From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: by yocto-www.yoctoproject.org (Postfix, from userid 118) id 37339E00A26; Tue, 18 Aug 2015 02:37:31 -0700 (PDT) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on yocto-www.yoctoproject.org X-Spam-Level: X-Spam-Status: No, score=-4.2 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED autolearn=ham version=3.3.1 X-Spam-HAM-Report: * -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% * [score: 0.0000] * -2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, * medium trust * [147.11.146.13 listed in list.dnswl.org] Received: from mail1.windriver.com (mail1.windriver.com [147.11.146.13]) by yocto-www.yoctoproject.org (Postfix) with ESMTP id 89386E00861 for ; Tue, 18 Aug 2015 02:37:19 -0700 (PDT) Received: from ALA-HCA.corp.ad.wrs.com (ala-hca.corp.ad.wrs.com [147.11.189.40]) by mail1.windriver.com (8.15.1/8.15.1) with ESMTPS id t7I9bHIU023074 (version=TLSv1 cipher=AES128-SHA bits=128 verify=FAIL); Tue, 18 Aug 2015 02:37:17 -0700 (PDT) Received: from [128.224.162.176] (128.224.162.176) by ALA-HCA.corp.ad.wrs.com (147.11.189.40) with Microsoft SMTP Server id 14.3.235.1; Tue, 18 Aug 2015 02:37:17 -0700 Message-ID: <55D2FCCB.7050804@windriver.com> Date: Tue, 18 Aug 2015 17:37:15 +0800 From: wenzong fan User-Agent: Mozilla/5.0 (X11; Linux i686; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: Randy MacLeod , Joe MacDonald References: <55CB0D29.9070206@windriver.com> <20150812130556.GA16995@mentor.com> <55CD8DB7.5050304@windriver.com> <55D29859.7050407@windriver.com> In-Reply-To: <55D29859.7050407@windriver.com> Cc: "Radzykewycz, T \(Radzy\)" , yocto@yoctoproject.org Subject: Re: [meta-selinux] How about remove libcap-ng from meta-selinux? X-BeenThere: yocto@yoctoproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Discussion of all things Yocto Project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Aug 2015 09:37:31 -0000 Content-Type: text/plain; charset="windows-1252"; format=flowed Content-Transfer-Encoding: 7bit On 08/18/2015 10:28 AM, Randy MacLeod wrote: > On 2015-08-14 02:41 AM, wenzong fan wrote: >> On 08/12/2015 09:05 PM, Joe MacDonald wrote: >>> [[yocto] [meta-selinux] How about remove libcap-ng from meta-selinux?] >>> On 15.08.12 (Wed 17:08) wenzong fan wrote: >>> >>>> Hi All, >>>> >>>> There's a libcap-ng in meta-oe layer, it has been updated to 0.7.7 >>>> and the >>>> one in meta-selinux is 0.7.3. >>>> >>>> How about removing the one in meta-selinux and get this layer >>>> depends on >>>> meta-oe? Any suggestions? >>> >>> The last time we had this discussion my sense was that most users of >>> meta-selinux wanted to continue with it only depending on oe-core. >>> That's my preference as well. >>> >>> I'm happy to merge an updated version of libcap-ng (or maybe I'll get to >>> it myself, since I've known about it since Armin removed it from >>> meta-security, that was the time of the last discussion, I think). >>> >>> All I'm saying right now is that this isn't a case of accidental >>> duplication of recipes in multiple layers, it's the result of a >>> conscious decision. It's totally worthwhile re-visiting that decision, >>> though to make sure the reasons are still valid. >>> >> >> Thanks for clarifying this, just send out an update patch for libcap-ng. > > I still think it belongs in oe-core. > > Wenzong, > > Can you try to build up a case for that? > If I look at the dependencies on Ubuntu-15.04: > > Reverse Depends: > qemu-system-common,libcap-ng0 > libvirt0,libcap-ng0 > libvirt-bin,libcap-ng0 > libcap-ng0:i386,libcap-ng0 0.7.4-2 > libcap-ng0:i386,libcap-ng0 0.7.4-2 > suricata,libcap-ng0 > libcap-ng-utils,libcap-ng0 0.7.4-2 > ladvd,libcap-ng0 > heimdal-kdc,libcap-ng0 > audispd-plugins,libcap-ng0 > smartmontools,libcap-ng0 > qemu-system-common,libcap-ng0 > libvirt0,libcap-ng0 > libvirt-bin,libcap-ng0 > libcap-ng-dev,libcap-ng0 0.7.4-2 > irqbalance,libcap-ng0 > gnome-keyring,libcap-ng0 > dbus-1-dbg,libcap-ng0 > dbus,libcap-ng0 > > note that pkgs in: > meta-virtualization: irqbalance, libvirt, more? > meta-selinux: audit > meta-security-framework: audit > could drop the local versions of libcap-ng and use the > oe-core libcap-ng. > > > Please check on the actual source/configure options so that > we(I!!) get a better understanding of where libcap vs libcap-ng > is used. > > In fact, since meta-security-framework isn't using selinux, I'd > say that both audit and libcap-ng should both move to oe-core. > And the swig that libcap-ng depends on (swig-native) if we to do so. Thanks Wenzong > > Thanks, > ../Randy > > >> >> Wenzong > >