From patchwork Wed Nov 25 19:15:25 2015 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Andy Zhou X-Patchwork-Id: 548722 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from archives.nicira.com (unknown [IPv6:2600:3c00::f03c:91ff:fe6e:bdf7]) by ozlabs.org (Postfix) with ESMTP id 2E8001402DD for ; Thu, 26 Nov 2015 06:15:49 +1100 (AEDT) Received: from archives.nicira.com (localhost [127.0.0.1]) by archives.nicira.com (Postfix) with ESMTP id 4306510BC9; Wed, 25 Nov 2015 11:15:48 -0800 (PST) X-Original-To: dev@openvswitch.org Delivered-To: dev@openvswitch.org Received: from mx3v3.cudamail.com (mx3.cudamail.com [64.34.241.5]) by archives.nicira.com (Postfix) with ESMTPS id 5D06110A2C for ; Wed, 25 Nov 2015 11:15:46 -0800 (PST) Received: from bar3.cudamail.com (localhost [127.0.0.1]) by mx3v3.cudamail.com (Postfix) with ESMTPS id DEBB1161747 for ; Wed, 25 Nov 2015 12:15:45 -0700 (MST) X-ASG-Debug-ID: 1448478945-03dd7b0fbaa0b60001-byXFYA Received: from mx3-pf2.cudamail.com ([192.168.14.1]) by bar3.cudamail.com with ESMTP id bm9GmMsb5miJT7T5 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Wed, 25 Nov 2015 12:15:45 -0700 (MST) X-Barracuda-Envelope-From: azhou.ovn@gmail.com X-Barracuda-RBL-Trusted-Forwarder: 192.168.14.1 Received: from unknown (HELO mail-pa0-f52.google.com) (209.85.220.52) by mx3-pf2.cudamail.com with ESMTPS (RC4-SHA encrypted); 25 Nov 2015 19:15:45 -0000 Received-SPF: pass (mx3-pf2.cudamail.com: SPF record at _netblocks.google.com designates 209.85.220.52 as permitted sender) X-Barracuda-RBL-Trusted-Forwarder: 209.85.220.52 Received: by padhx2 with SMTP id hx2so65762277pad.1 for ; Wed, 25 Nov 2015 11:15:45 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=from:to:cc:subject:date:message-id:in-reply-to:references; bh=QqE6P4m1FZ+XfFq02u1K6D2wObF4UyFtutqWJCJmb60=; b=cjofyn1yomxkOt54o4WqcBBf75cwbAAo5YKGlh4/PmF3LrYC29Q1lgAtpMItIUT5Eh 3DTJMubCyC5oD5dQtc2WxUpmsJaXdIFuHJgvv9314h8zsKeVCgEeUASkQw6nNiCdiXml nqvV0sr1VphMlIeaGxJJAHVcIcdQ4WsMjhDfhlXSyrrX1f5hMDs6Lk9luz7OPO0pI31j 0+G9ovLoFlSEqgnSMXYvQjq41BXFKliB5ehrYrVZULoxyQOShk9eXSVyam6C6cSr9DbR hIOqTlWZ6ESK6HUH5jr1RBYuJzyCjEgxPzFr38y0YWa2vRLDIWrPO0/XCD9lBF50jh0y 50Dg== X-Received: by 10.66.170.238 with SMTP id ap14mr54714708pac.128.1448478945015; Wed, 25 Nov 2015 11:15:45 -0800 (PST) Received: from ubuntu.localdomain ([208.91.1.34]) by smtp.gmail.com with ESMTPSA id y83sm22414754pfi.85.2015.11.25.11.15.43 (version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Wed, 25 Nov 2015 11:15:44 -0800 (PST) X-CudaMail-Envelope-Sender: azhou.ovn@gmail.com X-Barracuda-Apparent-Source-IP: 208.91.1.34 From: Andy Zhou To: dev@openvswitch.org X-CudaMail-Whitelist-To: dev@openvswitch.org X-CudaMail-MID: CM-V2-1124043077 X-CudaMail-DTE: 112515 X-CudaMail-Originating-IP: 209.85.220.52 Date: Wed, 25 Nov 2015 11:15:25 -0800 X-ASG-Orig-Subj: [##CM-V2-1124043077##][Debian-non-root v4 RFC 1/2] Debian: require libcap-ng library for building packages Message-Id: <1448478926-5242-2-git-send-email-azhou@ovn.org> X-Mailer: git-send-email 1.9.1 In-Reply-To: <1448478926-5242-1-git-send-email-azhou@ovn.org> References: <1448478926-5242-1-git-send-email-azhou@ovn.org> X-Barracuda-Connect: UNKNOWN[192.168.14.1] X-Barracuda-Start-Time: 1448478945 X-Barracuda-Encrypted: DHE-RSA-AES256-SHA X-Barracuda-URL: https://web.cudamail.com:443/cgi-mod/mark.cgi X-ASG-Whitelist: Header =?UTF-8?B?eFwtY3VkYW1haWxcLXdoaXRlbGlzdFwtdG8=?= X-Virus-Scanned: by bsmtpd at cudamail.com X-Barracuda-BRTS-Status: 1 Subject: [ovs-dev] [Debian-non-root v4 RFC 1/2] Debian: require libcap-ng library for building packages X-BeenThere: dev@openvswitch.org X-Mailman-Version: 2.1.16 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Errors-To: dev-bounces@openvswitch.org Sender: "dev" libcap-ng is going to be required to build Debian packages. Daemons will run as the ovs user and group, instead of root, to improve security. Signed-off-by: Andy Zhou Acked-by: Ansis Atteka Acked-by: Ben Pfaff Acked-by: Ben Pfaff --- debian/control | 1 + debian/rules | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/debian/control b/debian/control index 49d6f5f..3eac644 100644 --- a/debian/control +++ b/debian/control @@ -9,6 +9,7 @@ Build-Depends: graphviz, bzip2, debhelper (>= 8), dh-autoreconf, + libcap-ng-dev, libssl-dev, libtool, openssl, diff --git a/debian/rules b/debian/rules index d8e90c7..91621d3 100755 --- a/debian/rules +++ b/debian/rules @@ -30,7 +30,7 @@ override_dh_autoreconf: dh_autoreconf $(DH_AS_NEEDED) override_dh_auto_configure: - dh_auto_configure -- --enable-ssl $(DATAPATH_CONFIGURE_OPTS) + dh_auto_configure -- --enable-ssl --enable-libcapng=yes $(DATAPATH_CONFIGURE_OPTS) override_dh_auto_test: ifeq (,$(filter nocheck,$(DEB_BUILD_OPTIONS)))