| /openbmc/openbmc/meta-openembedded/meta-networking/recipes-daemons/proftpd/ |
| H A D | proftpd_1.3.8c.bb | 4 LICENSE = "GPL-2.0-or-later"
12 file://proftpd-basic.init \
14 file://close-RequireValidShell-check.patch \
22 inherit autotools-brokensep useradd update-rc.d systemd multilib_script
28 CVE_STATUS[CVE-2001-0027] = "fixed-version: version 1.2.0rc3 removed affected module"
30 EXTRA_OECONF += "--enable-largefile INSTALL=install"
33 ${@bb.utils.filter('DISTRO_FEATURES', 'ipv6 pam', d)} \
37 PACKAGECONFIG[curses] = "--enable-curses --enable-ncurses, --disable-curses --disable-ncurses, ncur…
38 PACKAGECONFIG[openssl] = "--enable-openssl, --disable-openssl, openssl, openssl"
39 PACKAGECONFIG[pam] = "--enable-auth-pam, --disable-auth-pam, libpam, libpam"
[all …]
|
| /openbmc/bmcweb/config/ |
| H A D | meson.build | 6 'basic-auth',
7 'cookie-auth',
8 'experimental-http2',
9 'experimental-redfish-dbus-log-subscription',
10 'experimental-redfish-multi-computer-system',
11 'google-api',
12 'host-serial-socket',
13 'hypervisor-computer-system',
14 'ibm-management-console',
15 'insecure-disable-auth',
[all …]
|
| /openbmc/openbmc/meta-openembedded/meta-networking/recipes-daemons/squid/ |
| H A D | squid_6.12.bb | 1 SUMMARY = "A fully-featured http proxy and web-cache daemon for Linux"
2 DESCRIPTION = "A fully-featured http proxy and web-cache daemon for Linux. \
8 HOMEPAGE = "http://www.squid-cache.org"
10 LICENSE = "GPL-2.0-or-later"
15 SRC_URI = "http://www.squid-cache.org/Versions/v${MAJ_VER}/${BPN}-${PV}.tar.xz \
16 file://Set-up-for-cross-compilation.patch \
17 file://Skip-AC_RUN_IFELSE-tests.patch \
18 file://squid-use-serial-tests-config-needed-by-ptest.patch \
19 file://run-ptest \
21 file://0002-squid-make-squid-conf-tests-run-on-target-device.patch \
[all …]
|
| /openbmc/openbmc/meta-phosphor/recipes-extended/pam/ |
| H A D | libpam_%.bbappend | 3 SRC_URI += " file://pam.d/common-password \
4 file://pam.d/common-account \
5 file://pam.d/common-auth \
6 file://pam.d/common-session \
13 # common-session if systemd is enabled; however systemd only
14 # builds pam_systemd.so if logind is enabled, and we disable
16 sed -i '/pam_systemd.so/d' ${D}${sysconfdir}/pam.d/common-session
18 install -d ${D}/etc/security
19 install -m 0644 ${UNPACKDIR}/faillock.conf ${D}/etc/security
20 install -m 0644 ${UNPACKDIR}/pwhistory.conf ${D}/etc/security
[all …]
|
| /openbmc/openbmc/poky/meta/recipes-extended/pam/ |
| H A D | libpam_1.7.0.bb | 2 SUMMARY = "Linux-PAM (Pluggable Authentication Modules)"
3 DESCRIPTION = "Linux-PAM (Pluggable Authentication Modules for Linux), a flexible mechanism for aut…
4 HOMEPAGE = "https://fedorahosted.org/linux-pam/"
5 BUGTRACKER = "https://fedorahosted.org/linux-pam/newticket"
7 # PAM is dual licensed under GPL and BSD.
8 # /etc/pam.d comes from Debian libpam-runtime in 2009-11 (at that time
9 # libpam-runtime-1.0.1 is GPL-2.0-or-later), by openembedded
10 LICENSE = "GPL-2.0-or-later | BSD-3-Clause"
15 SRC_URI = "${GITHUB_BASE_URI}/download/v${PV}/Linux-PAM-${PV}.tar.xz \
17 file://pam.d/common-account \
[all …]
|
| /openbmc/openbmc/poky/meta/recipes-extended/sudo/ |
| H A D | sudo_1.9.16p2.bb | 3 SRC_URI = "https://www.sudo.ws/dist/sudo-${PV}.tar.gz \
4 ${@bb.utils.contains('DISTRO_FEATURES', 'pam', '${PAM_SRC_URI}', '', d)} \
5 file://0001-sudo.conf.in-fix-conflict-with-multilib.patch \
8 PAM_SRC_URI = "file://sudo.pam"
12 DEPENDS += " virtual/crypt ${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}"
13 RDEPENDS:${PN} += " ${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'pam-plugin-limits pam-plugin-ke…
24 ${@bb.utils.contains('DISTRO_FEATURES', 'pam', '--with-pam', '--without-pam', d)} \
25 …tils.contains('DISTRO_FEATURES', 'systemd', '--enable-tmpfiles.d=${nonarch_libdir}/tmpfiles.d', '-…
26 --with-rundir=/run/sudo \
27 --with-vardir=/var/lib/sudo \
[all …]
|
| /openbmc/openbmc/poky/meta/recipes-connectivity/openssh/openssh/ |
| H A D | sshd_config | 3 # This is the sshd server system-wide configuration file. See
28 #SyslogFacility AUTH
34 #PermitRootLogin prohibit-password
58 # To disable tunneled clear text passwords, change to no here!
62 # Change to yes to enable keyboard-interactive authentication (beware issues
63 # with some PAM modules and threads)
76 # Set this to 'yes' to enable PAM authentication, account processing,
77 # and session processing. If this is enabled, PAM authentication will
79 # PasswordAuthentication. Depending on your PAM configuration,
80 # PAM authentication via KbdInteractiveAuthentication may bypass
[all …]
|
| /openbmc/openbmc/poky/meta/recipes-extended/shadow/files/pam.d/ |
| H A D | login | 2 # The PAM configuration file for the Shadow `login' service
8 # to disable any delay, you should add the nodelay option to pam_unix)
9 auth optional pam_faildelay.so delay=3000000
13 # auth required pam_issue.so issue=/etc/issue
23 auth [success=ok ignore=ignore user_unknown=ignore default=die] pam_securetty.so
27 auth requisite pam_nologin.so
37 auth include common-auth
43 auth optional pam_group.so
75 account include common-account
76 password include common-password
[all …]
|
| /openbmc/openbmc/meta-openembedded/meta-networking/recipes-connectivity/samba/ |
| H A D | samba_4.19.8.bb | 4 LICENSE = "GPL-3.0-or-later & LGPL-3.0-or-later & GPL-2.0-or-later"
6 …file://${COREBASE}/meta/files/common-licenses/LGPL-3.0-or-later;md5=c51d3eef3be114124d11349ca0d7e1…
7 …file://${COREBASE}/meta/files/common-licenses/GPL-2.0-or-later;md5=fed54355545ffd980b814dab4a3b312…
17 SRC_URI = "${SAMBA_MIRROR}/stable/samba-${PV}.tar.gz \
20 file://0001-Don-t-check-xsltproc-manpages.patch \
21 file://0002-do-not-import-target-module-while-cross-compile.patch \
22 file://0003-Add-config-option-without-valgrind.patch \
23 file://0004-Add-options-to-configure-the-use-of-libbsd.patch \
24 file://0005-Fix-pyext_PATTERN-for-cross-compilation.patch \
25 file://0006-smbtorture-skip-test-case-tfork_cmd_send.patch \
[all …]
|
| /openbmc/openbmc/meta-openembedded/meta-networking/recipes-support/openvpn/ |
| H A D | openvpn_2.6.13.bb | 1 SUMMARY = "A full-featured SSL VPN solution via tun device."
4 LICENSE = "GPL-2.0-only"
6 DEPENDS = "lzo lz4 openssl iproute2 libcap-ng ${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'libpa…
8 inherit autotools systemd update-rc.d pkgconfig ptest
11 file://0001-configure.ac-eliminate-build-path-from-openvpn-versi.patch \
13 file://run-ptest \
16 UPSTREAM_CHECK_URI = "https://openvpn.net/community-downloads"
20 CVE_STATUS[CVE-2020-27569] = "not-applicable-config: Applies only Aviatrix OpenVPN client, not open…
26 CFLAGS += "-fno-inline"
29 EXTRA_OECONF += "--enable-iproute2"
[all …]
|
| /openbmc/openbmc/poky/meta/recipes-core/util-linux/ |
| H A D | util-linux_2.40.2.bb | 1 require util-linux.inc
3 …utotools gettext manpages pkgconfig systemd update-alternatives python3-dir bash-completion ptest …
4 DEPENDS = "libcap-ng ncurses virtual/crypt zlib util-linux-libuuid"
6 PACKAGES =+ "${PN}-swaponoff"
7 PACKAGES += "${@bb.utils.contains('PACKAGECONFIG', 'pylibmount', '${PN}-pylibmount', '', d)}"
22 file_regex=r'(.*)', output_pattern='${PN}-%s',
44 of = d.getVar('FILES:' + pn + '-' + pkg)
46 d.setVar('FILES:' + pn + '-' + pkg, links)
49 # we must execute before update-alternatives PACKAGE_PREPROCESS_FUNCS
52 # skip libuuid as it will be packaged by the util-linux-libuuid recipe
[all …]
|
| /openbmc/docs/security/ |
| H A D | network-security-considerations.md | 3 This describes network services provided by OpenBMC-based systems, some threats
13 https://github.com/openbmc/docs/blob/master/security/how-to-report-a-security-vulnerability.md
18 - Confidentiality: If an attacker can get data from the BMC, they may be able to
21 - Integrity: If an attacker can modify BMC settings or data, they may be able to
23 - Availability: If an agent can overwhelm the BMC's resources, either by
32 - The BMC is presumed to have a network adapter. The security considerations of
35 - Network traffic then flows through the kernel, detailed below.
36 - Finally, connections flow to various OpenBMC services.
52 the `https://github.com/openbmc/meta-aspeed` repository under
53 `recipes-kernel/linux/linux-aspeed_git.bb`.
[all …]
|
| /openbmc/qemu/scripts/ |
| H A D | meson-buildoptions.sh | 1 # This file is generated by meson-buildoptions.py, do not edit!
3 printf "%s\n" ' --audio-drv-list=CHOICES Set audio driver list [default] (choices: alsa/co'
6 printf "%s\n" ' --bindir=VALUE Executable directory [bin]'
7 printf "%s\n" ' --block-drv-ro-whitelist=VALUE'
8 printf "%s\n" ' set block driver read-only whitelist (by default'
9 printf "%s\n" ' affects only QEMU, not tools like qemu-img)'
10 printf "%s\n" ' --block-drv-rw-whitelist=VALUE'
11 printf "%s\n" ' set block driver read-write whitelist (by default'
12 printf "%s\n" ' affects only QEMU, not tools like qemu-img)'
13 printf "%s\n" ' --datadir=VALUE Data file directory [share]'
[all …]
|
| /openbmc/docs/designs/management-console/ |
| H A D | VMI_Certificate_Exchange.md | 11 - HMC - Hardware Management Console : Management console for IBM enterprise
13 - PHYP - Power Hypervisor : This orchestrates and manages system virtualization.
14 - VMI - Virtual Management Interface : The interface facilitating communications
16 - KVM - Kernel Virtual Machine : Open source virtualization software
33 - Host firmware (PHYP) does not have authentication mechanism.
34 - VMI trusts that BMC has authenticated and verified the authenticity of any
42 IBM systems can run both IBM specific host-firmware (PHYP) and Linux KVM. This
45 Enable and disable of this API would be controlled by the build time
50 - VMI will be created and run on PHYP that will provide the virtualization
52 - When the VMI is powered on it generates a public-private key pair and a
[all …]
|
| /openbmc/qemu/qapi/ |
| H A D | qom.json | 1 # -*- Mode: Python -*-
5 # See the COPYING file in the top-level directory.
8 { 'include': 'block-core.json' }
38 # @default-value: the default value, if any (since 5.0)
46 '*default-value': 'any' } }
49 # @qom-list:
54 # @path: the path within the object model. See @qom-get for a
62 # .. qmp-example::
64 # -> { "execute": "qom-list",
66 # <- { "return": [ { "name": "type", "type": "string" },
[all …]
|
| /openbmc/qemu/ |
| H A D | qemu-options.hx | 14 "-h or -help display this help and exit\n", QEMU_ARCH_ALL)
16 ``-h``
21 "-version display version information and exit\n", QEMU_ARCH_ALL)
23 ``-version``
28 "-machine [type=]name[,prop[=value][,...]]\n"
29 " selects emulated machine ('-machine help' for list)\n"
33 " dump-guest-core=on|off include guest memory in a core dump (default=on)\n"
34 " mem-merge=on|off controls memory merge support (default: on)\n"
35 " aes-key-wrap=on|off controls support for AES key wrapping (default=on)\n"
36 " dea-key-wrap=on|off controls support for DEA key wrapping (default=on)\n"
[all …]
|
| /openbmc/ |
| D | opengrok1.0.log | 1 2025-03-25 03:00:34.996-0500 FINE t1 Executor.registerErrorHandler: Installing default uncaught exception handler
2 2025-03-25 03:00:35.114-0500 INFO t1 Indexer.parseOptions: Indexer options: [-c, /usr/local/bin/ctags, -T, 12, -s, /opengrok/src, -
[all...] |
| D | opengrok2.0.log | 1 2025-03-24 03:00:46.525-0500 FINE t1 Executor.registerErrorHandler: Installing default uncaught exception handler
2 2025-03-24 03:00:46.643-0500 INFO t1 Indexer.parseOptions: Indexer options: [-c, /usr/local/bin/ctags, -T, 12, -s, /opengrok/src, -
[all...] |
| /openbmc/linux/ |
| H A D | opengrok0.0.log | 1 2024-12-28 20:09:05.996-0600 FINEST t1171 PendingFileCompleter.doRename: Moved pending as file: '/opengrok/data/xref/openbmc/linux/drivers/staging/media/av7110/video-continue.rst.gz'
2 2024-12-28 20:09:05.942-0600 FINEST t1149 PendingFileCompleter.doRename: Moved pending as file: '/opengrok/data/xref/openbmc/u-boot/arch/sh/config.mk.gz'
3 2024-12-2
[all...] |
| H A D | opengrok1.0.log | 1 2024-12-28 20:07:11.902-0600 FINER t583 IndexDatabase.createAnnotationCache: failed to create annotation: repository {dir='/opengrok/src/openbmc/linux',type=git,historyCache=on,renamed=false,merge=true,annotationCache=off} does not allow to create annotation cache for '/opengrok/src/openbmc/linux/drivers/net/ethernet/marvell/mvpp2/mvpp2_prs.c'
2 2024-12-28 20:07:11.913-0600 FINEST t583 Statistics.logIt: Added: '/openbmc/linux/drivers/net/ethernet/marvell/mvpp2/mvpp2_prs.c' (CAnalyzer) (took 116 ms)
3 2024-12-28 20:07:11.899-0600 FINER t593 IndexDatabase.createAnnotationCache: failed to create annotation: repository {dir='/opengrok/src/openbmc/linux',type=git,historyCache=on,renamed=false,merge=true,annotationCache=off} does not allow to create annotation cache for '/opengrok/src/openbmc/linux/tools/testing/selftests/powerpc/tm/tm-signa
[all...] |