* Re: [meta-cgl][PATCH] samhain: add new recipe
2014-12-10 8:33 [meta-cgl][PATCH] samhain: add new recipe Li xin
@ 2014-12-10 17:28 ` Khem Raj
2014-12-11 0:47 ` Joe MacDonald
2014-12-13 18:15 ` [meta-cgl][PATCH] samhain: add new recipe akuster808
2 siblings, 0 replies; 22+ messages in thread
From: Khem Raj @ 2014-12-10 17:28 UTC (permalink / raw)
To: Li xin; +Cc: yocto
> On Dec 10, 2014, at 12:33 AM, Li xin <lixin.fnst@cn.fujitsu.com> wrote:
>
> Samhain is an open source file integrity and intrusion detection
> system for Unix that uses cryptographic checksums of files to
> detect modifications, and allows you to trace: what changes have
> occured in your system, when these changes have occured, and who
> was logged into the system at the respective time.
>
> Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
> ---
> .../samhain/0001-Makefile.in-error-fix.patch | 31 ++++++++++++
> .../samhain/samhain/config-site.samhain-3.1.3 | 2 +
> .../recipes-cgl/samhain/samhain_3.1.3.bb | 58 ++++++++++++++++++++++
> 3 files changed, 91 insertions(+)
> create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
>
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> new file mode 100644
> index 0000000..cd646f6
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> @@ -0,0 +1,31 @@
> +From a9ce38c56bf7072f292d685a48b912e6e59260a6 Mon Sep 17 00:00:00 2001
> +From: Li xin <lixin.fnst@cn.fujitsu.com>
> +Date: Wed, 10 Dec 2014 14:45:28 +0900
> +Subject: [PATCH] Makefile.in: error fix
> +
> +error:File '/usr/sbin/samhain' from samhain was already stripped,
> +this will prevent future debugging!
> +
> +Upstream-Status: pending
> +
> +Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
> +---
> + Makefile.in | 2 +-
> + 1 file changed, 1 insertion(+), 1 deletion(-)
> +
> +diff --git a/Makefile.in b/Makefile.in
> +index b1904d9..000de49 100644
> +--- a/Makefile.in
> ++++ b/Makefile.in
> +@@ -54,7 +54,7 @@ selectconfig = @selectconfig@
> + top_builddir = .
> +
> + INSTALL = @INSTALL@
> +-INSTALL_PROGRAM = @INSTALL@ -s -m 700
> ++INSTALL_PROGRAM = @INSTALL@ -m 700
> + INSTALL_SHELL = @INSTALL@ -m 700
> + INSTALL_DATA = @INSTALL@ -m 600
> + INSTALL_MAN = @INSTALL@ -m 644
> +--
> +1.8.4.2
> +
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3 b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> new file mode 100644
> index 0000000..2ce3769
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> @@ -0,0 +1,2 @@
> +ssp_cv_lib=no
> +sh_cv_va_copy=yes
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> new file mode 100644
> index 0000000..22c8577
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> @@ -0,0 +1,58 @@
> +SUMMARY = "File Integrity and Intrusion Detection System"
> +DESCRIPTION = "Samhain is an open source file integrity and intrusion detection \
> +system for Unix that uses cryptographic checksums of files to \
> +detect modifications, and allows you to trace: what changes have \
> +occured in your system, when these changes have occured, and who \
> +was logged into the system at the respective time."
> +
> +HOMEPAGE = "http://la-samhna.de/samhain/"
> +SECTION = "Filesystem"
> +
> +SRC_URI = "http://la-samhna.de/samhain/samhain-current.tar.gz;extract=samhain-3.1.3.tar.gz \
> + file://0001-Makefile.in-error-fix.patch"
> +SRC_URI[md5sum] = "64572a4dbfdc8065d6e9f7ca0eab0a34"
> +SRC_URI[sha256sum] = "c234afaf9ba3c6b7d240858b74423f935185de66e996405b3016ec4a288a7e1e"
> +LICENSE = "GPLv2"
> +LIC_FILES_CHKSUM = "file://LICENSE;md5=8ca43cbc842c2336e835926c2166c28b"
> +
> +DEPENDS = "libpthread-stubs acl zlib attr"
> +inherit autotools-brokensep pkgconfig
> +
> +do_unpack2() {
> + cd ${WORKDIR}
> + tar zxvf ${PN}-${PV}.tar.gz
> +}
why is this needed ? can’t do_fetch/do_unpack do it ?
> +
> +S = "${WORKDIR}/${BP}"
> +
> +addtask unpack2 after do_unpack before do_patch
> +do_configure() {
> + export CONFIG_SITE=./config-site.${BP}
> + ./configure \
> + --host=${HOST_SYS} \
> + --build=${BUILD_SYS} \
> + --prefix=${prefix} \
> + --sbindir=${sbindir} \
> + --mandir=${mandir} \
> + --sysconfdir=${sysconfdir} \
> + --localstatedir=${localstatedir} \
> + --with-config-file=/etc/samhain/samhainrc \
> + --with-state-dir=/var/samhain \
> + --with-html-file=/var/samhain/samhain.html \
> + --with-data-file=/var/samhain/samhain.data \
> + --with-pid-file=/var/samhain/samhain.pid \
> + --with-log-file=/var/samhain/samhain.log \
> + --enable-login-watch \
> + --disable-khide \
> + --enable-suidcheck \
> + --with-trusted=0
> +}
you might not need do_configure override. Just specify additional opts in EXTRA_OECONF
> +
> +do_install() {
> + install -d -m 755 ${D}/var/samhain
> + install -d ${D}/${mandir}
> + oe_runmake DESTDIR=${D} install-program install-man install-data
> + chmod -R a+r ${D}/${mandir}
> + install -d ${D}/etc/samhain
> + install -c -m 644 samhainrc.linux ${D}/etc/samhain/samhainrc
> +}
This should be do_install_append
> --
> 1.8.4.2
>
> --
> _______________________________________________
> yocto mailing list
> yocto@yoctoproject.org
> https://lists.yoctoproject.org/listinfo/yocto
^ permalink raw reply [flat|nested] 22+ messages in thread* Re: [meta-cgl][PATCH] samhain: add new recipe
2014-12-10 8:33 [meta-cgl][PATCH] samhain: add new recipe Li xin
2014-12-10 17:28 ` Khem Raj
@ 2014-12-11 0:47 ` Joe MacDonald
2014-12-11 7:21 ` Alexandru Vaduva
2014-12-13 18:15 ` [meta-cgl][PATCH] samhain: add new recipe akuster808
2 siblings, 1 reply; 22+ messages in thread
From: Joe MacDonald @ 2014-12-11 0:47 UTC (permalink / raw)
To: Li xin; +Cc: yocto
[-- Attachment #1: Type: text/plain, Size: 5600 bytes --]
[[yocto] [meta-cgl][PATCH] samhain: add new recipe] On 14.12.10 (Wed 16:33) Li xin wrote:
> Samhain is an open source file integrity and intrusion detection
> system for Unix that uses cryptographic checksums of files to
> detect modifications, and allows you to trace: what changes have
> occured in your system, when these changes have occured, and who
> was logged into the system at the respective time.
Samhain is already in meta-security at the same version (though without
the patch you've included here.)
Since meta-cgl depends on meta-security today, I think you probably
should submit whatever updates are appropriate to the samhain recipe
to meta-security, so as to avoid duplicating / diverging recipes.
-J.
>
> Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
> ---
> .../samhain/0001-Makefile.in-error-fix.patch | 31 ++++++++++++
> .../samhain/samhain/config-site.samhain-3.1.3 | 2 +
> .../recipes-cgl/samhain/samhain_3.1.3.bb | 58 ++++++++++++++++++++++
> 3 files changed, 91 insertions(+)
> create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
>
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> new file mode 100644
> index 0000000..cd646f6
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> @@ -0,0 +1,31 @@
> +From a9ce38c56bf7072f292d685a48b912e6e59260a6 Mon Sep 17 00:00:00 2001
> +From: Li xin <lixin.fnst@cn.fujitsu.com>
> +Date: Wed, 10 Dec 2014 14:45:28 +0900
> +Subject: [PATCH] Makefile.in: error fix
> +
> +error:File '/usr/sbin/samhain' from samhain was already stripped,
> +this will prevent future debugging!
> +
> +Upstream-Status: pending
> +
> +Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
> +---
> + Makefile.in | 2 +-
> + 1 file changed, 1 insertion(+), 1 deletion(-)
> +
> +diff --git a/Makefile.in b/Makefile.in
> +index b1904d9..000de49 100644
> +--- a/Makefile.in
> ++++ b/Makefile.in
> +@@ -54,7 +54,7 @@ selectconfig = @selectconfig@
> + top_builddir = .
> +
> + INSTALL = @INSTALL@
> +-INSTALL_PROGRAM = @INSTALL@ -s -m 700
> ++INSTALL_PROGRAM = @INSTALL@ -m 700
> + INSTALL_SHELL = @INSTALL@ -m 700
> + INSTALL_DATA = @INSTALL@ -m 600
> + INSTALL_MAN = @INSTALL@ -m 644
> +--
> +1.8.4.2
> +
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3 b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> new file mode 100644
> index 0000000..2ce3769
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> @@ -0,0 +1,2 @@
> +ssp_cv_lib=no
> +sh_cv_va_copy=yes
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> new file mode 100644
> index 0000000..22c8577
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> @@ -0,0 +1,58 @@
> +SUMMARY = "File Integrity and Intrusion Detection System"
> +DESCRIPTION = "Samhain is an open source file integrity and intrusion detection \
> +system for Unix that uses cryptographic checksums of files to \
> +detect modifications, and allows you to trace: what changes have \
> +occured in your system, when these changes have occured, and who \
> +was logged into the system at the respective time."
> +
> +HOMEPAGE = "http://la-samhna.de/samhain/"
> +SECTION = "Filesystem"
> +
> +SRC_URI = "http://la-samhna.de/samhain/samhain-current.tar.gz;extract=samhain-3.1.3.tar.gz \
> + file://0001-Makefile.in-error-fix.patch"
> +SRC_URI[md5sum] = "64572a4dbfdc8065d6e9f7ca0eab0a34"
> +SRC_URI[sha256sum] = "c234afaf9ba3c6b7d240858b74423f935185de66e996405b3016ec4a288a7e1e"
> +LICENSE = "GPLv2"
> +LIC_FILES_CHKSUM = "file://LICENSE;md5=8ca43cbc842c2336e835926c2166c28b"
> +
> +DEPENDS = "libpthread-stubs acl zlib attr"
> +inherit autotools-brokensep pkgconfig
> +
> +do_unpack2() {
> + cd ${WORKDIR}
> + tar zxvf ${PN}-${PV}.tar.gz
> +}
> +
> +S = "${WORKDIR}/${BP}"
> +
> +addtask unpack2 after do_unpack before do_patch
> +do_configure() {
> + export CONFIG_SITE=./config-site.${BP}
> + ./configure \
> + --host=${HOST_SYS} \
> + --build=${BUILD_SYS} \
> + --prefix=${prefix} \
> + --sbindir=${sbindir} \
> + --mandir=${mandir} \
> + --sysconfdir=${sysconfdir} \
> + --localstatedir=${localstatedir} \
> + --with-config-file=/etc/samhain/samhainrc \
> + --with-state-dir=/var/samhain \
> + --with-html-file=/var/samhain/samhain.html \
> + --with-data-file=/var/samhain/samhain.data \
> + --with-pid-file=/var/samhain/samhain.pid \
> + --with-log-file=/var/samhain/samhain.log \
> + --enable-login-watch \
> + --disable-khide \
> + --enable-suidcheck \
> + --with-trusted=0
> +}
> +
> +do_install() {
> + install -d -m 755 ${D}/var/samhain
> + install -d ${D}/${mandir}
> + oe_runmake DESTDIR=${D} install-program install-man install-data
> + chmod -R a+r ${D}/${mandir}
> + install -d ${D}/etc/samhain
> + install -c -m 644 samhainrc.linux ${D}/etc/samhain/samhainrc
> +}
> --
> 1.8.4.2
>
--
-Joe MacDonald.
:wq
[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 501 bytes --]
^ permalink raw reply [flat|nested] 22+ messages in thread* Re: [meta-cgl][PATCH] samhain: add new recipe
2014-12-11 0:47 ` Joe MacDonald
@ 2014-12-11 7:21 ` Alexandru Vaduva
2014-12-11 7:51 ` Alexandru Vaduva
` (4 more replies)
0 siblings, 5 replies; 22+ messages in thread
From: Alexandru Vaduva @ 2014-12-11 7:21 UTC (permalink / raw)
To: Joe MacDonald, Li xin; +Cc: yocto@yoctoproject.org
[-- Attachment #1: Type: text/plain, Size: 6132 bytes --]
Thanks Joe,
I added Armin for to this discussion as a head-up regarding those updates, since it was the one working on samhain recipe on meta-security.
Alex Vaduva
On Thursday, December 11, 2014 2:48 AM, Joe MacDonald <Joe_MacDonald@mentor.com> wrote:
[[yocto] [meta-cgl][PATCH] samhain: add new recipe] On 14.12.10 (Wed 16:33) Li xin wrote:
> Samhain is an open source file integrity and intrusion detection
> system for Unix that uses cryptographic checksums of files to
> detect modifications, and allows you to trace: what changes have
> occured in your system, when these changes have occured, and who
> was logged into the system at the respective time.
Samhain is already in meta-security at the same version (though without
the patch you've included here.)
Since meta-cgl depends on meta-security today, I think you probably
should submit whatever updates are appropriate to the samhain recipe
to meta-security, so as to avoid duplicating / diverging recipes.
-J.
>
> Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
> ---
> .../samhain/0001-Makefile.in-error-fix.patch | 31 ++++++++++++
> .../samhain/samhain/config-site.samhain-3.1.3 | 2 +
> .../recipes-cgl/samhain/samhain_3.1.3.bb | 58 ++++++++++++++++++++++
> 3 files changed, 91 insertions(+)
> create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
>
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> new file mode 100644
> index 0000000..cd646f6
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> @@ -0,0 +1,31 @@
> +From a9ce38c56bf7072f292d685a48b912e6e59260a6 Mon Sep 17 00:00:00 2001
> +From: Li xin <lixin.fnst@cn.fujitsu.com>
> +Date: Wed, 10 Dec 2014 14:45:28 +0900
> +Subject: [PATCH] Makefile.in: error fix
> +
> +error:File '/usr/sbin/samhain' from samhain was already stripped,
> +this will prevent future debugging!
> +
> +Upstream-Status: pending
> +
> +Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
> +---
> + Makefile.in | 2 +-
> + 1 file changed, 1 insertion(+), 1 deletion(-)
> +
> +diff --git a/Makefile.in b/Makefile.in
> +index b1904d9..000de49 100644
> +--- a/Makefile.in
> ++++ b/Makefile.in
> +@@ -54,7 +54,7 @@ selectconfig = @selectconfig@
> + top_builddir = .
> +
> + INSTALL = @INSTALL@
> +-INSTALL_PROGRAM = @INSTALL@ -s -m 700
> ++INSTALL_PROGRAM = @INSTALL@ -m 700
> + INSTALL_SHELL = @INSTALL@ -m 700
> + INSTALL_DATA = @INSTALL@ -m 600
> + INSTALL_MAN = @INSTALL@ -m 644
> +--
> +1.8.4.2
> +
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3 b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> new file mode 100644
> index 0000000..2ce3769
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> @@ -0,0 +1,2 @@
> +ssp_cv_lib=no
> +sh_cv_va_copy=yes
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> new file mode 100644
> index 0000000..22c8577
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> @@ -0,0 +1,58 @@
> +SUMMARY = "File Integrity and Intrusion Detection System"
> +DESCRIPTION = "Samhain is an open source file integrity and intrusion detection \
> +system for Unix that uses cryptographic checksums of files to \
> +detect modifications, and allows you to trace: what changes have \
> +occured in your system, when these changes have occured, and who \
> +was logged into the system at the respective time."
> +
> +HOMEPAGE = "http://la-samhna.de/samhain/"
> +SECTION = "Filesystem"
> +
> +SRC_URI = "http://la-samhna.de/samhain/samhain-current.tar.gz;extract=samhain-3.1.3.tar.gz \
> + file://0001-Makefile.in-error-fix.patch"
> +SRC_URI[md5sum] = "64572a4dbfdc8065d6e9f7ca0eab0a34"
> +SRC_URI[sha256sum] = "c234afaf9ba3c6b7d240858b74423f935185de66e996405b3016ec4a288a7e1e"
> +LICENSE = "GPLv2"
> +LIC_FILES_CHKSUM = "file://LICENSE;md5=8ca43cbc842c2336e835926c2166c28b"
> +
> +DEPENDS = "libpthread-stubs acl zlib attr"
> +inherit autotools-brokensep pkgconfig
> +
> +do_unpack2() {
> + cd ${WORKDIR}
> + tar zxvf ${PN}-${PV}.tar.gz
> +}
> +
> +S = "${WORKDIR}/${BP}"
> +
> +addtask unpack2 after do_unpack before do_patch
> +do_configure() {
> + export CONFIG_SITE=./config-site.${BP}
> + ./configure \
> + --host=${HOST_SYS} \
> + --build=${BUILD_SYS} \
> + --prefix=${prefix} \
> + --sbindir=${sbindir} \
> + --mandir=${mandir} \
> + --sysconfdir=${sysconfdir} \
> + --localstatedir=${localstatedir} \
> + --with-config-file=/etc/samhain/samhainrc \
> + --with-state-dir=/var/samhain \
> + --with-html-file=/var/samhain/samhain.html \
> + --with-data-file=/var/samhain/samhain.data \
> + --with-pid-file=/var/samhain/samhain.pid \
> + --with-log-file=/var/samhain/samhain.log \
> + --enable-login-watch \
> + --disable-khide \
> + --enable-suidcheck \
> + --with-trusted=0
> +}
> +
> +do_install() {
> + install -d -m 755 ${D}/var/samhain
> + install -d ${D}/${mandir}
> + oe_runmake DESTDIR=${D} install-program install-man install-data
> + chmod -R a+r ${D}/${mandir}
> + install -d ${D}/etc/samhain
> + install -c -m 644 samhainrc.linux ${D}/etc/samhain/samhainrc
> +}
> --
> 1.8.4.2
>
--
-Joe MacDonald.
:wq
--
_______________________________________________
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto
[-- Attachment #2: Type: text/html, Size: 11177 bytes --]
^ permalink raw reply [flat|nested] 22+ messages in thread* Re: [meta-cgl][PATCH] samhain: add new recipe
2014-12-11 7:21 ` Alexandru Vaduva
@ 2014-12-11 7:51 ` Alexandru Vaduva
2014-12-12 19:53 ` akuster808
2014-12-11 9:35 ` add files to dirctory in packages-split Neil.Wu
` (3 subsequent siblings)
4 siblings, 1 reply; 22+ messages in thread
From: Alexandru Vaduva @ 2014-12-11 7:51 UTC (permalink / raw)
To: Joe MacDonald, Li xin; +Cc: yocto@yoctoproject.org
[-- Attachment #1: Type: text/plain, Size: 6267 bytes --]
Now I did. :D
On Thursday, December 11, 2014 9:21 AM, Alexandru Vaduva <vaduvajanalexandru@yahoo.com> wrote:
Thanks Joe,
I added Armin for to this discussion as a head-up regarding those updates, since it was the one working on samhain recipe on meta-security.
Alex Vaduva
On Thursday, December 11, 2014 2:48 AM, Joe MacDonald <Joe_MacDonald@mentor.com> wrote:
[[yocto] [meta-cgl][PATCH] samhain: add new recipe] On 14.12.10 (Wed 16:33) Li xin wrote:
> Samhain is an open source file integrity and intrusion detection
> system for Unix that uses cryptographic checksums of files to
> detect modifications, and allows you to trace: what changes have
> occured in your system, when these changes have occured, and who
> was logged into the system at the respective time.
Samhain is already in meta-security at the same version (though without
the patch you've included here.)
Since meta-cgl depends on meta-security today, I think you probably
should submit whatever updates are appropriate to the samhain recipe
to meta-security, so as to avoid duplicating / diverging recipes.
-J.
>
> Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
> ---
> .../samhain/0001-Makefile.in-error-fix.patch | 31 ++++++++++++
> .../samhain/samhain/config-site.samhain-3.1.3 | 2 +
> .../recipes-cgl/samhain/samhain_3.1.3.bb | 58 ++++++++++++++++++++++
> 3 files changed, 91 insertions(+)
> create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
>
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> new file mode 100644
> index 0000000..cd646f6
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> @@ -0,0 +1,31 @@
> +From a9ce38c56bf7072f292d685a48b912e6e59260a6 Mon Sep 17 00:00:00 2001
> +From: Li xin <lixin.fnst@cn.fujitsu.com>
> +Date: Wed, 10 Dec 2014 14:45:28 +0900
> +Subject: [PATCH] Makefile.in: error fix
> +
> +error:File '/usr/sbin/samhain' from samhain was already stripped,
> +this will prevent future debugging!
> +
> +Upstream-Status: pending
> +
> +Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
> +---
> + Makefile.in | 2 +-
> + 1 file changed, 1 insertion(+), 1 deletion(-)
> +
> +diff --git a/Makefile.in b/Makefile.in
> +index b1904d9..000de49 100644
> +--- a/Makefile.in
> ++++ b/Makefile.in
> +@@ -54,7 +54,7 @@ selectconfig = @selectconfig@
> + top_builddir = .
> +
> + INSTALL = @INSTALL@
> +-INSTALL_PROGRAM = @INSTALL@ -s -m 700
> ++INSTALL_PROGRAM = @INSTALL@ -m 700
> + INSTALL_SHELL = @INSTALL@ -m 700
> + INSTALL_DATA = @INSTALL@ -m 600
> + INSTALL_MAN = @INSTALL@ -m 644
> +--
> +1.8.4.2
> +
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3 b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> new file mode 100644
> index 0000000..2ce3769
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> @@ -0,0 +1,2 @@
> +ssp_cv_lib=no
> +sh_cv_va_copy=yes
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> new file mode 100644
> index 0000000..22c8577
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> @@ -0,0 +1,58 @@
> +SUMMARY = "File Integrity and Intrusion Detection System"
> +DESCRIPTION = "Samhain is an open source file integrity and intrusion detection \
> +system for Unix that uses cryptographic checksums of files to \
> +detect modifications, and allows you to trace: what changes have \
> +occured in your system, when these changes have occured, and who \
> +was logged into the system at the respective time."
> +
> +HOMEPAGE = "http://la-samhna.de/samhain/"
> +SECTION = "Filesystem"
> +
> +SRC_URI = "http://la-samhna.de/samhain/samhain-current.tar.gz;extract=samhain-3.1.3.tar.gz \
> + file://0001-Makefile.in-error-fix.patch"
> +SRC_URI[md5sum] = "64572a4dbfdc8065d6e9f7ca0eab0a34"
> +SRC_URI[sha256sum] = "c234afaf9ba3c6b7d240858b74423f935185de66e996405b3016ec4a288a7e1e"
> +LICENSE = "GPLv2"
> +LIC_FILES_CHKSUM = "file://LICENSE;md5=8ca43cbc842c2336e835926c2166c28b"
> +
> +DEPENDS = "libpthread-stubs acl zlib attr"
> +inherit autotools-brokensep pkgconfig
> +
> +do_unpack2() {
> + cd ${WORKDIR}
> + tar zxvf ${PN}-${PV}.tar.gz
> +}
> +
> +S = "${WORKDIR}/${BP}"
> +
> +addtask unpack2 after do_unpack before do_patch
> +do_configure() {
> + export CONFIG_SITE=./config-site.${BP}
> + ./configure \
> + --host=${HOST_SYS} \
> + --build=${BUILD_SYS} \
> + --prefix=${prefix} \
> + --sbindir=${sbindir} \
> + --mandir=${mandir} \
> + --sysconfdir=${sysconfdir} \
> + --localstatedir=${localstatedir} \
> + --with-config-file=/etc/samhain/samhainrc \
> + --with-state-dir=/var/samhain \
> + --with-html-file=/var/samhain/samhain.html \
> + --with-data-file=/var/samhain/samhain.data \
> + --with-pid-file=/var/samhain/samhain.pid \
> + --with-log-file=/var/samhain/samhain.log \
> + --enable-login-watch \
> + --disable-khide \
> + --enable-suidcheck \
> + --with-trusted=0
> +}
> +
> +do_install() {
> + install -d -m 755 ${D}/var/samhain
> + install -d ${D}/${mandir}
> + oe_runmake DESTDIR=${D} install-program install-man install-data
> + chmod -R a+r ${D}/${mandir}
> + install -d ${D}/etc/samhain
> + install -c -m 644 samhainrc.linux ${D}/etc/samhain/samhainrc
> +}
> --
> 1.8.4.2
>
--
-Joe MacDonald.
:wq
--
_______________________________________________
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto
[-- Attachment #2: Type: text/html, Size: 12860 bytes --]
^ permalink raw reply [flat|nested] 22+ messages in thread* Re: [meta-cgl][PATCH] samhain: add new recipe
2014-12-11 7:51 ` Alexandru Vaduva
@ 2014-12-12 19:53 ` akuster808
0 siblings, 0 replies; 22+ messages in thread
From: akuster808 @ 2014-12-12 19:53 UTC (permalink / raw)
To: Alexandru Vaduva, Joe MacDonald, Li xin; +Cc: yocto@yoctoproject.org
Thanks for the updates. I jut got back from vacation and will look into
the changes soon.
- Armin
On 12/10/2014 11:51 PM, Alexandru Vaduva wrote:
> Now I did. :D
>
>
> On Thursday, December 11, 2014 9:21 AM, Alexandru Vaduva
> <vaduvajanalexandru@yahoo.com> wrote:
>
>
> Thanks Joe,
>
> I added Armin for to this discussion as a head-up regarding those
> updates, since it was the one working on samhain recipe on meta-security.
>
>
> Alex Vaduva
>
>
> On Thursday, December 11, 2014 2:48 AM, Joe MacDonald
> <Joe_MacDonald@mentor.com> wrote:
>
>
> [[yocto] [meta-cgl][PATCH] samhain: add new recipe] On 14.12.10 (Wed
> 16:33) Li xin wrote:
>
> > Samhain is an open source file integrity and intrusion detection
> > system for Unix that uses cryptographic checksums of files to
> > detect modifications, and allows you to trace: what changes have
> > occured in your system, when these changes have occured, and who
> > was logged into the system at the respective time.
>
> Samhain is already in meta-security at the same version (though without
> the patch you've included here.)
>
> Since meta-cgl depends on meta-security today, I think you probably
> should submit whatever updates are appropriate to the samhain recipe
> to meta-security, so as to avoid duplicating / diverging recipes.
>
> -J.
>
>
> >
> > Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com
> <mailto:lixin.fnst@cn.fujitsu.com>>
> > ---
> > .../samhain/0001-Makefile.in-error-fix.patch | 31 ++++++++++++
> > .../samhain/samhain/config-site.samhain-3.1.3 | 2 +
> > .../recipes-cgl/samhain/samhain_3.1.3.bb | 58
> ++++++++++++++++++++++
> > 3 files changed, 91 insertions(+)
> > create mode 100644
> meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> > create mode 100644
> meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> > create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> >
> > diff --git
> a/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> > new file mode 100644
> > index 0000000..cd646f6
> > --- /dev/null
> > +++
> b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> > @@ -0,0 +1,31 @@
> > +From a9ce38c56bf7072f292d685a48b912e6e59260a6 Mon Sep 17 00:00:00 2001
> > +From: Li xin <lixin.fnst@cn.fujitsu.com
> <mailto:lixin.fnst@cn.fujitsu.com>>
> > +Date: Wed, 10 Dec 2014 14:45:28 +0900
> > +Subject: [PATCH] Makefile.in: error fix
> > +
> > +error:File '/usr/sbin/samhain' from samhain was already stripped,
> > +this will prevent future debugging!
> > +
> > +Upstream-Status: pending
> > +
> > +Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com
> <mailto:lixin.fnst@cn.fujitsu.com>>
> > +---
> > + Makefile.in | 2 +-
> > + 1 file changed, 1 insertion(+), 1 deletion(-)
> > +
> > +diff --git a/Makefile.in b/Makefile.in
> > +index b1904d9..000de49 100644
> > +--- a/Makefile.in
> > ++++ b/Makefile.in
> > +@@ -54,7 +54,7 @@ selectconfig = @selectconfig@
> > + top_builddir = .
> > +
> > + INSTALL = @INSTALL@
> > +-INSTALL_PROGRAM = @INSTALL@ -s -m 700
> > ++INSTALL_PROGRAM = @INSTALL@ -m 700
> > + INSTALL_SHELL = @INSTALL@ -m 700
> > + INSTALL_DATA = @INSTALL@ -m 600
> > + INSTALL_MAN = @INSTALL@ -m 644
> > +--
> > +1.8.4.2
> > +
> > diff --git
> a/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> > new file mode 100644
> > index 0000000..2ce3769
> > --- /dev/null
> > +++
> b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> > @@ -0,0 +1,2 @@
> > +ssp_cv_lib=no
> > +sh_cv_va_copy=yes
> > diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> > new file mode 100644
> > index 0000000..22c8577
> > --- /dev/null
> > +++ b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> > @@ -0,0 +1,58 @@
> > +SUMMARY = "File Integrity and Intrusion Detection System"
> > +DESCRIPTION = "Samhain is an open source file integrity and
> intrusion detection \
> > +system for Unix that uses cryptographic checksums of files to \
> > +detect modifications, and allows you to trace: what changes have \
> > +occured in your system, when these changes have occured, and who \
> > +was logged into the system at the respective time."
> > +
> > +HOMEPAGE = "http://la-samhna.de/samhain/"
> > +SECTION = "Filesystem"
> > +
> > +SRC_URI =
> "http://la-samhna.de/samhain/samhain-current.tar.gz;extract=samhain-3.1.3.tar.gz
> <http://la-samhna.de/samhain/samhain-current.tar.gz;extract=samhain-3.1.3.tar.gz>\
> > + file://0001-Makefile.in-error-fix.patch"
> > +SRC_URI[md5sum] = "64572a4dbfdc8065d6e9f7ca0eab0a34"
> > +SRC_URI[sha256sum] =
> "c234afaf9ba3c6b7d240858b74423f935185de66e996405b3016ec4a288a7e1e"
> > +LICENSE = "GPLv2"
> > +LIC_FILES_CHKSUM = "file://LICENSE;md5=8ca43cbc842c2336e835926c2166c28b"
> > +
> > +DEPENDS = "libpthread-stubs acl zlib attr"
> > +inherit autotools-brokensep pkgconfig
> > +
> > +do_unpack2() {
> > + cd ${WORKDIR}
> > + tar zxvf ${PN}-${PV}.tar.gz
> > +}
> > +
> > +S = "${WORKDIR}/${BP}"
> > +
> > +addtask unpack2 after do_unpack before do_patch
> > +do_configure() {
> > + export CONFIG_SITE=./config-site.${BP}
> > + ./configure \
> > + --host=${HOST_SYS} \
> > + --build=${BUILD_SYS} \
> > + --prefix=${prefix} \
> > + --sbindir=${sbindir} \
> > + --mandir=${mandir} \
> > + --sysconfdir=${sysconfdir} \
> > + --localstatedir=${localstatedir} \
> > + --with-config-file=/etc/samhain/samhainrc \
> > + --with-state-dir=/var/samhain \
> > + --with-html-file=/var/samhain/samhain.html \
> > + --with-data-file=/var/samhain/samhain.data \
> > + --with-pid-file=/var/samhain/samhain.pid \
> > + --with-log-file=/var/samhain/samhain.log \
> > + --enable-login-watch \
> > + --disable-khide \
> > + --enable-suidcheck \
> > + --with-trusted=0
> > +}
> > +
> > +do_install() {
> > + install -d -m 755 ${D}/var/samhain
> > + install -d ${D}/${mandir}
> > + oe_runmake DESTDIR=${D} install-program install-man install-data
> > + chmod -R a+r ${D}/${mandir}
> > + install -d ${D}/etc/samhain
> > + install -c -m 644 samhainrc.linux ${D}/etc/samhain/samhainrc
> > +}
> > --
> > 1.8.4.2
>
> >
> --
> -Joe MacDonald.
> :wq
> --
> _______________________________________________
> yocto mailing list
> yocto@yoctoproject.org <mailto:yocto@yoctoproject.org>
> https://lists.yoctoproject.org/listinfo/yocto
>
>
>
>
^ permalink raw reply [flat|nested] 22+ messages in thread
* add files to dirctory in packages-split
2014-12-11 7:21 ` Alexandru Vaduva
2014-12-11 7:51 ` Alexandru Vaduva
@ 2014-12-11 9:35 ` Neil.Wu
2014-12-11 10:04 ` Khem Raj
2014-12-17 9:30 ` problem of toolchain install directrory Neil.Wu
` (2 subsequent siblings)
4 siblings, 1 reply; 22+ messages in thread
From: Neil.Wu @ 2014-12-11 9:35 UTC (permalink / raw)
To: yocto
[-- Attachment #1: Type: text/plain, Size: 126 bytes --]
Hi all,
I want to add some files to the specified directory what in packages-split.
How to do it ?
Thank you
Neil
[-- Attachment #2: Type: text/html, Size: 3116 bytes --]
^ permalink raw reply [flat|nested] 22+ messages in thread* Re: add files to dirctory in packages-split
2014-12-11 9:35 ` add files to dirctory in packages-split Neil.Wu
@ 2014-12-11 10:04 ` Khem Raj
2014-12-12 1:59 ` Neil.Wu
0 siblings, 1 reply; 22+ messages in thread
From: Khem Raj @ 2014-12-11 10:04 UTC (permalink / raw)
To: Neil.Wu; +Cc: yocto
[-- Attachment #1: Type: text/plain, Size: 495 bytes --]
> On Dec 11, 2014, at 1:35 AM, Neil.Wu@Emerson.com wrote:
>
> Hi all,
> I want to add some files to the specified directory what in packages-split.
>
> How to do it ?
FILES_<name-of-package> += “/path/to/file"
>
> Thank you
> Neil
>
> --
> _______________________________________________
> yocto mailing list
> yocto@yoctoproject.org <mailto:yocto@yoctoproject.org>
> https://lists.yoctoproject.org/listinfo/yocto <https://lists.yoctoproject.org/listinfo/yocto>
[-- Attachment #2: Type: text/html, Size: 7202 bytes --]
^ permalink raw reply [flat|nested] 22+ messages in thread
* Re: add files to dirctory in packages-split
2014-12-11 10:04 ` Khem Raj
@ 2014-12-12 1:59 ` Neil.Wu
2014-12-12 2:48 ` Khem Raj
0 siblings, 1 reply; 22+ messages in thread
From: Neil.Wu @ 2014-12-12 1:59 UTC (permalink / raw)
To: raj.khem; +Cc: yocto
[-- Attachment #1: Type: text/plain, Size: 993 bytes --]
Hi Raj,
Thank you very much for your reply. I have try to do like you say.
I’m compiling the glib-2.0, need to add the link file of one library to glib-2.0 package.
So I add the command like following :
FILES_${PN} += “${libdir}/libgio-2.0.so”
But , it can’t success.
Do you know whether need to do other thing?
Neil
From: Khem Raj [mailto:raj.khem@gmail.com]
Sent: Thursday, December 11, 2014 6:05 PM
To: Wu, Neil [CLIMATE/RS/CN]
Cc: yocto@yoctoproject.org
Subject: Re: [yocto] add files to dirctory in packages-split
On Dec 11, 2014, at 1:35 AM, Neil.Wu@Emerson.com<mailto:Neil.Wu@Emerson.com> wrote:
Hi all,
I want to add some files to the specified directory what in packages-split.
How to do it ?
FILES_<name-of-package> += “/path/to/file"
Thank you
Neil
--
_______________________________________________
yocto mailing list
yocto@yoctoproject.org<mailto:yocto@yoctoproject.org>
https://lists.yoctoproject.org/listinfo/yocto
[-- Attachment #2: Type: text/html, Size: 7431 bytes --]
^ permalink raw reply [flat|nested] 22+ messages in thread* Re: add files to dirctory in packages-split
2014-12-12 1:59 ` Neil.Wu
@ 2014-12-12 2:48 ` Khem Raj
2014-12-12 7:41 ` Neil.Wu
0 siblings, 1 reply; 22+ messages in thread
From: Khem Raj @ 2014-12-12 2:48 UTC (permalink / raw)
To: Neil.Wu; +Cc: yocto
[-- Attachment #1: Type: text/plain, Size: 1513 bytes --]
> On Dec 11, 2014, at 5:59 PM, Neil.Wu@Emerson.com wrote:
>
> Hi Raj,
> Thank you very much for your reply. I have try to do like you say.
> I’m compiling the glib-2.0, need to add the link file of one library to glib-2.0 package.
> So I add the command like following :
> FILES_${PN} += “${libdir}/libgio-2.0.so”
> But , it can’t success.
.so are usually treated to be includes in -dev packages by default
first you need to figure out if you really need .so on target, many times you don’t
some packages still do ( don’t use .so versioning ) then you would need something like
FILES_SOLIBSDEV = ""
SOLIBS = ".so"
INSANE_SKIP_${PN} += "dev-so"
> Do you know whether need to do other thing?
>
> Neil
>
> From: Khem Raj [mailto:raj.khem@gmail.com]
> Sent: Thursday, December 11, 2014 6:05 PM
> To: Wu, Neil [CLIMATE/RS/CN]
> Cc: yocto@yoctoproject.org
> Subject: Re: [yocto] add files to dirctory in packages-split
>
>
> On Dec 11, 2014, at 1:35 AM, Neil.Wu@Emerson.com <mailto:Neil.Wu@Emerson.com> wrote:
>
> Hi all,
> I want to add some files to the specified directory what in packages-split.
>
> How to do it ?
>
> FILES_<name-of-package> += “/path/to/file"
>
>
>
> Thank you
> Neil
>
> --
> _______________________________________________
> yocto mailing list
> yocto@yoctoproject.org <mailto:yocto@yoctoproject.org>
> https://lists.yoctoproject.org/listinfo/yocto <https://lists.yoctoproject.org/listinfo/yocto>
[-- Attachment #2: Type: text/html, Size: 10589 bytes --]
^ permalink raw reply [flat|nested] 22+ messages in thread* Re: add files to dirctory in packages-split
2014-12-12 2:48 ` Khem Raj
@ 2014-12-12 7:41 ` Neil.Wu
0 siblings, 0 replies; 22+ messages in thread
From: Neil.Wu @ 2014-12-12 7:41 UTC (permalink / raw)
To: raj.khem; +Cc: yocto
[-- Attachment #1: Type: text/plain, Size: 1718 bytes --]
Hello Raj,
Thank you for your help. The problem have solved.
Neil
From: Khem Raj [mailto:raj.khem@gmail.com]
Sent: Friday, December 12, 2014 10:48 AM
To: Wu, Neil [CLIMATE/RS/CN]
Cc: yocto@yoctoproject.org
Subject: Re: [yocto] add files to dirctory in packages-split
On Dec 11, 2014, at 5:59 PM, Neil.Wu@Emerson.com<mailto:Neil.Wu@Emerson.com> wrote:
Hi Raj,
Thank you very much for your reply. I have try to do like you say.
I’m compiling the glib-2.0, need to add the link file of one library to glib-2.0 package.
So I add the command like following :
FILES_${PN} += “${libdir}/libgio-2.0.so”
But , it can’t success.
.so are usually treated to be includes in -dev packages by default
first you need to figure out if you really need .so on target, many times you don’t
some packages still do ( don’t use .so versioning ) then you would need something like
FILES_SOLIBSDEV = ""
SOLIBS = ".so"
INSANE_SKIP_${PN} += "dev-so"
Do you know whether need to do other thing?
Neil
From: Khem Raj [mailto:raj.khem@gmail.com]
Sent: Thursday, December 11, 2014 6:05 PM
To: Wu, Neil [CLIMATE/RS/CN]
Cc: yocto@yoctoproject.org<mailto:yocto@yoctoproject.org>
Subject: Re: [yocto] add files to dirctory in packages-split
On Dec 11, 2014, at 1:35 AM, Neil.Wu@Emerson.com<mailto:Neil.Wu@Emerson.com> wrote:
Hi all,
I want to add some files to the specified directory what in packages-split.
How to do it ?
FILES_<name-of-package> += “/path/to/file"
Thank you
Neil
--
_______________________________________________
yocto mailing list
yocto@yoctoproject.org<mailto:yocto@yoctoproject.org>
https://lists.yoctoproject.org/listinfo/yocto
[-- Attachment #2: Type: text/html, Size: 10924 bytes --]
^ permalink raw reply [flat|nested] 22+ messages in thread
* problem of toolchain install directrory
2014-12-11 7:21 ` Alexandru Vaduva
2014-12-11 7:51 ` Alexandru Vaduva
2014-12-11 9:35 ` add files to dirctory in packages-split Neil.Wu
@ 2014-12-17 9:30 ` Neil.Wu
2014-12-17 9:46 ` Liviu Gheorghisan
2015-01-15 10:03 ` can't find the source code of kernel Neil.Wu
2015-01-20 3:12 ` dependency eglibc resulted in conflicting PREFERRED_PROVIDER entries being found Neil.Wu
4 siblings, 1 reply; 22+ messages in thread
From: Neil.Wu @ 2014-12-17 9:30 UTC (permalink / raw)
To: yocto
[-- Attachment #1: Type: text/plain, Size: 488 bytes --]
Hello ,all
I build the toolchain via bitbake core-image-minimal –c populate_sdk. Then I install the toolchain.
If I install the toolchain in default directory(default: /opt/poky/1.7.1), everything is ok.
But, if I not install in the default directory, it will appears the problem that can’t find the system header files.
Example: stdio.h
Why is this ? Whether I need to do some other operation. If you know please help me ! Thank you very much.
Best wishes
Neil
[-- Attachment #2: Type: text/html, Size: 4596 bytes --]
^ permalink raw reply [flat|nested] 22+ messages in thread
* Re: problem of toolchain install directrory
2014-12-17 9:30 ` problem of toolchain install directrory Neil.Wu
@ 2014-12-17 9:46 ` Liviu Gheorghisan
2014-12-18 2:59 ` Neil.Wu
0 siblings, 1 reply; 22+ messages in thread
From: Liviu Gheorghisan @ 2014-12-17 9:46 UTC (permalink / raw)
To: Neil.Wu, yocto
[-- Attachment #1: Type: text/plain, Size: 2214 bytes --]
Hello Neil,
Your problem is that the toolchain is installed with the location of the
sysroot hardcoded as the default installation path for the tool-chain.
You can see this location with:
$ arm-poky-linux-gnueabi-gcc --print-sysroot // or whatever
cross-compiler you built
However, after you source the environment script for the toolchain:
$ source environment-setup-armv7a-vfp-neon-poky-linux-gnueabi
the environment variables related to the toolchain will be updated
accordingly, taking care of this problem.
So, use $CC instead of directly calling the gcc cross compiler
arm-poky-linux-gnueabi-gcc (or whatever the platform you're building for).
Check the difference with this:
$ echo $CC
arm-poky-linux-gnueabi-gcc -march=armv7-a -mthumb-interwork
-mfloat-abi=softfp -mfpu=neon
--sysroot=/home/livghe/work/ab/sdk/sysroots/armv7a-vfp-neon-poky-linux-gnueabi
$ $CC --print-sysroot // uses the correct sysroot
/home/livghe/work/ab/sdk/sysroots/armv7a-vfp-neon-poky-linux-gnueabi
$ $ arm-poky-linux-gnueabi-gcc --print-sysroot // uses the sysroot from
the default instalation path, where it's not present.
/opt/poky/4.0/sysroots/armv7a-vfp-neon-poky-linux-gnueabi
So, you should always use the env variables ($CC, $AR, $LDFLAGS, etc)
after sourcing the environment script from the toolchain instalation
path, and not the toolchain executables directly, because the
environment variables add some useful flags, not only related to the
sysroot, but also to the type of CPU, etc.
- Liviu
On 12/17/2014 11:30 AM, Neil.Wu@Emerson.com wrote:
>
> *Hello ,all*
>
> I build the toolchain via bitbake core-image-minimal –c populate_sdk.
> Then I install the toolchain.
>
> If I install the toolchain in default directory(/default:
> /opt/poky/1.7.1/), everything is ok.
>
> But, if I not install in the default directory, it will appears the
> problem that can’t find the system header files.
>
> Example: stdio.h
>
> Why is this ? Whether I need to do some other operation. If you know
> please help me ! Thank you very much.
>
> Best wishes
>
> Neil
>
>
>
--
Liviu Gheorghisan
Software Engineer
http://www.enea.com
[-- Attachment #2: Type: text/html, Size: 7618 bytes --]
^ permalink raw reply [flat|nested] 22+ messages in thread
* Re: problem of toolchain install directrory
2014-12-17 9:46 ` Liviu Gheorghisan
@ 2014-12-18 2:59 ` Neil.Wu
0 siblings, 0 replies; 22+ messages in thread
From: Neil.Wu @ 2014-12-18 2:59 UTC (permalink / raw)
To: liviu.gheorghisan, yocto
[-- Attachment #1: Type: text/plain, Size: 3156 bytes --]
Hello Liviu,
Thank you very much for your reply. I got a very useful information from your reply.
At the beginning , I want to add the cross compiler to eclipse project and not use the default installer directory, but it appears the above problem.
In eclipse project, the setting as these:
Properties -- Setting--CrossSetting --Prefilx: arm-poky-linux-gnueabi-
Properties--Setting -- CrossSetting--Path: /opt/poky/mycompiler/sysroots/ i686-pokysdk-linux/usr/bin/arm-poky-linux-gnueabi
You give me the idea to add the sysroot path:
Properties -- Setting -- Cross GCC compiler -MisCellaneous: --sysroot=/opt/poky/mycompiler/sysroots/ armv5te-poky-linux-gnueabi
Now, everything is ok . Thank you again for your help.
Best wishes
Neil
From: Liviu Gheorghisan [mailto:liviu.gheorghisan@enea.com]
Sent: Wednesday, December 17, 2014 5:47 PM
To: Wu, Neil [CLIMATE/RS/CN]; yocto@yoctoproject.org
Subject: Re: [yocto] problem of toolchain install directrory
Hello Neil,
Your problem is that the toolchain is installed with the location of the sysroot hardcoded as the default installation path for the tool-chain.
You can see this location with:
$ arm-poky-linux-gnueabi-gcc --print-sysroot // or whatever cross-compiler you built
However, after you source the environment script for the toolchain:
$ source environment-setup-armv7a-vfp-neon-poky-linux-gnueabi
the environment variables related to the toolchain will be updated accordingly, taking care of this problem.
So, use $CC instead of directly calling the gcc cross compiler arm-poky-linux-gnueabi-gcc (or whatever the platform you're building for).
Check the difference with this:
$ echo $CC
arm-poky-linux-gnueabi-gcc -march=armv7-a -mthumb-interwork -mfloat-abi=softfp -mfpu=neon --sysroot=/home/livghe/work/ab/sdk/sysroots/armv7a-vfp-neon-poky-linux-gnueabi
$ $CC --print-sysroot // uses the correct sysroot
/home/livghe/work/ab/sdk/sysroots/armv7a-vfp-neon-poky-linux-gnueabi
$ $ arm-poky-linux-gnueabi-gcc --print-sysroot // uses the sysroot from the default instalation path, where it's not present.
/opt/poky/4.0/sysroots/armv7a-vfp-neon-poky-linux-gnueabi
So, you should always use the env variables ($CC, $AR, $LDFLAGS, etc) after sourcing the environment script from the toolchain instalation path, and not the toolchain executables directly, because the environment variables add some useful flags, not only related to the sysroot, but also to the type of CPU, etc.
- Liviu
On 12/17/2014 11:30 AM, Neil.Wu@Emerson.com<mailto:Neil.Wu@Emerson.com> wrote:
Hello ,all
I build the toolchain via bitbake core-image-minimal -c populate_sdk. Then I install the toolchain.
If I install the toolchain in default directory(default: /opt/poky/1.7.1), everything is ok.
But, if I not install in the default directory, it will appears the problem that can't find the system header files.
Example: stdio.h
Why is this ? Whether I need to do some other operation. If you know please help me ! Thank you very much.
Best wishes
Neil
--
Liviu Gheorghisan
Software Engineer
http://www.enea.com
[-- Attachment #2: Type: text/html, Size: 11774 bytes --]
^ permalink raw reply [flat|nested] 22+ messages in thread
* can't find the source code of kernel
2014-12-11 7:21 ` Alexandru Vaduva
` (2 preceding siblings ...)
2014-12-17 9:30 ` problem of toolchain install directrory Neil.Wu
@ 2015-01-15 10:03 ` Neil.Wu
2015-01-15 13:04 ` Bruce Ashfield
2015-01-20 3:12 ` dependency eglibc resulted in conflicting PREFERRED_PROVIDER entries being found Neil.Wu
4 siblings, 1 reply; 22+ messages in thread
From: Neil.Wu @ 2015-01-15 10:03 UTC (permalink / raw)
To: yocto
[-- Attachment #1: Type: text/plain, Size: 193 bytes --]
Hi ,all
The version of poky is 1.7. I build the linux-yocto is successful .
bitbake linux-yocto
But, why I can’t find the source code of linux in ${WORKDIR}.
Best wishes
Neil
[-- Attachment #2: Type: text/html, Size: 3733 bytes --]
^ permalink raw reply [flat|nested] 22+ messages in thread* Re: can't find the source code of kernel
2015-01-15 10:03 ` can't find the source code of kernel Neil.Wu
@ 2015-01-15 13:04 ` Bruce Ashfield
2015-01-16 1:13 ` Neil.Wu
0 siblings, 1 reply; 22+ messages in thread
From: Bruce Ashfield @ 2015-01-15 13:04 UTC (permalink / raw)
To: Neil.Wu, yocto
On 2015-01-15 5:03 AM, Neil.Wu@Emerson.com wrote:
> Hi ,all
>
> The version of poky is 1.7. I build the linux-yocto is successful .
>
> bitbake linux-yocto
>
> But, why I can’t find the source code of linux in ${WORKDIR}.
It should be there (note: it is about to move in master, but not in 1.7.1).
In WORKDIR, you have "linux" (the source) and linux-$MACHINE-build (the
build).
Bruce
>
> Best wishes
>
> Neil
>
>
>
^ permalink raw reply [flat|nested] 22+ messages in thread* Re: can't find the source code of kernel
2015-01-15 13:04 ` Bruce Ashfield
@ 2015-01-16 1:13 ` Neil.Wu
2015-01-16 4:35 ` Bruce Ashfield
0 siblings, 1 reply; 22+ messages in thread
From: Neil.Wu @ 2015-01-16 1:13 UTC (permalink / raw)
To: bruce.ashfield, yocto
Hi, Bruce
Thank you for your reply.
In the WORKDIR , it just has "linux-qemuarm-standard-build" and not have the "linux".
My WORKDIR directory is "~/poky/build/tmp/work/qemuarm-poky-linux-gnueabi/linux-yocto/3.14.24+gitAUTOINC+a227f20eff_6166316d47-r0", but I don't find the tarball of "linux-14.24"
in download directory. It has tarball "linux-17.7.tar.xz".
Do you think whether these is the reason?
I don't know how to set the version of linux when the project building the image.
Maybe, I set the linux to 17.7 version, the problem can solve.
Do you have any other better suggestion? Thank you very much.
Neil
-----Original Message-----
From: Bruce Ashfield [mailto:bruce.ashfield@windriver.com]
Sent: Thursday, January 15, 2015 9:05 PM
To: Wu, Neil [CLIMATE/RS/CN]; yocto@yoctoproject.org
Subject: Re: [yocto] can't find the source code of kernel
On 2015-01-15 5:03 AM, Neil.Wu@Emerson.com wrote:
> Hi ,all
>
> The version of poky is 1.7. I build the linux-yocto is successful .
>
> bitbake linux-yocto
>
> But, why I can't find the source code of linux in ${WORKDIR}.
It should be there (note: it is about to move in master, but not in 1.7.1).
In WORKDIR, you have "linux" (the source) and linux-$MACHINE-build (the
build).
Bruce
>
> Best wishes
>
> Neil
>
>
>
^ permalink raw reply [flat|nested] 22+ messages in thread* Re: can't find the source code of kernel
2015-01-16 1:13 ` Neil.Wu
@ 2015-01-16 4:35 ` Bruce Ashfield
2015-01-20 1:48 ` Neil.Wu
0 siblings, 1 reply; 22+ messages in thread
From: Bruce Ashfield @ 2015-01-16 4:35 UTC (permalink / raw)
To: Neil.Wu, yocto
On 2015-01-15 8:13 PM, Neil.Wu@Emerson.com wrote:
> Hi, Bruce
> Thank you for your reply.
> In the WORKDIR , it just has "linux-qemuarm-standard-build" and not have the "linux".
Are you sure you are building Yocto 1.7 and not the master branch ?
Until about a month ago, every build had the source along side the
split build directory .. in a directory called linux. But as I
mentioned, we are working to move the kernel to build out of the
sysroot/shared working directory.
>
> My WORKDIR directory is "~/poky/build/tmp/work/qemuarm-poky-linux-gnueabi/linux-yocto/3.14.24+gitAUTOINC+a227f20eff_6166316d47-r0", but I don't find the tarball of "linux-14.24"
> in download directory. It has tarball "linux-17.7.tar.xz".
>
> Do you think whether these is the reason?
They shouldn't be related. But that tar.xz you reference above is
clearly from some other kernel build than the linux yocto variant.
>
> I don't know how to set the version of linux when the project building the image.
> Maybe, I set the linux to 17.7 version, the problem can solve.
I'm not sure how you are getting a 17.7 tarball, but the linux-yocto
tree builds from a git repository, not a tarball.
In that directory where you see the qemuarm build you should also see a
git.indirectionsymlink that points to the git tree in downloads/git2/
Cheers,
Bruce
>
> Do you have any other better suggestion? Thank you very much.
>
> Neil
>
>
> -----Original Message-----
> From: Bruce Ashfield [mailto:bruce.ashfield@windriver.com]
> Sent: Thursday, January 15, 2015 9:05 PM
> To: Wu, Neil [CLIMATE/RS/CN]; yocto@yoctoproject.org
> Subject: Re: [yocto] can't find the source code of kernel
>
> On 2015-01-15 5:03 AM, Neil.Wu@Emerson.com wrote:
>> Hi ,all
>>
>> The version of poky is 1.7. I build the linux-yocto is successful .
>>
>> bitbake linux-yocto
>>
>> But, why I can't find the source code of linux in ${WORKDIR}.
>
> It should be there (note: it is about to move in master, but not in 1.7.1).
>
> In WORKDIR, you have "linux" (the source) and linux-$MACHINE-build (the
> build).
>
> Bruce
>
>>
>> Best wishes
>>
>> Neil
>>
>>
>>
>
^ permalink raw reply [flat|nested] 22+ messages in thread* Re: can't find the source code of kernel
2015-01-16 4:35 ` Bruce Ashfield
@ 2015-01-20 1:48 ` Neil.Wu
0 siblings, 0 replies; 22+ messages in thread
From: Neil.Wu @ 2015-01-20 1:48 UTC (permalink / raw)
To: bruce.ashfield, yocto
Hi, Bruce
Thank you very much for your help. My problem have solved. Before, I was working in "master" branch.
Switch to a new branch, I find the "source" directory ,what included the kernel source code, in linux-qemuarm-standard-build.
Neil
-----Original Message-----
From: Bruce Ashfield [mailto:bruce.ashfield@windriver.com]
Sent: Friday, January 16, 2015 12:36 PM
To: Wu, Neil [CLIMATE/RS/CN]; yocto@yoctoproject.org
Subject: Re: [yocto] can't find the source code of kernel
On 2015-01-15 8:13 PM, Neil.Wu@Emerson.com wrote:
> Hi, Bruce
> Thank you for your reply.
> In the WORKDIR , it just has "linux-qemuarm-standard-build" and not have the "linux".
Are you sure you are building Yocto 1.7 and not the master branch ?
Until about a month ago, every build had the source along side the
split build directory .. in a directory called linux. But as I
mentioned, we are working to move the kernel to build out of the
sysroot/shared working directory.
>
> My WORKDIR directory is "~/poky/build/tmp/work/qemuarm-poky-linux-gnueabi/linux-yocto/3.14.24+gitAUTOINC+a227f20eff_6166316d47-r0", but I don't find the tarball of "linux-14.24"
> in download directory. It has tarball "linux-17.7.tar.xz".
>
> Do you think whether these is the reason?
They shouldn't be related. But that tar.xz you reference above is
clearly from some other kernel build than the linux yocto variant.
>
> I don't know how to set the version of linux when the project building the image.
> Maybe, I set the linux to 17.7 version, the problem can solve.
I'm not sure how you are getting a 17.7 tarball, but the linux-yocto
tree builds from a git repository, not a tarball.
In that directory where you see the qemuarm build you should also see a
git.indirectionsymlink that points to the git tree in downloads/git2/
Cheers,
Bruce
>
> Do you have any other better suggestion? Thank you very much.
>
> Neil
>
>
> -----Original Message-----
> From: Bruce Ashfield [mailto:bruce.ashfield@windriver.com]
> Sent: Thursday, January 15, 2015 9:05 PM
> To: Wu, Neil [CLIMATE/RS/CN]; yocto@yoctoproject.org
> Subject: Re: [yocto] can't find the source code of kernel
>
> On 2015-01-15 5:03 AM, Neil.Wu@Emerson.com wrote:
>> Hi ,all
>>
>> The version of poky is 1.7. I build the linux-yocto is successful .
>>
>> bitbake linux-yocto
>>
>> But, why I can't find the source code of linux in ${WORKDIR}.
>
> It should be there (note: it is about to move in master, but not in 1.7.1).
>
> In WORKDIR, you have "linux" (the source) and linux-$MACHINE-build (the
> build).
>
> Bruce
>
>>
>> Best wishes
>>
>> Neil
>>
>>
>>
>
^ permalink raw reply [flat|nested] 22+ messages in thread
* dependency eglibc resulted in conflicting PREFERRED_PROVIDER entries being found
2014-12-11 7:21 ` Alexandru Vaduva
` (3 preceding siblings ...)
2015-01-15 10:03 ` can't find the source code of kernel Neil.Wu
@ 2015-01-20 3:12 ` Neil.Wu
2015-01-21 6:59 ` the problem of poky 1.7 when building the custom rootfs Neil.Wu
4 siblings, 1 reply; 22+ messages in thread
From: Neil.Wu @ 2015-01-20 3:12 UTC (permalink / raw)
To: yocto
[-- Attachment #1: Type: text/plain, Size: 714 bytes --]
Hi ,all
I try to build my custom image , The problem appears as follows:
ERROR: Trying to resolve runtime dependency eglibc resulted in conflicting PREFERRED_PROVIDER entries being found.
The providers found were: ['/home/ectrs/poky/meta/recipes-core/glibc/glibc-initial_2.20.bb', 'virtual:nativesdk:/home/ectrs/poky/meta/recipes-core/glibc/glibc-initial_2.20.bb']
The PREFERRED_PROVIDER entries resulting in this conflict were: ['PREFERRED_PROVIDER_virtual/arm-poky-linux-gnueabi-libc-initial = glibc-initial', 'PREFERRED_PROVIDER_virtual/nativesdk-i686-pokysdk-linux-libc-initial = nativesdk-glibc-initial']
Do you know how to resolve it ? Please help me .
Thank you very much.
Best wishes
Neil
[-- Attachment #2: Type: text/html, Size: 4645 bytes --]
^ permalink raw reply [flat|nested] 22+ messages in thread
* Re: [meta-cgl][PATCH] samhain: add new recipe
2014-12-10 8:33 [meta-cgl][PATCH] samhain: add new recipe Li xin
2014-12-10 17:28 ` Khem Raj
2014-12-11 0:47 ` Joe MacDonald
@ 2014-12-13 18:15 ` akuster808
2 siblings, 0 replies; 22+ messages in thread
From: akuster808 @ 2014-12-13 18:15 UTC (permalink / raw)
To: Li xin, yocto
The current version in Meta-security is 3.1.3. Please check and send any
changes to this list with [meta-security] in the subject.
- Armin
On 12/10/2014 12:33 AM, Li xin wrote:
> Samhain is an open source file integrity and intrusion detection
> system for Unix that uses cryptographic checksums of files to
> detect modifications, and allows you to trace: what changes have
> occured in your system, when these changes have occured, and who
> was logged into the system at the respective time.
>
> Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
> ---
> .../samhain/0001-Makefile.in-error-fix.patch | 31 ++++++++++++
> .../samhain/samhain/config-site.samhain-3.1.3 | 2 +
> .../recipes-cgl/samhain/samhain_3.1.3.bb | 58 ++++++++++++++++++++++
> 3 files changed, 91 insertions(+)
> create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> create mode 100644 meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
>
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> new file mode 100644
> index 0000000..cd646f6
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain/0001-Makefile.in-error-fix.patch
> @@ -0,0 +1,31 @@
> +From a9ce38c56bf7072f292d685a48b912e6e59260a6 Mon Sep 17 00:00:00 2001
> +From: Li xin <lixin.fnst@cn.fujitsu.com>
> +Date: Wed, 10 Dec 2014 14:45:28 +0900
> +Subject: [PATCH] Makefile.in: error fix
> +
> +error:File '/usr/sbin/samhain' from samhain was already stripped,
> +this will prevent future debugging!
> +
> +Upstream-Status: pending
> +
> +Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
> +---
> + Makefile.in | 2 +-
> + 1 file changed, 1 insertion(+), 1 deletion(-)
> +
> +diff --git a/Makefile.in b/Makefile.in
> +index b1904d9..000de49 100644
> +--- a/Makefile.in
> ++++ b/Makefile.in
> +@@ -54,7 +54,7 @@ selectconfig = @selectconfig@
> + top_builddir = .
> +
> + INSTALL = @INSTALL@
> +-INSTALL_PROGRAM = @INSTALL@ -s -m 700
> ++INSTALL_PROGRAM = @INSTALL@ -m 700
> + INSTALL_SHELL = @INSTALL@ -m 700
> + INSTALL_DATA = @INSTALL@ -m 600
> + INSTALL_MAN = @INSTALL@ -m 644
> +--
> +1.8.4.2
> +
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3 b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> new file mode 100644
> index 0000000..2ce3769
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain/config-site.samhain-3.1.3
> @@ -0,0 +1,2 @@
> +ssp_cv_lib=no
> +sh_cv_va_copy=yes
> diff --git a/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> new file mode 100644
> index 0000000..22c8577
> --- /dev/null
> +++ b/meta-cgl-common/recipes-cgl/samhain/samhain_3.1.3.bb
> @@ -0,0 +1,58 @@
> +SUMMARY = "File Integrity and Intrusion Detection System"
> +DESCRIPTION = "Samhain is an open source file integrity and intrusion detection \
> +system for Unix that uses cryptographic checksums of files to \
> +detect modifications, and allows you to trace: what changes have \
> +occured in your system, when these changes have occured, and who \
> +was logged into the system at the respective time."
> +
> +HOMEPAGE = "http://la-samhna.de/samhain/"
> +SECTION = "Filesystem"
> +
> +SRC_URI = "http://la-samhna.de/samhain/samhain-current.tar.gz;extract=samhain-3.1.3.tar.gz \
> + file://0001-Makefile.in-error-fix.patch"
> +SRC_URI[md5sum] = "64572a4dbfdc8065d6e9f7ca0eab0a34"
> +SRC_URI[sha256sum] = "c234afaf9ba3c6b7d240858b74423f935185de66e996405b3016ec4a288a7e1e"
> +LICENSE = "GPLv2"
> +LIC_FILES_CHKSUM = "file://LICENSE;md5=8ca43cbc842c2336e835926c2166c28b"
> +
> +DEPENDS = "libpthread-stubs acl zlib attr"
> +inherit autotools-brokensep pkgconfig
> +
> +do_unpack2() {
> + cd ${WORKDIR}
> + tar zxvf ${PN}-${PV}.tar.gz
> +}
> +
> +S = "${WORKDIR}/${BP}"
> +
> +addtask unpack2 after do_unpack before do_patch
> +do_configure() {
> + export CONFIG_SITE=./config-site.${BP}
> + ./configure \
> + --host=${HOST_SYS} \
> + --build=${BUILD_SYS} \
> + --prefix=${prefix} \
> + --sbindir=${sbindir} \
> + --mandir=${mandir} \
> + --sysconfdir=${sysconfdir} \
> + --localstatedir=${localstatedir} \
> + --with-config-file=/etc/samhain/samhainrc \
> + --with-state-dir=/var/samhain \
> + --with-html-file=/var/samhain/samhain.html \
> + --with-data-file=/var/samhain/samhain.data \
> + --with-pid-file=/var/samhain/samhain.pid \
> + --with-log-file=/var/samhain/samhain.log \
> + --enable-login-watch \
> + --disable-khide \
> + --enable-suidcheck \
> + --with-trusted=0
> +}
> +
> +do_install() {
> + install -d -m 755 ${D}/var/samhain
> + install -d ${D}/${mandir}
> + oe_runmake DESTDIR=${D} install-program install-man install-data
> + chmod -R a+r ${D}/${mandir}
> + install -d ${D}/etc/samhain
> + install -c -m 644 samhainrc.linux ${D}/etc/samhain/samhainrc
> +}
>
^ permalink raw reply [flat|nested] 22+ messages in thread