, 1 insertion(+), 1 deletion(-)
> +
> +diff --git a/Makefile.in b/Makefile.in
> +index b1904d9..000de49 100644
> +--- a/Makefile.in
> ++++ b/Makefile.in
> +@@ -54,7 +54,7 @@ selectconfig = @selectconfig@
> + top_builddir = .
> + 
> + INSTALL = @INSTALL@
> +-INSTALL_PROGRAM = @INSTALL@ -s -m 700
> ++INSTALL_PROGRAM = @INSTALL@ -m 700
> + INSTALL_SHELL = @INSTALL@ -m 700
> + INSTALL_DATA = @INSTALL@ -m 600
> + INSTALL_MAN = @INSTALL@ -m 644
> +-- 
> +1.8.4.2
> +
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3 b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> new file mode 100644
> index 0000000..2ce3769
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> @@ -0,0 +1,2 @@
> +ssp_cv_lib=no
> +sh_cv_va_copy=yes
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> new file mode 100644
> index 0000000..22c8577
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> @@ -0,0 +1,58 @@
> +SUMMARY = "File Integrity and Intrusion Detection System"
> +DESCRIPTION = "Samhain is an open source file integrity and intrusion detection \
> +system for Unix that uses cryptographic checksums of files to \
> +detect modifications, and allows you to trace: what changes have \
> +occured in your system, when these changes have occured, and who \
> +was logged into the system at the respective time."
> +
> +HOMEPAGE = "http://la-samhna.de/samhain/"
> +SECTION = "Filesystem"
> +
> +SRC_URI = "http://la-samhna.de/samhain/samhain-current.tar.gz;extract=samhain-3.1.3.tar.gz \
> +  file://0001-Makefile.in-error-fix.patch"
> +SRC_URI[md5sum] = "64572a4dbfdc8065d6e9f7ca0eab0a34"
> +SRC_URI[sha256sum] = "c234afaf9ba3c6b7d240858b74423f935185de66e996405b3016ec4a288a7e1e"
> +LICENSE = "GPLv2"
> +LIC_FILES_CHKSUM = "file://LICENSE;md5=8ca43cbc842c2336e835926c2166c28b"
> +
> +DEPENDS = "libpthread-stubs acl zlib attr"
> +inherit autotools-brokensep pkgconfig
> +
> +do_unpack2() {
> +    cd ${WORKDIR}
> +    tar zxvf ${PN}-${PV}.tar.gz
> +}
> +
> +S = "${WORKDIR}/${BP}"
> +
> +addtask unpack2 after do_unpack before do_patch
> +do_configure() {
> +    export CONFIG_SITE=./config-site.${BP}
> +    ./configure \
> +        --host=${HOST_SYS} \
> +        --build=${BUILD_SYS} \
> +        --prefix=${prefix} \
> +        --sbindir=${sbindir} \
> +        --mandir=${mandir} \
> +        --sysconfdir=${sysconfdir} \
> +        --localstatedir=${localstatedir} \
> +        --with-config-file=/etc/samhain/samhainrc \
> +        --with-state-dir=/var/samhain \
> +        --with-html-file=/var/samhain/samhain.html \
> +        --with-data-file=/var/samhain/samhain.data \
> +        --with-pid-file=/var/samhain/samhain.pid \
> +        --with-log-file=/var/samhain/samhain.log \
> +        --enable-login-watch \
> +        --disable-khide \
> +        --enable-suidcheck \
> +        --with-trusted=0
> +}
> +
> +do_install() {
> +    install -d -m 755 ${D}/var/samhain
> +    install -d  ${D}/${mandir}
> +    oe_runmake DESTDIR=${D} install-program install-man install-data
> +    chmod -R a+r ${D}/${mandir}
> +    install -d ${D}/etc/samhain
> +    install -c -m 644  samhainrc.linux ${D}/etc/samhain/samhainrc
> +}
> -- 
> 1.8.4.2
> 
-- 
-Joe MacDonald.
:wq
-- 
_______________________________________________
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto




[-- Attachment #2: Type: text/html, Size: 11177 bytes --]

Re: [meta-cgl][PATCH] samhain: add new recipe

[Alexandru Vaduva]

[-- Attachment #1: Type: text/plain, Size: 6267 bytes --]

Now I did. :D 

     On Thursday, December 11, 2014 9:21 AM, Alexandru Vaduva <vaduvajanalexandru@yahoo.com> wrote:
   

 Thanks Joe,
I added Armin for to this discussion as a head-up regarding those updates, since it was the one working on samhain recipe on meta-security.

Alex Vaduva 

     On Thursday, December 11, 2014 2:48 AM, Joe MacDonald <Joe_MacDonald@mentor.com> wrote:
   

 [[yocto] [meta-cgl][PATCH] samhain: add new recipe] On 14.12.10 (Wed 16:33) Li xin wrote:

> Samhain is an open source file integrity and intrusion detection
> system for Unix that uses cryptographic checksums of files to
> detect modifications, and allows you to trace: what changes have
> occured in your system, when these changes have occured, and who
> was logged into the system at the respective time.

Samhain is already in meta-security at the same version (though without
the patch you've included here.)

Since meta-cgl depends on meta-security today, I think you probably
should submit whatever updates are appropriate to the samhain recipe
to meta-security, so as to avoid duplicating / diverging recipes.

-J.

> 
> Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
> ---
>  .../samhain/0001-Makefile.in-error-fix.patch      | 31 ++++++++++++
>  .../samhain/samhain/config-site.samhain-3.1.3      |  2 +
>  .../recipes-cgl/samhain/samhain_3.1.3.bb          | 58 ++++++++++++++++++++++
>  3 files changed, 91 insertions(+)
>  create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
>  create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
>  create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> 
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> new file mode 100644
> index 0000000..cd646f6
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> @@ -0,0 +1,31 @@
> +From a9ce38c56bf7072f292d685a48b912e6e59260a6 Mon Sep 17 00:00:00 2001
> +From: Li xin <lixin.fnst@cn.fujitsu.com>
> +Date: Wed, 10 Dec 2014 14:45:28 +0900
> +Subject: [PATCH] Makefile.in: error fix
> +
> +error:File '/usr/sbin/samhain' from samhain was already stripped,
> +this will prevent future debugging!
> +
> +Upstream-Status: pending
> +
> +Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
> +---
> + Makefile.in | 2 +-
> + 1 file changed, 1 insertion(+), 1 deletion(-)
> +
> +diff --git a/Makefile.in b/Makefile.in
> +index b1904d9..000de49 100644
> +--- a/Makefile.in
> ++++ b/Makefile.in
> +@@ -54,7 +54,7 @@ selectconfig = @selectconfig@
> + top_builddir = .
> + 
> + INSTALL = @INSTALL@
> +-INSTALL_PROGRAM = @INSTALL@ -s -m 700
> ++INSTALL_PROGRAM = @INSTALL@ -m 700
> + INSTALL_SHELL = @INSTALL@ -m 700
> + INSTALL_DATA = @INSTALL@ -m 600
> + INSTALL_MAN = @INSTALL@ -m 644
> +-- 
> +1.8.4.2
> +
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3 b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> new file mode 100644
> index 0000000..2ce3769
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> @@ -0,0 +1,2 @@
> +ssp_cv_lib=no
> +sh_cv_va_copy=yes
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> new file mode 100644
> index 0000000..22c8577
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> @@ -0,0 +1,58 @@
> +SUMMARY = "File Integrity and Intrusion Detection System"
> +DESCRIPTION = "Samhain is an open source file integrity and intrusion detection \
> +system for Unix that uses cryptographic checksums of files to \
> +detect modifications, and allows you to trace: what changes have \
> +occured in your system, when these changes have occured, and who \
> +was logged into the system at the respective time."
> +
> +HOMEPAGE = "http://la-samhna.de/samhain/"
> +SECTION = "Filesystem"
> +
> +SRC_URI = "http://la-samhna.de/samhain/samhain-current.tar.gz;extract=samhain-3.1.3.tar.gz \
> +  file://0001-Makefile.in-error-fix.patch"
> +SRC_URI[md5sum] = "64572a4dbfdc8065d6e9f7ca0eab0a34"
> +SRC_URI[sha256sum] = "c234afaf9ba3c6b7d240858b74423f935185de66e996405b3016ec4a288a7e1e"
> +LICENSE = "GPLv2"
> +LIC_FILES_CHKSUM = "file://LICENSE;md5=8ca43cbc842c2336e835926c2166c28b"
> +
> +DEPENDS = "libpthread-stubs acl zlib attr"
> +inherit autotools-brokensep pkgconfig
> +
> +do_unpack2() {
> +    cd ${WORKDIR}
> +    tar zxvf ${PN}-${PV}.tar.gz
> +}
> +
> +S = "${WORKDIR}/${BP}"
> +
> +addtask unpack2 after do_unpack before do_patch
> +do_configure() {
> +    export CONFIG_SITE=./config-site.${BP}
> +    ./configure \
> +        --host=${HOST_SYS} \
> +        --build=${BUILD_SYS} \
> +        --prefix=${prefix} \
> +        --sbindir=${sbindir} \
> +        --mandir=${mandir} \
> +        --sysconfdir=${sysconfdir} \
> +        --localstatedir=${localstatedir} \
> +        --with-config-file=/etc/samhain/samhainrc \
> +        --with-state-dir=/var/samhain \
> +        --with-html-file=/var/samhain/samhain.html \
> +        --with-data-file=/var/samhain/samhain.data \
> +        --with-pid-file=/var/samhain/samhain.pid \
> +        --with-log-file=/var/samhain/samhain.log \
> +        --enable-login-watch \
> +        --disable-khide \
> +        --enable-suidcheck \
> +        --with-trusted=0
> +}
> +
> +do_install() {
> +    install -d -m 755 ${D}/var/samhain
> +    install -d  ${D}/${mandir}
> +    oe_runmake DESTDIR=${D} install-program install-man install-data
> +    chmod -R a+r ${D}/${mandir}
> +    install -d ${D}/etc/samhain
> +    install -c -m 644  samhainrc.linux ${D}/etc/samhain/samhainrc
> +}
> -- 
> 1.8.4.2
> 
-- 
-Joe MacDonald.
:wq
-- 
_______________________________________________
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


    



[-- Attachment #2: Type: text/html, Size: 12860 bytes --]

add files to dirctory in packages-split

[Neil.Wu]

[-- Attachment #1: Type: text/plain, Size: 126 bytes --]

Hi all,
I want to add some files to the specified  directory what in packages-split.

How to do it ?

Thank you
Neil


[-- Attachment #2: Type: text/html, Size: 3116 bytes --]

Re: add files to dirctory in packages-split

[Khem Raj]

[-- Attachment #1: Type: text/plain, Size: 495 bytes --]


> On Dec 11, 2014, at 1:35 AM, Neil.Wu@Emerson.com wrote:
> 
> Hi all,
> I want to add some files to the specified  directory what in packages-split.
>  
> How to do it ?

FILES_<name-of-package> += “/path/to/file"

>  
> Thank you
> Neil
>  
> -- 
> _______________________________________________
> yocto mailing list
> yocto@yoctoproject.org <mailto:yocto@yoctoproject.org>
> https://lists.yoctoproject.org/listinfo/yocto <https://lists.yoctoproject.org/listinfo/yocto>

[-- Attachment #2: Type: text/html, Size: 7202 bytes --]

Re: add files to dirctory in packages-split

[Neil.Wu]

[-- Attachment #1: Type: text/plain, Size: 993 bytes --]

Hi Raj,
Thank you very much for your reply. I have try to do like  you say.
I’m compiling the glib-2.0,  need to  add the link file of one library to glib-2.0 package.
So I add the command like following :
FILES_${PN} += “${libdir}/libgio-2.0.so”
But , it can’t success.
Do you know whether need to do other thing?

Neil

From: Khem Raj [mailto:raj.khem@gmail.com]
Sent: Thursday, December 11, 2014 6:05 PM
To: Wu, Neil [CLIMATE/RS/CN]
Cc: yocto@yoctoproject.org
Subject: Re: [yocto] add files to dirctory in packages-split


On Dec 11, 2014, at 1:35 AM, Neil.Wu@Emerson.com<mailto:Neil.Wu@Emerson.com> wrote:

Hi all,
I want to add some files to the specified  directory what in packages-split.

How to do it ?

FILES_<name-of-package> += “/path/to/file"



Thank you
Neil

--
_______________________________________________
yocto mailing list
yocto@yoctoproject.org<mailto:yocto@yoctoproject.org>
https://lists.yoctoproject.org/listinfo/yocto


[-- Attachment #2: Type: text/html, Size: 7431 bytes --]

Re: add files to dirctory in packages-split

[Khem Raj]

[-- Attachment #1: Type: text/plain, Size: 1513 bytes --]


> On Dec 11, 2014, at 5:59 PM, Neil.Wu@Emerson.com wrote:
> 
> Hi Raj,
> Thank you very much for your reply. I have try to do like  you say.
> I’m compiling the glib-2.0,  need to  add the link file of one library to glib-2.0 package.
> So I add the command like following :
> FILES_${PN} += “${libdir}/libgio-2.0.so”
> But , it can’t success.

.so are usually treated to be includes in -dev packages by default
first you need to figure out if you really need .so on target, many times you don’t

some packages still do ( don’t use .so versioning ) then you would need something like

FILES_SOLIBSDEV = ""
SOLIBS = ".so"
INSANE_SKIP_${PN} += "dev-so"


> Do you know whether need to do other thing?
>  
> Neil
>  
> From: Khem Raj [mailto:raj.khem@gmail.com] 
> Sent: Thursday, December 11, 2014 6:05 PM
> To: Wu, Neil [CLIMATE/RS/CN]
> Cc: yocto@yoctoproject.org
> Subject: Re: [yocto] add files to dirctory in packages-split
>  
>  
> On Dec 11, 2014, at 1:35 AM, Neil.Wu@Emerson.com <mailto:Neil.Wu@Emerson.com> wrote:
>  
> Hi all,
> I want to add some files to the specified  directory what in packages-split.
>  
> How to do it ?
>  
> FILES_<name-of-package> += “/path/to/file"
> 
> 
>  
> Thank you
> Neil
>  
> -- 
> _______________________________________________
> yocto mailing list
> yocto@yoctoproject.org <mailto:yocto@yoctoproject.org>
> https://lists.yoctoproject.org/listinfo/yocto <https://lists.yoctoproject.org/listinfo/yocto>

[-- Attachment #2: Type: text/html, Size: 10589 bytes --]

Re: add files to dirctory in packages-split

[Neil.Wu]

[-- Attachment #1: Type: text/plain, Size: 1718 bytes --]

Hello Raj,
Thank you for your help. The problem have solved.
Neil

From: Khem Raj [mailto:raj.khem@gmail.com]
Sent: Friday, December 12, 2014 10:48 AM
To: Wu, Neil [CLIMATE/RS/CN]
Cc: yocto@yoctoproject.org
Subject: Re: [yocto] add files to dirctory in packages-split


On Dec 11, 2014, at 5:59 PM, Neil.Wu@Emerson.com<mailto:Neil.Wu@Emerson.com> wrote:

Hi Raj,
Thank you very much for your reply. I have try to do like  you say.
I’m compiling the glib-2.0,  need to  add the link file of one library to glib-2.0 package.
So I add the command like following :
FILES_${PN} += “${libdir}/libgio-2.0.so”
But , it can’t success.

.so are usually treated to be includes in -dev packages by default
first you need to figure out if you really need .so on target, many times you don’t

some packages still do ( don’t use .so versioning ) then you would need something like

FILES_SOLIBSDEV = ""
SOLIBS = ".so"
INSANE_SKIP_${PN} += "dev-so"


Do you know whether need to do other thing?

Neil

From: Khem Raj [mailto:raj.khem@gmail.com]
Sent: Thursday, December 11, 2014 6:05 PM
To: Wu, Neil [CLIMATE/RS/CN]
Cc: yocto@yoctoproject.org<mailto:yocto@yoctoproject.org>
Subject: Re: [yocto] add files to dirctory in packages-split


On Dec 11, 2014, at 1:35 AM, Neil.Wu@Emerson.com<mailto:Neil.Wu@Emerson.com> wrote:

Hi all,
I want to add some files to the specified  directory what in packages-split.

How to do it ?

FILES_<name-of-package> += “/path/to/file"




Thank you
Neil

--
_______________________________________________
yocto mailing list
yocto@yoctoproject.org<mailto:yocto@yoctoproject.org>
https://lists.yoctoproject.org/listinfo/yocto


[-- Attachment #2: Type: text/html, Size: 10924 bytes --]

Re: [meta-cgl][PATCH] samhain: add new recipe

[akuster808]

Thanks for the updates. I jut got back from vacation and will look into 
the changes soon.

- Armin

On 12/10/2014 11:51 PM, Alexandru Vaduva wrote:
> Now I did. :D
>
>
> On Thursday, December 11, 2014 9:21 AM, Alexandru Vaduva
> <vaduvajanalexandru@yahoo.com> wrote:
>
>
> Thanks Joe,
>
> I added Armin for to this discussion as a head-up regarding those
> updates, since it was the one working on samhain recipe on meta-security.
>
>
> Alex Vaduva
>
>
> On Thursday, December 11, 2014 2:48 AM, Joe MacDonald
> <Joe_MacDonald@mentor.com> wrote:
>
>
> [[yocto] [meta-cgl][PATCH] samhain: add new recipe] On 14.12.10 (Wed
> 16:33) Li xin wrote:
>
>  > Samhain is an open source file integrity and intrusion detection
>  > system for Unix that uses cryptographic checksums of files to
>  > detect modifications, and allows you to trace: what changes have
>  > occured in your system, when these changes have occured, and who
>  > was logged into the system at the respective time.
>
> Samhain is already in meta-security at the same version (though without
> the patch you've included here.)
>
> Since meta-cgl depends on meta-security today, I think you probably
> should submit whatever updates are appropriate to the samhain recipe
> to meta-security, so as to avoid duplicating / diverging recipes.
>
> -J.
>
>
>  >
>  > Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com
> <mailto:lixin.fnst@cn.fujitsu.com>>
>  > ---
>  >  .../samhain/0001-Makefile.in-error-fix.patch      | 31 ++++++++++++
>  >  .../samhain/samhain/config-site.samhain-3.1.3      |  2 +
>  >  .../recipes-cgl/samhain/samhain_3.1.3.bb          | 58
> ++++++++++++++++++++++
>  >  3 files changed, 91 insertions(+)
>  >  create mode 100644
> meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
>  >  create mode 100644
> meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
>  >  create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
>  >
>  > diff --git
> a/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
>  > new file mode 100644
>  > index 0000000..cd646f6
>  > --- /dev/null
>  > +++
> b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
>  > @@ -0,0 +1,31 @@
>  > +From a9ce38c56bf7072f292d685a48b912e6e59260a6 Mon Sep 17 00:00:00 2001
>  > +From: Li xin <lixin.fnst@cn.fujitsu.com
> <mailto:lixin.fnst@cn.fujitsu.com>>
>  > +Date: Wed, 10 Dec 2014 14:45:28 +0900
>  > +Subject: [PATCH] Makefile.in: error fix
>  > +
>  > +error:File '/usr/sbin/samhain' from samhain was already stripped,
>  > +this will prevent future debugging!
>  > +
>  > +Upstream-Status: pending
>  > +
>  > +Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com
> <mailto:lixin.fnst@cn.fujitsu.com>>
>  > +---
>  > + Makefile.in | 2 +-
>  > + 1 file changed, 1 insertion(+), 1 deletion(-)
>  > +
>  > +diff --git a/Makefile.in b/Makefile.in
>  > +index b1904d9..000de49 100644
>  > +--- a/Makefile.in
>  > ++++ b/Makefile.in
>  > +@@ -54,7 +54,7 @@ selectconfig = @selectconfig@
>  > + top_builddir = .
>  > +
>  > + INSTALL = @INSTALL@
>  > +-INSTALL_PROGRAM = @INSTALL@ -s -m 700
>  > ++INSTALL_PROGRAM = @INSTALL@ -m 700
>  > + INSTALL_SHELL = @INSTALL@ -m 700
>  > + INSTALL_DATA = @INSTALL@ -m 600
>  > + INSTALL_MAN = @INSTALL@ -m 644
>  > +--
>  > +1.8.4.2
>  > +
>  > diff --git
> a/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
>  > new file mode 100644
>  > index 0000000..2ce3769
>  > --- /dev/null
>  > +++
> b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
>  > @@ -0,0 +1,2 @@
>  > +ssp_cv_lib=no
>  > +sh_cv_va_copy=yes
>  > diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
>  > new file mode 100644
>  > index 0000000..22c8577
>  > --- /dev/null
>  > +++ b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
>  > @@ -0,0 +1,58 @@
>  > +SUMMARY = "File Integrity and Intrusion Detection System"
>  > +DESCRIPTION = "Samhain is an open source file integrity and
> intrusion detection \
>  > +system for Unix that uses cryptographic checksums of files to \
>  > +detect modifications, and allows you to trace: what changes have \
>  > +occured in your system, when these changes have occured, and who \
>  > +was logged into the system at the respective time."
>  > +
>  > +HOMEPAGE = "http://la-samhna.de/samhain/"
>  > +SECTION = "Filesystem"
>  > +
>  > +SRC_URI =
> "http://la-samhna.de/samhain/samhain-current.tar.gz;extract=samhain-3.1.3.tar.gz
> <http://la-samhna.de/samhain/samhain-current.tar.gz;extract=samhain-3.1.3.tar.gz>\
>  > +  file://0001-Makefile.in-error-fix.patch"
>  > +SRC_URI[md5sum] = "64572a4dbfdc8065d6e9f7ca0eab0a34"
>  > +SRC_URI[sha256sum] =
> "c234afaf9ba3c6b7d240858b74423f935185de66e996405b3016ec4a288a7e1e"
>  > +LICENSE = "GPLv2"
>  > +LIC_FILES_CHKSUM = "file://LICENSE;md5=8ca43cbc842c2336e835926c2166c28b"
>  > +
>  > +DEPENDS = "libpthread-stubs acl zlib attr"
>  > +inherit autotools-brokensep pkgconfig
>  > +
>  > +do_unpack2() {
>  > +    cd ${WORKDIR}
>  > +    tar zxvf ${PN}-${PV}.tar.gz
>  > +}
>  > +
>  > +S = "${WORKDIR}/${BP}"
>  > +
>  > +addtask unpack2 after do_unpack before do_patch
>  > +do_configure() {
>  > +    export CONFIG_SITE=./config-site.${BP}
>  > +    ./configure \
>  > +        --host=${HOST_SYS} \
>  > +        --build=${BUILD_SYS} \
>  > +        --prefix=${prefix} \
>  > +        --sbindir=${sbindir} \
>  > +        --mandir=${mandir} \
>  > +        --sysconfdir=${sysconfdir} \
>  > +        --localstatedir=${localstatedir} \
>  > +        --with-config-file=/etc/samhain/samhainrc \
>  > +        --with-state-dir=/var/samhain \
>  > +        --with-html-file=/var/samhain/samhain.html \
>  > +        --with-data-file=/var/samhain/samhain.data \
>  > +        --with-pid-file=/var/samhain/samhain.pid \
>  > +        --with-log-file=/var/samhain/samhain.log \
>  > +        --enable-login-watch \
>  > +        --disable-khide \
>  > +        --enable-suidcheck \
>  > +        --with-trusted=0
>  > +}
>  > +
>  > +do_install() {
>  > +    install -d -m 755 ${D}/var/samhain
>  > +    install -d  ${D}/${mandir}
>  > +    oe_runmake DESTDIR=${D} install-program install-man install-data
>  > +    chmod -R a+r ${D}/${mandir}
>  > +    install -d ${D}/etc/samhain
>  > +    install -c -m 644  samhainrc.linux ${D}/etc/samhain/samhainrc
>  > +}
>  > --
>  > 1.8.4.2
>
>  >
> --
> -Joe MacDonald.
> :wq
> --
> _______________________________________________
> yocto mailing list
> yocto@yoctoproject.org <mailto:yocto@yoctoproject.org>
> https://lists.yoctoproject.org/listinfo/yocto
>
>
>
>

Re: [meta-cgl][PATCH] samhain: add new recipe

[akuster808]

The current version in Meta-security is 3.1.3. Please check and send any 
changes to this list with [meta-security] in the subject.


- Armin

On 12/10/2014 12:33 AM, Li xin wrote:
> Samhain is an open source file integrity and intrusion detection
> system for Unix that uses cryptographic checksums of files to
> detect modifications, and allows you to trace: what changes have
> occured in your system, when these changes have occured, and who
> was logged into the system at the respective time.
>
> Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
> ---
>   .../samhain/0001-Makefile.in-error-fix.patch       | 31 ++++++++++++
>   .../samhain/samhain/config-site.samhain-3.1.3      |  2 +
>   .../recipes-cgl/samhain/samhain_3.1.3.bb           | 58 ++++++++++++++++++++++
>   3 files changed, 91 insertions(+)
>   create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
>   create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
>   create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
>
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> new file mode 100644
> index 0000000..cd646f6
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> @@ -0,0 +1,31 @@
> +From a9ce38c56bf7072f292d685a48b912e6e59260a6 Mon Sep 17 00:00:00 2001
> +From: Li xin <lixin.fnst@cn.fujitsu.com>
> +Date: Wed, 10 Dec 2014 14:45:28 +0900
> +Subject: [PATCH] Makefile.in: error fix
> +
> +error:File '/usr/sbin/samhain' from samhain was already stripped,
> +this will prevent future debugging!
> +
> +Upstream-Status: pending
> +
> +Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
> +---
> + Makefile.in | 2 +-
> + 1 file changed, 1 insertion(+), 1 deletion(-)
> +
> +diff --git a/Makefile.in b/Makefile.in
> +index b1904d9..000de49 100644
> +--- a/Makefile.in
> ++++ b/Makefile.in
> +@@ -54,7 +54,7 @@ selectconfig = @selectconfig@
> + top_builddir = .
> +
> + INSTALL = @INSTALL@
> +-INSTALL_PROGRAM = @INSTALL@ -s -m 700
> ++INSTALL_PROGRAM = @INSTALL@ -m 700
> + INSTALL_SHELL = @INSTALL@ -m 700
> + INSTALL_DATA = @INSTALL@ -m 600
> + INSTALL_MAN = @INSTALL@ -m 644
> +--
> +1.8.4.2
> +
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3 b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> new file mode 100644
> index 0000000..2ce3769
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> @@ -0,0 +1,2 @@
> +ssp_cv_lib=no
> +sh_cv_va_copy=yes
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> new file mode 100644
> index 0000000..22c8577
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> @@ -0,0 +1,58 @@
> +SUMMARY = "File Integrity and Intrusion Detection System"
> +DESCRIPTION = "Samhain is an open source file integrity and intrusion detection \
> +system for Unix that uses cryptographic checksums of files to \
> +detect modifications, and allows you to trace: what changes have \
> +occured in your system, when these changes have occured, and who \
> +was logged into the system at the respective time."
> +
> +HOMEPAGE = "http://la-samhna.de/samhain/"
> +SECTION = "Filesystem"
> +
> +SRC_URI = "http://la-samhna.de/samhain/samhain-current.tar.gz;extract=samhain-3.1.3.tar.gz \
> +   file://0001-Makefile.in-error-fix.patch"
> +SRC_URI[md5sum] = "64572a4dbfdc8065d6e9f7ca0eab0a34"
> +SRC_URI[sha256sum] = "c234afaf9ba3c6b7d240858b74423f935185de66e996405b3016ec4a288a7e1e"
> +LICENSE = "GPLv2"
> +LIC_FILES_CHKSUM = "file://LICENSE;md5=8ca43cbc842c2336e835926c2166c28b"
> +
> +DEPENDS = "libpthread-stubs acl zlib attr"
> +inherit autotools-brokensep pkgconfig
> +
> +do_unpack2() {
> +    cd ${WORKDIR}
> +    tar zxvf ${PN}-${PV}.tar.gz
> +}
> +
> +S = "${WORKDIR}/${BP}"
> +
> +addtask unpack2 after do_unpack before do_patch
> +do_configure() {
> +    export CONFIG_SITE=./config-site.${BP}
> +    ./configure \
> +        --host=${HOST_SYS} \
> +        --build=${BUILD_SYS} \
> +        --prefix=${prefix} \
> +        --sbindir=${sbindir} \
> +        --mandir=${mandir} \
> +        --sysconfdir=${sysconfdir} \
> +        --localstatedir=${localstatedir} \
> +        --with-config-file=/etc/samhain/samhainrc \
> +        --with-state-dir=/var/samhain \
> +        --with-html-file=/var/samhain/samhain.html \
> +        --with-data-file=/var/samhain/samhain.data \
> +        --with-pid-file=/var/samhain/samhain.pid \
> +        --with-log-file=/var/samhain/samhain.log \
> +        --enable-login-watch \
> +        --disable-khide \
> +        --enable-suidcheck \
> +        --with-trusted=0
> +}
> +
> +do_install() {
> +    install -d -m 755 ${D}/var/samhain
> +    install -d  ${D}/${mandir}
> +    oe_runmake DESTDIR=${D} install-program install-man install-data
> +    chmod -R a+r ${D}/${mandir}
> +    install -d ${D}/etc/samhain
> +    install -c -m 644  samhainrc.linux ${D}/etc/samhain/samhainrc
> +}
>

problem of toolchain install directrory

[Neil.Wu]

[-- Attachment #1: Type: text/plain, Size: 488 bytes --]

Hello ,all
I build the toolchain via  bitbake core-image-minimal –c populate_sdk. Then I install the toolchain.

If I install the toolchain in default directory(default: /opt/poky/1.7.1), everything is ok.

But,   if I not install in the default directory, it will appears the problem that can’t find the system header files.
Example: stdio.h

Why is this ? Whether I need to do some other operation.  If you know please help me ! Thank you very much.

Best wishes
Neil


[-- Attachment #2: Type: text/html, Size: 4596 bytes --]

Re: problem of toolchain install directrory

[Liviu Gheorghisan]

[-- Attachment #1: Type: text/plain, Size: 2214 bytes --]

Hello Neil,

Your problem is that the toolchain is installed with the location of the 
sysroot hardcoded as the default installation path for the tool-chain.
You can see this location with:
$ arm-poky-linux-gnueabi-gcc --print-sysroot // or whatever 
cross-compiler you built

However, after you source the environment script for the toolchain:

$ source environment-setup-armv7a-vfp-neon-poky-linux-gnueabi

the environment variables related to the toolchain will be updated 
accordingly, taking care of this problem.

So, use $CC instead of directly calling the gcc cross compiler 
arm-poky-linux-gnueabi-gcc (or whatever the platform you're building for).

Check the difference with this:
$ echo $CC
arm-poky-linux-gnueabi-gcc -march=armv7-a -mthumb-interwork 
-mfloat-abi=softfp -mfpu=neon 
--sysroot=/home/livghe/work/ab/sdk/sysroots/armv7a-vfp-neon-poky-linux-gnueabi

$ $CC --print-sysroot // uses the correct sysroot
/home/livghe/work/ab/sdk/sysroots/armv7a-vfp-neon-poky-linux-gnueabi

$ $ arm-poky-linux-gnueabi-gcc --print-sysroot // uses the sysroot from 
the default instalation path, where it's not present.
/opt/poky/4.0/sysroots/armv7a-vfp-neon-poky-linux-gnueabi

So, you should always use the env variables ($CC, $AR, $LDFLAGS, etc) 
after sourcing the environment script from the toolchain instalation 
path, and not the toolchain executables directly, because the 
environment variables add some useful flags, not only related to the 
sysroot, but also to the type of CPU, etc.

- Liviu


On 12/17/2014 11:30 AM, Neil.Wu@Emerson.com wrote:
>
> *Hello ,all*
>
> I build the toolchain via  bitbake core-image-minimal –c populate_sdk. 
> Then I install the toolchain.
>
> If I install the toolchain in default directory(/default: 
> /opt/poky/1.7.1/), everything is ok.
>
> But,   if I not install in the default directory, it will appears the 
> problem that can’t find the system header files.
>
> Example: stdio.h
>
> Why is this ? Whether I need to do some other operation.  If you know 
> please help me ! Thank you very much.
>
> Best wishes
>
> Neil
>
>
>

-- 
Liviu Gheorghisan
Software Engineer

http://www.enea.com


[-- Attachment #2: Type: text/html, Size: 7618 bytes --]

Re: problem of toolchain install directrory

[Neil.Wu]

[-- Attachment #1: Type: text/plain, Size: 3156 bytes --]

Hello Liviu,

Thank you very much for your reply. I got a very useful information from your reply.

At the  beginning , I want  to add the cross compiler to eclipse project and not use the  default installer directory, but it appears the  above problem.

In eclipse project, the setting as  these:
Properties -- Setting--CrossSetting --Prefilx: arm-poky-linux-gnueabi-
Properties--Setting -- CrossSetting--Path: /opt/poky/mycompiler/sysroots/ i686-pokysdk-linux/usr/bin/arm-poky-linux-gnueabi

You give me the idea to add the sysroot path:
Properties -- Setting -- Cross GCC compiler -MisCellaneous: --sysroot=/opt/poky/mycompiler/sysroots/ armv5te-poky-linux-gnueabi

Now, everything is ok . Thank you again for your help.

Best wishes

Neil
From: Liviu Gheorghisan [mailto:liviu.gheorghisan@enea.com]
Sent: Wednesday, December 17, 2014 5:47 PM
To: Wu, Neil [CLIMATE/RS/CN]; yocto@yoctoproject.org
Subject: Re: [yocto] problem of toolchain install directrory

Hello Neil,

Your problem is that the toolchain is installed with the location of the sysroot hardcoded as the default installation path for the tool-chain.
You can see this location with:
$ arm-poky-linux-gnueabi-gcc --print-sysroot // or whatever cross-compiler you built

However, after you source the environment script for the toolchain:

$ source environment-setup-armv7a-vfp-neon-poky-linux-gnueabi

the environment variables related to the toolchain will be updated accordingly, taking care of this problem.

So, use $CC instead of directly calling the gcc cross compiler arm-poky-linux-gnueabi-gcc (or whatever the platform you're building for).

Check the difference with this:
$ echo $CC
arm-poky-linux-gnueabi-gcc -march=armv7-a -mthumb-interwork -mfloat-abi=softfp -mfpu=neon --sysroot=/home/livghe/work/ab/sdk/sysroots/armv7a-vfp-neon-poky-linux-gnueabi

$ $CC --print-sysroot // uses the correct sysroot
/home/livghe/work/ab/sdk/sysroots/armv7a-vfp-neon-poky-linux-gnueabi

$ $ arm-poky-linux-gnueabi-gcc --print-sysroot // uses the sysroot from the default instalation path, where it's not present.
/opt/poky/4.0/sysroots/armv7a-vfp-neon-poky-linux-gnueabi

So, you should always use the env variables ($CC, $AR, $LDFLAGS, etc) after sourcing the environment script from the toolchain instalation path, and not the toolchain executables directly, because the environment variables add some useful flags, not only related to the sysroot, but also to the type of CPU, etc.

- Liviu

On 12/17/2014 11:30 AM, Neil.Wu@Emerson.com<mailto:Neil.Wu@Emerson.com> wrote:
Hello ,all
I build the toolchain via  bitbake core-image-minimal -c populate_sdk. Then I install the toolchain.

If I install the toolchain in default directory(default: /opt/poky/1.7.1), everything is ok.

But,   if I not install in the default directory, it will appears the problem that can't find the system header files.
Example: stdio.h

Why is this ? Whether I need to do some other operation.  If you know please help me ! Thank you very much.

Best wishes
Neil






--

Liviu Gheorghisan

Software Engineer



http://www.enea.com

[-- Attachment #2: Type: text/html, Size: 11774 bytes --]

can't find the source code of kernel

[Neil.Wu]

[-- Attachment #1: Type: text/plain, Size: 193 bytes --]

Hi ,all
The version of poky is 1.7. I build the linux-yocto is  successful .

bitbake linux-yocto

But, why I can’t find the source code of linux  in ${WORKDIR}.

Best wishes
Neil


[-- Attachment #2: Type: text/html, Size: 3733 bytes --]

Re: can't find the source code of kernel

[Bruce Ashfield]

On 2015-01-15 5:03 AM, Neil.Wu@Emerson.com wrote:
> Hi ,all
>
> The version of poky is 1.7. I build the linux-yocto is  successful .
>
> bitbake linux-yocto
>
> But, why I can’t find the source code of linux  in ${WORKDIR}.

It should be there (note: it is about to move in master, but not in 1.7.1).

In WORKDIR, you have "linux" (the source) and linux-$MACHINE-build (the 
build).

Bruce

>
> Best wishes
>
> Neil
>
>
>

Re: can't find the source code of kernel

[Neil.Wu]

Hi, Bruce
Thank you for your reply. 
In the WORKDIR , it just has "linux-qemuarm-standard-build" and not have the "linux".

My WORKDIR directory is "~/poky/build/tmp/work/qemuarm-poky-linux-gnueabi/linux-yocto/3.14.24+gitAUTOINC+a227f20eff_6166316d47-r0", but I don't find the tarball of "linux-14.24" 
in download directory. It has tarball "linux-17.7.tar.xz".

Do you think whether these is the reason?

I don't know how to set the version of linux when the project  building the image.
Maybe, I set the linux to 17.7 version, the problem can solve.

Do you have any other better suggestion? Thank you very much.

Neil  


-----Original Message-----
From: Bruce Ashfield [mailto:bruce.ashfield@windriver.com] 
Sent: Thursday, January 15, 2015 9:05 PM
To: Wu, Neil [CLIMATE/RS/CN]; yocto@yoctoproject.org
Subject: Re: [yocto] can't find the source code of kernel

On 2015-01-15 5:03 AM, Neil.Wu@Emerson.com wrote:
> Hi ,all
>
> The version of poky is 1.7. I build the linux-yocto is  successful .
>
> bitbake linux-yocto
>
> But, why I can't find the source code of linux  in ${WORKDIR}.

It should be there (note: it is about to move in master, but not in 1.7.1).

In WORKDIR, you have "linux" (the source) and linux-$MACHINE-build (the 
build).

Bruce

>
> Best wishes
>
> Neil
>
>
>

Re: can't find the source code of kernel

[Bruce Ashfield]

On 2015-01-15 8:13 PM, Neil.Wu@Emerson.com wrote:
> Hi, Bruce
> Thank you for your reply.
> In the WORKDIR , it just has "linux-qemuarm-standard-build" and not have the "linux".

Are you sure you are building Yocto 1.7 and not the master branch ?

Until about a month ago, every build had the source along side the
split build directory .. in a directory called linux. But as I
mentioned, we are working to move the kernel to build out of the
sysroot/shared working directory.

>
> My WORKDIR directory is "~/poky/build/tmp/work/qemuarm-poky-linux-gnueabi/linux-yocto/3.14.24+gitAUTOINC+a227f20eff_6166316d47-r0", but I don't find the tarball of "linux-14.24"
> in download directory. It has tarball "linux-17.7.tar.xz".
>
> Do you think whether these is the reason?

They shouldn't be related. But that tar.xz you reference above is
clearly from some other kernel build than the linux yocto variant.

>
> I don't know how to set the version of linux when the project  building the image.
> Maybe, I set the linux to 17.7 version, the problem can solve.

I'm not sure how you are getting a 17.7 tarball, but the linux-yocto
tree builds from a git repository, not a tarball.

In that directory where you see the qemuarm build you should also see a
git.indirectionsymlink that points to the git tree in downloads/git2/

Cheers,

Bruce

>
> Do you have any other better suggestion? Thank you very much.
>
> Neil
>
>
> -----Original Message-----
> From: Bruce Ashfield [mailto:bruce.ashfield@windriver.com]
> Sent: Thursday, January 15, 2015 9:05 PM
> To: Wu, Neil [CLIMATE/RS/CN]; yocto@yoctoproject.org
> Subject: Re: [yocto] can't find the source code of kernel
>
> On 2015-01-15 5:03 AM, Neil.Wu@Emerson.com wrote:
>> Hi ,all
>>
>> The version of poky is 1.7. I build the linux-yocto is  successful .
>>
>> bitbake linux-yocto
>>
>> But, why I can't find the source code of linux  in ${WORKDIR}.
>
> It should be there (note: it is about to move in master, but not in 1.7.1).
>
> In WORKDIR, you have "linux" (the source) and linux-$MACHINE-build (the
> build).
>
> Bruce
>
>>
>> Best wishes
>>
>> Neil
>>
>>
>>
>

Re: can't find the source code of kernel

[Neil.Wu]

Hi, Bruce
Thank you very much for your help. My problem have solved. Before, I was working  in "master" branch.
Switch to a new branch, I find the "source" directory ,what included the kernel source code, in linux-qemuarm-standard-build.

Neil

-----Original Message-----
From: Bruce Ashfield [mailto:bruce.ashfield@windriver.com] 
Sent: Friday, January 16, 2015 12:36 PM
To: Wu, Neil [CLIMATE/RS/CN]; yocto@yoctoproject.org
Subject: Re: [yocto] can't find the source code of kernel

On 2015-01-15 8:13 PM, Neil.Wu@Emerson.com wrote:
> Hi, Bruce
> Thank you for your reply.
> In the WORKDIR , it just has "linux-qemuarm-standard-build" and not have the "linux".

Are you sure you are building Yocto 1.7 and not the master branch ?

Until about a month ago, every build had the source along side the
split build directory .. in a directory called linux. But as I
mentioned, we are working to move the kernel to build out of the
sysroot/shared working directory.

>
> My WORKDIR directory is "~/poky/build/tmp/work/qemuarm-poky-linux-gnueabi/linux-yocto/3.14.24+gitAUTOINC+a227f20eff_6166316d47-r0", but I don't find the tarball of "linux-14.24"
> in download directory. It has tarball "linux-17.7.tar.xz".
>
> Do you think whether these is the reason?

They shouldn't be related. But that tar.xz you reference above is
clearly from some other kernel build than the linux yocto variant.

>
> I don't know how to set the version of linux when the project  building the image.
> Maybe, I set the linux to 17.7 version, the problem can solve.

I'm not sure how you are getting a 17.7 tarball, but the linux-yocto
tree builds from a git repository, not a tarball.

In that directory where you see the qemuarm build you should also see a
git.indirectionsymlink that points to the git tree in downloads/git2/

Cheers,

Bruce

>
> Do you have any other better suggestion? Thank you very much.
>
> Neil
>
>
> -----Original Message-----
> From: Bruce Ashfield [mailto:bruce.ashfield@windriver.com]
> Sent: Thursday, January 15, 2015 9:05 PM
> To: Wu, Neil [CLIMATE/RS/CN]; yocto@yoctoproject.org
> Subject: Re: [yocto] can't find the source code of kernel
>
> On 2015-01-15 5:03 AM, Neil.Wu@Emerson.com wrote:
>> Hi ,all
>>
>> The version of poky is 1.7. I build the linux-yocto is  successful .
>>
>> bitbake linux-yocto
>>
>> But, why I can't find the source code of linux  in ${WORKDIR}.
>
> It should be there (note: it is about to move in master, but not in 1.7.1).
>
> In WORKDIR, you have "linux" (the source) and linux-$MACHINE-build (the
> build).
>
> Bruce
>
>>
>> Best wishes
>>
>> Neil
>>
>>
>>
>

dependency eglibc resulted in conflicting PREFERRED_PROVIDER entries being found

[Neil.Wu]

[-- Attachment #1: Type: text/plain, Size: 714 bytes --]

Hi ,all
I try to build my custom image , The problem appears as follows:

ERROR: Trying to resolve runtime dependency eglibc resulted in conflicting PREFERRED_PROVIDER entries being found.
The providers found were: ['/home/ectrs/poky/meta/recipes-core/glibc/glibc-initial_2.20.bb', 'virtual:nativesdk:/home/ectrs/poky/meta/recipes-core/glibc/glibc-initial_2.20.bb']
The PREFERRED_PROVIDER entries resulting in this conflict were: ['PREFERRED_PROVIDER_virtual/arm-poky-linux-gnueabi-libc-initial = glibc-initial', 'PREFERRED_PROVIDER_virtual/nativesdk-i686-pokysdk-linux-libc-initial = nativesdk-glibc-initial']

Do you know how to resolve it ? Please help me .
Thank you very much.

Best wishes
Neil


[-- Attachment #2: Type: text/html, Size: 4645 bytes --]

the problem of poky 1.7 when building the custom rootfs

[Neil.Wu]

[-- Attachment #1: Type: text/plain, Size: 712 bytes --]

Hi ,all
I try to build my custom image , The problem appears as follows:

ERROR: Trying to resolve runtime dependency eglibc resulted in conflicting PREFERRED_PROVIDER entries being found.
The providers found were: ['/home/ectrs/poky/meta/recipes-core/glibc/glibc-initial_2.20.bb', 'virtual:nativesdk:/home/ectrs/poky/meta/recipes-core/glibc/glibc-initial_2.20.bb']
The PREFERRED_PROVIDER entries resulting in this conflict were: ['PREFERRED_PROVIDER_virtual/arm-poky-linux-gnueabi-libc-initial = glibc-initial', 'PREFERRED_PROVIDER_virtual/nativesdk-i686-pokysdk-linux-libc-initial = nativesdk-glibc-initial']

Do you know how to resolve it ? Please help me .
Thank you very much.
Best wishes
Neil


[-- Attachment #2: Type: text/html, Size: 4765 bytes --]