[oe] [ALERT] Security vulnerability with recent OE bitbake.conf changes

Richard Purdie rpurdie at rpsys.net
Tue May 8 12:30:05 UTC 2007


On Sun, 2007-05-06 at 21:29 -0700, Justin Patrin wrote:
> Ummm...where? I tried that in my local.conf and it did nothing. I've
> also grepped for PATCH_RESOLVER in both bitbake and oe and found
> nothing.

Sorry, it should be PATCHRESOLVE = "noop", my memory is playing tricks.

> Please, let's remove the gnome-terminal default, it makes no sense to
> assume that the lowest common denominator is running bitbake from X...

"noop" should be the default. There is no good argument for which
terminal UI should/shouldn't be the default. Ideally I guess it would
autoselect unless the user specifies, I'll give that some thought. A
warning from sanity.bbclass about a missing command might be good too...

Cheers,

Richard





More information about the Openembedded-devel mailing list