[PATCH openbmc] Package whitelist.conf in obmc-phosphor-image
OpenBMC Patches
openbmc-patches at stwcx.xyz
Tue Jun 21 00:10:42 AEST 2016
From: tomjose <tomjoseph at in.ibm.com>
IPMI whitelisted commands are added in whitelist.conf
which would be consumed by ipmid daemon. Only whitelisted
IPMI commands are executed in restricted mode.
---
.../recipes-phosphor/host-ipmid/host-ipmid.bb | 5 ++++-
.../host-ipmid/host-ipmid.bbappend | 1 +
.../host-ipmid/host-ipmid/files/whitelist.conf | 26 ++++++++++++++++++++++
3 files changed, 31 insertions(+), 1 deletion(-)
create mode 100644 meta-phosphor/common/recipes-phosphor/host-ipmid/host-ipmid.bbappend
create mode 100644 meta-phosphor/common/recipes-phosphor/host-ipmid/host-ipmid/files/whitelist.conf
diff --git a/meta-phosphor/common/recipes-phosphor/host-ipmid/host-ipmid.bb b/meta-phosphor/common/recipes-phosphor/host-ipmid/host-ipmid.bb
index 23728cb..b3dba1a 100644
--- a/meta-phosphor/common/recipes-phosphor/host-ipmid/host-ipmid.bb
+++ b/meta-phosphor/common/recipes-phosphor/host-ipmid/host-ipmid.bb
@@ -17,7 +17,8 @@ TARGET_CFLAGS += "-fpic"
RDEPENDS_${PN} += "clear-once"
RDEPENDS_${PN} += "settings"
RDEPENDS_${PN} += "network"
-SRC_URI += "git://github.com/openbmc/phosphor-host-ipmid"
+SRC_URI += "git://github.com/openbmc/phosphor-host-ipmid \
+ file://whitelist.conf"
SRCREV = "092360e55605c205aedd2ab40044c42e64b7d38c"
@@ -26,8 +27,10 @@ INSTALL_NAME = "ipmid"
do_install() {
install -m 0755 -d ${D}${libdir}/host-ipmid
+ install -m 0755 -d ${D}${datadir}/host-ipmid
install -m 0755 ${S}/*.so ${D}${libdir}/host-ipmid/
install -m 0755 -d ${D}${includedir}/host-ipmid
install -m 0644 ${S}/ipmid-api.h ${D}${includedir}/host-ipmid/
+ install -m 0644 ${WORKDIR}/whitelist.conf ${D}${datadir}/host-ipmid
}
diff --git a/meta-phosphor/common/recipes-phosphor/host-ipmid/host-ipmid.bbappend b/meta-phosphor/common/recipes-phosphor/host-ipmid/host-ipmid.bbappend
new file mode 100644
index 0000000..b2051b6
--- /dev/null
+++ b/meta-phosphor/common/recipes-phosphor/host-ipmid/host-ipmid.bbappend
@@ -0,0 +1 @@
+FILESEXTRAPATHS_prepend := "${THISDIR}/${PN}/files:"
diff --git a/meta-phosphor/common/recipes-phosphor/host-ipmid/host-ipmid/files/whitelist.conf b/meta-phosphor/common/recipes-phosphor/host-ipmid/host-ipmid/files/whitelist.conf
new file mode 100644
index 0000000..20dd429
--- /dev/null
+++ b/meta-phosphor/common/recipes-phosphor/host-ipmid/host-ipmid/files/whitelist.conf
@@ -0,0 +1,26 @@
+<NetFn><Command>
+0x00:0x02
+0x00:0x08
+0x00:0x09
+0x04:0x2D
+0x04:0x2F
+0x04:0x30
+0x06:0x01
+0x06:0x08
+0x06:0x22
+0x06:0x24
+0x06:0x2E
+0x06:0x31
+0x06:0x35
+0x06:0x36
+0x06:0x42
+0x0A:0x12
+0x0A:0x40
+0x0A:0x42
+0x0A:0x44
+0x0A:0x48
+0x0A:0x49
+0x0C:0x02
+0x2C:0x00
+0x2C:0x03
+0x32:0xF0
--
2.8.4
More information about the openbmc
mailing list