Add a detection of non-unified versions of libraries/crypto packages
Value
Description
Add detection to added crypto library version (OpenSSL, OPTEE etc) to the update delta package tool. This can use the generated SBOM.
In scope
Develop a script to detect those libraries
Out of Scope
Automating the check
Acceptance Criteria
The script detects multiple copies of the same library, in different versions, in various layers. It should cover all layers used by Oniro.
Activity
added to epic &107 (closed)
added teamsecurity label
changed milestone to %goofy alpha
mentioned in merge request !70 (closed)
changed milestone to %goofy beta
changed iteration to Oniro Core Iterations Jul 1, 2022 - Jul 31, 2022
added Doing label
Current result
$ python3 ../oniro-scripts/list_duplicate_recipes.py | column -t android-tools meta-clang/10.0.0.r36 meta-oe/5.1.1.r37 android-tools-conf meta-clang/1.0 meta-oe/1.0 android-tools-conf-configfs meta-clang/1.0 meta-oe/1.0 aspell meta-selftest/0.0.0.1 meta/0.60.8 checksec meta-security-isafw/1.5-1 meta-security/2.4.0 core-image-rt meta-intel/unknown meta/unknown core-image-rt-sdk meta-intel/unknown meta/unknown efitools meta-seco-imx/git meta-efi-secure-boot/git efitools-native meta-seco-imx/git meta-efi-secure-boot/git ffmpeg meta-freescale/4.4.1 meta/5.0.1 gcc meta/11.3 meta-oniro-staging/12.1 gcc-cross meta/11.3 meta-oniro-staging/12.1 meta-zephyr-core/6.x.arc meta-arm-toolchain/arm-11.2 gcc-cross-canadian meta/11.3 meta-oniro-staging/12.1 meta-zephyr-core/6.x.arc meta-arm-toolchain/arm-11.2 gcc-crosssdk meta/11.3 meta-oniro-staging/12.1 meta-arm-toolchain/arm-11.2 gcc-runtime meta/11.3 meta-oniro-staging/12.1 meta-arm-toolchain/arm-11.2 gcc-sanitizers meta/11.3 meta-oniro-staging/12.1 meta-arm-toolchain/arm-11.2 gcc-source meta/11.3 meta-oniro-staging/12.1 meta-zephyr-core/6.x.arc meta-arm-toolchain/arm-11.2 gn meta-arm/git meta-oniro-staging/git gstreamer1.0-libav meta-freescale/1.18.5 meta/1.20.3 gstreamer1.0-plugins-ugly meta-freescale/1.18.5 meta/1.20.3 gstreamer1.0-rtsp-server meta-freescale/1.18.5 meta/1.20.3 libgcc meta/11.3 meta-oniro-staging/12.1 meta-zephyr-core/6.x.arc meta-arm-toolchain/arm-11.2 libgcc-initial meta/11.3 meta-oniro-staging/12.1 meta-arm-toolchain/arm-11.2 libgfortran meta/11.3 meta-oniro-staging/12.1 meta-arm-toolchain/arm-11.2 libsign meta-seco-imx/git meta-signing-key/git libxpm meta/3.5.13 meta-skeleton/3.5.6 linux-yocto meta/5.10 meta/5.15 meta-arm-bsp/5.4 openocd meta-oe/git meta-riscv/riscv optee-client meta-seco-imx/3.13.0.imx meta-arm/3.14.0 meta-freescale/3.15.0.imx meta-arm/3.16.0 optee-os meta-seco-imx/3.13.0.imx meta-arm/3.14.0 meta-freescale/3.15.0.imx meta-arm/3.16.0 optee-test meta-seco-imx/3.13.0.imx meta-freescale/3.15.0.imx meta-arm/3.16.0 pim435 meta-oe/git meta-oniro-core/git python3-imgtool meta-zephyr-core/1.7.2 meta-python/1.9.0 python3-packaging meta-zephyr-core/21.0 meta/21.3 python3-pygments meta-zephyr-core/2.10.0 meta/2.11.2 python3-pyparsing meta-zephyr-core/2.4.7 meta/3.0.7 python3-sphinx meta-zephyr-core/4.2.0 meta/4.4.0 testfloat meta-freescale/2a meta-oe/3e tpm2-abrmd meta-tpm2/2.3.3 meta-tpm/2.4.1 tpm2-tools meta-tpm2/4.3.2 meta-tpm/5.2 tpm2-tss meta-tpm2/2.4.6 meta-tpm/3.2.0 u-boot meta-arm-bsp/2020.07 meta-arm-bsp/2021.10 meta/2022.01
assigned to @tony3oo3
removed Doing label
Please register or sign in to reply