From patchwork Sat Oct 10 00:13:21 2015 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Andy Zhou X-Patchwork-Id: 528467 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from archives.nicira.com (li376-54.members.linode.com [96.126.127.54]) by ozlabs.org (Postfix) with ESMTP id B961D1402B4 for ; Sat, 10 Oct 2015 11:13:48 +1100 (AEDT) Received: from archives.nicira.com (localhost [127.0.0.1]) by archives.nicira.com (Postfix) with ESMTP id DB7F5102D2; Fri, 9 Oct 2015 17:13:47 -0700 (PDT) X-Original-To: dev@openvswitch.org Delivered-To: dev@openvswitch.org Received: from mx3v1.cudamail.com (mx3.cudamail.com [64.34.241.5]) by archives.nicira.com (Postfix) with ESMTPS id 33160102CB for ; Fri, 9 Oct 2015 17:13:47 -0700 (PDT) Received: from bar3.cudamail.com (bar1 [192.168.15.1]) by mx3v1.cudamail.com (Postfix) with ESMTP id 9EEEFD4879 for ; Fri, 9 Oct 2015 18:13:46 -0600 (MDT) X-ASG-Debug-ID: 1444436025-03dd7b7d3f111a40001-byXFYA Received: from mx3-pf3.cudamail.com ([192.168.14.3]) by bar3.cudamail.com with ESMTP id ivnXfGzHe2ldL87r (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Fri, 09 Oct 2015 18:13:45 -0600 (MDT) X-Barracuda-Envelope-From: azhou@nicira.com X-Barracuda-RBL-Trusted-Forwarder: 192.168.14.3 Received: from unknown (HELO mail-pa0-f52.google.com) (209.85.220.52) by mx3-pf3.cudamail.com with ESMTPS (RC4-SHA encrypted); 10 Oct 2015 00:13:45 -0000 Received-SPF: unknown (mx3-pf3.cudamail.com: Multiple SPF records returned) X-Barracuda-RBL-Trusted-Forwarder: 209.85.220.52 Received: by pabve7 with SMTP id ve7so41391578pab.2 for ; Fri, 09 Oct 2015 17:13:45 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:cc:subject:date:message-id; bh=7mbAocK4CzkZimATfy8YiPLGqCjVmW7ZdL9GeeDn6n8=; b=jUlIqrR1o2C+vZWwFe1lY1XBEj4xJpLqy0BQQyWO6aCZwIXHdB9tW0b7wLkOyKJJnn 05LP98UGv+wXyK0ESEQ3ag2gsqpSC7boqEzpR4uVm3ejPyOn4tRzWxG975+nZN7s1FE2 F36gZxo6DUpIjomWZHF0y/Ir7/xUSiEi5qE/WtSzBmJPJhiqcbBXpaGCeh4YeKTJsoD5 YAA8VO7KcR/4kOKUgcafKt9rBacfz5tf+J8+NtK1xC31bwIcLw2em19qFOOVOQRKm3kK qAUMc12uBXhWwZEWbKlWoWiwSOa7wI6TpsBNbQ2ZGD9pTk7xpmo5wXCxvZNqxzlBu+uD 1hnw== X-Gm-Message-State: ALoCoQkGrJX3VOth5PT95WMFnqKfrpmwJ7bTxcg4LU0bbXNE59eVUWnCP3xNEulpWZHobDF0fUoJ X-Received: by 10.66.227.101 with SMTP id rz5mr18576735pac.123.1444436024880; Fri, 09 Oct 2015 17:13:44 -0700 (PDT) Received: from ubuntu.localdomain ([208.91.1.34]) by smtp.gmail.com with ESMTPSA id be3sm4595005pbc.88.2015.10.09.17.13.44 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Fri, 09 Oct 2015 17:13:44 -0700 (PDT) X-CudaMail-Envelope-Sender: azhou@nicira.com X-Barracuda-Apparent-Source-IP: 208.91.1.34 From: Andy Zhou To: dev@openvswitch.org X-CudaMail-Whitelist-To: dev@openvswitch.org X-CudaMail-MID: CM-V3-1008072150 X-CudaMail-DTE: 100915 X-CudaMail-Originating-IP: 209.85.220.52 Date: Fri, 9 Oct 2015 17:13:21 -0700 X-ASG-Orig-Subj: [##CM-V3-1008072150##][Debian-non-root v2 1/4] Debian: require libcap-ng library for building packages Message-Id: <1444436004-25557-1-git-send-email-azhou@nicira.com> X-Mailer: git-send-email 1.9.1 X-Barracuda-Connect: UNKNOWN[192.168.14.3] X-Barracuda-Start-Time: 1444436025 X-Barracuda-Encrypted: DHE-RSA-AES256-SHA X-Barracuda-URL: https://web.cudamail.com:443/cgi-mod/mark.cgi X-ASG-Whitelist: Header =?UTF-8?B?eFwtY3VkYW1haWxcLXdoaXRlbGlzdFwtdG8=?= X-Virus-Scanned: by bsmtpd at cudamail.com X-Barracuda-BRTS-Status: 1 Subject: [ovs-dev] [Debian-non-root v2 1/4] Debian: require libcap-ng library for building packages X-BeenThere: dev@openvswitch.org X-Mailman-Version: 2.1.16 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Errors-To: dev-bounces@openvswitch.org Sender: "dev" libcap-ng is going to be required to build Debian packages. Daemons will run as the ovs user and group, instead of root, to improve security. Signed-off-by: Andy Zhou Acked-by: Ansis Atteka Acked-by: Ben Pfaff --- debian/control | 1 + debian/rules | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/debian/control b/debian/control index 49d6f5f..3eac644 100644 --- a/debian/control +++ b/debian/control @@ -9,6 +9,7 @@ Build-Depends: graphviz, bzip2, debhelper (>= 8), dh-autoreconf, + libcap-ng-dev, libssl-dev, libtool, openssl, diff --git a/debian/rules b/debian/rules index d8e90c7..91621d3 100755 --- a/debian/rules +++ b/debian/rules @@ -30,7 +30,7 @@ override_dh_autoreconf: dh_autoreconf $(DH_AS_NEEDED) override_dh_auto_configure: - dh_auto_configure -- --enable-ssl $(DATAPATH_CONFIGURE_OPTS) + dh_auto_configure -- --enable-ssl --enable-libcapng=yes $(DATAPATH_CONFIGURE_OPTS) override_dh_auto_test: ifeq (,$(filter nocheck,$(DEB_BUILD_OPTIONS)))