b123e8887d
Add a patch for CVE-2022-31676 (local privilege escalation vulnerability). Signed-off-by: Stefan Agner <stefan@agner.ch> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
89 lines
2.7 KiB
Makefile
89 lines
2.7 KiB
Makefile
################################################################################
|
|
#
|
|
# openvmtools
|
|
#
|
|
################################################################################
|
|
|
|
OPENVMTOOLS_VERSION_MAJOR = 11.3.5
|
|
OPENVMTOOLS_VERSION = $(OPENVMTOOLS_VERSION_MAJOR)-18557794
|
|
OPENVMTOOLS_SITE = https://github.com/vmware/open-vm-tools/releases/download/stable-$(OPENVMTOOLS_VERSION_MAJOR)
|
|
OPENVMTOOLS_SOURCE = open-vm-tools-$(OPENVMTOOLS_VERSION).tar.gz
|
|
OPENVMTOOLS_LICENSE = LGPL-2.1
|
|
OPENVMTOOLS_LICENSE_FILES = COPYING
|
|
OPENVMTOOLS_CPE_ID_VENDOR = vmware
|
|
OPENVMTOOLS_CPE_ID_PRODUCT = tools
|
|
|
|
# 0013-Properly-check-authorization-on-incoming-guestOps-re.patch
|
|
OPENVMTOOLS_IGNORE_CVES += CVE-2022-31676
|
|
|
|
# configure.ac is patched
|
|
OPENVMTOOLS_AUTORECONF = YES
|
|
OPENVMTOOLS_CONF_OPTS = --with-dnet \
|
|
--without-icu --without-x --without-gtk2 \
|
|
--without-gtkmm --without-kernel-modules \
|
|
--disable-deploypkg --without-xerces
|
|
OPENVMTOOLS_CONF_ENV += \
|
|
CUSTOM_DNET_CPPFLAGS=" " \
|
|
LIBS=$(TARGET_NLS_LIBS)
|
|
OPENVMTOOLS_DEPENDENCIES = \
|
|
host-nfs-utils \
|
|
libglib2 \
|
|
libdnet \
|
|
$(TARGET_NLS_DEPENDENCIES)
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBTIRPC),y)
|
|
OPENVMTOOLS_DEPENDENCIES += libtirpc
|
|
endif
|
|
|
|
# When libfuse is available, openvmtools can build vmblock-fuse, so
|
|
# make sure that libfuse gets built first
|
|
ifeq ($(BR2_PACKAGE_LIBFUSE),y)
|
|
OPENVMTOOLS_DEPENDENCIES += libfuse
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_OPENSSL),y)
|
|
OPENVMTOOLS_CONF_OPTS += --with-ssl
|
|
OPENVMTOOLS_DEPENDENCIES += openssl
|
|
else
|
|
OPENVMTOOLS_CONF_OPTS += --without-ssl
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_OPENVMTOOLS_PAM),y)
|
|
OPENVMTOOLS_CONF_OPTS += --with-pam
|
|
OPENVMTOOLS_DEPENDENCIES += linux-pam
|
|
else
|
|
OPENVMTOOLS_CONF_OPTS += --without-pam
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_OPENVMTOOLS_RESOLUTIONKMS),y)
|
|
OPENVMTOOLS_CONF_OPTS += --enable-resolutionkms
|
|
OPENVMTOOLS_DEPENDENCIES += libdrm udev
|
|
else
|
|
OPENVMTOOLS_CONF_OPTS += --disable-resolutionkms
|
|
endif
|
|
|
|
# symlink needed by lib/system/systemLinux.c (or will cry in /var/log/messages)
|
|
# defined in lib/misc/hostinfoPosix.c
|
|
# /sbin/shutdown needed for Guest OS restart/shutdown from hypervisor
|
|
define OPENVMTOOLS_POST_INSTALL_TARGET_THINGIES
|
|
ln -fs os-release $(TARGET_DIR)/etc/lfs-release
|
|
if [ ! -e $(TARGET_DIR)/sbin/shutdown ]; then \
|
|
$(INSTALL) -D -m 755 package/openvmtools/shutdown \
|
|
$(TARGET_DIR)/sbin/shutdown; \
|
|
fi
|
|
endef
|
|
|
|
OPENVMTOOLS_POST_INSTALL_TARGET_HOOKS += OPENVMTOOLS_POST_INSTALL_TARGET_THINGIES
|
|
|
|
define OPENVMTOOLS_INSTALL_INIT_SYSV
|
|
$(INSTALL) -D -m 755 package/openvmtools/S10vmtoolsd \
|
|
$(TARGET_DIR)/etc/init.d/S10vmtoolsd
|
|
endef
|
|
|
|
define OPENVMTOOLS_INSTALL_INIT_SYSTEMD
|
|
$(INSTALL) -D -m 644 package/openvmtools/vmtoolsd.service \
|
|
$(TARGET_DIR)/usr/lib/systemd/system/vmtoolsd.service
|
|
endef
|
|
|
|
$(eval $(autotools-package))
|