| /openbmc/openbmc/meta-security/recipes-security/Firejail/ |
| H A D | firejail_0.9.72.bb | 4 SUMMARY = "Linux namespaces and seccomp-bpf sandbox"
7 seccomp-bpf and Linux capabilities."
10 LICENSE = "GPL-2.0-only"
21 inherit autotools-brokensep pkgconfig bash-completion features_check
23 REQUIRED_DISTRO_FEATURES = "seccomp"
30 PACKAGECONFIG[apparmor] = "--enable-apparmor, --disable-apparmor, apparmor, apparmor"
31 PACKAGECONFIG[selinux] = "--enable-selinux, --disable-selinux, libselinux"
32 PACKAGECONFIG[x11] = " --enable-x11, --disable-x11, "
33 PACKAGECONFIG[dbusproxy] = ", --disable-dbusproxy, "
34 PACKAGECONFIG[notmpfs] = ", --disable-usertmpfs ,"
[all …]
|
| /openbmc/openbmc/meta-openembedded/meta-oe/recipes-devtools/ctags/ |
| H A D | ctags_6.1.20250518.0.bb | 12 LICENSE = "GPL-2.0-only"
15 inherit autotools-brokensep pkgconfig manpages
18 SRC_URI = "git://github.com/universal-ctags/ctags;branch=master;protocol=https;tag=p${PV}"
28 PACKAGECONFIG[readcmd] = "--enable-readcmd,--disable-readcmd"
29 PACKAGECONFIG[etags] = "--enable-etags,--disable-etags"
30 PACKAGECONFIG[xml] = "--enable-xml,--disable-xml,libxml2"
31 PACKAGECONFIG[json] = "--enable-json,--disable-json,jansson"
32 PACKAGECONFIG[seccomp] = "--enable-seccomp,--disable-seccomp,libseccomp"
33 PACKAGECONFIG[yaml] = "--enable-yaml,--disable-yaml,libyaml"
34 PACKAGECONFIG[manpages] = ",,python3-docutils-native"
|
| /openbmc/openbmc/poky/meta/conf/distro/include/ |
| H A D | default-distrovars.inc | 5 KERNEL_CONSOLE ?= "${@','.join(d.getVar('SERIAL_CONSOLES').split(' ')[0].split(';')[::-1]) or 'ttyS…
8 DEFAULT_IMAGE_LINGUAS = "en-us en-gb"
9 DEFAULT_IMAGE_LINGUAS:libc-glibc = "c en-us en-gb"
15 LOCALE_UTF8_IS_DEFAULT:class-nativesdk = "0"
17 # seccomp is not yet ported to rv32
18 DISTRO_FEATURES_DEFAULT:remove:riscv32 = "seccomp"
20 # seccomp is not yet ported to ARC
21 DISTRO_FEATURES_DEFAULT:remove:arc = "seccomp"
23 # seccomp is not yet ported to microblaze
24 DISTRO_FEATURES_DEFAULT:remove:microblaze = "seccomp"
[all …]
|
| /openbmc/openbmc/meta-openembedded/meta-networking/recipes-daemons/lldpd/ |
| H A D | lldpd_1.0.19.bb | 4 LIC_FILES_CHKSUM = "file://${COREBASE}/meta/files/common-licenses/ISC;md5=f3b90e78ea0cffb20bf5cca79…
12 file://run-ptest \
17 inherit autotools update-rc.d useradd systemd pkgconfig bash-completion github-releases ptest
20 USERADD_PARAM:${PN} = "--system -g lldpd --shell /bin/false lldpd"
21 GROUPADD_PARAM:${PN} = "--system lldpd"
23 EXTRA_OECONF += "--without-embedded-libevent \
24 --disable-oldies \
25 --with-privsep-user=lldpd \
26 --with-privsep-group=lldpd \
27 --with-systemdsystemunitdir=${systemd_system_unitdir} \
[all …]
|
| /openbmc/openbmc/meta-openembedded/meta-oe/recipes-security/usbguard/ |
| H A D | usbguard_1.1.3.bb | 3 # SPDX-License-Identifier: MIT
8 capabilities based on device attributes. This recipe takes OpenSSL as crypto-backend for \
11 LICENSE = "GPL-2.0-only"
14 SRC_URI = "https://github.com/USBGuard/usbguard/releases/download/${BPN}-${PV}/${BPN}-${PV}.tar.gz \
15 file://0001-Add-and-use-pkgconfig-instead-of-libgcrypt-config.patch \
16 file://0001-Adapt-for-protobuf-30.0-API-changes.patch \
21 inherit autotools-brokensep bash-completion pkgconfig systemd github-releases
23 DEPENDS = "glib-2.0-native libcap-ng libqb libxml2-native libxslt-native protobuf protobuf-native x…
25 UPSTREAM_CHECK_REGEX = "releases/tag/usbguard-(?P<pver>\d+(\.\d+)+)"
28 --with-bundled-catch \
[all …]
|
| /openbmc/openbmc/poky/meta/recipes-support/libseccomp/ |
| H A D | libseccomp_2.6.0.bb | 1 SUMMARY = "interface to seccomp filtering mechanism"
2 …o use, platform independent, interface to the Linux Kernel's syscall filtering mechanism: seccomp."
3 HOMEPAGE = "https://github.com/seccomp/libseccomp"
5 LICENSE = "LGPL-2.1-only"
8 DEPENDS += "gperf-native"
12 SRC_URI = "git://github.com/seccomp/libseccomp.git;branch=release-2.6;protocol=https \
13 file://run-ptest \
18 inherit autotools-brokensep pkgconfig ptest features_check
22 REQUIRED_DISTRO_FEATURES = "seccomp"
25 PACKAGECONFIG[python] = "--enable-python, --disable-python, python3-cython-native"
[all …]
|
| /openbmc/openbmc/meta-openembedded/meta-networking/recipes-support/ntpsec/ |
| H A D | ntpsec_1.2.2a.bb | 4 LICENSE = "CC-BY-4.0 & BSD-2-Clause & NTP & BSD-3-Clause & MIT"
5 LIC_FILES_CHKSUM = "file://LICENSES/BSD-2;md5=653830da7b770a32f6f50f6107e0b186 \
6 file://LICENSES/BSD-3;md5=55e9dcf6a625a2dcfcda4ef6a647fbfd \
7 file://LICENSES/CC-BY-4.0;md5=2ab724713fdaf49e4523c4503bfd068d \
11 DEPENDS += "bison-native \
15 SRC_URI = "https://ftp.ntpsec.org/pub/releases/ntpsec-${PV}.tar.gz \
17 file://0001-wscript-Add-BISONFLAGS-support.patch \
24 inherit pkgconfig python3-dir python3targetconfig systemd update-alternatives update-rc.d useradd w…
29 PACKAGECONFIG = "${@bb.utils.filter('DISTRO_FEATURES', 'seccomp systemd', d)} \
31 leap-smear \
[all …]
|
| /openbmc/openbmc/poky/meta/recipes-support/gnutls/ |
| H A D | gnutls_3.8.9.bb | 7 LICENSE = "GPL-3.0-or-later & LGPL-2.1-or-later"
8 LICENSE:${PN} = "LGPL-2.1-or-later"
9 LICENSE:${PN}-xx = "LGPL-2.1-or-later"
10 LICENSE:${PN}-bin = "GPL-3.0-or-later"
11 LICENSE:${PN}-openssl = "GPL-3.0-or-later"
21 SRC_URI = "https://www.gnupg.org/ftp/gcrypt/gnutls/v${SHRT_VER}/gnutls-${PV}.tar.xz \
23 file://0001-Creating-.hmac-file-should-be-excuted-in-target-envi.patch \
24 file://run-ptest \
25 file://Add-ptest-support.patch \
30 inherit autotools texinfo pkgconfig gettext lib_package gtk-doc ptest
[all …]
|
| /openbmc/openbmc/poky/meta/recipes-devtools/file/ |
| H A D | file_5.46.bb | 8 LICENSE = "BSD-2-Clause"
11 DEPENDS = "file-replacement-native"
12 DEPENDS:class-native = "bzip2-replacement-native"
15 file://0001-Use-4-in-default-reset-previous-negative-offset-in-m.patch \
16 file://0001-PR-579-net147-Fix-stack-overrun.patch \
22 inherit autotools update-alternatives
25 PACKAGECONFIG[bz2] = "--enable-bzlib, --disable-bzlib, bzip2"
26 PACKAGECONFIG[lzma] = "--enable-xzlib, --disable-xzlib, xz"
27 PACKAGECONFIG[zlib] = "--enable-zlib, --disable-zlib, zlib"
28 PACKAGECONFIG[zstdlib] = "--enable-zstdlib, --disable-zstdlib, zstd"
[all …]
|
| /openbmc/openbmc/poky/meta/recipes-devtools/qemu/ |
| H A D | qemu_10.0.0.bb | 5 DEPENDS += "glib-2.0 zlib pixman"
7 DEPENDS:append:libc-musl = " libucontext"
9 CFLAGS += "${@bb.utils.contains('DISTRO_FEATURES', 'x11', '', '-DEGL_NO_X11=1', d)}"
10 LDFLAGS:append:toolchain-clang:x86 = " -latomic"
12 RDEPENDS:${PN}-common:class-target += "bash"
14 EXTRA_OECONF:append:class-target = " --target-list=${@get_qemu_target_list(d)}"
15 EXTRA_OECONF:append:class-target:mipsarcho32 = "${@bb.utils.contains('BBEXTENDCURR', 'multilib', ' …
16 EXTRA_OECONF:append:class-nativesdk = " --target-list=${@get_qemu_target_list(d)}"
22 ${@bb.utils.filter('DISTRO_FEATURES', 'seccomp', d)} \
24 PACKAGECONFIG:class-nativesdk ??= "fdt sdl kvm pie slirp \
|
| H A D | qemu.inc | 7 LICENSE = "GPL-2.0-only & LGPL-2.1-only"
9 DEPENDS += "bison-native meson-native ninja-native"
11 RDEPENDS:${PN}-ptest = "bash"
13 require qemu-targets.inc
14 # https://gitlab.com/qemu-project/qemu/-/commit/81e2b198a8cb4ee5fdf108bd438f44b193ee3a36 means
15 # we need a full python3-native setup
16 inherit pkgconfig ptest update-rc.d systemd python3native
21 SRC_URI = "https://download.qemu.org/${BPN}-${PV}.tar.xz \
23 file://run-ptest \
24 file://fix-strerrorname_np.patch \
[all …]
|
| /openbmc/qemu/scripts/ |
| H A D | meson-buildoptions.sh | 1 # This file is generated by meson-buildoptions.py, do not edit!
3 printf "%s\n" ' --audio-drv-list=CHOICES Set audio driver list [default] (choices: alsa/co'
6 printf "%s\n" ' --bindir=VALUE Executable directory [bin]'
7 printf "%s\n" ' --block-drv-ro-whitelist=VALUE'
8 printf "%s\n" ' set block driver read-only whitelist (by default'
9 printf "%s\n" ' affects only QEMU, not tools like qemu-img)'
10 printf "%s\n" ' --block-drv-rw-whitelist=VALUE'
11 printf "%s\n" ' set block driver read-write whitelist (by default'
12 printf "%s\n" ' affects only QEMU, not tools like qemu-img)'
13 printf "%s\n" ' --datadir=VALUE Data file directory [share]'
[all …]
|
| /openbmc/openbmc/meta-openembedded/meta-networking/recipes-support/chrony/ |
| H A D | chrony_4.6.1.bb | 17 sub-microsecond accuracy is possible. \
20 started at boot time and chronyc is a command-line interface program \
30 LICENSE = "GPL-2.0-only"
33 SRC_URI = "https://chrony-project.org/releases/chrony-${PV}.tar.gz \
39 SRC_URI:append:libc-musl = " \
40 file://0001-Fix-compilation-with-musl.patch \
44 DEPENDS = "pps-tools"
48 inherit update-rc.d systemd pkgconfig
53 USERADD_PARAM:${PN} += "${@bb.utils.contains('PACKAGECONFIG', 'privdrop', '--system -d / -M --shell…
56 # - Security-related:
[all …]
|
| /openbmc/openbmc/poky/documentation/ref-manual/ |
| H A D | features.rst | 1 .. SPDX-License-Identifier: CC-BY-SA-2.0-UK
9 can select, and a reference on :ref:`ref-features-backfill`.
15 as ``poky.conf``, ``poky-tiny.conf``, ``poky-altcfg.conf`` and so forth.
34 .. _ref-features-machine:
41 one-to-one correspondence to packages, and they can go beyond simply
45 specified within the :ref:`ref-tasks-configure` task
51 - *acpi:* Hardware has ACPI (x86/x86_64 only)
53 - *alsa:* Hardware has ALSA audio drivers
55 - *bluetooth:* Hardware has integrated BT
57 - *efi:* Support for booting through EFI
[all …]
|
| /openbmc/openbmc/meta-phosphor/conf/distro/include/ |
| H A D | phosphor-base.inc | 1 require conf/distro/include/phosphor-defaults.inc
6 DISTROOVERRIDES .= ":openbmc-phosphor"
26 # fetch from the network (and warn you if not). To disable the test set
28 # Git example url: git://git.yoctoproject.org/yocto-firewall-test;protocol=https;rev=master
32 poky-5.0 \n \
33 poky-5.1 \n \
34 ubuntu-20.04 \n \
35 ubuntu-22.04 \n \
36 ubuntu-24.04 \n \
37 ubuntu-24.10 \n \
[all …]
|
| /openbmc/qemu/ |
| H A D | meson_options.txt | 1 # These options do not correspond to a --enable/--disable-* option
3 # scripts/meson-buildoptions.py's SKIP_OPTIONS constant too.
9 option('qemu_firmwarepath', type : 'array', value : ['share/qemu-firmware'],
12 description: 'use specified string as sub-version of the package')
25 …description: 'set block driver read-write whitelist (by default affects only QEMU, not tools like …
27 …description: 'set block driver read-only whitelist (by default affects only QEMU, not tools like q…
28 option('interp_prefix', type : 'string', value : '/usr/gnemul/qemu-%M',
33 description: 'fuzzing engine library for OSS-Fuzz')
40 # Everything else can be set via --enable/--disable-* option
42 # here make sure to run "make update-buildoptions".
[all …]
|
| H A D | meson.build | 15 meson.add_postconf_script(find_program('scripts/symlink-install-tree.py'))
28 config_host = keyval.load(meson.current_build_dir() / 'config-host.mak')
35 tmpdir = meson.current_build_dir() / 'meson-private/temp'
66 have_linux_user = have_linux_user or target.endswith('linux-user')
67 have_bsd_user = have_bsd_user or target.endswith('bsd-user')
68 have_system = have_system or target.endswith('-softmmu')
113 …dgen.version() + ' is unsupported. You can install a new version with "cargo install bindgen-cli"')
120 message('To use Rust you can install a new version with "cargo install bindgen-cli"')
128 '--rustc-version', rustc.version(),
129 '--workspace', meson.project_source_root() / 'rust']
[all …]
|
| H A D | qemu-options.hx | 14 "-h or -help display this help and exit\n", QEMU_ARCH_ALL)
16 ``-h``
21 "-version display version information and exit\n", QEMU_ARCH_ALL)
23 ``-version``
28 "-machine [type=]name[,prop[=value][,...]]\n"
29 " selects emulated machine ('-machine help' for list)\n"
33 " dump-guest-core=on|off include guest memory in a core dump (default=on)\n"
34 " mem-merge=on|off controls memory merge support (default: on)\n"
35 " aes-key-wrap=on|off controls support for AES key wrapping (default=on)\n"
36 " dea-key-wrap=on|off controls support for DEA key wrapping (default=on)\n"
[all …]
|
| /openbmc/qemu/tests/docker/ |
| H A D | Makefile.include | 3 .PHONY: docker docker-help docker-test docker-clean docker-image docker-qemu-src
9 HOST_ARCH = $(shell uname -m)
10 USER = $(if $(NOUSER),,$(shell id -un))
11 UID = $(if $(NOUSER),,$(shell id -u))
15 DOCKER_DEFAULT_REGISTRY := registry.gitlab.com/qemu-project/qemu
19 RUNC ?= $(if $(shell command -v docker), docker, podman)
20 DOCKER_SCRIPT=$(SRC_PATH)/tests/docker/docker.py --engine $(RUNC)
22 CUR_TIME := $(shell date +%Y-%m-%d-%H.%M.%S.$$$$)
23 DOCKER_SRC_COPY := $(BUILD_DIR)/docker-src.$(CUR_TIME)
29 $(call quiet-command, cp "$(SRC_ARCHIVE)" $@/qemu.tar, \
[all …]
|
| /openbmc/openbmc/poky/meta/recipes-core/systemd/ |
| H A D | systemd_257.5.bb | 7 DEPENDS = "gperf-native libcap util-linux python3-jinja2-native"
11 inherit useradd pkgconfig meson perlnative update-rc.d update-alternatives systemd gettext bash-com…
13 # unmerged-usr support is deprecated upstream, taints the system and will be
23 file://00-create-volatile.conf \
25 …s.contains('PACKAGECONFIG', 'polkit_hostnamed_fallback', 'file://00-hostnamed-network-user.conf', …
27 file://99-default.preset \
28 file://systemd-pager.sh \
29 file://0001-binfmt-Don-t-install-dependency-links-at-install-tim.patch \
30 file://0002-implment-systemd-sysv-install-for-OE.patch \
31 file://0001-Do-not-create-var-log-README.patch \
[all …]
|
| /openbmc/qemu/scripts/coverity-scan/ |
| H A D | run-coverity-scan | 1 #!/bin/sh -e
8 # See the COPYING file in the top-level directory.
10 # Copyright (c) 2017-2020 Linaro Limited
14 # run the (closed-source) coverity build tools, so don't
18 # tree, and that tree is a fresh clean one, because we do an in-tree
21 # regular expressions it uses; an out-of-tree build won't work for this.)
31 # --check-upload-only : return success if upload is possible
32 # --dry-run : run the tools, but don't actually do the upload
33 # --docker : create and work inside a container
34 # --docker-engine : specify the container engine to use (docker/podman/auto);
[all …]
|
| /openbmc/openbmc/meta-openembedded/meta-oe/recipes-support/emacs/ |
| H A D | emacs_29.1.bb | 1 SUMMARY = "Emacs is the extensible, customizable, self-documenting real-time display editor"
4 LICENSE = "GPL-3.0-only"
7 SRC_URI = "https://ftp.gnu.org/pub/gnu/emacs/emacs-${PV}.tar.xz \
9 SRC_URI:append:class-target = " \
10 file://use-emacs-native-tools-for-cross-compiling.patch \
11 file://avoid-running-host-binaries-for-sanity.patch \
16 CVE_STATUS[CVE-2007-6109] = "fixed-version: The CPE in the NVD database doesn't reflect correctly t…
18 PACKAGECONFIG[gnutls] = "--with-gnutls=yes,--with-gnutls=no,gnutls"
19 PACKAGECONFIG[kerberos] = "--with-kerberos=yes,--with-kerberos=no,krb5"
20 PACKAGECONFIG[libgmp] = "--with-libgmp=yes,--with-libgmp=no,gmp"
[all …]
|
| /openbmc/openbmc/poky/documentation/migration-guides/ |
| H A D | release-notes-3.4.rst | 1 .. SPDX-License-Identifier: CC-BY-SA-2.0-UK
4 --------------------------------
9 - Linux kernel 5.14, glibc 2.34 and ~280 other recipe upgrades
10 - Switched override character to ':' (replacing '_') for more robust parsing and improved performa…
11 - Rust integrated into core, providing rust support for cross-compilation and SDK
12 - New :ref:`ref-classes-create-spdx` class for creating SPDX SBoM documents
13 - New recipes: cargo, core-image-ptest-all, core-image-ptest-fast, core-image-weston-sdk, erofs-ut…
14 - Several optimisations to reduce unnecessary task dependencies for faster builds
15 - seccomp integrated into core, with additional enabling for gnutls, systemd, qemu
16 - New overlayfs class to help generate overlayfs mount units
[all …]
|
| /openbmc/ |
| D | opengrok1.0.log | 1 2025-10-26 03:01:13.198-0500 FINE t1 Executor.registerErrorHandler: Installing default uncaught exception handler
2 2025-10-26 03:01:13.253-0500 INFO t1 Indexer.parseOptions: Indexer options: [-c, /usr/local/bin/ctags, -T, 12, -s, /opengrok/src, -
[all...] |
| D | opengrok2.0.log | 1 2025-10-25 03:01:17.956-0500 FINE t1 Executor.registerErrorHandler: Installing default uncaught exception handler
2 2025-10-25 03:01:18.030-0500 INFO t1 Indexer.parseOptions: Indexer options: [-c, /usr/local/bin/ctags, -T, 12, -s, /opengrok/src, -
[all...] |