January 2020 - Dev - Clearlinux.Org

[PATCH clr-bundles] add bundle: devpkg-notmuch

by Leandro Dorileo

The bundle ships the notmuch -dev package (containing notmuch' header file). Signed-off-by: Leandro Dorileo <leandro.maciel.dorileo(a)intel.com> --- bundles/devpkg-notmuch | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 bundles/devpkg-notmuch diff --git a/bundles/devpkg-notmuch b/bundles/devpkg-notmuch new file mode 100644 index 00000000..354595bf --- /dev/null +++ b/bundles/devpkg-notmuch @@ -0,0 +1,10 @@ +# [TITLE]: notmuch-acl +# [DESCRIPTION]: Contains the notmuch header file. +# [STATUS]: Active +# [CAPABILITIES]: +# [TAGS]: Developer Tools +# [MAINTAINER]: Leandro Dorileo <leandro.maciel.dorileo(a)intel.com> + +include(devpkg-base) + +notmuch-dev -- 2.25.0

5 months, 1 week

2
1
0 / 0

[PATCH clr-bundles] Add (purely optional, non-default) tracker-miners.

by Auke Kok

This makes gnome-music see music files in ~/Music. As an optional component, this should be sufficient for most users that want this functionality explicitly. --- bundles/tracker-miners | 16 ++++++++++++++++ packages.list | 3 ++- 2 files changed, 18 insertions(+), 1 deletion(-) create mode 100644 bundles/tracker-miners diff --git a/bundles/tracker-miners b/bundles/tracker-miners new file mode 100644 index 00000000..f9547aff --- /dev/null +++ b/bundles/tracker-miners @@ -0,0 +1,16 @@ +# [TITLE]: tracker-miners +# [DESCRIPTION]: Collection of data extractors for Tracker/Nepomuk +# [STATUS]: Active +# [CAPABILITIES]: +# [TAGS]: +# [MAINTAINER]: Auke Kok <auke-jan.h.kok(a)intel.com> + +include(libglib) +include(gstreamer) + +# start of custom additions (edits outside this area will be removed automatically) + +# end of custom additions + +# main package +tracker-miners diff --git a/packages.list b/packages.list index 1727556d..ef3fbaf5 100644 --- a/packages.list +++ b/packages.list @@ -415,4 +415,5 @@ pcmanfm # a file manager replacement for Nautilus, Konqueror and Thunar protobuf # Protocol Buffers - Google's data interchange format krusader # Advanced twin panel (commander style) file manager conda # Cross-platform, language-agnostic binary package manager -spyder-ide # No detailed summary available +spyder-ide # No detailed summary available +tracker-miners # Collection of data extractors for Tracker/Nepomuk -- 2.25.0

5 months, 1 week

2
1
0 / 0

[PATCH clr-bundles] Add separate mariadb-clientlibs bundle.

by Auke Kok

For use with many third-party software that deals with SQL db connections. --- bundles/mariadb-clientlibs | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 bundles/mariadb-clientlibs diff --git a/bundles/mariadb-clientlibs b/bundles/mariadb-clientlibs new file mode 100644 index 00000000..feac9117 --- /dev/null +++ b/bundles/mariadb-clientlibs @@ -0,0 +1,10 @@ +# [TITLE]: mariadb-clientlibs +# [DESCRIPTION]: MariaDB Connector/C dynamic library/Database client libraries. +# [STATUS]: Active +# [CAPABILITIES]: Enable applications that connect to mariadb databases. +# [TAGS]: Developer Tools +# [MAINTAINER]: Auke Kok <auke-jan.h.kok(a)intel.com> + +include(lib-openssl) + +mariadb-extras-clientlib -- 2.25.0

5 months, 1 week

3
2
0 / 0

New package krusader

by Matthias Eliasson

Hi, I have autospec krusader (https://krusader.org/) which is a twin panel (commander style) file manager for KDE Plasma. This was requested in https://github.com/clearlinux/distribution/issues/1669 The package can be found here https://github.com/curantes/krusader Suggested bundles: - krusader - desktop-kde-apps as also-add() Best regards Matthias Eliasson

5 months, 2 weeks

2
1
0 / 0

Enable MACVLAN and MACVTAP in the kernel-iot-lts2018 (ACRN SOS kernel)

by VanCutsem, Geoffroy

Hi there, MacVTap internetworking is the preferred mechanism in Kata (see https://github.com/kata-containers/runtime/issues/2029). However, the Service VM kernel (kernel-iot-lts2018 [sos]) comes with the CONFIG_MACVLAN and CONFIG_MACVTAP options disabled. Can these be enabled please? Thanks, Geoffroy Senior Technical Marketing Engineer IAGS - System Software Products Tel: +32 (0)3 450 0851 ----------------------------------------------- Intel Corporation NV/SA Kings Square, Veldkant 31 2550 Kontich RPM (Bruxelles) 0415.497.718. Citibank, Brussels, account 570/1031255/09

5 months, 4 weeks

5
16
0 / 0

[PATCH google-authenticator-libpam] google-authenticator-libpam

by Omkhar Arasaratnam

Here is a patch which creates a package for google-authenticator-libpam. This is a pam library which allows you to use Google Authenticator for two factor authentication. --- .gitignore | 19 ++++++ Makefile | 5 ++ buildreq_add | 2 + buildreq_ban | 2 + buildreq_cache | 2 + excludes | 2 + google-authenticator-libpam.spec | 108 +++++++++++++++++++++++++++++++ options.conf | 61 +++++++++++++++++ pkgconfig_add | 2 + pkgconfig_ban | 2 + release | 1 + requires_add | 2 + requires_ban | 2 + testresults | 5 ++ upstream | 1 + used_libs | 3 + versions | 1 + 17 files changed, 220 insertions(+) create mode 100644 .gitignore create mode 100644 Makefile create mode 100644 buildreq_add create mode 100644 buildreq_ban create mode 100644 buildreq_cache create mode 100644 excludes create mode 100644 google-authenticator-libpam.spec create mode 100644 options.conf create mode 100644 pkgconfig_add create mode 100644 pkgconfig_ban create mode 100644 release create mode 100644 requires_add create mode 100644 requires_ban create mode 100644 testresults create mode 100644 upstream create mode 100644 used_libs create mode 100644 versions diff --git a/google-authenticator-libpam.spec b/google-authenticator-libpam.spec new file mode 100644 index 0000000..f920aa8 --- /dev/null +++ b/google-authenticator-libpam.spec @@ -0,0 +1,108 @@ +# +# This file is auto-generated. DO NOT EDIT +# Generated by: autospec.py +# +Name : google-authenticator-libpam +License : Apache-2.0 +Requires: google-authenticator-libpam-bin = %{version}-%{release} +Requires: google-authenticator-libpam-lib = %{version}-%{release} +Requires: google-authenticator-libpam-man = %{version}-%{release} +BuildRequires : Linux-PAM-dev + +%description +# Google Authenticator PAM module +Example PAM module demonstrating two-factor authentication. + +%package bin + + + +Requires: google-authenticator-libpam-man = %{version}-%{release} + + + +%package lib + + + +%package man + +%description man +man components for the google-authenticator-libpam package. + + +%prep + +%build +%reconfigure --disable-static +make %{?_smp_mflags} + +%check +make VERBOSE=1 V=1 %{?_smp_mflags} check + +%install +rm -rf %{buildroot} +%make_install + +%files +%defattr(-,root,root,-) + +%files bin +%defattr(-,root,root,-) +/usr/bin/google-authenticator + +%files doc +%defattr(0644,root,root,0755) +/usr/share/doc/google-authenticator/FILEFORMAT +/usr/share/doc/google-authenticator/README.md +/usr/share/doc/google-authenticator/totp.html + +%files lib +%defattr(-,root,root,-) +/usr/lib64/security/pam_google_authenticator.so + +%files man +%defattr(0644,root,root,0755) +/usr/share/man/man1/google-authenticator.1 +/usr/share/man/man8/pam_google_authenticator.8 diff --git a/options.conf b/options.conf new file mode 100644 index 0000000..c8b9508 --- /dev/null +++ b/options.conf @@ -0,0 +1,61 @@ +name = google-authenticator-libpam +url = https://github.com/google/google-authenticator-libpam/archive/1.08.tar.gz +giturl = https://github.com/google/google-authenticator-libpam.git +domain = +verify_required = false diff --git a/testresults b/testresults new file mode 100644 index 0000000..80a1228 --- /dev/null +++ b/testresults @@ -0,0 +1,5 @@ +Total : 2 +Pass : 2 diff --git a/used_libs b/used_libs new file mode 100644 index 0000000..cf1b449 --- /dev/null +++ b/used_libs @@ -0,0 +1,3 @@ +libc.so.6 +libdl.so.2 +libpam.so.0

6 months

1
0
0 / 0

[PATCH suricata] suricata: Autospec creation for version 5.0.1+ nfqueue

by Omkhar Arasaratnam

This adds nfqueue support for Suricata, which allows for IPS functionality when used with iptables. --- configure | 2 +- configure_misses | 2 + release | 2 +- suricata.spec | 187 +++-------------------------------------------- used_libs | 2 + 5 files changed, 18 insertions(+), 177 deletions(-) diff --git a/configure b/configure index f36c6e3..1ddc275 100644 --- a/configure +++ b/configure @@ -1 +1 @@ ---with-clang=/usr/bin/clang --disable-gccmarch-native --enable-ebpf --enable-ebpf-build +--with-clang=/usr/bin/clang --disable-gccmarch-native --enable-ebpf --enable-ebpf-build --enable-nfqueue diff --git a/configure_misses b/configure_misses index 4c091ff..fd1cb80 100644 --- a/configure_misses +++ b/configure_misses @@ -6,6 +6,7 @@ Configure miss: wincrypt.h Configure miss: llc-9.0 Configure miss: spatch Configure miss: LIBPCREVERSION +Configure miss: signed nfq_get_payload payload argument Configure miss: whether OS_WIN32 is declared Configure miss: libnet.h version 1.1.x Configure miss: libiconv_close in -liconv @@ -19,6 +20,7 @@ Configure miss: wincrypt.h Configure miss: llc-9.0 Configure miss: spatch Configure miss: LIBPCREVERSION +Configure miss: signed nfq_get_payload payload argument Configure miss: whether OS_WIN32 is declared Configure miss: libnet.h version 1.1.x Configure miss: libiconv_close in -liconv diff --git a/suricata.spec b/suricata.spec index 8998ef5..d54f9b3 100644 --- a/suricata.spec +++ b/suricata.spec @@ -6,35 +6,34 @@ # Name : suricata Version : 5.0.1 URL : https://www.openinfosecfoundation.org/download/suricata-5.0.1.tar.gz Source0 : https://www.openinfosecfoundation.org/download/suricata-5.0.1.tar.gz Source1 : https://www.openinfosecfoundation.org/download/suricata-5.0.1.tar.gz.sig -Summary : An Open Source Next Generation Intrusion Detection and Prevention Engine +Summary : A security-aware HTTP parser, designed for use in IDS/IPS and WAF products. Group : Development/Tools -License : Apache-2.0 BSD-3-Clause GPL-2.0 HPND MIT Unlicense +License : GPL-2.0 Requires: suricata-bin = %{version}-%{release} Requires: suricata-data = %{version}-%{release} Requires: suricata-lib = %{version}-%{release} -Requires: suricata-license = %{version}-%{release} Requires: suricata-man = %{version}-%{release} Requires: suricata-python = %{version}-%{release} Requires: suricata-python3 = %{version}-%{release} Requires: suricata-services = %{version}-%{release} Requires: PyYAML Requires: Sphinx -Requires: python-dateutil -Requires: sphinxcontrib-programoutput BuildRequires : PyYAML BuildRequires : Sphinx BuildRequires : buildreq-distutils3 BuildRequires : curl-dev BuildRequires : doxygen +BuildRequires : elfutils-dev BuildRequires : file-dev BuildRequires : grep BuildRequires : hyperscan-dev BuildRequires : jansson-dev BuildRequires : libcap-ng-dev +BuildRequires : libpcap-dev BuildRequires : llvm BuildRequires : llvm-dev BuildRequires : llvm-extras @@ -49,19 +48,18 @@ BuildRequires : pkgconfig(lua) BuildRequires : pkgconfig(luajit) BuildRequires : pkgconfig(nspr) BuildRequires : pkgconfig(nss) -BuildRequires : python-dateutil +BuildRequires : pkgconfig(zlib) BuildRequires : rustc -BuildRequires : sphinxcontrib-programoutput +BuildRequires : xz-dev BuildRequires : yaml-dev %description -This directory contains what's needed for reading the JSON file /var/log/suricata/files-json.log and processing those entries against plugins. Included are plugins for checking the MD5 of the observed file on the network against already created reports on anubis.iseclab.org, malwr.com, and threatexpert.com. If you have a virustotal.com API key (free, though see the terms of use on virustotal.com/documentation/public-api/), you can enable the virustotal.com plugin and configure your API key so you can check the MD5 against over forty AV vendors' results. + %package bin Summary: bin components for the suricata package. Group: Binaries Requires: suricata-data = %{version}-%{release} -Requires: suricata-license = %{version}-%{release} Requires: suricata-services = %{version}-%{release} %description bin @@ -163,14 +151,13 @@ export http_proxy=http://127.0.0.1:9/ export https_proxy=http://127.0.0.1:9/ export no_proxy=localhost,127.0.0.1,0.0.0.0 export LANG=C.UTF-8 -# -Werror is for werrorists export GCC_IGNORE_WERROR=1 export CFLAGS="$CFLAGS -fno-lto " export FCFLAGS="$CFLAGS -fno-lto " export FFLAGS="$CFLAGS -fno-lto " export CXXFLAGS="$CXXFLAGS -fno-lto " -%configure --disable-static --with-clang=/usr/bin/clang --disable-gccmarch-native --enable-ebpf --enable-ebpf-build +%configure --disable-static --with-clang=/usr/bin/clang --disable-gccmarch-native --enable-ebpf --enable-ebpf-build --enable-nfqueue make %{?_smp_mflags} unset PKG_CONFIG_PATH @@ -178,7 +165,7 @@ pushd ../buildavx2/ export CFLAGS="$CFLAGS -m64 -march=haswell" export CXXFLAGS="$CXXFLAGS -m64 -march=haswell" export LDFLAGS="$LDFLAGS -m64 -march=haswell" -%configure --disable-static --with-clang=/usr/bin/clang --disable-gccmarch-native --enable-ebpf --enable-ebpf-build +%configure --disable-static --with-clang=/usr/bin/clang --disable-gccmarch-native --enable-ebpf --enable-ebpf-build --enable-nfqueue make %{?_smp_mflags} popd %check diff --git a/used_libs b/used_libs index 3f25560..07985c0 100644 --- a/used_libs +++ b/used_libs @@ -9,6 +9,8 @@ libjansson.so.4 liblz4.so.1 libm.so.6 libmagic.so.1 +libnetfilter_queue.so.1 +libnfnetlink.so.0 libnspr4.so libnss3.so libpcap.so.1 -- 2.24.1

6 months

1
0
0 / 0

[PATCH clr-bundles] Add `systemd-extras` to `polkit` - provides several polkit rules.

by Auke Kok

Various elevated privileges are available to logged in users (those on the console with physical access) and allow that users to perform restarts and other basic system functions. Adding these here allows this to work for console users on systems that do not have a desktop installed. For all current installs with polit, systemd-extras is already part of the bundle. Since polkit is not a default bundle, this means no change for most server installs and no default change. Addresses #1633 --- bundles/polkit | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bundles/polkit b/bundles/polkit index 4f7ef0d8..a99d2c11 100644 --- a/bundles/polkit +++ b/bundles/polkit @@ -9,7 +9,7 @@ include(libglib) include(libstdcpp) # start of custom additions (edits outside this area will be removed automatically) - +systemd-extras # end of custom additions # main package -- 2.24.1

6 months

2
1
0 / 0

not being able to find out the battery status either from the taskbar or terminal

by praveen

i am using the version 31470 right from the time of installation of clear linux i am able to find the battery status either from the taskbar even using the terminal and commands like upower shows battery -level as unkown . please fix it fast as without knowing the level of battery my laptop shuts downs suprisingly even erasing some of my precious data and time

6 months

4
9
0 / 0

[PATCH clr-bundles] Add pre-release swupd-client

by William Douglas

Intended to be used for testing features of swupd-client prior to their release in the official /usr/bin/swupd. --- bundles/swupd-client-pre-release | 15 +++++++++++++++ packages.list | 1 + 2 files changed, 16 insertions(+) create mode 100644 bundles/swupd-client-pre-release diff --git a/bundles/swupd-client-pre-release b/bundles/swupd-client-pre-release new file mode 100644 index 00000000..720630a3 --- /dev/null +++ b/bundles/swupd-client-pre-release @@ -0,0 +1,15 @@ +# [TITLE]: swupd-client-pre-release +# [DESCRIPTION]: Pre-release binary for the Clear Linux OS for IA Updater. +# [STATUS]: WIP +# [CAPABILITIES]: +# [TAGS]: +# [MAINTAINER]: William Douglas <william.douglas(a)intel.com> + +include(curl) + +# start of custom additions (edits outside this area will be removed automatically) +include(os-core-update) +# end of custom additions + +# main package +swupd-client-pre-release diff --git a/packages.list b/packages.list index 81f60a50..898c4cc7 100644 --- a/packages.list +++ b/packages.list @@ -406,3 +406,4 @@ sshfs # FUSE client based on the SSH File Transfer Protocol stacer # Ubuntu System Optimizer zabbix # Network and application monitoring tool. earlyoom # Utility for pre-oomkiller process control +swupd-client-pre-release # Pre-release binary for the Clear Linux OS for IA Updater. -- 2.24.1

6 months

2
1
0 / 0

2020

2019

2018

2017

2016

2015

Dev January 2020