summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2018-04-24Merge "Single security manifest in debuginfo package" into tizen_basesubmit/tizen_base/20180607.041826sandbox/soong9/rpm_4.14.1sandbox/dnxowls/rpm_4.14.1_upgradeChunhua Liu1-3/+3
2018-04-13Revert "Enable Armoring Feature - Add pie option"SoonKyu Park1-2/+2
This reverts commit 079d890dfd09f5c175d05387c05bfdd7e47c66b4. It results in build failure on x86_64 architecture Change-Id: I81ffe5e19ad252c27549f3f3c2ccfd16dceed6a6
2018-04-10Add LGPL-2.0+ license notification on rpm.spec fileSoonKyu Park1-1/+1
Change-Id: Id6a78df4c4683ebf348915b24d5f6fefe2b429e5
2018-03-26Single security manifest in debuginfo packageKrzysztof Jackiewicz1-3/+3
Rpm builder adds one security manifest for each debug file in debuginfo package. For packages containing more than one binary this leads to creation of multiple copies of the manifest in the debuginfo package. The msm plugin expects only one manifest and if there's more of them, it treats it as an error and falls back to the default policy ("No manifest in this package. Creating default one"). As a result the debug files get their labels from the installing process. This leads to access denials when unprivileged processes try to access the debug files. This commit modifies the builder so that the security manifest is added only once. Change-Id: I8c29897d80664af0760eb2e3204baec1fe7ecdb2
2018-01-25Add scriptlet-specific disablers for %pretrans and %posttranssubmit/tizen_base/20180330.050344Panu Matilainen5-5/+24
- Previously %pretrans and %posttrans were tied to --nopre and --nopost disablers (since commit 0b2d7775c5e828652e45829f551352b93890bbc8) because back then, there was no room new disablers in rpmtransFlags bitfield. This is no longer the case as of rpm >= 4.9.x where a bunch of obsolete flags were axed, so we can now add specific --nopretrans and --noposttrans switches + corresponding flags. - This is obviously a behavior change as --nopre and --nopost no longer affect %pretrans and %posttrans, but --noscripts behavior remains the same. Change-Id: I7d8ebba44573f0a72a4eecfc8040af86e95409ce
2018-01-24Enable Armoring Feature - Add pie optionsubmit/tizen_base/20180124.070639SoonKyu Park1-2/+2
Change-Id: Iab46b1827bb37d14aaa8235cf992eb8fc2b3b564
2017-12-18Modify Prevent warning - case of 'RESOURCE_LEAK' : adjust malloc-free ↵submit/tizen_base/20171218.123350accepted/tizen/base/20171222.155030SoonKyu Park1-0/+1
combination Change-Id: If7b72745e0ef8fae3e3991e61a37ca26cde67723
2017-10-16Add armv7hl support.submit/tizen_base/20171024.003248accepted/tizen/base/20171027.152135Mikhail Kashkarov2-0/+5
Change-Id: I5f1d6a591fdff247328f72e1b531a0e1b0aaf9d1
2017-09-04Added _debug_manifest to set SMACK label to "_" for debug packagessubmit/tizen_base/20170830.083645accepted/tizen/base/20170908.223808Slava Barinov5-2/+20
Tizen debuginfo and debugsource packages have arbitrary SMACK labels, which are inherited from the process that performs installation. Sometimes this leads to "Access denied" while reading debuginfo by tools. Change-Id: I321a327ba8bf651b4875df42082522f4867cadee Signed-off-by: Slava Barinov <v.barinov@samsung.com>
2017-08-17Apply ASLR optionsubmit/tizen_base/20170818.014231accepted/tizen/base/20170901.225508SoonKyu Park1-1/+10
Change-Id: I12544b91c972bcb563e92bff9d76ea5cf289280d
2017-04-24Adding -std=gnu++11 command-line option to CXXFLAGStizen_4.0.m1_releasesubmit/tizen_base/20170428.015534submit/tizen_4.0_base/20170828.000001submit/tizen_4.0_base/20170828.000000submit/tizen_4.0_base/20170811.071500accepted/tizen/base/20170429.025002accepted/tizen/4.0/base/20170828.221319accepted/tizen/4.0/base/20170811.093014Dongkyun, Son2-5/+5
GCC 6 defaults to -std=gnu++14 instead of -std=gnu++98: the C++11 standard, plus GNU extensions. Tizen prefer to update to gnu++11, bringing in the C++11 changes but not the C++14 ones. Change-Id: Idd30e078bf3c9ec1d31c833b5ed68f686308d410 Signed-off-by: Dongkyun, Son <dongkyun.s@samsung.com>
2017-04-18Added %posttrans log message for verbose informationUkJung Kim1-0/+4
It takes long time when running %posttrans scripts of packages but there is no way to know what is urunning. This change adds log message before running each %posttrans script. Change-Id: I774d1dd28ab6a81ea40da392f293f5a86fa69e43
2017-04-12Fix the script install proceduresubmit/tizen_base/20170412.105805accepted/tizen/base/20170413.143945Slava Barinov2-3/+3
When the %rpmhome is not set to libdir the install order is wrong. Change-Id: I5f79075298731ec1c60333c3ee0f5c583b07f16b Signed-off-by: Slava Barinov <v.barinov@samsung.com>
2017-04-11packaging: revert rpmlibdir to /usr/lib/Dongkyun, Son1-1/+1
This change will not have below error on aarch64 caused by rpmconfigdir error: Unable to open /usr/lib/rpm/rpmrc for reading: Too many levels of symbolic links. Change-Id: Ic896e64c80bd91a36f0bf4214c9ad4cfe55da2a7 Signed-off-by: Dongkyun, Son <dongkyun.s@samsung.com>
2017-04-06fixup! [4.0] Use strip (instead of eu-strip) to support --strip-debug of ↵submit/tizen_base/20170410.064620Youngsoo Choi1-2/+3
*.so at build time The command strip has been in use building for chromium-efl like below. $ strip --remove-section=.comment -o /PATH/TO/libchromium-ewk.so.debug /PATH/TO/libchromium-ewk.so Also, it has been expected that the argument libchromium-ewk.so.debug will have section .debug_* and another argument libchromium-ewk.so will be stripped. Btw, the libchromium-ewk.so.debug doesn't have the section .debug_* but the libchromium-ewk.so still has the section. The argument files need to be switched each other. With this CL, the libchromium-ewk.so.debug properly has the section .debug_* like below and libchromium-ewk.so is stripped. > ... > 28 .debug_line 048e8963 00000000 00000000 0231a318 2**0 > CONTENTS, READONLY, DEBUGGING > 29 .debug_info b61b6cbd 00000000 00000000 06c02c7b 2**0 > CONTENTS, READONLY, DEBUGGING > 30 .debug_abbrev 0349bf7f 00000000 00000000 bcdb9938 2**0 > CONTENTS, READONLY, DEBUGGING > 31 .debug_aranges 004047a0 00000000 00000000 c02558b8 2**3 > CONTENTS, READONLY, DEBUGGING > 32 .debug_ranges 015dbc78 00000000 00000000 c065a058 2**3 > CONTENTS, READONLY, DEBUGGING > ... > 34 .debug_loc 08b66519 00000000 00000000 c1c35cfd 2**0 > CONTENTS, READONLY, DEBUGGING > 35 .debug_str 10b85beb 00000000 00000000 ca79c216 2**0 > CONTENTS, READONLY, DEBUGGING > 36 .debug_frame 00d2f1b4 00000000 00000000 db321e04 2**2 > CONTENTS, READONLY, DEBUGGING > ... The file size is like below. before) 3.5G libchromium-ewk.so 36M libchromium-ewk.so.debug after) 36M libchromium-ewk.so 3.5G libchromium-ewk.so.debug Bug: http://suprem.sec.samsung.net/jira/browse/RWASP-807 Change-Id: I11e80373fa9973663ee2c7b2092ae9a5f678cbc8 Signed-off-by: Youngsoo Choi <kenshin.choi@samsung.com>
2017-04-03Add %license to all sub-packagessubmit/tizen_base/20170403.103251SoonKyu Park1-0/+4
Change-Id: I1214981ceb82d53c96becbe9d59e87e6272897bd
2017-02-27Add support for %_rpmconfigdirSlava Barinov5-28/+40
This allows moving rpm configs in x86_64 environment to prevent clashing in multilib environments. Change-Id: I8aa94d47f6b6fc6cb1ece88417363bb57ac8c14c Signed-off-by: Slava Barinov <v.barinov@samsung.com>
2017-02-28Revert "Add support for Recommends:, Suggests:, Supplements: and Enhances:"submit/tizen_base/20170228.034447accepted/tizen/base/20170228.084720SoonKyu Park10-112/+8
This reverts commit c31c49f42b54dcf6edb8804e633e6b6985acbb41. Change-Id: I94a88f43ba2db764c7c3a9435683ca26fe97c565
2017-02-28Revert "Backporting weak dependencies"SoonKyu Park2-20/+4
This reverts commit 822fe26c20549c1e891d874316cf91a7b244c23d. Change-Id: Ic866ff716b4d547b4499f701b7577d025b89e8db
2017-02-14[4.0] Support alternative way to choose between strip and eu-stripsubmit/tizen_base/20170216.050845accepted/tizen/base/20170217.190209Geunsik Lim1-1/+7
This commit is to solve a stripping issue of chromium-efl (m53). Note that up-to-date elfutils package(e.g., the elfutils version 0.168 (3a45dbbe7) have fixed this issue. However, GPLv3 is a problem. Let's support an alternative way to choose between strip (binutils) and eu-strip (elfutils) to handle in case of a large shared object such as chromium project. The default strip of rpmbuild is eu-strip. * Case study: chromium-efl(m53) Here is how to replace eu-strip (elfutils) with strip (binutils): $ vi ./packaging/<git-package-name>.spec # Let's replace eu-strip (elf-utils) with strip (binutils) in %install. export STRIP_DEFAULT_PACKAGE="binutils" Change-Id: Idca08e2f65ea084c6b5eb3c5cd218477f6da1a5f Signed-off-by: Geunsik Lim <geunsik.lim@samsung.com>
2017-01-24[4.0] Use strip (instead of eu-strip) to support --strip-debug of *.so at ↵submit/tizen_base/20170210.011342Geunsik Lim1-1/+1
build time eu-strip can not normally remove debugging symbols in case of a large so file such as libchromium-efl.so (2.8GiB) at build time. The up-to-date version of eu-strip handles this issue by merging the commit that was submitted by Mark Wielaard as following: http://www.mail-archive.com/elfutils-devel@lists.fedorahosted.org/msg04444.html In order to avoid eu-strip modification such as backporting, use strip(binutils) instead of eu-strip(elfutils) because the existing strip has already fixed this issue. before) eu-strip --remove-comment $g $strip_option -f "$1" "$2" || exit after) strip --remove-section=.comment $g $strip_option -o "$1" "$2" || exit * build error: eu-strip: /home/abuild/rpmbuild/BUILDROOT/chromium-efl-53.2785.0.36-1.arm/usr/ lib/libchromium-ewk.so: INTERNAL ERROR 936 (0.153-Jan 6 2017): cannot read data from file * unit test: $ sudo chroot ~/GBS-ROOT/local/BUILD-ROOTS/scratch.armv7l.0/ /bin/bash $ strip --remove-section=.comment -g ./libchromium-efl.so $ ls -al * evaluation: $ sudo chroot ~/GBS-ROOT/local/BUILD-ROOTS/scratch.armv7l.0/ /bin/bash $ rpm -ivh rpm-build-4.11.0.1-0.armv7l.rpm --force --nodeps $ git checkout tizen_m53_beta $ gbs build --define "nodebug 0" ...... (or ./tizen_src/build/build_mobile.sh -P tzmb_v3.0_target-TM1_mirror -A armv7l) Change-Id: I7ae755b1f4570a28c0fc3088801b12f2ffd21808 Reported-by: Youngsoo Choi <kenshin.choi@samsung.com> Signed-off-by: Geunsik Lim <geunsik.lim@samsung.com> Reviewed-by: Dongkyun Son <dongkyun.s@samsung.com>
2017-01-10Backporting weak dependenciessubmit/tizen_base/20170116.123126accepted/tizen/base/20170120.121825MyungJoo Ham2-4/+20
Additional modifications to support weak dependencies (resolving errors from the cherry-pick) rebased. Change-Id: I34e9a5b11853dd4c0862dfbb119a3a5b7dd4f2bd Signed-off-by: MyungJoo Ham <myungjoo.ham@samsung.com>
2017-01-09Add support for Recommends:, Suggests:, Supplements: and Enhances:Florian Festi10-8/+112
Change-Id: I24f0b1c0e98003a75b097c8afe7be19e21506695 Signed-off-by: MyungJoo Ham <myungjoo.ham@samsung.com>
2017-01-02Only use multi thread support with liblzma >= 5.2.0submit/tizen_base/20170102.104445accepted/tizen/base/20170106.101320Florian Festi1-2/+15
Change-Id: Icac0310111aa3b59197af934659f7b94ca403059
2017-01-02prevent exceeding 32 bit memory limitations with multithreaded xz compressionPer Øyvind Karlsen1-0/+43
As 32 bit build suffers under the limitation of 32 bit address space, regardless of it's environment would be ie. 64 bit and not have this constration, rpm must make sure not to exceed this memory limitation. When using multithreaded xz compression, the number of threads used will increase the memory usage, making it necessary to check the memory required with the number of threads to be used. Number of compression threads will therefore be kept reduced untill amount of memory required won't exceed this limitation. For 32 bit binaries running under 64 bit host environment, where less available memory will be reserved for kernel, easing memory constraints, determination of this will be done by a combination of checking host arch as well as whether 32 bit personality flag is set, thereby still allow a sligthly greater memory usage for such cases to avoid imposing unnecessatry limitations under such environments. Change-Id: Ie72827d3067a353a8a48faff9b65595c99f60a4c
2017-01-02Add support for multithreaded xz compressionPer Øyvind Karlsen1-1/+29
Change-Id: I77af75943420c65868672f05cbde73563370c351
2017-01-02add support for setting xz memlimitPer Øyvind Karlsen1-1/+2
Change-Id: If7513a85c77692983bc2cb948f5b92eea3b304d8
2017-01-02add rpmlog(RPMLOG_ERR, ...) for liblzma return codesPer Øyvind Karlsen1-0/+13
Change-Id: I25c017827b38e2141dcff4d6bfd398f9e1a008c2
2017-01-02reflect default xz & lzma compression level changes in macros as wellPer Øyvind Karlsen1-2/+2
Change-Id: I3b95d39e0385ad50a6e8ed244757dd1fa8797f6e
2017-01-02lowest xz compression level is '0'Per Øyvind Karlsen1-1/+1
Change-Id: Ie430058a1ecd3c03627060c1b32080d0d47a3877
2017-01-02really default to default XZ compression levelThierry Vignaud1-1/+1
which BTW fix the default compression level which is 6 instead of 7 Change-Id: I8b9b50a2cd1f64169477a72cc4d36a374d7a9867
2016-08-30msm related macros are defined in post scrpit of rpm-security-pluginsubmit/tizen_base/20160927.103203submit/tizen_3.0_base/20161028.062326submit/tizen_3.0.m2_base/20170104.073748accepted/tizen/base/20161001.020353accepted/tizen/3.0/base/20161028.103355accepted/tizen/3.0.m2/base/20170104.082055tizen_3.0.m2_basetizen_3.0accepted/tizen_3.0.m2_baseSoonKyu Park2-4/+10
Remove msm related macros inside macros.in file Change-Id: I3ae680b13739f92624f757934fe884737c9181bf
2016-08-23Modify regular expression inside packaging/libsymlink.attr with 'file' ↵submit/tizen_base/20160826.042443accepted/tizen/base/20160902.071401SoonKyu Park1-1/+1
package upgrade Change-Id: I4cecbdb5034cef6ca42b8a8ed95792e73bf81c04
2016-07-13Change 'libdir' macro re-definitionsubmit/tizen_base/20160715.025428accepted/tizen/base/20160715.190135SoonKyu Park1-0/+47
libdir macro which is re-defined in each platform macro : is not defined by ARCH but by _host_cpu Change-Id: I2b5a10c817a1b8703bc3e51e8970ea73e49c5815
2016-06-30Add the default path in the script filesubmit/tizen_base/20160701.030336accepted/tizen/base/20160701.180346SoonKyu Park1-0/+1
Change-Id: Ie5ccab262eed0494676bddfeba7ee16c25698a79
2016-05-01Add '_rpm_ko_strip_option' which is used in strip of ko filessubmit/tizen_base/20160502.042457accepted/tizen/base/20160504.195829SoonKyu Park2-2/+9
Change-Id: I24e489e0a965a85310d045435100f5ad2e95a592
2016-03-21Modify __libsymlink_exclude_path to exclude path - add ^/usr/lib/debugsubmit/tizen_base/20160322.005216accepted/tizen/base/20160324.155312SoonKyu Park1-1/+1
Change-Id: Id4a2f8473d111284afbdb7760736b2a84a5954e4
2016-03-14Modify __libsymlink_exclude_path to exclude path whose name has digitsubmit/tizen_base/20160315.011333SoonKyu Park1-1/+1
Change-Id: I37f9794b4d009c6c7241b91d1c15b4c60633f62b
2016-03-04Make symlink file add to fileattrsubmit/tizen_base/20160304.044032accepted/tizen/base/20160305.090143SoonKyu Park2-0/+6
Change-Id: Ice05610d1c23eaf2dc1fb0cdf610feb20ad1cfab
2016-01-14Change how to add Package Provide to debuginfo package : add Package Provide ↵submit/tizen_common/20160119.101937submit/tizen_base/20160115.000631accepted/tizen/common/20160120.100937accepted/tizen/base/20160115.111010accepted/tizen_commonSoonKyu Park2-1/+49
using addPackageProvides_for_debuginfo_pkg Change-Id: Iee094726b58250b7e86ebd3b508e30eb7c5389c9
2015-12-07Modify eu-strip option to perform strip in post script of rpm package & add ↵submit/tizen_common/20160104.112601submit/tizen_common/20151229.154718submit/tizen_common/20151229.144031submit/tizen_common/20151229.142028submit/tizen_base/20151223.111112submit/tizen/20151207.015403accepted/tizen/wearable/20151207.122945accepted/tizen/tv/20151207.122921accepted/tizen/mobile/20151207.122907accepted/tizen/common/20160107.114012accepted/tizen/base/20151223.052332accepted/tizen_wearableaccepted/tizen_tvaccepted/tizen_mobileSoonKyu Park4-14/+60
option add '_rpm_strip_disable' option and '_rpm_strip_option' to project config. Change-Id: I3718510670465957e7048db6ed285bd8ed09a5dd
2015-12-04Modify how to make symbolic link in 'find-debuginfo.sh' scriptsubmit/tizen/20151204.081906accepted/tizen/wearable/20151206.224357accepted/tizen/tv/20151206.224337accepted/tizen/mobile/20151206.224321SoonKyu Park1-5/+9
Change-Id: I157f6a027820e0448e1ee95e10d1b42e8c95fcea
2015-12-03Revert "Modify eu-strip option to perform strip in post script of rpm ↵park4-60/+14
package & add option add '_rpm_strip_disable' option and '_rpm_strip_option' to project config." This reverts commit dc338f74bbe69185d09a419ecda8e5fa35bb4acb. Change-Id: I3c15db4307ea877b660ca6ea1056aa0e26b0e182
2015-11-26Modify eu-strip option to perform strip in post script of rpm package & add ↵submit/tizen/20151127.031713accepted/tizen/wearable/20151127.070351accepted/tizen/tv/20151127.070348accepted/tizen/mobile/20151127.070342SoonKyu Park4-14/+60
option add '_rpm_strip_disable' option and '_rpm_strip_option' to project config. Change-Id: I939ca673d8dd06ebd0cb414d5471bdf962d8f5e1
2015-06-04Merge "Add support for global LDFLAGS" into tizenDongkyun Son1-0/+1
2015-05-12Add support for global LDFLAGSYury Usishchev1-0/+1
New variable global_LDFLAGS can be defined in project config to set default LDFLAGS during build. Change-Id: I4da460c26b3f693833c74cb19d7234e78dbd4fc7 Signed-off-by: Yury Usishchev <y.usishchev@samsung.com>
2015-04-28msm: consistency for equally ranked keyssubmit/tizen_common/20150518.122814accepted/tizen/common/20150520.164523tizen_3.0.2015.q2_commonJosé Bollo1-2/+2
The conflicts within the packages of equally ranked keys must be treated usually by rpm. Without this change, installation of conflicting packages is not possible when msm plugin is active. Change-Id: I909540524c7e2b43229b8aac90f66430041cbd55 Signed-off-by: José Bollo <jose.bollo@open.eurogiciel.org>
2015-01-16Change ',' to '#' in sed 's' commandtizen_3.0.m2.a1_tv_releasetizen_3.0.m2.a1_mobile_releasetizen_3.0.m1_tv_releasetizen_3.0.m1_mobile_releasesubmit/tizen_common/20151026.085049submit/tizen_common/20151023.083358submit/tizen_common/20151019.135620submit/tizen_common/20151015.190624submit/tizen/20150331.094445accepted/tizen/wearable/20150405.123324accepted/tizen/tv/20150406.013650accepted/tizen/mobile/20150405.124135accepted/tizen/common/20150403.125416tizen_3.0.m1_tvtizen_3.0.m1_mobileYury Usishchev1-1/+1
After 31699 optflags can contain ',' which breaks macros generation. Change-Id: I86016ae4f5f97eadeb17c8ad79089539069b7f38 Signed-off-by: Yury Usishchev <y.usishchev@samsung.com>
2014-12-08optflags: set _FORTIFY_SOURCE for preprocPhilippe Coval1-11/+11
Without it will fail if optflags are not overridden and raise an error like : configure: CFLAGS error: CFLAGS may only be used to specify C compiler flags, not macro definitions. Use CPPFLAGS for: -D_FORTIFY_SOURCE=2 configure: error: Can not continue. Fix errors mentioned immediately above this line. error: Bad exit status from /var/tmp/rpm-tmp.AoOYbS (%build) More details at : https://gcc.gnu.org/onlinedocs/gcc-4.9.2/gcc/Preprocessor-Options.html#index-Wp-986 Change-Id: I49c8545a0526a1922905ef55de3a59edf9036068 Signed-off-by: Philippe Coval <philippe.coval@open.eurogiciel.org>
2014-12-03Merge "Fixed incorrect writting host_os to platform/macros for uClibc" into ↵tizen_3.0_ivi_releasesubmit/tizen_wearable/20150102.000000submit/tizen_tv/20151202.000000submit/tizen_mobile/20151202.000001submit/tizen_mobile/20141231.012840submit/tizen_mobile/20141216.070921submit/tizen_mobile/20141216.000000submit/tizen_ivi/20141209.111111submit/tizen_ivi/20141208.111111submit/tizen_common/20141209.112152submit/tizen_common/20141208.164031submit/tizen_common/20141203.144128accepted/tizen/wearable/20150105.054705accepted/tizen/tv/20150105.022342accepted/tizen/mobile/20150105.022529accepted/tizen/mobile/20141216.071026accepted/tizen/ivi/20141212.050448accepted/tizen/common/20141208.184628accepted/tizen/common/20141203.182814tizen_3.0_ivitizen_3.0.2015.q1_commontizen_3.0.2014.q4_commonaccepted/tizen_iviaccepted/tizen_3.0_iviStéphane Desneux (sdx)1-0/+3
tizen