Bump buildroot to 2020.11-rc1 (#985)

* Update buildroot-patches for 2020.11-rc1 buildroot

* Update buildroot to 2020.11-rc1

Signed-off-by: Stefan Agner <stefan@agner.ch>

* Don't rely on sfdisk --list-free output

The --list-free (-F) argument does not allow machine readable mode. And
it seems that the output format changes over time (different spacing,
using size postfixes instead of raw blocks).

Use sfdisk json output and calculate free partition space ourselfs. This
works for 2.35 and 2.36 and is more robust since we rely on output which
is meant for scripts to parse.

* Migrate defconfigs for Buildroot 2020.11-rc1

In particular, rename BR2_TARGET_UBOOT_BOOT_SCRIPT(_SOURCE) to
BR2_PACKAGE_HOST_UBOOT_TOOLS_BOOT_SCRIPT(_SOURCE).

* Rebase/remove systemd patches for systemd 246

* Drop apparmor/libapparmor from buildroot-external

* hassos-persists: use /run as directory for lockfiles

The U-Boot tools use /var/lock by default which is not created any more
by systemd by default (it is under tmpfiles legacy.conf, which we no
longer install).

* Disable systemd-update-done.service

The service is not suited for pure read-only systems. In particular the
service needs to be able to write a file in /etc and /var. Remove the
service. Note: This is a static service and cannot be removed using
systemd-preset.

* Disable apparmor.service for now

The service loads all default profiles. Some might actually cause
problems. E.g. the profile for ping seems not to match our setup for
/etc/resolv.conf:
[85503.634653] audit: type=1400 audit(1605286002.684:236): apparmor="DENIED" operation="open" profile="ping" name="/run/resolv.conf" pid=27585 comm="ping" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
This commit is contained in:
Stefan Agner
2020-11-13 18:25:44 +01:00
committed by GitHub
parent 25a0dd3082
commit a0871be6c0
4024 changed files with 68095 additions and 47900 deletions

View File

@@ -1,46 +0,0 @@
From fb4fdb83be36ff5e71426d2bdea81d035cdbd0b8 Mon Sep 17 00:00:00 2001
From: Baruch Siach <baruch@tkos.co.il>
Date: Mon, 13 Jan 2020 14:54:15 +0200
Subject: [PATCH] filter_seccomp: fix no-MMU build
Move the declaration of filter_generators out of HAVE_FORK ifdef to fix
build for no-MMU targets:
filter_seccomp.c: In function check_seccomp_filter_properties:
filter_seccomp.c:608:42: error: filter_generators undeclared (first use in this function); did you mean linear_filter_generator?
for (unsigned int i = 0; i < ARRAY_SIZE(filter_generators); ++i) {
^~~~~~~~~~~~~~~~~
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
---
Upstream status: https://lists.strace.io/pipermail/strace-devel/2020-January/thread.html
filter_seccomp.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/filter_seccomp.c b/filter_seccomp.c
index 91f6bc42bce3..da1abc713dfc 100644
--- a/filter_seccomp.c
+++ b/filter_seccomp.c
@@ -68,8 +68,6 @@ static const struct audit_arch_t audit_arch_vec[SUPPORTED_PERSONALITIES] = {
# endif
};
-# ifdef HAVE_FORK
-
typedef unsigned short (*filter_generator_t)(struct sock_filter *,
bool *overflow);
static unsigned short linear_filter_generator(struct sock_filter *,
@@ -92,6 +90,8 @@ static struct sock_fprog bpf_prog = {
.filter = NULL,
};
+# ifdef HAVE_FORK
+
static void ATTRIBUTE_NORETURN
check_seccomp_order_do_child(void)
{
--
2.24.1

View File

@@ -1,5 +1,5 @@
# Locally calculated after checking signature with RSA key 0xA8041FA839E16E36
# https://strace.io/files/5.4/strace-5.4.tar.xz.asc
sha256 f7d00514d51290b6db78ad7a9de709baf93caa5981498924cbc9a744cfd2a741 strace-5.4.tar.xz
sha256 739b2725197137a04ab48ee6b19da3fdf7e497249e0dedd9f51c11a570401ede COPYING
sha256 7c379436436a562834aa7d2f5dcae1f80a25230fa74201046ca1fba4367d39aa LGPL-2.1-or-later
# https://strace.io/files/5.9/strace-5.9.tar.xz.asc
sha256 39473eb8465546c3e940fb663cb381eba5613160c7302794699d194a4d5d66d9 strace-5.9.tar.xz
sha256 6370eb67db918210944a8511a6995ebe9567852f26b4f15a01e5c8cf2aef7c46 COPYING
sha256 7c379436436a562834aa7d2f5dcae1f80a25230fa74201046ca1fba4367d39aa LGPL-2.1-or-later

View File

@@ -4,7 +4,7 @@
#
################################################################################
STRACE_VERSION = 5.4
STRACE_VERSION = 5.9
STRACE_SOURCE = strace-$(STRACE_VERSION).tar.xz
STRACE_SITE = https://strace.io/files/$(STRACE_VERSION)
STRACE_LICENSE = LGPL-2.1+