From: Rongqing Li <rongqing.li@windriver.com>
To: "Peter A. Bigot" <pab@pabigot.com>
Cc: xufeng.zhang@windriver.com, openembedded-devel@lists.openembedded.org
Subject: Re: [meta-networking][PATCH 1/2] ntp: Disable debugging by default
Date: Fri, 29 Aug 2014 09:02:11 +0800 [thread overview]
Message-ID: <53FFD113.7050307@windriver.com> (raw)
In-Reply-To: <53FDC33C.7060208@pabigot.com>
On 08/27/2014 07:38 PM, Peter A. Bigot wrote:
> On 08/13/2014 10:14 PM, rongqing.li@windriver.com wrote:
>> From: Xufeng Zhang<xufeng.zhang@windriver.com>
>>
>> There is a problem in configure.ac file that whether or not
>> '--enable-debugging' is specified in configure cmdline, debugging
>> is always enabled.
>
> From my testing this is incorrect. Both --disable-debugging and
> --enable-debugging=no correctly override the upstream decision to enable
> debugging by default.
>
>> We should disable ntp debugging by default.
>
> Could we have more of an explanation why this is a good thing? It
> doesn't seem relevant to the security patch it accompanied.
>
> I've got a patch I'm validating that will revert this fix and use
> PACKAGECONFIG to control whether debugging is supported. Personally, I'd
> rather have the default be to keep debugging enabled.
>
> Upstream ntp enables debugging support by default, and OE's build has
> never disabled it before. ntp is a tricky beast and is very terse about
> what it's doing. Having the ability to make it explain why (for
> example) it's disabling a reference clock is very useful in
> diagnostics. Disabling debugging during the build makes it impossible
> to get that information out of an installed system.
>
Ok, Please send your patch out, thanks
-Roy
> Peter
>
>>
>> Signed-off-by: Xufeng Zhang<xufeng.zhang@windriver.com>
>> ---
>> .../ntp/files/ntp-disable-debugging.patch | 23
>> ++++++++++++++++++++
>> meta-networking/recipes-support/ntp/ntp.inc | 1 +
>> 2 files changed, 24 insertions(+)
>> create mode 100644
>> meta-networking/recipes-support/ntp/files/ntp-disable-debugging.patch
>>
>> diff --git
>> a/meta-networking/recipes-support/ntp/files/ntp-disable-debugging.patch b/meta-networking/recipes-support/ntp/files/ntp-disable-debugging.patch
>>
>> new file mode 100644
>> index 0000000..3c94d8d
>> --- /dev/null
>> +++
>> b/meta-networking/recipes-support/ntp/files/ntp-disable-debugging.patch
>> @@ -0,0 +1,23 @@
>> +set ntp_ok to no if ntp debugging is not enabled.
>> +
>> +Upstream-status: Pending
>> +
>> +There is a problem in configure.ac file that whether or not
>> +'--enable-debugging' is specified in configure cmdline, debugging
>> +is always enabled.
>> +We should disable ntp debugging by default.
>> +
>> +Signed-off-by: Xufeng Zhang<xufeng.zhang@windriver.com>
>> +
>> +---
>> +--- a/configure.ac
>> ++++ b/configure.ac
>> +@@ -2458,7 +2458,7 @@
>> + [+ include ntpd debugging code]
>> + )],
>> + [ntp_ok=$enableval],
>> +- [ntp_ok=yes]
>> ++ [ntp_ok=no]
>> + )
>> + case "$ntp_ok" in
>> + yes)
>> diff --git a/meta-networking/recipes-support/ntp/ntp.inc
>> b/meta-networking/recipes-support/ntp/ntp.inc
>> index 49f9901..2c8f488 100644
>> --- a/meta-networking/recipes-support/ntp/ntp.inc
>> +++ b/meta-networking/recipes-support/ntp/ntp.inc
>> @@ -23,6 +23,7 @@ SRC_URI
>> ="http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/ntp-${PV}.tar.g
>> file://sntp.service \
>> file://sntp \
>> file://ntpd.list \
>> + file://ntp-disable-debugging.patch \
>> "
>> inherit autotools update-rc.d useradd systemd
>
>
>
--
Best Reagrds,
Roy | RongQing Li
prev parent reply other threads:[~2014-08-29 1:02 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-08-14 3:14 [meta-networking][PATCH 1/2] ntp: Disable debugging by default rongqing.li
2014-08-14 3:14 ` [meta-networking][PATCH 2/2] ntp: fix CVE-2013-5211 rongqing.li
2014-08-27 11:38 ` [meta-networking][PATCH 1/2] ntp: Disable debugging by default Peter A. Bigot
2014-08-29 1:02 ` Rongqing Li [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=53FFD113.7050307@windriver.com \
--to=rongqing.li@windriver.com \
--cc=openembedded-devel@lists.openembedded.org \
--cc=pab@pabigot.com \
--cc=xufeng.zhang@windriver.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.