From: "Peter A. Bigot" <pab@pabigot.com>
To: openembedded-devel@lists.openembedded.org,
xufeng.zhang@windriver.com, rongqing.li@windriver.com
Subject: Re: [meta-networking][PATCH 1/2] ntp: Disable debugging by default
Date: Wed, 27 Aug 2014 06:38:36 -0500 [thread overview]
Message-ID: <53FDC33C.7060208@pabigot.com> (raw)
In-Reply-To: <1407986086-29096-1-git-send-email-rongqing.li@windriver.com>
On 08/13/2014 10:14 PM, rongqing.li@windriver.com wrote:
> From: Xufeng Zhang<xufeng.zhang@windriver.com>
>
> There is a problem in configure.ac file that whether or not
> '--enable-debugging' is specified in configure cmdline, debugging
> is always enabled.
From my testing this is incorrect. Both --disable-debugging and
--enable-debugging=no correctly override the upstream decision to enable
debugging by default.
> We should disable ntp debugging by default.
Could we have more of an explanation why this is a good thing? It
doesn't seem relevant to the security patch it accompanied.
I've got a patch I'm validating that will revert this fix and use
PACKAGECONFIG to control whether debugging is supported. Personally, I'd
rather have the default be to keep debugging enabled.
Upstream ntp enables debugging support by default, and OE's build has
never disabled it before. ntp is a tricky beast and is very terse about
what it's doing. Having the ability to make it explain why (for
example) it's disabling a reference clock is very useful in
diagnostics. Disabling debugging during the build makes it impossible
to get that information out of an installed system.
Peter
>
> Signed-off-by: Xufeng Zhang<xufeng.zhang@windriver.com>
> ---
> .../ntp/files/ntp-disable-debugging.patch | 23 ++++++++++++++++++++
> meta-networking/recipes-support/ntp/ntp.inc | 1 +
> 2 files changed, 24 insertions(+)
> create mode 100644 meta-networking/recipes-support/ntp/files/ntp-disable-debugging.patch
>
> diff --git a/meta-networking/recipes-support/ntp/files/ntp-disable-debugging.patch b/meta-networking/recipes-support/ntp/files/ntp-disable-debugging.patch
> new file mode 100644
> index 0000000..3c94d8d
> --- /dev/null
> +++ b/meta-networking/recipes-support/ntp/files/ntp-disable-debugging.patch
> @@ -0,0 +1,23 @@
> +set ntp_ok to no if ntp debugging is not enabled.
> +
> +Upstream-status: Pending
> +
> +There is a problem in configure.ac file that whether or not
> +'--enable-debugging' is specified in configure cmdline, debugging
> +is always enabled.
> +We should disable ntp debugging by default.
> +
> +Signed-off-by: Xufeng Zhang<xufeng.zhang@windriver.com>
> +
> +---
> +--- a/configure.ac
> ++++ b/configure.ac
> +@@ -2458,7 +2458,7 @@
> + [+ include ntpd debugging code]
> + )],
> + [ntp_ok=$enableval],
> +- [ntp_ok=yes]
> ++ [ntp_ok=no]
> + )
> + case "$ntp_ok" in
> + yes)
> diff --git a/meta-networking/recipes-support/ntp/ntp.inc b/meta-networking/recipes-support/ntp/ntp.inc
> index 49f9901..2c8f488 100644
> --- a/meta-networking/recipes-support/ntp/ntp.inc
> +++ b/meta-networking/recipes-support/ntp/ntp.inc
> @@ -23,6 +23,7 @@ SRC_URI ="http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/ntp-${PV}.tar.g
> file://sntp.service \
> file://sntp \
> file://ntpd.list \
> + file://ntp-disable-debugging.patch \
> "
>
> inherit autotools update-rc.d useradd systemd
next prev parent reply other threads:[~2014-08-27 11:38 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-08-14 3:14 [meta-networking][PATCH 1/2] ntp: Disable debugging by default rongqing.li
2014-08-14 3:14 ` [meta-networking][PATCH 2/2] ntp: fix CVE-2013-5211 rongqing.li
2014-08-27 11:38 ` Peter A. Bigot [this message]
2014-08-29 1:02 ` [meta-networking][PATCH 1/2] ntp: Disable debugging by default Rongqing Li
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=53FDC33C.7060208@pabigot.com \
--to=pab@pabigot.com \
--cc=openembedded-devel@lists.openembedded.org \
--cc=rongqing.li@windriver.com \
--cc=xufeng.zhang@windriver.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.