[oe] [meta-oe][PATCH 2/2] usbguard: Initial recipe

[Khem Raj]

On 7/21/19 11:06 AM, Ayoub Zaki wrote:
> Introduce the USBGuard software framework that helps to protect against rogue USB devices (a.k.a. BadUSB)
> by implementing basic whitelisting and blacklisting capabilities based on device attributes.
>
> Signed-off-by: Ayoub Zaki <ayoub.zaki at embexus.com>
> ---
>   .../usbguard/usbguard_0.7.4.bb                | 37 +++++++++++++++++++
>   1 file changed, 37 insertions(+)
>   create mode 100644 meta-oe/recipes-security/usbguard/usbguard_0.7.4.bb
>
> diff --git a/meta-oe/recipes-security/usbguard/usbguard_0.7.4.bb b/meta-oe/recipes-security/usbguard/usbguard_0.7.4.bb
> new file mode 100644
> index 000000000..a77694cc3
> --- /dev/null
> +++ b/meta-oe/recipes-security/usbguard/usbguard_0.7.4.bb
> @@ -0,0 +1,37 @@
> +DESCRIPTION="USBGuard framework helps to protect against BadUSB."
> +HOMEPAGE="https://github.com/dkopecek/usbguard"
> +LICENSE="GPLv2"
> +LIC_FILES_CHKSUM = "file://LICENSE;md5=8264535c0c4e9c6c335635c4026a8022"
> +
> +SRC_URI="https://github.com/USBGuard/usbguard/archive/${PN}-${PV}.tar.gz"

Its better to use BP instead of PN-PV do it will work with multilib as well

> +SRC_URI[md5sum] = "ddaa9ae884200c861ad946f34dfd5ab9"
> +SRC_URI[sha256sum] = "d37886508583565aae0df6a110b11524c59b39e0deb25ee49fc34274e4784f55"
> +
> +inherit autotools pkgconfig systemd bash-completion
> +
> +S= "${WORKDIR}/${PN}-${PN}-${PV}"

this should also be ${BPN}-${BP}

> +
> +DEPENDS = "protobuf-native libxml2-native libxslt-native xmlto-native glib-2.0-native \
> +	dbus dbus-glib libqb libseccomp libcap-ng libgcrypt libsodium protobuf pegtl"
> +
> +EXTRA_OECONF += "--with-bundled-catch"
> +
> +PACKAGECONFIG ??= "libsodium \
> +	${@bb.utils.filter('DISTRO_FEATURES', 'systemd', d)} \
> +	${@bb.utils.filter('DISTRO_FEATURES', 'polkit', d)}"
> +
> +PACKAGECONFIG[systemd]   = "--enable-systemd,--disable-systemd"
> +PACKAGECONFIG[libsodium] = "--with-crypto-library=sodium"
> +PACKAGECONFIG[libgcrypt] = "--with-crypto-library=gcrypt"
> +PACKAGECONFIG[polkit]    = "--with-polkit,--without-polkit"
> +PACKAGECONFIG[dbus]      = "--with-dbus,--without-dbus"
> +
> +SYSTEMD_SERVICE_${PN} = "${PN}.service"
> +SYSTEMD_PACKAGES += "${PN}"
> +
> +
> +do_install_append(){
> +	
> +	sed -i 's|/var/log/usbguard/usbguard-audit.log|/var/log/usbguard-audit.log|g' \
> +						${D}${sysconfdir}/usbguard/usbguard-daemon.conf
> +}