- linux-morello-distros - op-lists.linaro.org

[meta-morello-distro][PATCH 00/27] meta-morello-distro Yocto layer

by Pawel Zalewski

This series of patches is introducing a layer that brings a few of user space libraries to the Morello platform under Linux and provides a framework to aid adding more libraries in the future. The purecap libraries live in their own sysroot and exist in parallel with non purecap libraries. Currently the layer consists of: - postgreslq - zabbix - dependencies required to run the above See README.md for more details. Working implementation can be found here [1] [1] https://github.com/The-Good-Penguin/meta-morello-distro Pawel Zalewski (27): README: initial commit license: add MIT license kas: initial commit conf: inital commit classes: initial commit openssl-morello: initial commit zabbix-morello: initial commit nginx: appends for zabbix base-passwd-morello: initial commit ncurses-morello: initial commit readline-morello: initial commit util-linux-morello: initial commit zlib-morello: inital commit postgresql-morello: initial commit tcltk-morello: initial commit php: downgrade to 7.4.33 bzip2-morello: initial commit libidn2-morello: initial commit linux: initial commit curl-morello: initial commit libevent-morello: initial commit libpcre-morello: initial commit libunistring-morello: initial commit openldap-morello: initial commit snmp-morello: initial commit image: initial commit ci: initial commit .github/workflows/workflow.yml | 88 + COPYING.MIT | 17 + README.md | 98 + classes/perl-hacks.bbclass | 53 + classes/purecap-sysroot.bbclass | 59 + classes/purecap-useradd.bbclass | 1 + conf/distro/morello.conf | 18 + conf/layer.conf | 23 + kas/base.yml | 38 + kas/debug-fvp.yml | 20 + kas/debug-soc.yml | 10 + kas/morello-linux-debug.yml | 24 + .../cheri-patches/0001-purecap-patches.patch | 183 ++ ...1-Configure-do-not-tweak-mips-cflags.patch | 36 + ...sysroot-and-debug-prefix-map-from-co.patch | 78 + .../openssl/files/afalg.patch | 31 + recipes-connectivity/openssl/files/run-ptest | 12 + .../openssl/openssl-morello_3.0.8.bb | 164 ++ .../0000-net-fix-provenance-error.patch | 35 + ...000-sysinfo-fix-build-with-musl-libc.patch | 32 + ...emalloc-align-and-work-with-16-not-8.patch | 168 ++ ...002-duktape-set-shift-to-5-for-CHERI.patch | 55 + .../0003-duktape-add-aling-to-16.patch | 121 + ...ed-use-padding-of-16-not-8-for-alloc.patch | 85 + .../0005-embed-fix-alignment-issues.patch | 93 + ...6-duk_config-use-debug-and-self-test.patch | 46 + .../0007-duktape-fix-stack-reallocation.patch | 64 + recipes-connectivity/zabbix/files/COPYING | 341 +++ .../files/zabbix-agentd-morello.service | 15 + .../zabbix/files/zabbix-agentd.conf | 536 +++++ .../zabbix/files/zabbix-proxy.conf | 1461 ++++++++++++ .../zabbix/files/zabbix-proxy.service | 15 + .../files/zabbix-server-morello.service | 20 + .../zabbix/files/zabbix-server.conf | 990 +++++++++ .../zabbix/files/zabbix.conf.php | 59 + .../zabbix/zabbix-agentd-morello_5.0.38.bb | 52 + .../zabbix/zabbix-frontend_5.0.38.bb | 24 + .../zabbix/zabbix-morello.inc | 103 + .../zabbix/zabbix-proxy-morello_5.0.38.bb | 65 + .../zabbix/zabbix-server-morello_5.0.38.bb | 71 + .../base-passwd/base-passwd-morello_3.5.29.bb | 128 ++ .../base-passwd/files/add_shutdown.patch | 19 + .../base-passwd/files/disable-docs.patch | 24 + .../base-passwd/files/disable-shell.patch | 57 + recipes-core/base-passwd/files/input.patch | 22 + recipes-core/base-passwd/files/kvm.patch | 23 + recipes-core/base-passwd/files/nobash.patch | 15 + recipes-core/base-passwd/files/noshadow.patch | 14 + recipes-core/images/morello-image.bb | 73 + ...st-ncurses-silence-capability-misuse.patch | 37 + recipes-core/ncurses/ncurses-morello.inc | 87 + recipes-core/ncurses/ncurses-morello_6.4.bb | 16 + recipes-core/ncurses/site_config/headers | 5 + recipes-core/readline/files/inputrc | 61 + recipes-core/readline/files/rl-native.map | 12 + recipes-core/readline/readline-morello.inc | 68 + .../readline/readline-morello_8.1.2.bb | 7 + .../readline/readline/configure-fix.patch | 35 + recipes-core/readline/readline/norpath.patch | 21 + .../util-linux/util-linux-morello_2.37.4.bb | 23 + recipes-core/zlib/files/run-ptest | 7 + recipes-core/zlib/zlib-morello_1.2.13.bb | 43 + ...gument-order-to-qsort_r-to-match-pos.patch | 45 + ...change-defines-from-freebsd-to-cheri.patch | 57 + ...n-bypass-autoconf-2.69-version-check.patch | 30 + recipes-dbs/postgresql/postgresql-morello.inc | 400 ++++ .../postgresql/postgresql-morello_9.6.bb | 155 ++ recipes-dbs/postgresql/postgresql/pg_config | 15 + .../postgresql/postgresql/postgres-bench | 16 + .../postgresql/postgresql/postgres-test | 49 + .../postgresql/postgresql/postgresql-init | 64 + .../postgresql/postgresql-init.service | 19 + .../postgresql/postgresql-morello.init | 193 ++ .../postgresql/postgresql-morello.service | 29 + .../postgresql/postgresql/postgresql-profile | 4 + .../postgresql/postgresql/postgresql-setup | 73 + .../postgresql/postgresql/postgresql.pam | 4 + .../postgresql/postgresql/test-schedule | 1 + recipes-dbs/postgresql/postgresql_%.bbappend | 7 + recipes-devtools/php/files/pg_config | 15 + recipes-devtools/php/files/php.ini | 1950 +++++++++++++++++ recipes-devtools/php/files/zabbix-fpm.conf | 24 + ...re.ac-don-t-include-build-libtool.m4.patch | 30 + ...001-opcache-config.m4-enable-opcache.patch | 237 ++ ...p-don-t-use-broken-wrapper-for-mkdir.patch | 29 + ...1-php.m4-don-t-unset-cache-variables.patch | 39 + recipes-devtools/php/php/70_mod_php7.conf | 9 + .../php/php/CVE-2023-3247-1.patch | 87 + .../php/php/CVE-2023-3247-2.patch | 29 + recipes-devtools/php/php/CVE-2023-3824.patch | 91 + .../php/php/debian-php-fixheader.patch | 32 + recipes-devtools/php/php/iconv.patch | 41 + .../php/php/imap-fix-autofoo.patch | 41 + recipes-devtools/php/php/pear-makefile.patch | 22 + recipes-devtools/php/php/phar-makefile.patch | 46 + recipes-devtools/php/php/php-fpm-apache.conf | 6 + recipes-devtools/php/php/php-fpm.conf | 510 +++++ recipes-devtools/php/php/php-fpm.service | 10 + .../php/php/php_exec_native.patch | 26 + .../php/php/xfail_two_bug_tests.patch | 34 + recipes-devtools/php/php_%.bbappend | 74 + recipes-devtools/php/php_7.4.33.bb | 276 +++ ...0001-tclCompCmdsSZ-cast-to-uintptr_t.patch | 28 + recipes-devtools/tcltk/tcl-morello_8.6.11.bb | 104 + .../tcltk/tcl/alter-includedir.patch | 56 + .../tcl/fix_issue_with_old_distro_glibc.patch | 39 + .../tcl/fix_non_native_build_issue.patch | 64 + recipes-devtools/tcltk/tcl/interp.patch | 32 + recipes-devtools/tcltk/tcl/run-ptest | 17 + .../tcltk/tcl/tcl-add-soname.patch | 32 + .../tcl-remove-hardcoded-install-path.patch | 32 + recipes-extended/bzip2/bzip2-morello_1.0.8.bb | 72 + recipes-extended/bzip2/files/Makefile.am | 74 + recipes-extended/bzip2/files/configure.ac | 11 + recipes-extended/bzip2/files/run-ptest | 2 + .../libidn2/libidn2-morello_2.3.2.bb | 50 + recipes-httpd/nginx/files/fastcgi-php.conf | 13 + recipes-httpd/nginx/files/http_status.conf | 7 + recipes-httpd/nginx/files/zabbix-web.conf | 79 + recipes-httpd/nginx/nginx_%.bbappend | 29 + ...ow-for-storing-caps-in-shared-memory.patch | 30 + .../linux/files/0003-defconfig-modify.patch | 38 + recipes-kernel/linux/linux-morello_%.bbappend | 6 + .../0001-tools-fix-cheri-provenance.patch | 32 + ..._endpoint_linux-fix-cheri-provenance.patch | 28 + recipes-protocols/net-snmp/files/init | 67 + recipes-protocols/net-snmp/files/snmpd.conf | 422 ++++ .../net-snmp/files/snmptrapd.conf | 18 + ...ath.m4-keep-consistent-between-32bit.patch | 38 + .../0001-config_os_headers-Error-Fix.patch | 35 + ...1-get_pid_from_inode-Include-limit.h.patch | 27 + ....c-Don-t-check-for-return-from-EVP_M.patch | 34 + ...004-configure-fix-incorrect-variable.patch | 28 + .../CVE-2022-44792-CVE-2022-44793.patch | 116 + .../net-snmp-morello/fix-libtool-finish.patch | 34 + ....7.2-fix-engineBoots-value-on-SIGHUP.patch | 44 + ...add-knob-whether-nlist.h-are-checked.patch | 36 + .../net-snmp-fix-for-disable-des.patch | 30 + ...ting-add-the-output-format-for-ptest.patch | 35 + .../reproducibility-have-printcap.patch | 30 + .../net-snmp/net-snmp-morello/run-ptest | 5 + .../net-snmp/net-snmp-morello/snmpd.service | 14 + .../net-snmp-morello/snmptrapd.service | 14 + .../net-snmp/net-snmp-morello_5.9.3.bb | 322 +++ recipes-support/curl/curl-morello_7.82.0.bb | 116 + ...0001-openssl-fix-CN-check-error-code.patch | 38 + .../curl/files/CVE-2022-22576.patch | 145 ++ .../curl/files/CVE-2022-27774-1.patch | 45 + .../curl/files/CVE-2022-27774-2.patch | 80 + .../curl/files/CVE-2022-27774-3.patch | 83 + .../curl/files/CVE-2022-27774-4.patch | 35 + .../curl/files/CVE-2022-27775.patch | 37 + .../curl/files/CVE-2022-27776.patch | 115 + .../curl/files/CVE-2022-27779.patch | 42 + .../curl/files/CVE-2022-27780.patch | 33 + .../curl/files/CVE-2022-27781.patch | 43 + .../curl/files/CVE-2022-27782-1.patch | 458 ++++ .../curl/files/CVE-2022-27782-2.patch | 71 + .../curl/files/CVE-2022-30115.patch | 82 + .../curl/files/CVE-2022-32205.patch | 174 ++ .../curl/files/CVE-2022-32206.patch | 51 + .../curl/files/CVE-2022-32207.patch | 283 +++ .../curl/files/CVE-2022-32208.patch | 67 + .../curl/files/CVE-2022-32221.patch | 28 + .../curl/files/CVE-2022-35252.patch | 72 + .../curl/files/CVE-2022-42915.patch | 53 + .../curl/files/CVE-2022-42916.patch | 136 ++ .../curl/files/CVE-2022-43551.patch | 35 + .../curl/files/CVE-2022-43552.patch | 80 + .../curl/files/CVE-2023-23914_5-1.patch | 280 +++ .../curl/files/CVE-2023-23914_5-2.patch | 23 + .../curl/files/CVE-2023-23914_5-3.patch | 45 + .../curl/files/CVE-2023-23914_5-4.patch | 48 + .../curl/files/CVE-2023-23914_5-5.patch | 118 + ....c-patch-out-tests-that-require-a-wo.patch | 37 + ...ncrease-default-timeval-tolerance-50.patch | 33 + ...-monotonic_prc_fallback-as-retriable.patch | 28 + ...ts-are-marked-failed-only-when-all-a.patch | 81 + .../files/Makefile-missing-test-dir.patch | 27 + recipes-support/libevent/files/run-ptest | 29 + .../libevent/libevent-morello_2.1.12.bb | 64 + ...01-pcre_jit_compile-cheri-provenance.patch | 89 + ...2-sljitNativeARM_64-cheri-provenance.patch | 61 + .../0003-sljitUtils-cheri-provenance.patch | 39 + recipes-support/libpcre/files/Makefile | 183 ++ recipes-support/libpcre/files/run-ptest | 3 + .../libpcre/libpcre-morello_8.45.bb | 91 + .../libunistring/libunistring-morello_1.0.bb | 36 + .../0001-config-fix-provenance-errors.patch | 807 +++++++ .../0002-tpool-remove-errors.patch | 37 + .../0003-config-Remove-format-error.patch | 42 + .../0004-main-Remove-format-error.patch | 28 + ...0005-connection-fix-provenance-error.patch | 67 + .../0006-sets-fix-provenance-error.patch | 36 + ...07-slapd-search-fix-cheri-provenance.patch | 152 ++ .../0001-build-top.mk-unset-STRIP_OPTS.patch | 38 + ...if-filter-fix-parallel-build-failure.patch | 32 + ...-Makefile.in-ignore-the-mkdir-errors.patch | 33 + ...de-ldap_pvt_thread.h-before-redefini.patch | 54 + .../openldap/openldap-morello/initscript | 35 + .../remove-user-host-pwd-from-version.patch | 39 + .../openldap/openldap-morello/slapd.service | 10 + .../openldap-morello/use-urandom.patch | 35 + .../openldap/openldap-morello_2.5.12.bb | 255 +++ 204 files changed, 18661 insertions(+) create mode 100644 .github/workflows/workflow.yml create mode 100644 COPYING.MIT create mode 100644 README.md create mode 100644 classes/perl-hacks.bbclass create mode 100644 classes/purecap-sysroot.bbclass create mode 100644 classes/purecap-useradd.bbclass create mode 100644 conf/distro/morello.conf create mode 100644 conf/layer.conf create mode 100644 kas/base.yml create mode 100644 kas/debug-fvp.yml create mode 100644 kas/debug-soc.yml create mode 100644 kas/morello-linux-debug.yml create mode 100644 recipes-connectivity/openssl/cheri-patches/0001-purecap-patches.patch create mode 100644 recipes-connectivity/openssl/files/0001-Configure-do-not-tweak-mips-cflags.patch create mode 100644 recipes-connectivity/openssl/files/0001-buildinfo-strip-sysroot-and-debug-prefix-map-from-co.patch create mode 100644 recipes-connectivity/openssl/files/afalg.patch create mode 100644 recipes-connectivity/openssl/files/run-ptest create mode 100644 recipes-connectivity/openssl/openssl-morello_3.0.8.bb create mode 100644 recipes-connectivity/zabbix/cheri-patches/0000-net-fix-provenance-error.patch create mode 100644 recipes-connectivity/zabbix/cheri-patches/0000-sysinfo-fix-build-with-musl-libc.patch create mode 100644 recipes-connectivity/zabbix/cheri-patches/0001-memalloc-align-and-work-with-16-not-8.patch create mode 100644 recipes-connectivity/zabbix/cheri-patches/0002-duktape-set-shift-to-5-for-CHERI.patch create mode 100644 recipes-connectivity/zabbix/cheri-patches/0003-duktape-add-aling-to-16.patch create mode 100644 recipes-connectivity/zabbix/cheri-patches/0004-embed-use-padding-of-16-not-8-for-alloc.patch create mode 100644 recipes-connectivity/zabbix/cheri-patches/0005-embed-fix-alignment-issues.patch create mode 100644 recipes-connectivity/zabbix/cheri-patches/0006-duk_config-use-debug-and-self-test.patch create mode 100644 recipes-connectivity/zabbix/cheri-patches/0007-duktape-fix-stack-reallocation.patch create mode 100644 recipes-connectivity/zabbix/files/COPYING create mode 100644 recipes-connectivity/zabbix/files/zabbix-agentd-morello.service create mode 100644 recipes-connectivity/zabbix/files/zabbix-agentd.conf create mode 100644 recipes-connectivity/zabbix/files/zabbix-proxy.conf create mode 100644 recipes-connectivity/zabbix/files/zabbix-proxy.service create mode 100644 recipes-connectivity/zabbix/files/zabbix-server-morello.service create mode 100644 recipes-connectivity/zabbix/files/zabbix-server.conf create mode 100644 recipes-connectivity/zabbix/files/zabbix.conf.php create mode 100644 recipes-connectivity/zabbix/zabbix-agentd-morello_5.0.38.bb create mode 100644 recipes-connectivity/zabbix/zabbix-frontend_5.0.38.bb create mode 100644 recipes-connectivity/zabbix/zabbix-morello.inc create mode 100644 recipes-connectivity/zabbix/zabbix-proxy-morello_5.0.38.bb create mode 100644 recipes-connectivity/zabbix/zabbix-server-morello_5.0.38.bb create mode 100644 recipes-core/base-passwd/base-passwd-morello_3.5.29.bb create mode 100644 recipes-core/base-passwd/files/add_shutdown.patch create mode 100644 recipes-core/base-passwd/files/disable-docs.patch create mode 100644 recipes-core/base-passwd/files/disable-shell.patch create mode 100644 recipes-core/base-passwd/files/input.patch create mode 100644 recipes-core/base-passwd/files/kvm.patch create mode 100644 recipes-core/base-passwd/files/nobash.patch create mode 100644 recipes-core/base-passwd/files/noshadow.patch create mode 100644 recipes-core/images/morello-image.bb create mode 100644 recipes-core/ncurses/cheri-patches/0001-test-ncurses-silence-capability-misuse.patch create mode 100644 recipes-core/ncurses/ncurses-morello.inc create mode 100644 recipes-core/ncurses/ncurses-morello_6.4.bb create mode 100644 recipes-core/ncurses/site_config/headers create mode 100644 recipes-core/readline/files/inputrc create mode 100644 recipes-core/readline/files/rl-native.map create mode 100644 recipes-core/readline/readline-morello.inc create mode 100644 recipes-core/readline/readline-morello_8.1.2.bb create mode 100644 recipes-core/readline/readline/configure-fix.patch create mode 100644 recipes-core/readline/readline/norpath.patch create mode 100644 recipes-core/util-linux/util-linux-morello_2.37.4.bb create mode 100644 recipes-core/zlib/files/run-ptest create mode 100644 recipes-core/zlib/zlib-morello_1.2.13.bb create mode 100644 recipes-dbs/postgresql/cheri-patches/0001-port.h-change-argument-order-to-qsort_r-to-match-pos.patch create mode 100644 recipes-dbs/postgresql/cheri-patches/0002-qsort-change-defines-from-freebsd-to-cheri.patch create mode 100644 recipes-dbs/postgresql/files/0003-configure.in-bypass-autoconf-2.69-version-check.patch create mode 100644 recipes-dbs/postgresql/postgresql-morello.inc create mode 100644 recipes-dbs/postgresql/postgresql-morello_9.6.bb create mode 100755 recipes-dbs/postgresql/postgresql/pg_config create mode 100644 recipes-dbs/postgresql/postgresql/postgres-bench create mode 100644 recipes-dbs/postgresql/postgresql/postgres-test create mode 100644 recipes-dbs/postgresql/postgresql/postgresql-init create mode 100644 recipes-dbs/postgresql/postgresql/postgresql-init.service create mode 100644 recipes-dbs/postgresql/postgresql/postgresql-morello.init create mode 100644 recipes-dbs/postgresql/postgresql/postgresql-morello.service create mode 100644 recipes-dbs/postgresql/postgresql/postgresql-profile create mode 100644 recipes-dbs/postgresql/postgresql/postgresql-setup create mode 100644 recipes-dbs/postgresql/postgresql/postgresql.pam create mode 100644 recipes-dbs/postgresql/postgresql/test-schedule create mode 100644 recipes-dbs/postgresql/postgresql_%.bbappend create mode 100755 recipes-devtools/php/files/pg_config create mode 100644 recipes-devtools/php/files/php.ini create mode 100644 recipes-devtools/php/files/zabbix-fpm.conf create mode 100644 recipes-devtools/php/php/0001-configure.ac-don-t-include-build-libtool.m4.patch create mode 100644 recipes-devtools/php/php/0001-opcache-config.m4-enable-opcache.patch create mode 100644 recipes-devtools/php/php/0001-php-don-t-use-broken-wrapper-for-mkdir.patch create mode 100644 recipes-devtools/php/php/0001-php.m4-don-t-unset-cache-variables.patch create mode 100644 recipes-devtools/php/php/70_mod_php7.conf create mode 100644 recipes-devtools/php/php/CVE-2023-3247-1.patch create mode 100644 recipes-devtools/php/php/CVE-2023-3247-2.patch create mode 100644 recipes-devtools/php/php/CVE-2023-3824.patch create mode 100644 recipes-devtools/php/php/debian-php-fixheader.patch create mode 100644 recipes-devtools/php/php/iconv.patch create mode 100644 recipes-devtools/php/php/imap-fix-autofoo.patch create mode 100644 recipes-devtools/php/php/pear-makefile.patch create mode 100644 recipes-devtools/php/php/phar-makefile.patch create mode 100644 recipes-devtools/php/php/php-fpm-apache.conf create mode 100644 recipes-devtools/php/php/php-fpm.conf create mode 100644 recipes-devtools/php/php/php-fpm.service create mode 100644 recipes-devtools/php/php/php_exec_native.patch create mode 100644 recipes-devtools/php/php/xfail_two_bug_tests.patch create mode 100644 recipes-devtools/php/php_%.bbappend create mode 100644 recipes-devtools/php/php_7.4.33.bb create mode 100644 recipes-devtools/tcltk/cheri-patches/0001-tclCompCmdsSZ-cast-to-uintptr_t.patch create mode 100644 recipes-devtools/tcltk/tcl-morello_8.6.11.bb create mode 100644 recipes-devtools/tcltk/tcl/alter-includedir.patch create mode 100644 recipes-devtools/tcltk/tcl/fix_issue_with_old_distro_glibc.patch create mode 100644 recipes-devtools/tcltk/tcl/fix_non_native_build_issue.patch create mode 100644 recipes-devtools/tcltk/tcl/interp.patch create mode 100644 recipes-devtools/tcltk/tcl/run-ptest create mode 100644 recipes-devtools/tcltk/tcl/tcl-add-soname.patch create mode 100644 recipes-devtools/tcltk/tcl/tcl-remove-hardcoded-install-path.patch create mode 100644 recipes-extended/bzip2/bzip2-morello_1.0.8.bb create mode 100644 recipes-extended/bzip2/files/Makefile.am create mode 100644 recipes-extended/bzip2/files/configure.ac create mode 100644 recipes-extended/bzip2/files/run-ptest create mode 100644 recipes-extended/libidn2/libidn2-morello_2.3.2.bb create mode 100644 recipes-httpd/nginx/files/fastcgi-php.conf create mode 100644 recipes-httpd/nginx/files/http_status.conf create mode 100644 recipes-httpd/nginx/files/zabbix-web.conf create mode 100644 recipes-httpd/nginx/nginx_%.bbappend create mode 100644 recipes-kernel/linux/cheri-patches/0001-mman-allow-for-storing-caps-in-shared-memory.patch create mode 100644 recipes-kernel/linux/files/0003-defconfig-modify.patch create mode 100644 recipes-kernel/linux/linux-morello_%.bbappend create mode 100644 recipes-protocols/net-snmp/cheri-patches/0001-tools-fix-cheri-provenance.patch create mode 100644 recipes-protocols/net-snmp/cheri-patches/0002-udp_endpoint_linux-fix-cheri-provenance.patch create mode 100755 recipes-protocols/net-snmp/files/init create mode 100644 recipes-protocols/net-snmp/files/snmpd.conf create mode 100644 recipes-protocols/net-snmp/files/snmptrapd.conf create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/0001-config_os_headers-Error-Fix.patch create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/0001-get_pid_from_inode-Include-limit.h.patch create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/0004-configure-fix-incorrect-variable.patch create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/CVE-2022-44792-CVE-2022-44793.patch create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/fix-libtool-finish.patch create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/net-snmp-add-knob-whether-nlist.h-are-checked.patch create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/net-snmp-fix-for-disable-des.patch create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/net-snmp-testing-add-the-output-format-for-ptest.patch create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/reproducibility-have-printcap.patch create mode 100755 recipes-protocols/net-snmp/net-snmp-morello/run-ptest create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/snmpd.service create mode 100644 recipes-protocols/net-snmp/net-snmp-morello/snmptrapd.service create mode 100644 recipes-protocols/net-snmp/net-snmp-morello_5.9.3.bb create mode 100644 recipes-support/curl/curl-morello_7.82.0.bb create mode 100644 recipes-support/curl/files/0001-openssl-fix-CN-check-error-code.patch create mode 100644 recipes-support/curl/files/CVE-2022-22576.patch create mode 100644 recipes-support/curl/files/CVE-2022-27774-1.patch create mode 100644 recipes-support/curl/files/CVE-2022-27774-2.patch create mode 100644 recipes-support/curl/files/CVE-2022-27774-3.patch create mode 100644 recipes-support/curl/files/CVE-2022-27774-4.patch create mode 100644 recipes-support/curl/files/CVE-2022-27775.patch create mode 100644 recipes-support/curl/files/CVE-2022-27776.patch create mode 100644 recipes-support/curl/files/CVE-2022-27779.patch create mode 100644 recipes-support/curl/files/CVE-2022-27780.patch create mode 100644 recipes-support/curl/files/CVE-2022-27781.patch create mode 100644 recipes-support/curl/files/CVE-2022-27782-1.patch create mode 100644 recipes-support/curl/files/CVE-2022-27782-2.patch create mode 100644 recipes-support/curl/files/CVE-2022-30115.patch create mode 100644 recipes-support/curl/files/CVE-2022-32205.patch create mode 100644 recipes-support/curl/files/CVE-2022-32206.patch create mode 100644 recipes-support/curl/files/CVE-2022-32207.patch create mode 100644 recipes-support/curl/files/CVE-2022-32208.patch create mode 100644 recipes-support/curl/files/CVE-2022-32221.patch create mode 100644 recipes-support/curl/files/CVE-2022-35252.patch create mode 100644 recipes-support/curl/files/CVE-2022-42915.patch create mode 100644 recipes-support/curl/files/CVE-2022-42916.patch create mode 100644 recipes-support/curl/files/CVE-2022-43551.patch create mode 100644 recipes-support/curl/files/CVE-2022-43552.patch create mode 100644 recipes-support/curl/files/CVE-2023-23914_5-1.patch create mode 100644 recipes-support/curl/files/CVE-2023-23914_5-2.patch create mode 100644 recipes-support/curl/files/CVE-2023-23914_5-3.patch create mode 100644 recipes-support/curl/files/CVE-2023-23914_5-4.patch create mode 100644 recipes-support/curl/files/CVE-2023-23914_5-5.patch create mode 100644 recipes-support/libevent/files/0001-test-regress_dns.c-patch-out-tests-that-require-a-wo.patch create mode 100644 recipes-support/libevent/files/0002-test-regress.h-Increase-default-timeval-tolerance-50.patch create mode 100644 recipes-support/libevent/files/0003-test-mark-util-monotonic_prc_fallback-as-retriable.patch create mode 100644 recipes-support/libevent/files/0004-test-retriable-tests-are-marked-failed-only-when-all-a.patch create mode 100644 recipes-support/libevent/files/Makefile-missing-test-dir.patch create mode 100644 recipes-support/libevent/files/run-ptest create mode 100644 recipes-support/libevent/libevent-morello_2.1.12.bb create mode 100644 recipes-support/libpcre/cheri-patches/0001-pcre_jit_compile-cheri-provenance.patch create mode 100644 recipes-support/libpcre/cheri-patches/0002-sljitNativeARM_64-cheri-provenance.patch create mode 100644 recipes-support/libpcre/cheri-patches/0003-sljitUtils-cheri-provenance.patch create mode 100644 recipes-support/libpcre/files/Makefile create mode 100644 recipes-support/libpcre/files/run-ptest create mode 100644 recipes-support/libpcre/libpcre-morello_8.45.bb create mode 100644 recipes-support/libunistring/libunistring-morello_1.0.bb create mode 100644 recipes-support/openldap/cheri-patches/0001-config-fix-provenance-errors.patch create mode 100644 recipes-support/openldap/cheri-patches/0002-tpool-remove-errors.patch create mode 100644 recipes-support/openldap/cheri-patches/0003-config-Remove-format-error.patch create mode 100644 recipes-support/openldap/cheri-patches/0004-main-Remove-format-error.patch create mode 100644 recipes-support/openldap/cheri-patches/0005-connection-fix-provenance-error.patch create mode 100644 recipes-support/openldap/cheri-patches/0006-sets-fix-provenance-error.patch create mode 100644 recipes-support/openldap/cheri-patches/0007-slapd-search-fix-cheri-provenance.patch create mode 100644 recipes-support/openldap/openldap-morello/0001-build-top.mk-unset-STRIP_OPTS.patch create mode 100644 recipes-support/openldap/openldap-morello/0001-ldif-filter-fix-parallel-build-failure.patch create mode 100644 recipes-support/openldap/openldap-morello/0001-libraries-Makefile.in-ignore-the-mkdir-errors.patch create mode 100644 recipes-support/openldap/openldap-morello/0001-librewrite-include-ldap_pvt_thread.h-before-redefini.patch create mode 100644 recipes-support/openldap/openldap-morello/initscript create mode 100644 recipes-support/openldap/openldap-morello/remove-user-host-pwd-from-version.patch create mode 100644 recipes-support/openldap/openldap-morello/slapd.service create mode 100644 recipes-support/openldap/openldap-morello/use-urandom.patch create mode 100644 recipes-support/openldap/openldap-morello_2.5.12.bb -- 2.34.1

1 week, 2 days

1
27
0 0

[meta-morello][PATCH 0/9] Update stack to 1.8

by Pawel Zalewski

This series of patches is simply updating the software stack to version 1.8, working implementation can be found here [1] [1] https://git.morello-project.org/pzalewski/meta-morello/-/tree/release-1.8 Pawel Zalewski (9): classes: update llvm class to 14.0.0 v1.8 llvm-morello: update cross and target compilers to v1.8 musl: update version to v1.8 linux-morello: update version to v1.8 board-firmware: update version to v1.8 scp-firmware: update version to v1.8 tfa-firmware: update version to v1.8 fiptool-native: update version to v1.8 config: update to 1.8 .../classes/llvm-morello.bbclass | 2 +- .../recipes-core/musl/musl-morello-common.inc | 4 ++-- .../{musl_morello-1.7.bb => musl_morello-1.8.bb} | 0 ...ative_13.0.bb => llvm-morello-native_14.0.bb} | 0 .../llvm/llvm-morello-runtime-native.bb | 5 +++++ .../recipes-devtools/llvm/llvm-morello.inc | 4 ++-- ...llvm-morello_13.0.bb => llvm-morello_14.0.bb} | 16 ++++++++-------- .../conf/machine/include/morello-common.inc | 6 +++--- ...ello-1.7.bb => board-firmware_morello-1.8.bb} | 4 ++-- .../scp-firmware/scp-firmware_morello-2.12.bb | 4 ++-- .../trusted-firmware-a_morello-2.9.bb | 4 ++-- .../fiptool/fiptool-native_2.7.bb | 4 ++-- .../recipes-kernel/linux/files/netfilter.cfg | 15 +++++++++++++++ .../recipes-kernel/linux/linux-morello.inc | 7 +++---- ...rello-1.7.bb => linux-morello_morello-1.8.bb} | 7 +++---- 15 files changed, 50 insertions(+), 32 deletions(-) rename meta-morello-toolchain/recipes-core/musl/{musl_morello-1.7.bb => musl_morello-1.8.bb} (100%) rename meta-morello-toolchain/recipes-devtools/llvm/{llvm-morello-native_13.0.bb => llvm-morello-native_14.0.bb} (100%) rename meta-morello-toolchain/recipes-devtools/llvm/{llvm-morello_13.0.bb => llvm-morello_14.0.bb} (79%) rename meta-morello/recipes-bsp/board-firmware/{board-firmware_morello-1.7.bb => board-firmware_morello-1.8.bb} (91%) create mode 100644 meta-morello/recipes-kernel/linux/files/netfilter.cfg rename meta-morello/recipes-kernel/linux/{linux-morello_morello-1.7.bb => linux-morello_morello-1.8.bb} (55%) -- 2.34.1

1 week, 3 days

1
9
0 0

[MORELLO-musl] 1.8.1 release announcement

by Yury Khrustalev

The 1.8.1 version of Morello Musl is available with New features and documentation updates: - Restricted bounds for TLS symbols looked up via the dlsym function - Updated build instruction for building LLVM C++ libraries in the documentation Bug fixes: - Fix dlopen bus error for new TLS - Fix VMEM permission of internal mapping pointers - Some fixes for unit tests The source and development is at: https://git.morello-project.org/morello/musl-libc

2 weeks, 4 days

1
0
0 0

[LLVM] Announcing the 1.8 release of LLVM with Morello support

by Simon Wallis

Hi, The 1.8 release of LLVM with Morello support is now available. This binary and source release is for baremetal and for Linux. The release includes the following changes: - Based on clang-14 - As usual, the release includes various bug fixes. The source code is available at https://git.morello-project.org/morello/llvm-project/-/tree/morello/release…. Prebuilt binaries can be found at https://git.morello-project.org/morello/llvm-project-releases. Thanks, Simon

3 weeks, 5 days

1
0
0 0

[meta-morello][PATCH] musl: update to 1.7.1

by Pawel Zalewski

Signed-off-by: Pawel Zalewski <pzalewski(a)thegoodpenguin.co.uk> --- .../recipes-core/musl/musl-morello-common.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-morello-toolchain/recipes-core/musl/musl-morello-common.inc b/meta-morello-toolchain/recipes-core/musl/musl-morello-common.inc index 516bd18..4f46ca4 100644 --- a/meta-morello-toolchain/recipes-core/musl/musl-morello-common.inc +++ b/meta-morello-toolchain/recipes-core/musl/musl-morello-common.inc @@ -14,7 +14,7 @@ SRC_URI = " \ " # morello-release-1.7 -SRCREV = "f712fa4d03821e9fba9c3e3afd9fb570efdecedd" +SRCREV = "acfb827ad04d98ec5c0f558932e29b3c76de3093" SRCBRANCH = "morello/master" LIC_FILES_CHKSUM = "file://COPYRIGHT;md5=b03f1cc25363d094011f8f4fd8bcfb68" -- 2.34.1

3 weeks, 6 days

1
0
0 0

[meta-morello][PATCH 0/2] Aid user space lib development

by Pawel Zalewski

We are working and nearly done on a layer that would live on top of meta-morello and that contains purecap user space libraries that live in a purecap sysroot in parallel to the usual c64 packages. Adding rpath the the compiler flags simplifies that work. Further more user space recipes shall inherit yet another class that will override the $libdir $prefix etc. variables found in bibtake.conf to reduce the amount of hoops one has to jump through when doing the above sysroot trick and working with Yocto. For that to work, two of the paths in the llvm class need to be hardcoded until a more elegant solution is found (possibly moving overriding of all paths into the llvm-class itself, as the BSP does not care about user space paths anyway). Pawel Zalewski (2): classes: add rpath to the compiler flags and fix paths config: fix path for purecap sysroot, drop c64 flag meta-morello-toolchain/classes/llvm-morello.bbclass | 8 ++++++-- meta-morello-toolchain/conf/layer.conf | 4 ++-- 2 files changed, 8 insertions(+), 4 deletions(-) -- 2.34.1

3 months

1
2
0 0

[MORELLO-SDK] Morello Linux 1.7.0

by Vincenzo Frascino

Hi All, I am glad to inform you on the availability of a new version of our SDK and base rootfs images for Morello (1.7.0). After months of hard work we are happy to share with you what we put together. Honoring our motto "Let Linux developers focus on the porting of their own application", we feel that this is another steps in the right direction. [Morello SDK] In less than 10 minutes you should be able to setup a docker container with everything you need to build an application for Morello. - Documentation: https://sdk.morello-project.org/ - Code repository: https://git.morello-project.org/morello/morello-sdk New in 1.7.0: - GDB support with Capabilities. - Support for vDSO in musl. - Initial support for compartments (limited demo of basic cases) [1]. - New versions for compilers and C libraries. [1] https://git.morello-project.org/morello/morello-examples If you want to try a demo of the SDK that runs on a Morello FVP (for more information on what is an FVP: www.morello-project.org) please have a look below: [Morello Linux] In less than 10 minutes you should be able to setup a docker container with everything you need to build and boot into a Morello Debian environment. - Documentation: https://linux.morello-project.org/ - Code repository: https://git.morello-project.org/morello/morello-linux Note: The documentation covers the instructions for Linux but if you know what you are doing and are familiar with docker no one stops you from running our solution on Windows or Mac. New in 1.7.0: - Updated Kernel ABI with initial security support. - Support for vDSO in kernel and C library. - New versions for compilers and C libraries. - Basic Compartment Demos. - Bug fixing and polishing of existing features. Note: This release does not include a new version of the Android environment. Further Android releases are now deprecated. Ongoing releases will focus on the Morello Linux Environment. Are we done with it? No, by any mean. This is just the beginning and we need your help and collaboration to make sure that we improve our solution to meet developers needs: your needs! So why don't you try it and let us know your thoughts? Thanks and Regards, Vincenzo

3 months, 2 weeks

1
1
0 0

[meta-morello][PATCH 00/15] Release 1.7

by Pawel Zalewski

This series of patches is updating the software stack to version 1.7. It was tested on the hardware and via FVP. The current implementation can be found here [1] [1] https://git.morello-project.org/pzalewski/meta-morello/-/tree/release-1.7?r… Pawel Zalewski (15): llvm-morello: update recipes to 1.7 classes: modify llvm musl: update recipe to 1.7 board-firmware: update recipes to 1.7 scp-firmware: update the recipes to 1.7 tf-a: update recipe to 1.7 fiptool-native: update recipe to 1.7 edk2: update recipe to 1.7 linux-morello: update recipe to 1.7 busybox-morello: update to latest commit gdb: update to latest commit purecap-app: update compiler flags for 1.7 machine: update config to 1.7 gitlab-ci: fix the log path gitlab-ci: add libc++-13 .gitlab-ci.yml | 3 +- .../classes/llvm-morello.bbclass | 19 ++++---- .../recipes-core/musl/musl-morello-c64-so.inc | 5 +++ .../recipes-core/musl/musl-morello-c64.inc | 2 +- .../recipes-core/musl/musl-morello-common.inc | 6 +-- ...usl_morello-1.6.bb => musl_morello-1.7.bb} | 0 .../recipes-devtools/llvm/llvm-morello.inc | 4 +- .../llvm/llvm-morello_13.0.bb | 8 ++-- .../conf/machine/include/morello-common.inc | 10 ++--- ...o-1.6.bb => board-firmware_morello-1.7.bb} | 6 +-- ...o-2.10.bb => scp-firmware_morello-2.12.bb} | 6 +-- ...7.bb => trusted-firmware-a_morello-2.9.bb} | 4 +- ...lo-2.4.bb => edk2-firmware_morello-2.7.bb} | 23 ++++------ ...Basetools-remove-brotli-build-errors.patch | 45 ------------------- .../busybox/busybox-morello_morello-1.5.bb | 2 +- ...-append-toolchain-with-relative-path.patch | 2 +- .../fiptool/fiptool-native_2.7.bb | 8 +++- meta-morello/recipes-devtools/gdb/gdb.inc | 2 +- ...lo-1.6.bb => linux-morello_morello-1.7.bb} | 6 +-- .../applications/files/Makefile | 2 +- 20 files changed, 63 insertions(+), 100 deletions(-) rename meta-morello-toolchain/recipes-core/musl/{musl_morello-1.6.bb => musl_morello-1.7.bb} (100%) rename meta-morello/recipes-bsp/board-firmware/{board-firmware_morello-1.6.bb => board-firmware_morello-1.7.bb} (83%) rename meta-morello/recipes-bsp/scp-firmware/{scp-firmware_morello-2.10.bb => scp-firmware_morello-2.12.bb} (94%) rename meta-morello/recipes-bsp/trusted-firmware-a/{trusted-firmware-a_morello-2.7.bb => trusted-firmware-a_morello-2.9.bb} (95%) rename meta-morello/recipes-bsp/uefi/{edk2-firmware_morello-2.4.bb => edk2-firmware_morello-2.7.bb} (67%) delete mode 100644 meta-morello/recipes-bsp/uefi/files/0001-Basetools-remove-brotli-build-errors.patch rename meta-morello/recipes-kernel/linux/{linux-morello_morello-1.6.bb => linux-morello_morello-1.7.bb} (51%) -- 2.34.1

4 months

1
16
0 0

[MORELLO-musl] 1.7 release announcement

by Szabolcs Nagy

The 1.7 version of morello musl is available with new features: - Support purecap VDSO. - Support static linking with R_MORELLO_RELATIVE relocs, linking with old caprelocs still works. bug fixes: - Ensure musl builds with gcc and the binutils linker. the source and development is at https://git.morello-project.org/morello/musl-libc

5 months, 1 week

1
0
0 0

[LLVM] Announcing the 1.7 release of LLVM with Morello support

by Simon Wallis

Hi, The 1.7 release of LLVM with Morello support is now available. This binary and source release is for baremetal and for Linux. The release includes the following changes: - Added benchmark ABI for purecap. - Added shadow call-stack for hybrid. - Added a warning on the deprecated usage of c64 in the arch string. Instead, specify the ABI separately. - As usual, the release includes various bug fixes. The source code is available at https://git.morello-project.org/morello/llvm-project/-/tree/morello/release…. Prebuilt binaries can be found at https://git.morello-project.org/morello/llvm-project-releases. Thanks, Simon

5 months, 1 week

1
0
0 0

2024

2023

2022