X-Git-Url: https://gerrit.o-ran-sc.org/r/gitweb?a=blobdiff_plain;ds=sidebyside;f=meta-starlingx%2Fmeta-stx-distro%2Frecipes-security%2Fgssproxy%2Fgssproxy_0.7.0.bb;fp=meta-starlingx%2Fmeta-stx-distro%2Frecipes-security%2Fgssproxy%2Fgssproxy_0.7.0.bb;h=058afc141e3ecfd9b5b0dbfbddb478138c7c8489;hb=e0634c6eaf2fe2641a0fb90e84a5defb880b1335;hp=0000000000000000000000000000000000000000;hpb=210d0f78485e760dffcdd3f630f59cec797f3f11;p=pti%2Frtp.git diff --git a/meta-starlingx/meta-stx-distro/recipes-security/gssproxy/gssproxy_0.7.0.bb b/meta-starlingx/meta-stx-distro/recipes-security/gssproxy/gssproxy_0.7.0.bb new file mode 100644 index 0000000..058afc1 --- /dev/null +++ b/meta-starlingx/meta-stx-distro/recipes-security/gssproxy/gssproxy_0.7.0.bb @@ -0,0 +1,75 @@ + +SUMMARY = "provides a daemon to manage access to GSSAPI credentials" +HOMEPAGE = "https://pagure.io/gssproxy" + +LICENSE = "MIT" +LIC_FILES_CHKSUM = "file://COPYING;md5=a9ac3d0a983ebc781f7aa7173499e2e5" + +DEPENDS += "popt ding-libs keyutils libverto krb5 libxslt-native libxml2-native \ + libselinux libpthread-stubs gettext-native \ + " +RDEPENDS_${PN} += "libinih popt libverto-libevent libverto-tevent keyutils \ + libgssapi-krb5 libgssrpc libk5crypto libkadm5clnt-mit \ + libkadm5srv-mit libkdb5 libkrad libkrb5 libkrb5support \ + libxslt libxslt-bin libxml2-utils libxml2 \ + " + + +FILESEXTRAPATHS_prepend := "${THISDIR}/files:" + +SRC_URI = "https://releases.pagure.org/gssproxy/gssproxy-${PV}.tar.gz \ + file://Properly-renew-expired-credentials.patch;striplevel=2 \ + file://Change-impersonator-check-code.patch;striplevel=2 \ + file://Allow-connection-to-self-when-impersonator-set.patch;striplevel=2 \ + file://Make-proc-file-failure-loud-but-nonfatal.patch;striplevel=2 \ + file://Turn-on-Wextra.patch;striplevel=2 \ + file://Fix-unused-variables.patch;striplevel=2 \ + file://Fix-mismatched-sign-comparisons.patch;striplevel=2 \ + file://Fix-error-checking-on-get_impersonator_fallback.patch;striplevel=2 \ + file://Remove-gpm_release_ctx-to-fix-double-unlock.patch;striplevel=2 \ + file://Appease-gcc-7-s-fallthrough-detection.patch;striplevel=2 \ + file://Fix-memory-leak.patch;striplevel=2 \ + file://Fix-most-memory-leaks.patch;striplevel=2 \ + file://Fix-segfault-when-no-config-files-are-present.patch;striplevel=2 \ + file://Update-systemd-file.patch;striplevel=2 \ + file://Fix-error-handling-in-gp_config_from_dir.patch;striplevel=2 \ + file://Do-not-call-gpm_grab_sock-twice.patch;striplevel=2 \ + file://Only-empty-FILE-ccaches-when-storing-remote-creds.patch;striplevel=2 \ + file://Handle-outdated-encrypted-ccaches.patch;striplevel=2 \ + file://Separate-cred-and-ccache-manipulation-in-gpp_store_r.patch;striplevel=2 \ + file://Properly-locate-credentials-in-collection-caches-in-.patch;striplevel=2 \ + file://Properly-initialize-ccaches-before-storing-into-them.patch;striplevel=2 \ + file://Include-header-for-writev.patch;striplevel=2 \ + file://Tolerate-NULL-pointers-in-gp_same.patch;striplevel=2 \ + file://Add-Client-ID-to-debug-messages.patch;striplevel=2 \ + file://client-Switch-to-non-blocking-sockets.patch;striplevel=2 \ + file://server-Add-detailed-request-logging.patch;striplevel=2 \ + file://Fix-potential-free-of-non-heap-address.patch;striplevel=2 \ + file://Prevent-uninitialized-read-in-error-path-of-XDR-cont.patch;striplevel=2 \ + file://Simplify-setting-NONBLOCK-on-socket.patch;striplevel=2 \ + file://Fix-handling-of-non-EPOLLIN-EPOLLOUT-events.patch;striplevel=2 \ + file://Fix-error-handling-in-gpm_send_buffer-gpm_recv_buffe.patch;striplevel=2 \ + file://Emit-debug-on-queue-errors.patch;striplevel=2 \ + file://Conditionally-reload-kernel-interface-on-SIGHUP.patch;striplevel=2 \ + file://Don-t-leak-mech_type-when-CONTINUE_NEEDED-from-init_.patch;striplevel=2 \ + file://Always-use-the-encype-we-selected.patch;striplevel=2 \ + file://Clarify-debug-and-debug_level-in-man-pages.patch;striplevel=2 \ + file://Always-choose-highest-requested-debug-level.patch;striplevel=2 \ + " + +SRC_URI[md5sum] = "1837acb5766ffbc6fcc70ecaa72e285f" + +inherit autotools systemd pkgconfig + +SYSTEMD_SERVICE_${PN} = "gssproxy.service" + +EXTRA_OECONF="--with-pubconf-path=${sysconfdir}/gssproxy \ + --with-initscript=systemd --disable-static \ + --disable-rpath --with-gpp-default-behavior=REMOTE_FIRST \ + --with-systemdunitdir=${systemd_system_unitdir} \ + --with-manpages=no \ + " + +CFLAGS += "-fPIE -fstack-protector-all" +LDFLAGS += "-fPIE -pie -Wl,-z,now" +