aboutsummaryrefslogtreecommitdiffstats
path: root/recipes-security
AgeCommit message (Collapse)Author
2024-03-27Check for usrmerge before removing /usr/libJeremy A. Puhlman
Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-12-29libgssglue: update to 0.8Armin Kuster
LICENSE changed Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-09-08paxctl: Fix do_package QA Issue.Lei Maohui
After usrmerge had been enabled, paxctl has the fowllowing error: ERROR: paxctl-0.9-r0 do_package: QA Issue: paxctl: Files/directories were installed but not shipped in any package: /sbin/paxctl Signed-off-by: Lei Maohui <leimaohui@fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-08-06sshguard: Update to 2.4.3Armin Kuster
Changelog: https://bitbucket.org/sshguard/sshguard/src/master/CHANGELOG.rst Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-08-06glome: update to tipLuke Granger-Brown
Markus Rudy (17): Use Github TeX Markdown instead of image includes. Merge pull request #134 from burgerdev/md-tex Merge pull request #135 from vvidic/cli-base64 RFD 002: public key format at rest (#109) Merge pull request #137 from vvidic/hmac Merge pull request #138 from vvidic/hmac2 Update list of supported Python versions Install golint instead of 'get'ting it. Merge pull request #139 from burgerdev/actions Clarify format of public key at rest Test all supported config file keys Merge pull request #144 from burgerdev/public-key-format Fix linter findings for #144 Use 'release' buildtype for NixOS builds Merge pull request #149 from google/l9i/bye-java RFD 001: GLOME Login v2 (#102) login/v2 implementation for Go (#162) Philipp Kern (21): Merge pull request #133 from google/l9i/pam-fix Merge pull request #132 from google/l9i/nix-shell Merge pull request #140 from vvidic/defaul-typo Merge pull request #142 from vvidic/soversion Merge pull request #146 from burgerdev/lint Merge pull request #148 from google/dependabot/go_modules/go/golang.org/x/crypto-0.1.0 Merge pull request #152 from google/l9i/cpplint Merge pull request #154 from vvidic/docker-public-key Merge pull request #155 from vvidic/prompt-fix Insert a slash after url-prefix when writing it into prompt Merge pull request #156 from google/url-prefix-compat Merge pull request #157 from vvidic/config-order State that devices require randomness for the protocol to work Update docs/protocol.md Merge pull request #158 from google/pkern-patch-1 Fix error to state "at most" instead of "at least" Merge pull request #153 from vvidic/min-tag-length Merge pull request #159 from vvidic/host-id-type README.md: Codeblock fixups Merge branch 'master' into l9i/README Merge pull request #141 from google/l9i/README Piotr Lewandowski (12): Fix failing PAM test Treat warning as errors Define OPENSSL_API_COMPAT to require OpenSSL >=1.1 Use werror only for CI Add nix-shell config for setting up dev environment Add GitHub Action workflow for shell.nix Add intro and installation steps to README.md Address reviewer's comments Wrap lines Delete Java implementation Rename `url-prefix` to `prompt` (#131) Add `cpplint` linter Valentin Vidic (10): Update CLI to use base64 instead of hex tags. Replace deprecated OpenSSL HMAC API with EVP. Replace OpenSSL EVP_DigestSign API with HMAC() Fix typo: defaul => default Use project version in library version Update Docker scripts for new public key format Fix setting of prompt parameter Parse command line again after reading the config Add config option for minimum authcode length #122 Add config option for host-id type #122 dependabot[bot] (1): Bump golang.org/x/crypto in /go Signed-off-by: Luke Granger-Brown <lukegb@google.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-07-31firejail: only allow x86-64 and arm64 to buildArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-06-25*.patch: fix malformed Upstream-Status and SOB linesMartin Jansa
* as reported by openembedded-core/scripts/contrib/patchreview.py -v . Malformed Signed-off-by 'Signed-Off-By:' (./recipes-mac/AppArmor/files/crosscompile_perl_bindings.patch) Malformed Signed-off-by 'Signed-Off-By:' (./recipes-mac/AppArmor/files/disable_perl_h_check.patch) Missing Upstream-Status tag (./recipes-compliance/scap-security-guide/files/0001-standard.profile-expand-checks.patch) Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-ids/samhain/files/samhain-not-run-ptest-on-host.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-ids/samhain/files/samhain-pid-path.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-ids/suricata/files/fixup.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-scanners/clamav/files/fix2_libcurl_check.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/ecryptfs-utils/files/ecryptfs-utils-CVE-2016-6224.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/isic/files/configure_fix.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/krill/files/panic_workaround.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/opendnssec/files/libdns_conf_fix.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/opendnssec/files/libxml2_conf.patch Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-06-25isic: fine tune Upstream-StatusArmin Kuster
These are changes I did so apply the appropriate label. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-06-25*.patch: add Upstream-Status to all patchesMartin Jansa
There is new patch-status QA check in oe-core: https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a This is temporary work around just to hide _many_ warnings from optional patch-status (if you add it to WARN_QA). This just added Upstream-Status: Pending everywhere without actually investigating what's the proper status. This is just to hide current QA warnings and to catch new .patch files being added without Upstream-Status, but the number of Pending patches is now terrible: 0 (0%) meta-parsec N/A (0%) meta-hardening 1 (100%) meta-integrity 15 (68%) meta-tpm 27 (61%) meta-security Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-05-06libmhash: fix multilib header conflict - mutils/mhash_config.hAdrian Zaharia
Header file conflict between 32-bit and 64-bit versions Signed-off-by: Adrian Zaharia <Adrian.Zaharia@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-05-06fscryptctl: update to 1.0.1Armin Kuster
Don't build man as it needs pandoc Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-04-08krill: forced to inclued fetch hashes.Armin Kuster
Now manditory via Poky commit: https://git.yoctoproject.org/poky/commit/bitbake/lib/bb/fetch2?id=4d9886e1435dba3785973cc920865f8ab67e644d used cargo-update-recipe-crates to fixup Drop krill.inc in favor of new crate file name Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-03-20cryptmout: update to 6.2.0Armin Kuster
Change LIC_FILES_CHKSUM to use COPYING Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-03-20krill: update 0.12.3Armin Kuster
refresh patch Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-03-20firejail: update 0.9.72Armin Kuster
refresh patch Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-03-20libmspack: update to 1.11Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-03-20fscrypt: update to 1.1.0Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-01-04bubblewrap: remove recipeMarkus Volk
It was moved to meta-oe. Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-11-19bubblewrap: Update 0.6.2 -> 0.7.0Alex Kiernan
Inherit github-releases so that `devtool upgrade` can identify new versions correctly. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-11-19chipsec: update to 1.9.1Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-09-25cryptmount: update to 6.0Armin Kuster
LIC_FILES_CHKSUM changed do to yr change Drop patch remove_linux_fs.patch Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-09-25libgssglue: update to 0.7Armin Kuster
LIC_FILE_CHKSUM changes to to indentations changes. use bootstrap to setup config properly. Drop libgssglue-fix-CVE-2011-2709.patch, libgssglue-g-initialize.patch now included in update. and ibgssglue-mglueP.patch now included in update. Drop libgssglue-gss-inq-cred.patch still pending after 5 yrs. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-09-12update chipsec to 1.8.8Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-09-12cryptmount: fix systemd service installArmin Kuster
Default is to install the service in /usr/lib Signed-off-by: Armin Kuster <akuster808@gmail.com> -- [V2] Fix typo in subject
2022-08-25cyptmount: Fix mount.h conflicts seen with glibc 2.36+Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-08-12meta-security: Add recipe for GlomeJohn Edward Broadbent
Generic Low Overhead Message Exchange (GLOME) is a protocol providing secure authentication and authorization for low dependency environments. Signed-off-by: John Edward Broadbent <jebr@google.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-08-12cryptmount: Add new pkgArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-08-02krill: only builds on x86/x86-64 and arm64Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-08-02krill: update to 0.9.6Armin Kuster
add UPGRADE_CHECK vars Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-08-02ecryptfs-utils: add UPSTREAM_CHECK_URIArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-07-30chipsec: update to 1.8.7Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-07-30bubblewrap: Add recipeAlex Kiernan
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
2022-06-23chipsec: update to 1.8.5Armin Kuster
minor recipe cleanup Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-06-23packagegroup-core-security: skip mips firejailArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-06-23firejail: Add new packageArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-06-23libmhash: add native pkg supportArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-06-18sssd:move to dynamic networking-layerArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-05-14meta-security: move perl and python recipes to dynamic layers structureArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-05-14fscrypt: add distro_check on pamArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-04-13LICENSE: update to SPDX standard namesJoe Slater
Use convert-spdx-licenses.py to update LICENSE in recipes. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-04-07fscrypt: update dependecy from go-dep-native to go-nativeDavide Gardenal
Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-04-02python3-fail2ban: fix compile issue on some hostsArmin Kuster
Use python3-native to use 2to3 Fix build issue on some hosts with this error: (result, consumed) = self._buffer_decode(data, self.errors, final) | UnicodeDecodeError: 'utf-8' codec can't decode byte 0xd8 in position 152: invalid continuation byte Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-04-02LICENSE: adopt SPDX standard namesRobert Yang
Modify LICENSE for ding-libs and libmhash. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-04-02meta-security : Use SPDX style licensing formatAshish Sharma
WARNING: selinux-sandbox-3.3-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2+ [obsolete-license] \ WARNING: selinux-gui-3.3-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2+ [obsolete-license] \ WARNING: semodule-utils-3.3-r0.1 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2+ [obsolete-license] \ WARNING: selinux-dbus-3.3-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2+ [obsolete-license] \ WARNING: libwhisker2-perl-2.5-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPL-1.0+ [obsolete-license] \ WARNING: lib-perl-0.63-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPL-1.0+ [obsolete-license] \ WARNING: libhtp-0.5.39-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2 [obsolete-license] \ ... Signed-off-by: Ashish Sharma <asharma@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-03-13python3-privacyidea: drop old package ref.Armin Kuster
meta-python dropped package via commit: 620689d4efba28bc8dd60e2d82908bfb3531fbd0 python3-backports-functional-lru-cache: remove, not needed for Python 3 Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-03-11Subject: [PATCH] Subject: python3-fail2ban: switch to legacy setuptools3Ashish Sharma
raise InvalidWheelFilename(f"{filename} is not a valid wheel filename.") pip._internal.exceptions.InvalidWheelFilename: fail2ban-*-*.whl is not a valid wheel filename. Removed build tracker: '/tmp/pip-req-tracker-qnepnk46' ERROR: Failed to pip install wheel. Check the logs. Signed-off-by: Ashish Sharma <asharma@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-03-11python3-fail2ban: fix SPDX license.Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-03-11python3-privacyidea: update to 3.6.2Armin Kuster
Fix license. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-03-11python3-privacyidea: fix QA ERRORArmin Kuster
ERROR: python3-privacyidea-3.5.2-r0 do_package: QA Issue: python3-privacyidea: Files/directories were installed but not shipped in any package: /usr/etc /usr/etc/privacyidea /usr/etc/privacyidea/dictionary /usr/etc/privacyidea/privacyideaapp.wsgi Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-02-22chipsec: fix WARNINGArmin Kuster
distutils3.bbclass is deprecated, please use setuptools3.bbclass instead Signed-off-by: Armin Kuster <akuster808@gmail.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-04-19 23:25:02 +0000