Whitelist sftp
PATCH 1/1 bitbake.conf: Add 'sftp' to HOSTTOOLS_NONFATAL
In reply to Peter KjellerstedtThis is necessary to be able to use the sftp fetcher.
--- meta/conf/bitbake.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
meta/conf/bitbake.conf +1 -1
@@ -469,7 +469,7 @@ HOSTTOOLS += " \ HOSTTOOLS += "ps stty ip ssh scp ping vi" # Link to these if present -HOSTTOOLS_NONFATAL += "ccache pip3 ld.bfd ld.gold gcc-ar gpg" +HOSTTOOLS_NONFATAL += "ccache pip3 ld.bfd ld.gold gcc-ar gpg sftp" CCACHE ??= "" # Disable ccache explicitly if CCACHE is null since gcc may be a symlink
Signature · 1 line
2.12.0
cover Whitelist sftp
I have been trying out the whitelisting of tools in $PATH, and it seems to work very well. However, one thing that I realized is that the tools used by the various fetchers need to be whitelisted. This patch adds sftp to HOSTTOOLS_NONFATAL as that is the only fetcher we use appart from git and wget, but I expect other tools such as cvs, svn, hg, etc need to be added as well.
Feel free to squash this commit with the "base/bitbake.conf: Filter contents of PATH to only allow whitelisted tools" commit.
//Peter
The following changes since commit 1cf50b756c589d8bf8f1f32f2062b69fb769242d:
base/bitbake.conf: Filter contents of PATH to only allow whitelisted tools (2017-03-10 18:07:27 +0000)
are available in the git repository at:
git://git.yoctoproject.org/poky-contrib pkj/whitelist_sftp
http://git.yoctoproject.org/cgit.cgi/poky-contrib/log/?h=pkj/whitelist_sftp
Peter Kjellerstedt (1):
bitbake.conf: Add 'sftp' to HOSTTOOLS_NONFATAL
meta/conf/bitbake.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
Signature · 1 line
2.12.0
Quoted 6 lines · Peter Kjellerstedt
I have been trying out the whitelisting of tools in $PATH, and it seems to work very well. However, one thing that I realized is that the tools used by the various fetchers need to be whitelisted. This patch adds sftp to
HOSTTOOLS_NONFATALas that is the only fetcher we use appart from git and wget, but I expect other tools such as cvs, svn, hg, etc need to be added as well.
For some, like subversion we actually build subversion-native so they shouldn't be listed by default.
Quoted 2 lines
Feel free to squash this commit with the "
base/bitbake.conf: Filter contents of PATH to only allow whitelisted tools" commit.
I squashed this in along with some other minor tweaks thanks.
Richard