Age | Commit message (Collapse) | Author |
|
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
WARNING: QA Issue: checksec requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
WARNING: QA Issue: libseccomp requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
There was a ref to DEPEND with is meaningless so remove it.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
WARNING: QA Issue: samhain-client requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
${BPN} should be used instead of ${PN} where you want the name without
any prefix (and ${BP} is short for ${BPN}-${PV}).
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
${BPN} should be used instead of ${PN} where you want the name without
any prefix (and ${BP} is short for ${BPN}-${PV}).
Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
the checksums did not get updated when upgrading package.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
add several missing perl package depends so app can launch
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
minor formating clean ups.
add "ssl" depend packageconf option
Change inherit perlnative to BBCLASSEXTEND = "native" to fix build issue
error: Can't install libwhisker2-perl-2.5-r0@i586: no package provides /home/akuster/oss/maint/security/poky/build/tmp/sysroots/x86_64-linux/usr/bin/perl-native/perl.real
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
move security perl recipes to a more standardized
recipes-perl layout.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
those packages are being moved to meta-perl.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
0.7.4
- In pscap, remove unused code
- Add CAPNG_INIT_SUPP_GRP to capng_change_id
- Drop CAP_COMPROMISE_KERNEL
- Update the autotools components
- Dynamically detect last capability (#895105)
- Add PR_SET_NO_NEW_PRIVS to capng_lock if kernel supports it
(CVE-2014-3215)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
Add tripwire, samhain and checksec packages
fix ccs-tools to exclude if no kernel support
v2:
fixed missing "}"
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
pinentry is now in oe-core so remove it from this layer.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
I wanted to run the tests manually on a target. Tests are now
built and packaged.
to run: /usr/lib/libseccomp/tests/regression -a
will add ptest later.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
update fixed:
* Fix bug in the CS_NFSAFS definition in etc/check-setuid.conf that prevents
the script from matching any filesystem. This bug was, actually, making the
script not do anything in the default configuration.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
This adds the ISIC is a suite of utilities to exercise the stability of an IP and its component stacks (TCP/UDP/ICMP etc.) It generates piles of pseudo random packets with configurable tendancies, then sent to the target to penetrate its firewall rules or find bug
backported two patches from Redhat.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
added layerdepends check for perl-layer and opemembedded-layer
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
libnet-ssleay-perl is now in meta-perl
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
| configure: error: /bin/sh ./config.sub powerpc64-poky-linux failed
config.sub did not understand the powerpc64 par.
this patch adds that understanding.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
Fixes:
WARNING: QA Issue: nmap rdepends on libpcap, but it isn't a build dependency? [build-deps]
nmap internal lua library does not compile with PPC so use OE version instead.
Changed PACKAGECONFIG assignment from "??=" to "=". It was empty when using
PPC.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
Add zenmap to work with gtk+/x11
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
Added pkgconfig support
Since most binaries provided by nmap can be excluded via configure
manage via pkgconfig
Aligned python packages with binaries so nmap-python is no longer needed
V2: Missed some options in EXTRA_OECONF changes
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
WARNING: QA Issue: nmap rdepends on libcrypto, but it isn't a build dependency? [build-deps]
WARNING: QA Issue: nmap rdepends on libssl, but it isn't a build dependency? [build-deps]
This fixes the above QA warnings.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
| x_sh_error.c: In function 'sh_error_string':
| x_sh_error.c:1580:31: error: incompatible type for argument 1 of 'memmove'
| #define VA_COPY(ap1, ap2) memmove ((ap1), (ap2), sizeof (va_list))
| ^
| x_sh_error.c:1720:14: note: in expansion of macro 'VA_COPY'
| /*@i@*/VA_COPY(vl2, vl);
| ^
this patch fixes the arm build failure.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
This fixes: WARNING: QA Issue: pinentry rdepends on libcap, but it isn't a build dependency? [build-deps]
Also add pkgconfig support.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
This is the server portion.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
This is the client portion.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
These are the base files needed by both
client and server recipes.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
|
Signed-off-by: Armin Kuster <akuster@mvista.com>
|
|
Signed-off-by: Armin Kuster <akuster@mvista.com>
|
|
V2:
Fixed path to init program
Fix typo in name
Add kernel config to enable tomoyo
Signed-off-by: Armin Kuster <akuster@mvista.com>
|
|
Add userland support program ccs-tools
V2:
Added RDEPEND on systemd
Fixed Description
Moved man page to doc packaged
Added Requiered distro feature on kernel component.
Fixed typo in path for init program
Signed-off-by: Armin Kuster <akuster@mvista.com>
|
|
As far as I can tell, this is not used by any reciped in meta-security.
It does not build so I am Black listing it.
Signed-off-by: Armin Kuster <akuster@mvista.com>
|
|
Update to later vesrion to fix build issue.
Signed-off-by: Armin Kuster <akuster@mvista.com>
|
|
Signed-off-by: Armin Kuster <akuster@mvista.com>
|
|
Signed-off-by: Armin Kuster <akuster@mvista.com>
|
|
This fixes;
ERROR: QA Issue: pinentry: The compile log indicates that host include and/or library paths were used.
Signed-off-by: Armin Kuster <akuster@mvista.com>
|
|
Updated to later version on nmap.
remove patch which is included in update
Added ndiff package
Include zenmap build changes but commented out for now and untested
Signed-off-by: Armin Kuster <akuster@mvista.com>
|
|
The problem is well known for 64 bits architectures and the solution
is offered in the same recibe but in the meta-selinux layer.
Signed-off-by: Alexandru.Vaduva <Alexandru.Vaduva at enea.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
|
|
Add Maintainers statement to README and add self to list.
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
|
|
Signed-off-by: Nick D'Ademo <nickdademo@gmail.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
|
|
My mistake for taking the older version, I thought I had the latest
Signed-off-by: Saul Wold <sgw@linux.intel.com>
|
|
A new stable version of libseccomp is available, so update the recipe. At
the same time, integrate the ptest support that's currently being
discussed on the libseccomp list.
Signed-off-by: Joe MacDonald <joe@deserted.net>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
|
|
Since I am maintaining buck-security it has accepted the patch
take_root_dir.patch and the new version (0.7) contains the result of
applying the patch.
Signed-off-by: mulhern <mulhern@yoctoproject.org>
|