- linux-morello-distros - op-lists.linaro.org

[meta-morello-distro][PATCH 0/4] GLib-2.0: Add recipes for GLib and dependencies

by Michael Cobb

From 021ac67cc29af0f48cebb755fe306339e75b5eb2 Mon Sep 17 00:00:00 2001 From: Michael Cobb <michael.cobb(a)iceotope.com> Date: Thu, 5 Sep 2024 09:12:56 +0100 Subject: [meta-morello-distro][PATCH 0/4] GLib-2.0: Add recipes for GLib 2.76.4 and dependencies These patches contain recipes for purecap GLib-2.0 2.76.4, and dependencies libpcre2 10.40 and libffi 3.4.2. Patches for GLib and libffi are from the CheriBSD CTSRD-CHERI repo (https://github.com/CTSRD-CHERI). libffi's closures are disabled upstream. A compile time flag has been added to re-enable FFI closures on CHERI (--enable-cheri-ffi-closures). Without re-enabling closures, I am unable to use DBus signals with GDBus. Enabling them allows me to using DBus signals without issues, but YMMV. Running the GLib tests manually I see 220 passed, 47 fail. I believe the failures are due to not using GLib's build system (i.e. `meson test`) and therefore are not being ran correctly. Michael Cobb (4): libpcre2: C64 initial commit libffi: C64 initial commit util-linux: enable building of libmount to support GLib glib-2.0: C64 initial commit .../glib-2.0/glib-2.0-morello_2.76.4.bb | 58 +++ ...0001-Fix-DATADIRNAME-on-uclibc-Linux.patch | 30 ++ ...-gio-querymodules-as-libexec_PROGRAM.patch | 27 ++ ...ng-about-deprecated-paths-in-schemas.patch | 40 ++ ...-correctly-when-building-with-mingw3.patch | 81 ++++ .../0001-add-disable-cxx-build-option.patch | 36 ++ ...ces.c-comment-out-a-build-host-only-.patch | 28 ++ ...on-Run-atomics-test-on-clang-as-well.patch | 29 ++ ...-fix-iconv-libintl-library-not-found.patch | 61 +++ ...sable-testing-host-binaries-when-cro.patch | 59 +++ ...dcode-python-path-into-various-tools.patch | 44 +++ .../glib-2.0/glib-2.0/memory-monitor.patch | 362 ++++++++++++++++++ .../glib-2.0/glib-2.0/meson.cross.d/common | 3 + .../glib-2.0/meson.cross.d/common-glibc | 5 + .../glib-2.0/meson.cross.d/common-linux | 5 + .../glib-2.0/meson.cross.d/common-mingw | 6 + .../glib-2.0/meson.cross.d/common-morello | 3 + .../glib-2.0/meson.cross.d/common-musl | 6 + .../glib-2.0/glib-2.0/skip-timeout.patch | 30 ++ recipes-core/glib-2.0/glib-morello.inc | 170 ++++++++ .../util-linux/util-linux-morello_2.37.4.bb | 4 +- .../libffi/libffi-morello_3.4.2.bb | 41 ++ ...-ffi-closures-flag-to-enable-FFI-clo.patch | 65 ++++ ...m-sysv-reverted-clang-VFP-mitigation.patch | 102 +++++ recipes-support/libffi/libffi/not-win32.patch | 35 ++ .../libpcre/libpcre2-morello_10.40.bb | 69 ++++ .../libpcre/libpcre2/CVE-2022-41409.patch | 75 ++++ 27 files changed, 1472 insertions(+), 2 deletions(-) create mode 100644 recipes-core/glib-2.0/glib-2.0-morello_2.76.4.bb create mode 100644 recipes-core/glib-2.0/glib-2.0/0001-Fix-DATADIRNAME-on-uclibc-Linux.patch create mode 100644 recipes-core/glib-2.0/glib-2.0/0001-Install-gio-querymodules-as-libexec_PROGRAM.patch create mode 100644 recipes-core/glib-2.0/glib-2.0/0001-Remove-the-warning-about-deprecated-paths-in-schemas.patch create mode 100644 recipes-core/glib-2.0/glib-2.0/0001-Set-host_machine-correctly-when-building-with-mingw3.patch create mode 100644 recipes-core/glib-2.0/glib-2.0/0001-add-disable-cxx-build-option.patch create mode 100644 recipes-core/glib-2.0/glib-2.0/0001-gio-tests-resources.c-comment-out-a-build-host-only-.patch create mode 100644 recipes-core/glib-2.0/glib-2.0/0001-meson-Run-atomics-test-on-clang-as-well.patch create mode 100644 recipes-core/glib-2.0/glib-2.0/0002-fix-iconv-libintl-library-not-found.patch create mode 100644 recipes-core/glib-2.0/glib-2.0/0003-Add-option-to-disable-testing-host-binaries-when-cro.patch create mode 100644 recipes-core/glib-2.0/glib-2.0/0010-Do-not-hardcode-python-path-into-various-tools.patch create mode 100644 recipes-core/glib-2.0/glib-2.0/memory-monitor.patch create mode 100644 recipes-core/glib-2.0/glib-2.0/meson.cross.d/common create mode 100644 recipes-core/glib-2.0/glib-2.0/meson.cross.d/common-glibc create mode 100644 recipes-core/glib-2.0/glib-2.0/meson.cross.d/common-linux create mode 100644 recipes-core/glib-2.0/glib-2.0/meson.cross.d/common-mingw create mode 100644 recipes-core/glib-2.0/glib-2.0/meson.cross.d/common-morello create mode 100644 recipes-core/glib-2.0/glib-2.0/meson.cross.d/common-musl create mode 100644 recipes-core/glib-2.0/glib-2.0/skip-timeout.patch create mode 100644 recipes-core/glib-2.0/glib-morello.inc create mode 100644 recipes-support/libffi/libffi-morello_3.4.2.bb create mode 100644 recipes-support/libffi/libffi/0001-Add-enable-cheri-ffi-closures-flag-to-enable-FFI-clo.patch create mode 100644 recipes-support/libffi/libffi/0001-arm-sysv-reverted-clang-VFP-mitigation.patch create mode 100644 recipes-support/libffi/libffi/not-win32.patch create mode 100644 recipes-support/libpcre/libpcre2-morello_10.40.bb create mode 100644 recipes-support/libpcre/libpcre2/CVE-2022-41409.patch -- 2.43.0

1 week, 3 days

2
5
0 0

[meta-morello-distro][PATCH 0/2] Yocto recipes for DBus

by michael.cobb＠iceotope.com

From a5a9bf47a5793bed32c44ee0b1f19bfd63a76724 Mon Sep 17 00:00:00 2001 From: Michael Cobb <michael.cobb(a)iceotope.com> Date: Wed, 21 Aug 2024 10:54:42 +0100 Subject: [meta-morello-distro][PATCH 0/2] Yocto recipes for DBus These patches contain Yocto/Bitbake recipes for DBus 1.15.0 and libexpat 2.5.0 Michael Cobb (2): expat: C64 initial commit dbus: C64 initial commit recipes-core/dbus/dbus-morello_1.15.0.bb | 190 ++++++++ recipes-core/dbus/dbus/dbus-1.init | 123 +++++ recipes-core/dbus/dbus/tmpdir.patch | 44 ++ recipes-core/expat/expat-morello_2.5.0.bb | 32 ++ ...CVE-2023-52426-backported-from-expat.patch | 420 ++++++++++++++++++ 5 files changed, 809 insertions(+) create mode 100644 recipes-core/dbus/dbus-morello_1.15.0.bb create mode 100644 recipes-core/dbus/dbus/dbus-1.init create mode 100644 recipes-core/dbus/dbus/tmpdir.patch create mode 100644 recipes-core/expat/expat-morello_2.5.0.bb create mode 100644 recipes-core/expat/files/0001-Apply-patch-for-CVE-2023-52426-backported-from-expat.patch -- 2.40.1

4 weeks, 1 day

2
3
0 0

[meta-morello][PATCH] linux-morello: update to 1.8.1

by Pawel Zalewski

Signed-off-by: Pawel Zalewski <pzalewski(a)thegoodpenguin.co.uk> --- meta-morello/recipes-kernel/linux/linux-morello_morello-1.8.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-morello/recipes-kernel/linux/linux-morello_morello-1.8.bb b/meta-morello/recipes-kernel/linux/linux-morello_morello-1.8.bb index 78929f6..bb687b0 100644 --- a/meta-morello/recipes-kernel/linux/linux-morello_morello-1.8.bb +++ b/meta-morello/recipes-kernel/linux/linux-morello_morello-1.8.bb @@ -2,7 +2,7 @@ require linux-morello.inc LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" -SRCREV = "fa6de65a2f2c6f3ef778e4dd46d1509591585221" +SRCREV = "96c45a786534d894387e17ed60e4d31d33911567" LINUX_VERSION = "6.7" LINUX_VERSION_EXTENSION = "-yocto-purecap" -- 2.45.1

1 month

1
0
0 0

[meta-morello-distro][PATCH 0/5] Basic Zabbix Function

by Harrison Carter

From: Harrison Carter <hcarter(a)thegoodpenguin.co.uk> This patch series adds a basic zabbix server, frontend, and agent for a morello distro Harrison Marcks (5): zabbix-agentd: re-add systemd config kas: add fstype tar.bz2 postgresql: fix file dominion cyrus-sasl: add missing group for zabbix-server zabbix-server: add init script for zabbix DB kas/morello-linux-debug.yml | 2 + .../zabbix/files/zabbix-agentd.conf | 4 +- ...-morello.service => zabbix-agentd.service} | 0 .../zabbix/files/zabbix-proxy.conf | 8 +- .../zabbix/files/zabbix-proxy.service | 5 +- .../zabbix/files/zabbix-server-init.service | 21 +++ .../zabbix/files/zabbix-server-init.sh | 139 ++++++++++++++++++ ...-morello.service => zabbix-server.service} | 7 +- .../zabbix/zabbix-agentd-morello_5.0.38.bb | 26 ++-- .../zabbix/zabbix-morello.inc | 7 +- .../zabbix/zabbix-proxy-morello_5.0.38.bb | 42 +++--- .../zabbix/zabbix-server-morello_5.0.38.bb | 69 ++++++--- .../cyrus-sasl/cyrus-sasl_%.bbappend | 2 + .../postgresql/postgresql-morello_9.6.bb | 16 +- ...sql-morello.service => postgresql.service} | 0 15 files changed, 271 insertions(+), 77 deletions(-) rename recipes-connectivity/zabbix/files/{zabbix-agentd-morello.service => zabbix-agentd.service} (100%) create mode 100644 recipes-connectivity/zabbix/files/zabbix-server-init.service create mode 100644 recipes-connectivity/zabbix/files/zabbix-server-init.sh rename recipes-connectivity/zabbix/files/{zabbix-server-morello.service => zabbix-server.service} (71%) create mode 100644 recipes-daemons/cyrus-sasl/cyrus-sasl_%.bbappend rename recipes-dbs/postgresql/postgresql/{postgresql-morello.service => postgresql.service} (100%) -- 2.34.1

2 months, 2 weeks

3
7
0 0

[meta-morello-distro][PATCH 00/27] meta-morello-distro Yocto layer

by Pawel Zalewski

This series of patches is introducing a layer that brings a few of user space libraries to the Morello platform under Linux and provides a framework to aid adding more libraries in the future. The purecap libraries live in their own sysroot and exist in parallel with non purecap libraries. Currently the layer consists of: - postgreslq - zabbix - dependencies required to run the above See README.md for more details. Working implementation can be found here [1] [1] https://github.com/The-Good-Penguin/meta-morello-distro Pawel Zalewski (27): README: initial commit license: add MIT license kas: initial commit conf: inital commit classes: initial commit openssl-morello: initial commit zabbix-morello: initial commit nginx: appends for zabbix base-passwd-morello: initial commit ncurses-morello: initial commit readline-morello: initial commit util-linux-morello: initial commit zlib-morello: inital commit postgresql-morello: initial commit tcltk-morello: initial commit php: downgrade to 7.4.33 bzip2-morello: initial commit libidn2-morello: initial commit linux: initial commit curl-morello: initial commit libevent-morello: initial commit libpcre-morello: initial commit libunistring-morello: initial commit openldap-morello: initial commit snmp-morello: initial commit image: initial commit ci: initial commit .github/workflows/workflow.yml | 88 + COPYING.MIT | 17 + README.md | 98 + classes/perl-hacks.bbclass | 53 + classes/purecap-sysroot.bbclass | 59 + classes/purecap-useradd.bbclass | 1 + conf/distro/morello.conf | 18 + conf/layer.conf | 23 + kas/base.yml | 38 + kas/debug-fvp.yml | 20 + kas/debug-soc.yml | 10 + kas/morello-linux-debug.yml | 24 + .../cheri-patches/0001-purecap-patches.patch | 183 ++ ...1-Configure-do-not-tweak-mips-cflags.patch | 36 + ...sysroot-and-debug-prefix-map-from-co.patch | 78 + .../openssl/files/afalg.patch | 31 + recipes-connectivity/openssl/files/run-ptest | 12 + .../openssl/openssl-morello_3.0.8.bb | 164 ++ .../0000-net-fix-provenance-error.patch | 35 + ...000-sysinfo-fix-build-with-musl-libc.patch | 32 + ...emalloc-align-and-work-with-16-not-8.patch | 168 ++ ...002-duktape-set-shift-to-5-for-CHERI.patch | 55 + .../0003-duktape-add-aling-to-16.patch | 121 + ...ed-use-padding-of-16-not-8-for-alloc.patch | 85 + .../0005-embed-fix-alignment-issues.patch | 93 + ...6-duk_config-use-debug-and-self-test.patch | 46 + .../0007-duktape-fix-stack-reallocation.patch | 64 + recipes-connectivity/zabbix/files/COPYING | 341 +++ .../files/zabbix-agentd-morello.service | 15 + .../zabbix/files/zabbix-agentd.conf | 536 +++++ .../zabbix/files/zabbix-proxy.conf | 1461 ++++++++++++ .../zabbix/files/zabbix-proxy.service | 15 + .../files/zabbix-server-morello.service | 20 + .../zabbix/files/zabbix-server.conf | 990 +++++++++ .../zabbix/files/zabbix.conf.php | 59 + .../zabbix/zabbix-agentd-morello_5.0.38.bb | 52 + .../zabbix/zabbix-frontend_5.0.38.bb | 24 + .../zabbix/zabbix-morello.inc | 103 + .../zabbix/zabbix-proxy-morello_5.0.38.bb | 65 + .../zabbix/zabbix-server-morello_5.0.38.bb | 71 + .../base-passwd/base-passwd-morello_3.5.29.bb | 128 ++ .../base-passwd/files/add_shutdown.patch | 19 + .../base-passwd/files/disable-docs.patch | 24 + .../base-passwd/files/disable-shell.patch | 57 + recipes-core/base-passwd/files/input.patch | 22 + recipes-core/base-passwd/files/kvm.patch | 23 + recipes-core/base-passwd/files/nobash.patch | 15 + recipes-core/base-passwd/files/noshadow.patch | 14 + recipes-core/images/morello-image.bb | 73 + ...st-ncurses-silence-capability-misuse.patch | 37 + recipes-core/ncurses/ncurses-morello.inc | 87 + recipes-core/ncurses/ncurses-morello_6.4.bb | 16 + recipes-core/ncurses/site_config/headers | 5 + recipes-core/readline/files/inputrc | 61 + recipes-core/readline/files/rl-native.map | 12 + recipes-core/readline/readline-morello.inc | 68 + .../readline/readline-morello_8.1.2.bb | 7 + .../readline/readline/configure-fix.patch | 35 + recipes-core/readline/readline/norpath.patch | 21 + .../util-linux/util-linux-morello_2.37.4.bb | 23 + recipes-core/zlib/files/run-ptest | 7 + recipes-core/zlib/zlib-morello_1.2.13.bb | 43 + ...gument-order-to-qsort_r-to-match-pos.patch | 45 + ...change-defines-from-freebsd-to-cheri.patch | 57 + ...n-bypass-autoconf-2.69-version-check.patch | 30 + recipes-dbs/postgresql/postgresql-morello.inc | 400 ++++ .../postgresql/postgresql-morello_9.6.bb | 155 ++ recipes-dbs/postgresql/postgresql/pg_config | 15 + .../postgresql/postgresql/postgres-bench | 16 + .../postgresql/postgresql/postgres-test | 49 + .../postgresql/postgresql/postgresql-init | 64 + .../postgresql/postgresql-init.service | 19 + .../postgresql/postgresql-morello.init | 193 ++ .../postgresql/postgresql-morello.service | 29 + .../postgresql/postgresql/postgresql-profile | 4 + .../postgresql/postgresql/postgresql-setup | 73 + .../postgresql/postgresql/postgresql.pam | 4 + .../postgresql/postgresql/test-schedule | 1 + recipes-dbs/postgresql/postgresql_%.bbappend | 7 + recipes-devtools/php/files/pg_config | 15 + recipes-devtools/php/files/php.ini | 1950 +++++++++++++++++ recipes-devtools/php/files/zabbix-fpm.conf | 24 + ...re.ac-don-t-include-build-libtool.m4.patch | 30 + ...001-opcache-config.m4-enable-opcache.patch | 237 ++ ...p-don-t-use-broken-wrapper-for-mkdir.patch | 29 + ...1-php.m4-don-t-unset-cache-variables.patch | 39 + recipes-devtools/php/php/70_mod_php7.conf | 9 + .../php/php/CVE-2023-3247-1.patch | 87 + .../php/php/CVE-2023-3247-2.patch | 29 + recipes-devtools/php/php/CVE-2023-3824.patch | 91 + .../php/php/debian-php-fixheader.patch | 32 + recipes-devtools/php/php/iconv.patch | 41 + .../php/php/imap-fix-autofoo.patch | 41 + recipes-devtools/php/php/pear-makefile.patch | 22 + recipes-devtools/php/php/phar-makefile.patch | 46 + recipes-devtools/php/php/php-fpm-apache.conf | 6 + recipes-devtools/php/php/php-fpm.conf | 510 +++++ recipes-devtools/php/php/php-fpm.service | 10 + .../php/php/php_exec_native.patch | 26 + .../php/php/xfail_two_bug_tests.patch | 34 + recipes-devtools/php/php_%.bbappend | 74 + recipes-devtools/php/php_7.4.33.bb | 276 +++ ...0001-tclCompCmdsSZ-cast-to-uintptr_t.patch | 28 + recipes-devtools/tcltk/tcl-morello_8.6.11.bb | 104 + .../tcltk/tcl/alter-includedir.patch | 56 + .../tcl/fix_issue_with_old_distro_glibc.patch | 39 + .../tcl/fix_non_native_build_issue.patch | 64 + recipes-devtools/tcltk/tcl/interp.patch | 32 + recipes-devtools/tcltk/tcl/run-ptest | 17 + .../tcltk/tcl/tcl-add-soname.patch | 32 + .../tcl-remove-hardcoded-install-path.patch | 32 + recipes-extended/bzip2/bzip2-morello_1.0.8.bb | 72 + recipes-extended/bzip2/files/Makefile.am | 74 + recipes-extended/bzip2/files/configure.ac | 11 + recipes-extended/bzip2/files/run-ptest | 2 + .../libidn2/libidn2-morello_2.3.2.bb | 50 + recipes-httpd/nginx/files/fastcgi-php.conf | 13 + recipes-httpd/nginx/files/http_status.conf | 7 + recipes-httpd/nginx/files/zabbix-web.conf | 79 + recipes-httpd/nginx/nginx_%.bbappend | 29 + ...ow-for-storing-caps-in-shared-memory.patch | 30 + .../linux/files/0003-defconfig-modify.patch | 38 + recipes-kernel/linux/linux-morello_%.bbappend | 6 + .../0001-tools-fix-cheri-provenance.patch | 32 + ..._endpoint_linux-fix-cheri-provenance.patch | 28 + recipes-protocols/net-snmp/files/init | 67 + recipes-protocols/net-snmp/files/snmpd.conf | 422 ++++ .../net-snmp/files/snmptrapd.conf | 18 + ...ath.m4-keep-consistent-between-32bit.patch | 38 + .../0001-config_os_headers-Error-Fix.patch | 35 + ...1-get_pid_from_inode-Include-limit.h.patch | 27 + ....c-Don-t-check-for-return-from-EVP_M.patch | 34 + ...004-configure-fix-incorrect-variable.patch | 28 + .../CVE-2022-44792-CVE-2022-44793.patch | 116 + .../net-snmp-morello/fix-libtool-finish.patch | 34 + ....7.2-fix-engineBoots-value-on-SIGHUP.patch | 44 + ...add-knob-whether-nlist.h-are-checked.patch | 36 + .../net-snmp-fix-for-disable-des.patch | 30 + ...ting-add-the-output-format-for-ptest.patch | 35 + .../reproducibility-have-printcap.patch | 30 + .../net-snmp/net-snmp-morello/run-ptest | 5 + .../net-snmp/net-snmp-morello/snmpd.service | 14 + .../net-snmp-morello/snmptrapd.service | 14 + .../net-snmp/net-snmp-morello_5.9.3.bb | 322 +++ recipes-support/curl/curl-morello_7.82.0.bb | 116 + ...0001-openssl-fix-CN-check-error-code.patch | 38 + .../curl/files/CVE-2022-22576.patch | 145 ++ .../curl/files/CVE-2022-27774-1.patch | 45 + .../curl/files/CVE-2022-27774-2.patch | 80 + .../curl/files/CVE-2022-27774-3.patch | 83 + .../curl/files/CVE-2022-27774-4.patch | 35 + .../curl/files/CVE-2022-27775.patch | 37 + .../curl/files/CVE-2022-27776.patch | 115 + .../curl/files/CVE-2022-27779.patch | 42 + .../curl/files/CVE-2022-27780.patch | 33 + .../curl/files/CVE-2022-27781.patch | 43 + .../curl/files/CVE-2022-27782-1.patch | 458 ++++ .../curl/files/CVE-2022-27782-2.patch | 71 + .../curl/files/CVE-2022-30115.patch | 82 + .../curl/files/CVE-2022-32205.patch | 174 ++ .../curl/files/CVE-2022-32206.patch | 51 + .../curl/files/CVE-2022-32207.patch | 283 +++ .../curl/files/CVE-2022-32208.patch | 67 + .../curl/files/CVE-2022-32221.patch | 28 + .../curl/files/CVE-2022-35252.patch | 72 + .../curl/files/CVE-2022-42915.patch | 53 + .../curl/files/CVE-2022-42916.patch | 136 ++ .../curl/files/CVE-2022-43551.patch | 35 + .../curl/files/CVE-2022-43552.patch | 80 + .../curl/files/CVE-2023-23914_5-1.patch | 280 +++ .../curl/files/CVE-2023-23914_5-2.patch | 23 + .../curl/files/CVE-2023-23914_5-3.patch | 45 + .../curl/files/CVE-2023-23914_5-4.patch | 48 + .../curl/files/CVE-2023-23914_5-5.patch | 118 + ....c-patch-out-tests-that-require-a-wo.patch | 37 + ...ncrease-default-timeval-tolerance-50.patch | 33 + ...-monotonic_prc_fallback-as-retriable.patch | 28 + ...ts-are-marked-failed-only-when-all-a.patch | 81 + .../files/Makefile-missing-test-dir.patch | 27 + recipes-support/libevent/files/run-ptest | 29 + .../libevent/libevent-morello_2.1.12.bb | 64 + ...01-pcre_jit_compile-cheri-provenance.patch | 89 + ...2-sljitNativeARM_64-cheri-provenance.patch | 61 + .../0003-sljitUtils-cheri-provenance.patch | 39 + recipes-support/libpcre/files/Makefile | 183 ++ recipes-support/libpcre/files/run-ptest | 3 + .../libpcre/libpcre-morello_8.45.bb | 91 + .../libunistring/libunistring-morello_1.0.bb | 36 + .../0001-config-fix-provenance-errors.patch | 807 +++++++ .../0002-tpool-remove-errors.patch | 37 + .../0003-config-Remove-format-error.patch | 42 + .../0004-main-Remove-format-error.patch | 28 + ...0005-connection-fix-provenance-error.patch | 67 + .../0006-sets-fix-provenance-error.patch | 36 + ...07-slapd-search-fix-cheri-provenance.patch | 152 ++ .../0001-build-top.mk-unset-STRIP_OPTS.patch | 38 + ...if-filter-fix-parallel-build-failure.patch | 32 + ...-Makefile.in-ignore-the-mkdir-errors.patch | 33 + ...de-ldap_pvt_thread.h-before-redefini.patch | 54 + .../openldap/openldap-morello/initscript | 35 + .../remove-user-host-pwd-from-version.patch | 39 + .../openldap/openldap-morello/slapd.service | 10 + .../openldap-morello/use-urandom.patch | 35 + .../openldap/openldap-morello_2.5.12.bb | 255 +++ 204 files changed, 18661 insertions(+) create mode 100644 .github/workflows/workflow.yml create mode 100644 COPYING.MIT create mode 100644 README.md create mode 100644 classes/perl-hacks.bbclass create mode 100644 classes/purecap-sysroot.bbclass create mode 100644 classes/purecap-useradd.bbclass create mode 100644 conf/distro/morello.conf create mode 100644 conf/layer.conf create mode 100644 kas/base.yml create mode 100644 kas/debug-fvp.yml create mode 100644 kas/debug-soc.yml create mode 100644 kas/morello-linux-debug.yml create mode 100644 recipes-connectivity/openssl/cheri-patches/0001-purecap-patches.patch create mode 100644 recipes-connectivity/openssl/files/0001-Configure-do-not-tweak-mips-cflags.patch create mode 100644 recipes-connectivity/openssl/files/0001-buildinfo-strip-sysroot-and-debug-prefix-map-from-co.patch create mode 100644 recipes-connectivity/openssl/files/afalg.patch create mode 100644 recipes-connectivity/openssl/files/run-ptest create mode 100644 recipes-connectivity/openssl/openssl-morello_3.0.8.bb create mode 100644 recipes-connectivity/zabbix/cheri-patches/0000-net-fix-provenance-error.patch create mode 100644 recipes-connectivity/zabbix/cheri-patches/0000-sysinfo-fix-build-with-musl-libc.patch create mode 100644 recipes-connectivity/zabbix/cheri-patches/0001-memalloc-align-and-work-with-16-not-8.patch create mode 100644 recipes-connectivity/zabbix/cheri-patches/0002-duktape-set-shift-to-5-for-CHERI.patch create mode 100644 recipes-connectivity/zabbix/cheri-patches/0003-duktape-add-aling-to-16.patch create mode 100644 recipes-connectivity/zabbix/cheri-patches/0004-embed-use-padding-of-16-not-8-for-alloc.patch create mode 100644 recipes-connectivity/zabbix/cheri-patches/0005-embed-fix-alignment-issues.patch create mode 100644 recipes-connectivity/zabbix/cheri-patches/0006-duk_config-use-debug-and-self-test.patch create mode 100644 recipes-connectivity/zabbix/cheri-patches/0007-duktape-fix-stack-reallocation.patch create mode 100644 recipes-connectivity/zabbix/files/COPYING create mode 100644 recipes-connectivity/zabbix/files/zabbix-agentd-morello.service create mode 100644 recipes-connectivity/zabbix/files/zabbix-agentd.conf create mode 100644 recipes-connectivity/zabbix/files/zabbix-proxy.conf create mode 100644 recipes-connectivity/zabbix/files/zabbix-proxy.service create mode 100644 recipes-connectivity/zabbix/files/zabbix-server-morello.service create mode 100644 recipes-connectivity/zabbix/files/zabbix-server.conf create mode 100644 recipes-connectivity/zabbix/files/zabbix.conf.php create mode 100644 recipes-connectivity/zabbix/zabbix-agentd-morello_5.0.38.bb create mode 100644 recipes-connectivity/zabbix/zabbix-frontend_5.0.38.bb create mode 100644 recipes-connectivity/zabbix/zabbix-morello.inc create mode 100644 recipes-connectivity/zabbix/zabbix-proxy-morello_5.0.38.bb create mode 100644 recipes-connectivity/zabbix/zabbix-server-morello_5.0.38.bb create mode 100644 recipes-core/base-passwd/base-passwd-morello_3.5.29.bb create mode 100644 recipes-core/base-passwd/files/add_shutdown.patch create mode 100644 recipes-core/base-passwd/files/disable-docs.patch create mode 100644 recipes-core/base-passwd/files/disable-shell.patch create mode 100644 recipes-core/base-passwd/files/input.patch create mode 100644 recipes-core/base-passwd/files/kvm.patch create mode 100644 recipes-core/base-passwd/files/nobash.patch create mode 100644 recipes-core/base-passwd/files/noshadow.patch create mode 100644 recipes-core/images/morello-image.bb create mode 100644 recipes-core/ncurses/cheri-patches/0001-test-ncurses-silence-capability-misuse.patch create mode 100644 recipes-core/ncurses/ncurses-morello.inc create mode 100644 recipes-core/ncurses/ncurses-morello_6.4.bb create mode 100644 recipes-core/ncurses/site_config/headers create mode 100644 recipes-core/readline/files/inputrc create mode 100644 recipes-core/readline/files/rl-native.map create mode 100644 recipes-core/readline/readline-morello.inc create mode 100644 recipes-core/readline/readline-morello_8.1.2.bb create mode 100644 recipes-core/readline/readline/configure-fix.patch create mode 100644 recipes-core/readline/readline/norpath.patch create mode 100644 recipes-core/util-linux/util-linux-morello_2.37.4.bb create mode 100644 recipes-core/zlib/files/run-ptest create mode 100644 recipes-core/zlib/zlib-morello_1.2.13.bb create mode 100644 recipes-dbs/postgresql/cheri-patches/0001-port.h-change-argument-order-to-qsort_r-to-match-pos.patch create mode 100644 recipes-dbs/postgresql/cheri-patches/0002-qsort-change-defines-from-freebsd-to-cheri.patch create mode 100644 recipes-dbs/postgresql/files/0003-configure.in-bypass-autoconf-2.69-version-check.patch create mode 100644 recipes-dbs/postgresql/postgresql-morello.inc create mode 100644 recipes-dbs/postgresql/postgresql-morello_9.6.bb create mode 100755 recipes-dbs/postgresql/postgresql/pg_config create mode 100644 recipes-dbs/postgresql/postgresql/postgres-bench create mode 100644 recipes-dbs/postgresql/postgresql/postgres-test create mode 100644 recipes-dbs/postgresql/postgresql/postgresql-init create mode 100644 recipes-dbs/postgresql/postgresql/postgresql-init.service create mode 100644 recipes-dbs/postgresql/postgresql/postgresql-morello.init create mode 100644 recipes-dbs/postgresql/postgresql/postgresql-morello.service create mode 100644 recipes-dbs/postgresql/postgresql/postgresql-profile create mode 100644 recipes-dbs/postgresql/postgresql/postgresql-setup create mode 100644 recipes-dbs/postgresql/postgresql/postgresql.pam create mode 100644 recipes-dbs/postgresql/postgresql/test-schedule create mode 100644 recipes-dbs/postgresql/postgresql_%.bbappend create mode 100755 recipes-devtools/php/files/pg_config create mode 100644 recipes-devtools/php/files/php.ini create mode 100644 recipes-devtools/php/files/zabbix-fpm.conf create mode 100644 recipes-devtools/php/php/0001-configure.ac-don-t-include-build-libtool.m4.patch create mode 100644 recipes-devtools/php/php/0001-opcache-config.m4-enable-opcache.patch create mode 100644 recipes-devtools/php/php/0001-php-don-t-use-broken-wrapper-for-mkdir.patch create mode 100644 recipes-devtools/php/php/0001-php.m4-don-t-unset-cache-variables.patch create mode 100644 recipes-devtools/php/php/70_mod_php7.conf create mode 100644 recipes-devtools/php/php/CVE-2023-3247-1.patch create mode 100644 recipes-devtools/php/php/CVE-2023-3247-2.patch create mode 100644 recipes-devtools/php/php/CVE-2023-3824.patch create mode 100644 recipes-devtools/php/php/debian-php-fixheader.patch create mode 100644 recipes-devtools/php/php/iconv.patch create mode 100644 recipes-devtools/php/php/imap-fix-autofoo.patch create mode 100644 recipes-devtools/php/php/pear-makefile.patch create mode 100644 recipes-devtools/php/php/phar-makefile.patch create mode 100644 recipes-devtools/php/php/php-fpm-apache.conf create mode 100644 recipes-devtools/php/php/php-fpm.conf create mode 100644 recipes-devtools/php/php/php-fpm.service create mode 100644 recipes-devtools/php/php/php_exec_native.patch create mode 100644 recipes-devtools/php/php/xfail_two_bug_tests.patch create mode 100644 recipes-devtools/php/php_%.bbappend create mode 100644 recipes-devtools/php/php_7.4.33.bb create mode 100644 recipes-devtools/tcltk/cheri-patches/0001-tclCompCmdsSZ-cast-to-uintptr_t.patch create mode 100644 recipes-devtools/tcltk/tcl-morello_8.6.11.bb create mode 100644 recipes-devtools/tcltk/tcl/alter-includedir.patch create mode 100644 recipes-devtools/tcltk/tcl/fix_issue_with_old_distro_glibc.patch create mode 100644 recipes-devtools/tcltk/tcl/fix_non_native_build_issue.patch create mode 100644 recipes-devtools/tcltk/tcl/interp.patch create mode 100644 recipes-devtools/tcltk/tcl/run-ptest create mode 100644 recipes-devtools/tcltk/tcl/tcl-add-soname.patch create mode 100644 recipes-devtools/tcltk/tcl/tcl-remove-hardcoded-install-path.patch create mode 100644 recipes-extended/bzip2/bzip2-morello_1.0.8.bb create mode 100644 recipes-extended/bzip2/files/Makefile.am create mode 100644 recipes-extended/bzip2/files/configure.ac create mode 100644 recipes-extended/bzip2/files/run-ptest create mode 100644 recipes-extended/libidn2/libidn2-morello_2.3.2.bb create mode 100644 recipes-httpd/nginx/files/fastcgi-php.conf create mode 100644 recipes-httpd/nginx/files/http_status.conf create mode 100644 recipes-httpd/nginx/files/zabbix-web.conf create mode 100644 recipes-httpd/nginx/nginx_%.bbappend create mode 100644 recipes-kernel/linux/cheri-patches/0001-mman-allow-for-storing-caps-in-shared-memory.patch create mode 100644 recipes-kernel/linux/files/0003-defconfig-modify.patch create mode 100644 recipes-kernel/linux/linux-morello_%.bbappend create mode 100644 recipes-protocols/net-snmp/cheri-patches/0001-tools-fix-cheri-provenance.patch create mode 100644 recipes-protocols/net-snmp/cheri-patches/0002-udp_endpoint_linux-fix-cheri-provenance.patch create mode 100755 recipes-protocols/net-snmp/files/init create mode 100644 recipes-protocols/net-snmp/files/snmpd.conf create mode 100644 recipes-protocols/net-snmp/files/snmptrapd.conf create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/0001-config_os_headers-Error-Fix.patch create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/0001-get_pid_from_inode-Include-limit.h.patch create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/0004-configure-fix-incorrect-variable.patch create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/CVE-2022-44792-CVE-2022-44793.patch create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/fix-libtool-finish.patch create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/net-snmp-add-knob-whether-nlist.h-are-checked.patch create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/net-snmp-fix-for-disable-des.patch create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/net-snmp-testing-add-the-output-format-for-ptest.patch create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/reproducibility-have-printcap.patch create mode 100755 recipes-protocols/net-snmp/net-snmp-morello/run-ptest create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/snmpd.service create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/snmptrapd.service create mode 100644 recipes-protocols/net-snmp/net-snmp-morello_5.9.3.bb create mode 100644 recipes-support/curl/curl-morello_7.82.0.bb create mode 100644 recipes-support/curl/files/0001-openssl-fix-CN-check-error-code.patch create mode 100644 recipes-support/curl/files/CVE-2022-22576.patch create mode 100644 recipes-support/curl/files/CVE-2022-27774-1.patch create mode 100644 recipes-support/curl/files/CVE-2022-27774-2.patch create mode 100644 recipes-support/curl/files/CVE-2022-27774-3.patch create mode 100644 recipes-support/curl/files/CVE-2022-27774-4.patch create mode 100644 recipes-support/curl/files/CVE-2022-27775.patch create mode 100644 recipes-support/curl/files/CVE-2022-27776.patch create mode 100644 recipes-support/curl/files/CVE-2022-27779.patch create mode 100644 recipes-support/curl/files/CVE-2022-27780.patch create mode 100644 recipes-support/curl/files/CVE-2022-27781.patch create mode 100644 recipes-support/curl/files/CVE-2022-27782-1.patch create mode 100644 recipes-support/curl/files/CVE-2022-27782-2.patch create mode 100644 recipes-support/curl/files/CVE-2022-30115.patch create mode 100644 recipes-support/curl/files/CVE-2022-32205.patch create mode 100644 recipes-support/curl/files/CVE-2022-32206.patch create mode 100644 recipes-support/curl/files/CVE-2022-32207.patch create mode 100644 recipes-support/curl/files/CVE-2022-32208.patch create mode 100644 recipes-support/curl/files/CVE-2022-32221.patch create mode 100644 recipes-support/curl/files/CVE-2022-35252.patch create mode 100644 recipes-support/curl/files/CVE-2022-42915.patch create mode 100644 recipes-support/curl/files/CVE-2022-42916.patch create mode 100644 recipes-support/curl/files/CVE-2022-43551.patch create mode 100644 recipes-support/curl/files/CVE-2022-43552.patch create mode 100644 recipes-support/curl/files/CVE-2023-23914_5-1.patch create mode 100644 recipes-support/curl/files/CVE-2023-23914_5-2.patch create mode 100644 recipes-support/curl/files/CVE-2023-23914_5-3.patch create mode 100644 recipes-support/curl/files/CVE-2023-23914_5-4.patch create mode 100644 recipes-support/curl/files/CVE-2023-23914_5-5.patch create mode 100644 recipes-support/libevent/files/0001-test-regress_dns.c-patch-out-tests-that-require-a-wo.patch create mode 100644 recipes-support/libevent/files/0002-test-regress.h-Increase-default-timeval-tolerance-50.patch create mode 100644 recipes-support/libevent/files/0003-test-mark-util-monotonic_prc_fallback-as-retriable.patch create mode 100644 recipes-support/libevent/files/0004-test-retriable-tests-are-marked-failed-only-when-all-a.patch create mode 100644 recipes-support/libevent/files/Makefile-missing-test-dir.patch create mode 100644 recipes-support/libevent/files/run-ptest create mode 100644 recipes-support/libevent/libevent-morello_2.1.12.bb create mode 100644 recipes-support/libpcre/cheri-patches/0001-pcre_jit_compile-cheri-provenance.patch create mode 100644 recipes-support/libpcre/cheri-patches/0002-sljitNativeARM_64-cheri-provenance.patch create mode 100644 recipes-support/libpcre/cheri-patches/0003-sljitUtils-cheri-provenance.patch create mode 100644 recipes-support/libpcre/files/Makefile create mode 100644 recipes-support/libpcre/files/run-ptest create mode 100644 recipes-support/libpcre/libpcre-morello_8.45.bb create mode 100644 recipes-support/libunistring/libunistring-morello_1.0.bb create mode 100644 recipes-support/openldap/cheri-patches/0001-config-fix-provenance-errors.patch create mode 100644 recipes-support/openldap/cheri-patches/0002-tpool-remove-errors.patch create mode 100644 recipes-support/openldap/cheri-patches/0003-config-Remove-format-error.patch create mode 100644 recipes-support/openldap/cheri-patches/0004-main-Remove-format-error.patch create mode 100644 recipes-support/openldap/cheri-patches/0005-connection-fix-provenance-error.patch create mode 100644 recipes-support/openldap/cheri-patches/0006-sets-fix-provenance-error.patch create mode 100644 recipes-support/openldap/cheri-patches/0007-slapd-search-fix-cheri-provenance.patch create mode 100644 recipes-support/openldap/openldap-morello/0001-build-top.mk-unset-STRIP_OPTS.patch create mode 100644 recipes-support/openldap/openldap-morello/0001-ldif-filter-fix-parallel-build-failure.patch create mode 100644 recipes-support/openldap/openldap-morello/0001-libraries-Makefile.in-ignore-the-mkdir-errors.patch create mode 100644 recipes-support/openldap/openldap-morello/0001-librewrite-include-ldap_pvt_thread.h-before-redefini.patch create mode 100644 recipes-support/openldap/openldap-morello/initscript create mode 100644 recipes-support/openldap/openldap-morello/remove-user-host-pwd-from-version.patch create mode 100644 recipes-support/openldap/openldap-morello/slapd.service create mode 100644 recipes-support/openldap/openldap-morello/use-urandom.patch create mode 100644 recipes-support/openldap/openldap-morello_2.5.12.bb -- 2.34.1

4 months, 1 week

1
27
0 0

[meta-morello][PATCH 0/9] Update stack to 1.8

by Pawel Zalewski

This series of patches is simply updating the software stack to version 1.8, working implementation can be found here [1] [1] https://git.morello-project.org/pzalewski/meta-morello/-/tree/release-1.8 Pawel Zalewski (9): classes: update llvm class to 14.0.0 v1.8 llvm-morello: update cross and target compilers to v1.8 musl: update version to v1.8 linux-morello: update version to v1.8 board-firmware: update version to v1.8 scp-firmware: update version to v1.8 tfa-firmware: update version to v1.8 fiptool-native: update version to v1.8 config: update to 1.8 .../classes/llvm-morello.bbclass | 2 +- .../recipes-core/musl/musl-morello-common.inc | 4 ++-- .../{musl_morello-1.7.bb => musl_morello-1.8.bb} | 0 ...ative_13.0.bb => llvm-morello-native_14.0.bb} | 0 .../llvm/llvm-morello-runtime-native.bb | 5 +++++ .../recipes-devtools/llvm/llvm-morello.inc | 4 ++-- ...llvm-morello_13.0.bb => llvm-morello_14.0.bb} | 16 ++++++++-------- .../conf/machine/include/morello-common.inc | 6 +++--- ...ello-1.7.bb => board-firmware_morello-1.8.bb} | 4 ++-- .../scp-firmware/scp-firmware_morello-2.12.bb | 4 ++-- .../trusted-firmware-a_morello-2.9.bb | 4 ++-- .../fiptool/fiptool-native_2.7.bb | 4 ++-- .../recipes-kernel/linux/files/netfilter.cfg | 15 +++++++++++++++ .../recipes-kernel/linux/linux-morello.inc | 7 +++---- ...rello-1.7.bb => linux-morello_morello-1.8.bb} | 7 +++---- 15 files changed, 50 insertions(+), 32 deletions(-) rename meta-morello-toolchain/recipes-core/musl/{musl_morello-1.7.bb => musl_morello-1.8.bb} (100%) rename meta-morello-toolchain/recipes-devtools/llvm/{llvm-morello-native_13.0.bb => llvm-morello-native_14.0.bb} (100%) rename meta-morello-toolchain/recipes-devtools/llvm/{llvm-morello_13.0.bb => llvm-morello_14.0.bb} (79%) rename meta-morello/recipes-bsp/board-firmware/{board-firmware_morello-1.7.bb => board-firmware_morello-1.8.bb} (91%) create mode 100644 meta-morello/recipes-kernel/linux/files/netfilter.cfg rename meta-morello/recipes-kernel/linux/{linux-morello_morello-1.7.bb => linux-morello_morello-1.8.bb} (55%) -- 2.34.1

4 months, 1 week

1
9
0 0

[MORELLO-musl] 1.8.1 release announcement

by Yury Khrustalev

The 1.8.1 version of Morello Musl is available with New features and documentation updates: - Restricted bounds for TLS symbols looked up via the dlsym function - Updated build instruction for building LLVM C++ libraries in the documentation Bug fixes: - Fix dlopen bus error for new TLS - Fix VMEM permission of internal mapping pointers - Some fixes for unit tests The source and development is at: https://git.morello-project.org/morello/musl-libc

4 months, 3 weeks

1
0
0 0

[LLVM] Announcing the 1.8 release of LLVM with Morello support

by Simon Wallis

Hi, The 1.8 release of LLVM with Morello support is now available. This binary and source release is for baremetal and for Linux. The release includes the following changes: - Based on clang-14 - As usual, the release includes various bug fixes. The source code is available at https://git.morello-project.org/morello/llvm-project/-/tree/morello/release…. Prebuilt binaries can be found at https://git.morello-project.org/morello/llvm-project-releases. Thanks, Simon

4 months, 4 weeks

1
0
0 0

[meta-morello][PATCH] musl: update to 1.7.1

by Pawel Zalewski

Signed-off-by: Pawel Zalewski <pzalewski(a)thegoodpenguin.co.uk> --- .../recipes-core/musl/musl-morello-common.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-morello-toolchain/recipes-core/musl/musl-morello-common.inc b/meta-morello-toolchain/recipes-core/musl/musl-morello-common.inc index 516bd18..4f46ca4 100644 --- a/meta-morello-toolchain/recipes-core/musl/musl-morello-common.inc +++ b/meta-morello-toolchain/recipes-core/musl/musl-morello-common.inc @@ -14,7 +14,7 @@ SRC_URI = " \ " # morello-release-1.7 -SRCREV = "f712fa4d03821e9fba9c3e3afd9fb570efdecedd" +SRCREV = "acfb827ad04d98ec5c0f558932e29b3c76de3093" SRCBRANCH = "morello/master" LIC_FILES_CHKSUM = "file://COPYRIGHT;md5=b03f1cc25363d094011f8f4fd8bcfb68" -- 2.34.1

5 months

1
0
0 0

[meta-morello][PATCH 0/2] Aid user space lib development

by Pawel Zalewski

We are working and nearly done on a layer that would live on top of meta-morello and that contains purecap user space libraries that live in a purecap sysroot in parallel to the usual c64 packages. Adding rpath the the compiler flags simplifies that work. Further more user space recipes shall inherit yet another class that will override the $libdir $prefix etc. variables found in bibtake.conf to reduce the amount of hoops one has to jump through when doing the above sysroot trick and working with Yocto. For that to work, two of the paths in the llvm class need to be hardcoded until a more elegant solution is found (possibly moving overriding of all paths into the llvm-class itself, as the BSP does not care about user space paths anyway). Pawel Zalewski (2): classes: add rpath to the compiler flags and fix paths config: fix path for purecap sysroot, drop c64 flag meta-morello-toolchain/classes/llvm-morello.bbclass | 8 ++++++-- meta-morello-toolchain/conf/layer.conf | 4 ++-- 2 files changed, 8 insertions(+), 4 deletions(-) -- 2.34.1

7 months, 1 week

1
2
0 0