mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-05-01 15:32:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

cve-update-db-native: update the CVE database once a day only

Browse Source 
The update of the NVD database was expected to happen once per hour.
However, the database file date changes only if the content was actually
updated. In practice, the check worked for the first hour after the
new download.

As the NVD database changes usually only once a day, we can just
update it less frequently.

(From OE-Core rev: d0a56ad3a278e18e766f833619cf97869bdf6a4c)

Signed-off-by: Marta Rybczynska <marta.rybczynska@huawei.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 35bccdedadeaba820d58b69fe74ce5e4c1f577e3)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
(cherry picked from commit 88f2fb1581a17b2cf59a694ca9afb89e38ed40b5)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Marta Rybczynska
2022-05-02 16:25:35 +02:00
committed by Richard Purdie
parent 66b0097533
commit dd76704ea5
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
meta/recipes-core/meta/cve-update-db-native.bb
View File

@@ -42,10 +42,10 @@ python do_fetch() {
if os.path.exists(db_file):
os.remove(db_file)
# Don't refresh the database more than once an hour
# The NVD database changes once a day, so no need to update more frequently
try:
import time
if time.time() - os.path.getmtime(db_file) < (60*60):
if time.time() - os.path.getmtime(db_file) < (24*60*60):
return
except OSError:
pass