[yocto] [meta-security][PATCH] paxctl: allow build of paxctl-native

akuster808 akuster808 at gmail.com
Sun Sep 25 09:15:19 PDT 2016



On 09/22/2016 11:47 PM, wenzong.fan at windriver.com wrote:
> From: Joe Slater <jslater at windriver.com>
>
> paxctl-native is needed to build paxtest.

merged.

thanks,
Armin
>
> Do not use the install target in Makefile for paxctl-native, it will
> fail with error:
>
>    install: cannot change ownership of '.../sbin/paxctl': \
>    Operation not permitted
>
> Signed-off-by: Joe Slater <jslater at windriver.com>
> Signed-off-by: Wenzong Fan <wenzong.fan at windriver.com>
> ---
>   recipes-security/paxctl/paxctl_0.9.bb | 15 +++++++++++++++
>   1 file changed, 15 insertions(+)
>
> diff --git a/recipes-security/paxctl/paxctl_0.9.bb b/recipes-security/paxctl/paxctl_0.9.bb
> index d69219f..fb87f10 100644
> --- a/recipes-security/paxctl/paxctl_0.9.bb
> +++ b/recipes-security/paxctl/paxctl_0.9.bb
> @@ -18,3 +18,18 @@ EXTRA_OEMAKE = "CC='${CC}' DESTDIR='${D}'"
>   do_install() {
>   	oe_runmake install
>   }
> +
> +# The install target in the Makefile will fail for paxctl-native with error:
> +#   install -D --owner 0 --group 0 --mode a=rx paxctl .../sbin/paxctl
> +#   install: cannot change ownership of '.../sbin/paxctl': \
> +#   Operation not permitted
> +# Drop '--owner 0 --group 0' to fix the issue.
> +do_install_class-native() {
> +	local PROG=paxctl
> +	install -d ${D}${base_sbindir}
> +	install -d ${D}${mandir}/man1
> +	install --mode a=rx $PROG ${D}${base_sbindir}/$PROG
> +	install --mode a=r $PROG.1 ${D}${mandir}/man1/$PROG.1
> +}
> +
> +BBCLASSEXTEND = "native"




More information about the yocto mailing list