[Buildroot] [PATCH 1/3] package/libvirt: disable docs and tests

[Buildroot] [PATCH 1/3] package/libvirt: disable docs and tests

[Fabrice Fontaine]

Disable docs and tests which are enabled since the addition of the
package in commit ccfc90e1010e42e6529afae3a5ea8bf7226dabc1

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
---
 package/libvirt/libvirt.mk | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/package/libvirt/libvirt.mk b/package/libvirt/libvirt.mk
index 847c35e06e..396dd61577 100644
--- a/package/libvirt/libvirt.mk
+++ b/package/libvirt/libvirt.mk
@@ -33,6 +33,7 @@ LIBVIRT_CONF_ENV += \
 LIBVIRT_CONF_OPTS = \
 	-Drpath=disabled \
 	-Dapparmor=disabled \
+	-Ddocs=disabled \
 	-Ddriver_bhyve=disabled \
 	-Ddriver_esx=disabled \
 	-Ddriver_hyperv=disabled \
@@ -41,10 +42,12 @@ LIBVIRT_CONF_OPTS = \
 	-Ddriver_openvz=disabled \
 	-Ddriver_remote=enabled \
 	-Ddriver_secrets=enabled \
+	-Ddriver_test=disabled \
 	-Ddriver_vbox=disabled \
 	-Ddriver_vmware=disabled \
 	-Ddriver_vz=disabled \
 	-Ddtrace=disabled \
+	-Dexpensive_tests=disabled \
 	-Dfirewalld=disabled \
 	-Dfirewalld_zone=disabled \
 	-Dglusterfs=disabled \
@@ -64,6 +67,7 @@ LIBVIRT_CONF_OPTS = \
 	-Dstorage_mpath=disabled \
 	-Dsysctl_config=enabled \
 	-Dtest_coverage=false \
+	-Dtests=disabled \
 	-Dudev=enabled \
 	-Dwireshark_dissector=disabled
 
-- 
2.33.0

_______________________________________________
buildroot mailing list
buildroot@lists.buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

[Buildroot] [PATCH 2/3] package/libvirt: add libnl optional dependency

[Fabrice Fontaine]

libnl is an optional dependency (which is enabled by default) since the
addition of the package in commit
ccfc90e1010e42e6529afae3a5ea8bf7226dabc1

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
---
 package/libvirt/libvirt.mk | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/package/libvirt/libvirt.mk b/package/libvirt/libvirt.mk
index 396dd61577..f30baaab71 100644
--- a/package/libvirt/libvirt.mk
+++ b/package/libvirt/libvirt.mk
@@ -134,6 +134,13 @@ else
 LIBVIRT_CONF_OPTS += -Dlibiscsi=disabled
 endif
 
+ifeq ($(BR2_PACKAGE_LIBNL),y)
+LIBVIRT_CONF_OPTS += -Dlibnl=enabled
+LIBVIRT_DEPENDENCIES += libnl
+else
+LIBVIRT_CONF_OPTS += -Dlibnl=disabled
+endif
+
 ifeq ($(BR2_PACKAGE_LIBPCAP),y)
 LIBVIRT_CONF_OPTS += -Dlibpcap=enabled
 LIBVIRT_DEPENDENCIES += libpcap
-- 
2.33.0

_______________________________________________
buildroot mailing list
buildroot@lists.buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

[Buildroot] [PATCH 3/3] package/libvirt: security bump to version 7.7.0

[Fabrice Fontaine]

- storage: Unlock pool objects on ACL check failures in
  storagePoolLookupByTargetPath (CVE-2021-3667)

  A logic bug in storagePoolLookupByTargetPath where the storage pool
  object was left locked after a failure of the ACL check could
  potentially deprive legitimate users access to a storage pool object
  by users who don't have access.

- svirt: fix MCS label generation (CVE-2021-3631)

  A flaw in the way MCS labels were generated could result in a VM's
  resource not being fully protected from access by another VM were
  it to be compromised. https://gitlab.com/libvirt/libvirt/-/issues/153

- Disable Cloud-Hypervisor driver added by
  https://gitlab.com/libvirt/libvirt/-/commit/56fbabf1a1e272c6cc50adcb603996cf8e94ad08

- Update indentation in hash file (two spaces)

https://gitlab.com/libvirt/libvirt/-/blob/v7.7.0/NEWS.rst

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
---
 package/libvirt/libvirt.hash | 4 ++--
 package/libvirt/libvirt.mk   | 3 ++-
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/package/libvirt/libvirt.hash b/package/libvirt/libvirt.hash
index ec96dfc62c..e8cbb34e2a 100644
--- a/package/libvirt/libvirt.hash
+++ b/package/libvirt/libvirt.hash
@@ -1,3 +1,3 @@
 # locally computed
-sha256 b366d73dee6ce77a226bedef592e0620ceb8e22e5998f60768017f79fc4ead26  libvirt-7.4.0.tar.xz
-sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643  COPYING
+sha256  1b616099c18d14b9424a622f2a0bd3e0cfa286414f3416bd1a8173621b2252b2  libvirt-7.7.0.tar.xz
+sha256  8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643  COPYING
diff --git a/package/libvirt/libvirt.mk b/package/libvirt/libvirt.mk
index f30baaab71..0f6c7cef7f 100644
--- a/package/libvirt/libvirt.mk
+++ b/package/libvirt/libvirt.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-LIBVIRT_VERSION = 7.4.0
+LIBVIRT_VERSION = 7.7.0
 LIBVIRT_SITE = https://libvirt.org/sources
 LIBVIRT_SOURCE = libvirt-$(LIBVIRT_VERSION).tar.xz
 LIBVIRT_LICENSE = LGPL-2.1+
@@ -35,6 +35,7 @@ LIBVIRT_CONF_OPTS = \
 	-Dapparmor=disabled \
 	-Ddocs=disabled \
 	-Ddriver_bhyve=disabled \
+	-Ddriver_ch=disabled \
 	-Ddriver_esx=disabled \
 	-Ddriver_hyperv=disabled \
 	-Ddriver_interface=enabled \
-- 
2.33.0

_______________________________________________
buildroot mailing list
buildroot@lists.buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 1/3] package/libvirt: disable docs and tests

[Yann E. MORIN]

Fabrice, All,

On 2021-09-15 22:56 +0200, Fabrice Fontaine spake thusly:
> Disable docs and tests which are enabled since the addition of the
> package in commit ccfc90e1010e42e6529afae3a5ea8bf7226dabc1
> 
> Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

Series of three patches Applied to master, thanks.

Regards,
Yann E. MORIN.

> ---
>  package/libvirt/libvirt.mk | 4 ++++
>  1 file changed, 4 insertions(+)
> 
> diff --git a/package/libvirt/libvirt.mk b/package/libvirt/libvirt.mk
> index 847c35e06e..396dd61577 100644
> --- a/package/libvirt/libvirt.mk
> +++ b/package/libvirt/libvirt.mk
> @@ -33,6 +33,7 @@ LIBVIRT_CONF_ENV += \
>  LIBVIRT_CONF_OPTS = \
>  	-Drpath=disabled \
>  	-Dapparmor=disabled \
> +	-Ddocs=disabled \
>  	-Ddriver_bhyve=disabled \
>  	-Ddriver_esx=disabled \
>  	-Ddriver_hyperv=disabled \
> @@ -41,10 +42,12 @@ LIBVIRT_CONF_OPTS = \
>  	-Ddriver_openvz=disabled \
>  	-Ddriver_remote=enabled \
>  	-Ddriver_secrets=enabled \
> +	-Ddriver_test=disabled \
>  	-Ddriver_vbox=disabled \
>  	-Ddriver_vmware=disabled \
>  	-Ddriver_vz=disabled \
>  	-Ddtrace=disabled \
> +	-Dexpensive_tests=disabled \
>  	-Dfirewalld=disabled \
>  	-Dfirewalld_zone=disabled \
>  	-Dglusterfs=disabled \
> @@ -64,6 +67,7 @@ LIBVIRT_CONF_OPTS = \
>  	-Dstorage_mpath=disabled \
>  	-Dsysctl_config=enabled \
>  	-Dtest_coverage=false \
> +	-Dtests=disabled \
>  	-Dudev=enabled \
>  	-Dwireshark_dissector=disabled
>  
> -- 
> 2.33.0
> 
> _______________________________________________
> buildroot mailing list
> buildroot@lists.buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot

-- 
.-----------------.--------------------.------------------.--------------------.
|  Yann E. MORIN  | Real-Time Embedded | /"\ ASCII RIBBON | Erics' conspiracy: |
| +33 662 376 056 | Software  Designer | \ / CAMPAIGN     |  ___               |
| +33 561 099 427 `------------.-------:  X  AGAINST      |  \e/  There is no  |
| http://ymorin.is-a-geek.org/ | _/*\_ | / \ HTML MAIL    |   v   conspiracy.  |
'------------------------------^-------^------------------^--------------------'
_______________________________________________
buildroot mailing list
buildroot@lists.buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 1/3] package/libvirt: disable docs and tests

[Peter Korsgaard]

>>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice@gmail.com> writes:

 > Disable docs and tests which are enabled since the addition of the
 > package in commit ccfc90e1010e42e6529afae3a5ea8bf7226dabc1

 > Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

Committed to 2021.08.x, thanks.

-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 2/3] package/libvirt: add libnl optional dependency

[Peter Korsgaard]

>>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice@gmail.com> writes:

 > libnl is an optional dependency (which is enabled by default) since the
 > addition of the package in commit
 > ccfc90e1010e42e6529afae3a5ea8bf7226dabc1

 > Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

Committed to 2021.08.x, thanks.

-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 3/3] package/libvirt: security bump to version 7.7.0

[Peter Korsgaard]

>>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice@gmail.com> writes:

 > - storage: Unlock pool objects on ACL check failures in
 >   storagePoolLookupByTargetPath (CVE-2021-3667)

 >   A logic bug in storagePoolLookupByTargetPath where the storage pool
 >   object was left locked after a failure of the ACL check could
 >   potentially deprive legitimate users access to a storage pool object
 >   by users who don't have access.

 > - svirt: fix MCS label generation (CVE-2021-3631)

 >   A flaw in the way MCS labels were generated could result in a VM's
 >   resource not being fully protected from access by another VM were
 >   it to be compromised. https://gitlab.com/libvirt/libvirt/-/issues/153

 > - Disable Cloud-Hypervisor driver added by
 >   https://gitlab.com/libvirt/libvirt/-/commit/56fbabf1a1e272c6cc50adcb603996cf8e94ad08

 > - Update indentation in hash file (two spaces)

 > https://gitlab.com/libvirt/libvirt/-/blob/v7.7.0/NEWS.rst

 > Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

Committed to 2021.08.x, thanks.

-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot