From f251f49235b51280efcd115e9931bff01d8419a2 Mon Sep 17 00:00:00 2001 From: Lukasz Wojciechowski Date: Tue, 4 Oct 2016 07:54:10 +0200 Subject: [PATCH 01/16] [TRE-630] Remove pulseaudio-locale from all images Change-Id: Ia23048435b04de8ed4805072d9a66fe2cad7dec9 Signed-off-by: Lukasz Wojciechowski --- patterns/generic-multimedia.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/patterns/generic-multimedia.yaml b/patterns/generic-multimedia.yaml index e16a64f..cce35c2 100644 --- a/patterns/generic-multimedia.yaml +++ b/patterns/generic-multimedia.yaml @@ -4,7 +4,6 @@ Name: generic-multimedia Packages: - alsa-utils - pulseaudio -- pulseaudio-locale - pulseaudio-module-bluetooth - pulseaudio-modules-tizen - pulseaudio-utils -- 2.7.4 From 741a9ce90bbacef449eba187b4456776d7990e72 Mon Sep 17 00:00:00 2001 From: "jin-gyu.kim" Date: Fri, 24 Mar 2017 11:04:07 +0900 Subject: [PATCH 02/16] Add running security-test in security-generic. - To check the security feature at the time of image building. Change-Id: Ia1cc354d37ddf8f81ef19b8673a6c2be56f45dbc --- scripts/generic-security.post | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/scripts/generic-security.post b/scripts/generic-security.post index 685ba45..13e5bab 100644 --- a/scripts/generic-security.post +++ b/scripts/generic-security.post @@ -5,3 +5,7 @@ if [ -e /usr/share/security-config/set_capability ]; then echo 'Give capabilities to daemons via set_capability from security-config package' /usr/share/security-config/set_capability fi +if [ -e /opt/share/security-config/test/image_test.sh ]; then + echo 'Run security-test' + /opt/share/security-config/test/image_test.sh +fi -- 2.7.4 From 7593a94cc1a070e41c3fcbc40d35f7a25b147354 Mon Sep 17 00:00:00 2001 From: Hyunggi Lee Date: Tue, 2 May 2017 11:05:51 +0900 Subject: [PATCH 03/16] [TRE-1243] contact-service Change-Id: I3d307235f73fa7d91bd7ab23b0dd4074a5585e16 --- patterns/generic-middleware.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/patterns/generic-middleware.yaml b/patterns/generic-middleware.yaml index 1ef2505..056ea94 100644 --- a/patterns/generic-middleware.yaml +++ b/patterns/generic-middleware.yaml @@ -18,7 +18,8 @@ Packages: - security-privilege-manager - privilege-checker - privilege-info -- contacts-service2 +- contacts-service +- libcontacts-service - calendar-service - cairo - csr-framework -- 2.7.4 From 3d9fb79add9f301d93abce9b820626b117ed7bc8 Mon Sep 17 00:00:00 2001 From: Maciej Wereski Date: Wed, 12 Jul 2017 17:11:33 +0200 Subject: [PATCH 04/16] [TRE-1393] Remove va(api) Change-Id: Ia9de735e4b6adf7d9fe582b18c994e3bd9aa7a4f Signed-off-by: Maciej Wereski --- patterns/generic-multimedia-intel.yaml | 3 --- 1 file changed, 3 deletions(-) diff --git a/patterns/generic-multimedia-intel.yaml b/patterns/generic-multimedia-intel.yaml index bb76856..701b0b2 100644 --- a/patterns/generic-multimedia-intel.yaml +++ b/patterns/generic-multimedia-intel.yaml @@ -3,6 +3,3 @@ Description: Generic Multimedia Intel Name: generic-multimedia-intel Packages: - gst-libav -- gstreamer-vaapi -- libva-intel-driver -- vaapi-tools -- 2.7.4 From 48080560365283b516dfd3feed24df46d0e7d434 Mon Sep 17 00:00:00 2001 From: Sunmin Lee Date: Wed, 19 Jul 2017 11:42:28 +0900 Subject: [PATCH 05/16] New post script: generic-prepatch-backup.post Some generated files are needed to be backed up during imaging process. Change-Id: I9885a1d13426f2c4b3b856b0e6bb992aa7c984d6 --- scripts/generic-prepatch-backup.post | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 scripts/generic-prepatch-backup.post diff --git a/scripts/generic-prepatch-backup.post b/scripts/generic-prepatch-backup.post new file mode 100644 index 0000000..a251667 --- /dev/null +++ b/scripts/generic-prepatch-backup.post @@ -0,0 +1,6 @@ +#!/bin/sh +echo "#################### generic-prepatch-backup.post ####################" + +if [ -e $INSTALL_ROOT/usr/lib/initrd-recovery/fota/backup-passwd.sh ]; then + $INSTALL_ROOT/usr/lib/initrd-recovery/fota/backup-passwd.sh +fi -- 2.7.4 From 25488d13000e529aaa2d348ee6b5eb68c6f6c10c Mon Sep 17 00:00:00 2001 From: SoonKyu Park Date: Mon, 23 Oct 2017 16:59:38 +0900 Subject: [PATCH 06/16] Remove un-necessary packages from image zypper, gpg2 packages are un-necessary to do postscript of 'generic-packaging' Change-Id: Id9ee614a83f1daddeed4611aa89b630d5bafc257 --- patterns/generic-packaging.yaml | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/patterns/generic-packaging.yaml b/patterns/generic-packaging.yaml index 427f3f2..b1cd5c1 100644 --- a/patterns/generic-packaging.yaml +++ b/patterns/generic-packaging.yaml @@ -1,6 +1,4 @@ Summary: Generic Packaging Description: Generic Packaging Name: generic-packaging -Packages: -- gpg2 -- zypper +Packages: [] -- 2.7.4 From 291f6f646069c4850fa02d83d1f0700b50342391 Mon Sep 17 00:00:00 2001 From: Lukasz Wojciechowski Date: Fri, 24 Nov 2017 12:03:31 +0100 Subject: [PATCH 07/16] [TRE-1761] Remove bluetooth-tools-no-firmware Change-Id: I08279af1350de77a055cd30a34b90fb80c00e090 Signed-off-by: Lukasz Wojciechowski --- patterns/generic-bluetooth.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/patterns/generic-bluetooth.yaml b/patterns/generic-bluetooth.yaml index 23799c5..2ddc1d8 100644 --- a/patterns/generic-bluetooth.yaml +++ b/patterns/generic-bluetooth.yaml @@ -6,5 +6,4 @@ Packages: - bluetooth-frwk-core - bluetooth-frwk-service - bluetooth-share -- bluetooth-tools-no-firmware - obexd -- 2.7.4 From d12c84df425978ad46572899e3ddf4c76a054303 Mon Sep 17 00:00:00 2001 From: SoonKyu Park Date: Mon, 18 Dec 2017 19:19:25 +0900 Subject: [PATCH 08/16] Disable to run some function inside generic-desktop-applications.post, because it results in always failure, so it can be regarded as useless Change-Id: Iadff03542561119f25919811e82d4ea3445e7da5 --- scripts/generic-desktop-applications.post | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/scripts/generic-desktop-applications.post b/scripts/generic-desktop-applications.post index 035d3fb..5b639f4 100644 --- a/scripts/generic-desktop-applications.post +++ b/scripts/generic-desktop-applications.post @@ -14,5 +14,6 @@ function generic_desktop_applications_fix_userhome() { # fix TC-320 for SDK . /etc/tizen-build.conf -[ "${TZ_BUILD_WITH_EMULATOR}" == "1" ] && generic_desktop_applications_fix_userhome developer +# Disable to run below line because this results in always failure, so it can be regarded as useless. +#[ "${TZ_BUILD_WITH_EMULATOR}" == "1" ] && generic_desktop_applications_fix_userhome developer -- 2.7.4 From 68a4b65c0c5e18b492f7892774fb85d8246d441f Mon Sep 17 00:00:00 2001 From: Pawel Wieczorek Date: Thu, 4 Jan 2018 16:23:04 +0100 Subject: [PATCH 09/16] [TRE-1804] Multimedia: Add GraphicsMagick-c++ Package GraphicsMagic (also requested in TRE-1804) will be included on images as a dependency. Change-Id: I2e0b612719dd15823ac6e7dd4d516c0e5bf66b5a Signed-off-by: Pawel Wieczorek --- patterns/generic-multimedia.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/patterns/generic-multimedia.yaml b/patterns/generic-multimedia.yaml index cce35c2..ee90414 100644 --- a/patterns/generic-multimedia.yaml +++ b/patterns/generic-multimedia.yaml @@ -7,6 +7,7 @@ Packages: - pulseaudio-module-bluetooth - pulseaudio-modules-tizen - pulseaudio-utils +- GraphicsMagick-c++ - gst-plugins-bad - gst-plugins-base - gst-plugins-good -- 2.7.4 From 2d00552fa542a8da8d78bfd784f47c6fc3cd8490 Mon Sep 17 00:00:00 2001 From: Maciej Wereski Date: Fri, 30 Mar 2018 08:05:57 +0200 Subject: [PATCH 10/16] [TRE-1844] Rename vc-engine-default Change-Id: I4a00648b2ec8402b6b3a54688f2107428782b3a3 Signed-off-by: Maciej Wereski --- patterns/generic-middleware.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/patterns/generic-middleware.yaml b/patterns/generic-middleware.yaml index 056ea94..7331b9d 100644 --- a/patterns/generic-middleware.yaml +++ b/patterns/generic-middleware.yaml @@ -30,7 +30,7 @@ Packages: - amd - voice-control - voice-control-elm -- vc-engine-default +- org.tizen.vc-engine-default - capi-maps-service - appcore-agent - data-control -- 2.7.4 From ccdf1c8a34c961d51d94f5feb89c9b50f19ff640 Mon Sep 17 00:00:00 2001 From: Sunmin Lee Date: Mon, 9 Apr 2018 14:54:06 +0900 Subject: [PATCH 11/16] Revert "New post script: generic-prepatch-backup.post" The password backup is handled by factory-reset-backup currently. (This reverts commit 48080560365283b516dfd3feed24df46d0e7d434.) Change-Id: Ib98a2028e1effe03af4ba0305583f04b578fac04 --- scripts/generic-prepatch-backup.post | 6 ------ 1 file changed, 6 deletions(-) delete mode 100644 scripts/generic-prepatch-backup.post diff --git a/scripts/generic-prepatch-backup.post b/scripts/generic-prepatch-backup.post deleted file mode 100644 index a251667..0000000 --- a/scripts/generic-prepatch-backup.post +++ /dev/null @@ -1,6 +0,0 @@ -#!/bin/sh -echo "#################### generic-prepatch-backup.post ####################" - -if [ -e $INSTALL_ROOT/usr/lib/initrd-recovery/fota/backup-passwd.sh ]; then - $INSTALL_ROOT/usr/lib/initrd-recovery/fota/backup-passwd.sh -fi -- 2.7.4 From a7f82941b4460ad7414489da4a8f5a66dc463bda Mon Sep 17 00:00:00 2001 From: Lukasz Wojciechowski Date: Fri, 13 Jul 2018 16:48:02 +0200 Subject: [PATCH 12/16] [TRE-1958] Add generic-dbus-policychecker.post script Change-Id: Ic2a6a3beb45f88fe2acdaade88ea398dd3e5adf1 Signed-off-by: Lukasz Wojciechowski --- scripts/generic-dbus-policychecker.post | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 scripts/generic-dbus-policychecker.post diff --git a/scripts/generic-dbus-policychecker.post b/scripts/generic-dbus-policychecker.post new file mode 100644 index 0000000..33845fa --- /dev/null +++ b/scripts/generic-dbus-policychecker.post @@ -0,0 +1,7 @@ +#!/bin/sh +echo "#################### generic-dbus-policychecker.post ####################" +for f in /etc/dbus-1/system.d/*.conf; do +echo +echo "$0: Checking D-Bus policy file: $f" +dbus-policychecker "$f" +done -- 2.7.4 From ba302c548aaa7aadc38db2804ce33da4b6f9b826 Mon Sep 17 00:00:00 2001 From: Karol Lewandowski Date: Fri, 14 Sep 2018 10:51:24 +0200 Subject: [PATCH 13/16] Add generic-users.post(script) This script will create standard 'owner' user. It's supposed to be used by all profile wanting standard Tizen user(s). Change-Id: I3db0ea3a9bc2366a8ad9d3dd26d64fe48f3d9579 --- scripts/generic-users.post | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 scripts/generic-users.post diff --git a/scripts/generic-users.post b/scripts/generic-users.post new file mode 100644 index 0000000..cb2a242 --- /dev/null +++ b/scripts/generic-users.post @@ -0,0 +1,18 @@ +#!/bin/sh +echo "#################### generic-users.post ####################" + +if ! generic_base_user_exists owner; then + # By default GUM will create users in /opt/etc/passwd, which is + # additional users database suitable for end-user created accounts. + # However, the 'owner' user is shipped by Tizen system itself and + # it's its default user. Consequently, it should always be available + # and thus, it should be added to /etc/passwd. + conf=/etc/gumd/gumd.conf + origf=${conf}.orig + mv -v $conf $origf + sed -e 's,^\(PASSWD_FILE\).*,\1=/etc/passwd,' -e 's,^\(SHADOW_FILE\).*,\1=/etc/shadow,' <$origf >$conf + gum-utils --offline --add-user --username=owner --usertype=admin --usecret=tizen + mv -v $origf $conf +fi + + -- 2.7.4 From 7c1088f06f9de5790c05791111bc3f8311337de6 Mon Sep 17 00:00:00 2001 From: Lukasz Wojciechowski Date: Mon, 29 Oct 2018 11:16:29 +0100 Subject: [PATCH 14/16] FIX:[TRE-1958] verify if dbus-policychecker file exists Change-Id: Ia2d66d372e7320946874dda432e65804fdcb22e1 Signed-off-by: Lukasz Wojciechowski --- scripts/generic-dbus-policychecker.post | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/scripts/generic-dbus-policychecker.post b/scripts/generic-dbus-policychecker.post index 33845fa..c42a55f 100644 --- a/scripts/generic-dbus-policychecker.post +++ b/scripts/generic-dbus-policychecker.post @@ -1,7 +1,9 @@ #!/bin/sh echo "#################### generic-dbus-policychecker.post ####################" -for f in /etc/dbus-1/system.d/*.conf; do -echo -echo "$0: Checking D-Bus policy file: $f" -dbus-policychecker "$f" -done +if [ -x /usr/bin/dbus-policychecker ] ; then + for f in /etc/dbus-1/system.d/*.conf; do + echo + echo "$0: Checking D-Bus policy file: $f" + /usr/bin/dbus-policychecker "$f" + done +fi -- 2.7.4 From 8af248bc13c11043690b2165392fe3942801bcc2 Mon Sep 17 00:00:00 2001 From: "sanghyeok.oh" Date: Wed, 23 Jan 2019 11:30:48 +0900 Subject: [PATCH 15/16] post: dbus: rename conf file and exit MIC build if policy check failed Change-Id: Ibe4920d4ffc1d2cae289ff182ec49ef452a33b42 Signed-off-by: sanghyeok.oh --- scripts/generic-dbus-policychecker.post | 16 +++++++++++++++- 1 file changed, 15 insertions(+), 1 deletion(-) diff --git a/scripts/generic-dbus-policychecker.post b/scripts/generic-dbus-policychecker.post index c42a55f..3541260 100644 --- a/scripts/generic-dbus-policychecker.post +++ b/scripts/generic-dbus-policychecker.post @@ -1,9 +1,23 @@ #!/bin/sh echo "#################### generic-dbus-policychecker.post ####################" if [ -x /usr/bin/dbus-policychecker ] ; then + fail_cnt=0 for f in /etc/dbus-1/system.d/*.conf; do echo echo "$0: Checking D-Bus policy file: $f" - /usr/bin/dbus-policychecker "$f" + result=$(/usr/bin/dbus-policychecker "$f") + fail=$(echo "$result" | grep FAILED | wc -l) + echo "$result" + if [ $fail -gt 0 ]; then + echo "Found $fail Fails" + echo "Remove conf file : mv $f $f.fail" + mv "$f" "${f}.fail" + fail_cnt=$(( ${fail_cnt} + 1 )) + fi done + if [ $fail_cnt -gt 0 ]; then + echo "Error: MIC build exits due to failed cases on dbus policy checker.(${fail_cnt} errors)" + exit 1 + fi + fi -- 2.7.4 From e64028ba85e1eef7cb18159e2235f44423cd7cfe Mon Sep 17 00:00:00 2001 From: "jin-gyu.kim" Date: Mon, 15 Apr 2019 13:19:31 +0900 Subject: [PATCH 16/16] Create security-manager DB backup. - To apply DB recovering feature, create backup file. Change-Id: I5515c120117189fcbdb15854d7d938bb83ff7483 --- scripts/generic-security.post | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/scripts/generic-security.post b/scripts/generic-security.post index 13e5bab..bf97212 100644 --- a/scripts/generic-security.post +++ b/scripts/generic-security.post @@ -8,4 +8,8 @@ fi if [ -e /opt/share/security-config/test/image_test.sh ]; then echo 'Run security-test' /opt/share/security-config/test/image_test.sh -fi +fi + +# 04-15-2019 : This is to create security-manager DB backup file. +security-manager-cmd -b + -- 2.7.4