NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
20cc2c13d7
kumquat-buildroot/package/cryptsetup/cryptsetup.mk

50 lines
1.7 KiB
Makefile
Raw Normal View History

cryptsetup: new package package [Thomas P: add license informations, fix header, adjust dependencies in Config.in file on toolchain options.] Signed-off-by: Martin Hicks <mort@bork.org> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2013-08-08 19:50:27 +02:00
################################################################################
#
# cryptsetup
#
################################################################################
package/cryptsetup: bump to version 2.3.3 - Update indentation in hash file (two spaces) - Send patch upstream Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2020-06-21 20:56:24 +02:00
CRYPTSETUP_VERSION_MAJOR = 2.3
package/cryptsetup: security bump to version 2.3.4 Fix CVE-2020-14382: A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively invoked on every device/image presenting itself as LUKS2 container. The bug is in segments validation code in file 'lib/luks2/luks2_json_metadata.c' in function hdr_validate_segments(struct crypt_device *cd, json_object *hdr_jobj) where the code does not check for possible overflow on memory allocation used for intervals array (see statement "intervals = malloc(first_backup * sizeof(*intervals));"). Due to the bug, library can be *tricked* to expect such allocation was successful but for far less memory then originally expected. Later it may read data FROM image crafted by an attacker and actually write such data BEYOND allocated memory. https://mirrors.edge.kernel.org/pub/linux/utils/cryptsetup/v2.3/v2.3.4-ReleaseNotes Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-10-25 15:39:12 +01:00
CRYPTSETUP_VERSION = $(CRYPTSETUP_VERSION_MAJOR).4
cryptsetup: bump to version 1.6.6 Drop upstream patch, add hash file, switch to kernel.org mirror. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-10-29 17:01:35 +01:00
CRYPTSETUP_SOURCE = cryptsetup-$(CRYPTSETUP_VERSION).tar.xz
CRYPTSETUP_SITE = $(BR2_KERNEL_MIRROR)/linux/utils/cryptsetup/v$(CRYPTSETUP_VERSION_MAJOR)
package/cryptsetup: break circular dependency Build fails because of the following circular dependency: cryptsetup -> util-linux -> udev -> systemd -> cryptsetup which results in the following build failure: checking uuid/uuid.h usability... no checking uuid/uuid.h presence... no checking for uuid/uuid.h... no configure: error: You need the uuid library. To break it, apply the same ugly workaround that was applied for libglib2 until a better solution is found: https://patchwork.ozlabs.org/project/buildroot/patch/20201101150619.1709959-1-fontaine.fabrice@gmail.com/ Fixes: - http://autobuild.buildroot.org/results/a1a020a3e1c2383a030fcd73eae7c0fe5f82b022 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2020-11-06 19:02:54 +01:00
CRYPTSETUP_DEPENDENCIES = \
package/cryptsetup: really break circular dependency The commit [1] should fix a circular dependency by using util-linux-libs instead of util-linux if BR2_PACKAGE_UTIL_LINUX_LIBS is set. But util-linux is still in CRYPTSETUP_DEPENDENCIES. Remove it to really break the circular dependency. [1] e3c86f5c9e466ed5135e824d6dcebcfd7f5ac1ab Signed-off-by: Romain Naour <romain.naour@gmail.com> Cc: Fabrice Fontaine <fontaine.fabrice@gmail.com> Cc: Yann E. MORIN <yann.morin.1998@free.fr> Reviewed-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2020-11-13 23:52:07 +01:00
lvm2 popt host-pkgconf json-c libargon2 \
package/cryptsetup: needs iconv iconv is a mantadory dependency since version 2.3.0 and https://github.com/mbroz/cryptsetup/commit/62c872eb4942ec37a18a37ea7cca1749757ddbb6 Fixes: - http://autobuild.buildroot.org/results/a13c4b64e8ac673df07d8dc1d33fae42a4f80fff Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2020-06-28 22:48:08 +02:00
$(if $(BR2_PACKAGE_LIBICONV),libiconv) \
package/cryptsetup: break circular dependency Build fails because of the following circular dependency: cryptsetup -> util-linux -> udev -> systemd -> cryptsetup which results in the following build failure: checking uuid/uuid.h usability... no checking uuid/uuid.h presence... no checking for uuid/uuid.h... no configure: error: You need the uuid library. To break it, apply the same ugly workaround that was applied for libglib2 until a better solution is found: https://patchwork.ozlabs.org/project/buildroot/patch/20201101150619.1709959-1-fontaine.fabrice@gmail.com/ Fixes: - http://autobuild.buildroot.org/results/a1a020a3e1c2383a030fcd73eae7c0fe5f82b022 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2020-11-06 19:02:54 +01:00
$(if $(BR2_PACKAGE_UTIL_LINUX_LIBS),util-linux-libs,util-linux) \
cryptsetup: use new gettext logic This commit switches to use the new gettext logic, which involves: - using TARGET_NLS_DEPENDENCIES instead of hand-encoded dependencies on gettext/host-gettext - using TARGET_NLS_LIBS to force linking against libintl - dropping BR2_PACKAGE_GETTEXT selection Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-07-03 22:40:58 +02:00
$(TARGET_NLS_DEPENDENCIES)
boot, package: use SPDX short identifier for LGPLv2.1/LGPLv2.1+ We want to use SPDX identifier for license string as much as possible. SPDX short identifier for LGPLv2.1/LGPLv2.1+ is LGPL-2.1/LGPL-2.1+. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/LGPLv2.1(\+)?/LGPL-2.1\1/g' Signed-off-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-03-30 15:43:34 +02:00
CRYPTSETUP_LICENSE = GPL-2.0+ (programs), LGPL-2.1+ (library)
cryptsetup: new package package [Thomas P: add license informations, fix header, adjust dependencies in Config.in file on toolchain options.] Signed-off-by: Martin Hicks <mort@bork.org> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2013-08-08 19:50:27 +02:00
CRYPTSETUP_LICENSE_FILES = COPYING COPYING.LGPL
package: drop _CPE_ID_VALID, use _CPE_ID_VENDOR FOO_CPE_ID_VALID really ought to be an internal implementaion detail. Packages that really want to trigger their CPE defintitions really should set one of the actual variables to a meaningful value. There are two CPE-related variables that we could chose to set to replace FOO_CPE_ID_VALID: FOO_CPE_ID_VENDOR and FOO_CPE_ID_PRODUCT. Between those two, _VENDOR more often diverges from the default than _PRODUCT does, so that's what we use. ---8<------8<------8<------8<------8<--- #!/bin/bash # Replace FOO_CPE_ID_VALID = YES with FOO_CPE_ID_VENDOR = foo_project for i in $(git grep -l -E '[^)]_CPE_ID_VALID = YES' package support); do pkg="$(basename "${i%/*}")" sed -r -i -e "s/_CPE_ID_VALID = YES/_CPE_ID_VENDOR = ${pkg}_project/" "${i}" done ---8<------8<------8<------8<------8<--- Reported-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> Cc: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Cc: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Cc: Matthew Weber <matthew.weber@rockwellcollins.com> Cc: Fabrice Fontaine <fontaine.fabrice@gmail.com> [Peter: update cpe-test comment to reflect pkg3 change] Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-03-05 23:27:44 +01:00
CRYPTSETUP_CPE_ID_VENDOR = cryptsetup_project
cryptsetup: install to staging cryptsetup installs a library and a header file, so it makes sense to install it to staging. Fixes bug #9691. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Reviewed-by: Yann E. MORIN <yann.morin.1998@free.fr>
2017-03-05 16:19:11 +01:00
CRYPTSETUP_INSTALL_STAGING = YES
cryptsetup: use new gettext logic This commit switches to use the new gettext logic, which involves: - using TARGET_NLS_DEPENDENCIES instead of hand-encoded dependencies on gettext/host-gettext - using TARGET_NLS_LIBS to force linking against libintl - dropping BR2_PACKAGE_GETTEXT selection Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-07-03 22:40:58 +02:00
CRYPTSETUP_CONF_ENV += LDFLAGS="$(TARGET_LDFLAGS) $(TARGET_NLS_LIBS)"
package/cryptsetup: use external libargon2 don't use cryptsetup's intree libargon2 Signed-off-by: Pascal de Bruijn <p.debruijn@unilogic.nl> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2019-12-04 09:05:47 +01:00
CRYPTSETUP_CONF_OPTS += --enable-blkid --enable-libargon2
cryptsetup: Add libintl for UCLIBC toolchain Fixes autobuild error http://autobuild.buildroot.net/results/cc1a65b9554bc2ece1b3ea8b51cd805b9bda7e86/ Adding libintl to the libraries list for cryptsetup when using a uclibc toolchain and locale support is enabled. Signed-off-by: Clayton Shotwell <clshotwe@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2013-11-01 15:48:25 +01:00
cryptsetup: remove hard dependency on libgcrypt - Add support for the alternative OpenSSL and Linux kernel crypto backends. The latter does require that additional kernel modules (like algif_hash) are present and loaded before invoking cryptsetup, so is used as last choice. - Removes CRYPTSETUP_AUTORECONF as it is redundant, and reconf does create a dependency on libgcrypt for the m4 macros used. [Thomas: add an explicit --with-crypto_backend=gcrypt with the libgcrypt backend is requested.] Signed-off-by: Floris Bos <bos@je-eigen-domein.nl> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-02-04 19:33:28 +01:00
# cryptsetup uses libgcrypt by default, but can be configured to use OpenSSL
# or kernel crypto modules instead
ifeq ($(BR2_PACKAGE_LIBGCRYPT),y)
CRYPTSETUP_DEPENDENCIES += libgcrypt
CRYPTSETUP_CONF_ENV += LIBGCRYPT_CONFIG=$(STAGING_DIR)/usr/bin/libgcrypt-config
CRYPTSETUP_CONF_OPTS += --with-crypto_backend=gcrypt
else ifeq ($(BR2_PACKAGE_OPENSSL),y)
CRYPTSETUP_DEPENDENCIES += openssl
CRYPTSETUP_CONF_OPTS += --with-crypto_backend=openssl
else
CRYPTSETUP_CONF_OPTS += --with-crypto_backend=kernel
endif
cryptsetup: add host variant E.G. for generating dm-verity hashes or dm-crypt data at build time in a post-image script. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2017-10-05 17:06:21 +02:00
HOST_CRYPTSETUP_DEPENDENCIES = \
host-pkgconf \
host-lvm2 \
host-popt \
host-util-linux \
cryptsetup: add json-c dependency to host build Fixes: http://autobuild.buildroot.net/results/ecf/ecf5d87791e0255c3fce117447105db88749f796/ http://autobuild.buildroot.net/results/384/38462d222f2a893d44de894c30dc1e53d09c377d/ http://autobuild.buildroot.net/results/c29/c2901415345d94ef2135e460f4c78c21ae7ad09a/ ... and many more. Cc: Martin Hicks <mort@bork.org> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2017-12-23 18:43:03 +01:00
host-json-c \
cryptsetup: add host variant E.G. for generating dm-verity hashes or dm-crypt data at build time in a post-image script. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2017-10-05 17:06:21 +02:00
host-openssl
cryptsetup: fix build with old host kernel headers By default cryptsetup configure fails when the if_alg.h kernel header is not available. Kernels older than 2.6.38, like the one in RHEL 6 hosts, do not provide this header. Since we don't need the kernel crypto feature for host tools, just disable this feature to allow successful completion of the configure script. While at it, fix a typo in the --with-crypto_backend option (hyphen -> underscore). Should fix: http://autobuild.buildroot.net/results/ffd/ffda2579b215b53161025b7bc703091cb30ef95d/ http://autobuild.buildroot.net/results/c48/c48015f76b13fec38f650f66824e7b986eb28572/ http://autobuild.buildroot.net/results/be6/be621f71bf9da8719bf7fc943eccc9b4dc2cc43e/ Cc: Martin Hicks <mort@bork.org> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2018-08-07 13:04:48 +02:00
HOST_CRYPTSETUP_CONF_OPTS = --with-crypto_backend=openssl \
cryptsetup: bump to version 2.0.4 libblkid is a new optional dependency. Upstream "strongly discourages" build without libblkid support. So enable libblkid unconditionally. Cc: Martin Hicks <mort@bork.org> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2018-08-17 11:14:33 +02:00
--disable-kernel_crypto \
--enable-blkid
cryptsetup: add host variant E.G. for generating dm-verity hashes or dm-crypt data at build time in a post-image script. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2017-10-05 17:06:21 +02:00
cryptsetup: new package package [Thomas P: add license informations, fix header, adjust dependencies in Config.in file on toolchain options.] Signed-off-by: Martin Hicks <mort@bork.org> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2013-08-08 19:50:27 +02:00
$(eval $(autotools-package))
cryptsetup: add host variant E.G. for generating dm-verity hashes or dm-crypt data at build time in a post-image script. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2017-10-05 17:06:21 +02:00
$(eval $(host-autotools-package))
Reference in New Issue Copy Permalink