Re: [yocto] [meta-security][PATCH 5/7] sssd: update to latest ltm 1.16.5

["akuster" <akuster808@gmail.com>]

this needs "musl-nscd" which was submitted to meta-oe if you plan on
building for musl

 

On 10/9/20 7:08 AM, akuster via lists.yoctoproject.org wrote:
> fix musl support
>
> Signed-off-by: Armin Kuster <akuster808@gmail.com>
> ---
>  ...defines-which-otherwise-are-availabl.patch | 32 +++++++++++++++++++
>  .../sssd/{sssd_1.16.4.bb => sssd_1.16.5.bb}   |  8 +++--
>  2 files changed, 37 insertions(+), 3 deletions(-)
>  create mode 100644 recipes-security/sssd/files/0002-Provide-missing-defines-which-otherwise-are-availabl.patch
>  rename recipes-security/sssd/{sssd_1.16.4.bb => sssd_1.16.5.bb} (94%)
>
> diff --git a/recipes-security/sssd/files/0002-Provide-missing-defines-which-otherwise-are-availabl.patch b/recipes-security/sssd/files/0002-Provide-missing-defines-which-otherwise-are-availabl.patch
> new file mode 100644
> index 0000000..1a22332
> --- /dev/null
> +++ b/recipes-security/sssd/files/0002-Provide-missing-defines-which-otherwise-are-availabl.patch
> @@ -0,0 +1,32 @@
> +From 37a0999e5a9f54e1c61a02a7fbab6fcd04738b3c Mon Sep 17 00:00:00 2001
> +From: Armin Kuster <akuster808@gmail.com>
> +Date: Thu, 8 Oct 2020 05:54:13 -0700
> +Subject: [PATCH] Provide missing defines which otherwise are available on
> + glibc system headers
> +
> +Signed-off-by: Armin Kuster <akuster808@gmail.com>
> +
> +Upsteam-Status: Pending
> +
> +---
> + src/util/util.h | 4 ++++
> + 1 file changed, 4 insertions(+)
> +
> +diff --git a/src/util/util.h b/src/util/util.h
> +index 8a754dbfd..6e55b4bdc 100644
> +--- a/src/util/util.h
> ++++ b/src/util/util.h
> +@@ -76,6 +76,10 @@
> + #define MAX(a, b)  (((a) > (b)) ? (a) : (b))
> + #endif
> + 
> ++#ifndef ALLPERMS
> ++# define ALLPERMS (S_ISUID|S_ISGID|S_ISVTX|S_IRWXU|S_IRWXG|S_IRWXO)/* 07777 */
> ++#endif
> ++
> + #define SSSD_MAIN_OPTS SSSD_DEBUG_OPTS
> + 
> + #define SSSD_SERVER_OPTS(uid, gid) \
> +-- 
> +2.17.1
> +
> diff --git a/recipes-security/sssd/sssd_1.16.4.bb b/recipes-security/sssd/sssd_1.16.5.bb
> similarity index 94%
> rename from recipes-security/sssd/sssd_1.16.4.bb
> rename to recipes-security/sssd/sssd_1.16.5.bb
> index e54fa98..9784ec7 100644
> --- a/recipes-security/sssd/sssd_1.16.4.bb
> +++ b/recipes-security/sssd/sssd_1.16.5.bb
> @@ -6,7 +6,9 @@ LICENSE = "GPLv3+"
>  LIC_FILES_CHKSUM = "file://COPYING;md5=d32239bcb673463ab874e80d47fae504"
>  
>  DEPENDS = "openldap cyrus-sasl libtdb ding-libs libpam c-ares krb5 autoconf-archive"
> -DEPENDS += "libldb dbus libtalloc libpcre glib-2.0 popt e2fsprogs libtevent"
> +DEPENDS_append = " libldb dbus libtalloc libpcre glib-2.0 popt e2fsprogs libtevent"
> +
> +DEPENDS_append_libc-musl = " musl-nscd"
>  
>  # If no crypto has been selected, default to DEPEND on nss, since that's what
>  # sssd will pick if no active choice is made during configure
> @@ -19,10 +21,10 @@ SRC_URI = "https://releases.pagure.org/SSSD/${BPN}/${BP}.tar.gz \
>             file://fix-ldblibdir.patch \
>             file://0001-build-Don-t-use-AC_CHECK_FILE-when-building-manpages.patch \
>             file://0001-nss-Collision-with-external-nss-symbol.patch \
> +           file://0002-Provide-missing-defines-which-otherwise-are-availabl.patch \
>             "
>  
> -SRC_URI[md5sum] = "757bbb6f15409d8d075f4f06cb678d50"
> -SRC_URI[sha256sum] = "6bb212cd6b75b918e945c24e7c3f95a486fb54d7f7d489a9334cfa1a1f3bf959"
> +SRC_URI[sha256sum] = "2e1a7bf036b583f686d35164f2d79bdf4857b98f51fe8b0d17aa0fa756e4d0c0"
>  
>  inherit autotools pkgconfig gettext python3-dir features_check systemd
>  
>
> 
>