[oe] [meta-oe][PATCH v2 2/2] usbguard: Initial recipe

[Khem Raj]

it seems to be using recipes from other layers see

ERROR: Nothing PROVIDES 'libseccomp' (but
/mnt/a/yoe/sources/meta-openembedded/meta-oe/recipes-security/usbguard/usbguard_0.7.4.bb
DEPENDS on or otherwise requires it). Close matches:
  libcomps
ERROR: Nothing RPROVIDES 'usbguard-dev' (but
/mnt/a/yoe/sources/meta-openembedded/meta-oe/recipes-security/usbguard/usbguard_0.7.4.bb
RDEPENDS on or otherwise requires it)
No eligible RPROVIDERs exist for 'usbguard-dev'
NOTE: Runtime target 'usbguard-dev' is unbuildable, removing...
Missing or unbuildable dependency chain was: ['usbguard-dev']
ERROR: Nothing RPROVIDES 'usbguard' (but
/mnt/a/yoe/sources/meta-openembedded/meta-oe/recipes-security/usbguard/usbguard_0.7.4.bb
RDEPENDS on or otherwise requires it)
No eligible RPROVIDERs exist for 'usbguard'
NOTE: Runtime target 'usbguard' is unbuildable, removing...
Missing or unbuildable dependency chain was: ['usbguard']

I would prefer it to be a packageconfig and disabled by default so it
can build without libseccomp

On Sun, Jul 21, 2019 at 11:51 AM Ayoub Zaki <ayoub.zaki at embexus.com> wrote:
>
> Introduce the USBGuard software framework that helps to protect against rogue USB devices (a.k.a. BadUSB)
> by implementing basic whitelisting and blacklisting capabilities based on device attributes.
> ---
>  .../usbguard/usbguard_0.7.4.bb                | 37 +++++++++++++++++++
>  1 file changed, 37 insertions(+)
>  create mode 100644 meta-oe/recipes-security/usbguard/usbguard_0.7.4.bb
>
> diff --git a/meta-oe/recipes-security/usbguard/usbguard_0.7.4.bb b/meta-oe/recipes-security/usbguard/usbguard_0.7.4.bb
> new file mode 100644
> index 000000000..eee381fbe
> --- /dev/null
> +++ b/meta-oe/recipes-security/usbguard/usbguard_0.7.4.bb
> @@ -0,0 +1,37 @@
> +DESCRIPTION="USBGuard framework helps to protect against BadUSB."
> +HOMEPAGE="https://github.com/dkopecek/usbguard"
> +LICENSE="GPLv2"
> +LIC_FILES_CHKSUM = "file://LICENSE;md5=8264535c0c4e9c6c335635c4026a8022"
> +
> +SRC_URI="https://github.com/USBGuard/usbguard/archive/${BP}.tar.gz"
> +SRC_URI[md5sum] = "ddaa9ae884200c861ad946f34dfd5ab9"
> +SRC_URI[sha256sum] = "d37886508583565aae0df6a110b11524c59b39e0deb25ee49fc34274e4784f55"
> +
> +inherit autotools pkgconfig systemd bash-completion
> +
> +S= "${WORKDIR}/${BPN}-${BP}"
> +
> +DEPENDS = "protobuf-native libxml2-native libxslt-native xmlto-native glib-2.0-native \
> +       dbus dbus-glib libqb libseccomp libcap-ng libgcrypt libsodium protobuf pegtl"
> +
> +EXTRA_OECONF += "--with-bundled-catch"
> +
> +PACKAGECONFIG ??= "libsodium \
> +       ${@bb.utils.filter('DISTRO_FEATURES', 'systemd', d)} \
> +       ${@bb.utils.filter('DISTRO_FEATURES', 'polkit', d)}"
> +
> +PACKAGECONFIG[systemd]   = "--enable-systemd,--disable-systemd"
> +PACKAGECONFIG[libsodium] = "--with-crypto-library=sodium"
> +PACKAGECONFIG[libgcrypt] = "--with-crypto-library=gcrypt"
> +PACKAGECONFIG[polkit]    = "--with-polkit,--without-polkit"
> +PACKAGECONFIG[dbus]      = "--with-dbus,--without-dbus"
> +
> +SYSTEMD_SERVICE_${PN} = "${PN}.service"
> +SYSTEMD_PACKAGES += "${PN}"
> +
> +
> +do_install_append(){
> +
> +       sed -i 's|/var/log/usbguard/usbguard-audit.log|/var/log/usbguard-audit.log|g' \
> +                                               ${D}${sysconfdir}/usbguard/usbguard-daemon.conf
> +}
> --
> 2.17.1
>
> --
> _______________________________________________
> Openembedded-devel mailing list
> Openembedded-devel at lists.openembedded.org
> http://lists.openembedded.org/mailman/listinfo/openembedded-devel