aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2015-02-01samhain: fix aarch64 build issuesArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01checksec: fix rdepend issueArmin Kuster
WARNING: QA Issue: checksec requires /bin/bash, but no providers in its RDEPENDS [file-rdeps] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01libseccomp: fix rdependsArmin Kuster
WARNING: QA Issue: libseccomp requires /bin/bash, but no providers in its RDEPENDS [file-rdeps] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01ccs-tools: remove unused variable.Armin Kuster
There was a ref to DEPEND with is meaningless so remove it. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01samhain: client fix rdependsArmin Kuster
WARNING: QA Issue: samhain-client requires /bin/bash, but no providers in its RDEPENDS [file-rdeps] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-13nikto: fix SRC_URI for multilibPaul Eggleton
${BPN} should be used instead of ${PN} where you want the name without any prefix (and ${BP} is short for ${BPN}-${PV}). Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-13libseccomp: fix SRC_URI for multilibPaul Eggleton
${BPN} should be used instead of ${PN} where you want the name without any prefix (and ${BP} is short for ${BPN}-${PV}). Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-13libcap-ng: fix checksumsArmin Kuster
the checksums did not get updated when upgrading package. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-03nikto: fix launching errorsArmin Kuster
add several missing perl package depends so app can launch Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-03libwhisker2-perl: fix build issueArmin Kuster
minor formating clean ups. add "ssl" depend packageconf option Change inherit perlnative to BBCLASSEXTEND = "native" to fix build issue error: Can't install libwhisker2-perl-2.5-r0@i586: no package provides /home/akuster/oss/maint/security/poky/build/tmp/sysroots/x86_64-linux/usr/bin/perl-native/perl.real Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-03nikto: fix dependsArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-03perl: reorg recipes to match meta-perl.Armin Kuster
move security perl recipes to a more standardized recipes-perl layout. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-03remove: libcurses-perl, libhtml-parser-perl, libnet-dns-perlArmin Kuster
those packages are being moved to meta-perl. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-03libcap-ng: update to 7.4 plus security fixArmin Kuster
0.7.4 - In pscap, remove unused code - Add CAPNG_INIT_SUPP_GRP to capng_change_id - Drop CAP_COMPROMISE_KERNEL - Update the autotools components - Dynamically detect last capability (#895105) - Add PR_SET_NO_NEW_PRIVS to capng_lock if kernel supports it (CVE-2014-3215) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-11-28samhain: update to 3.1.3Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-11-28packagegroups [v2]: add a few more catagoriesArmin Kuster
Add tripwire, samhain and checksec packages fix ccs-tools to exclude if no kernel support v2: fixed missing "}" Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-11-28pinentry: remove from layerArmin Kuster
pinentry is now in oe-core so remove it from this layer. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-11-28libseccomp: add package for tests.Armin Kuster
I wanted to run the tests manually on a target. Tests are now built and packaged. to run: /usr/lib/libseccomp/tests/regression -a will add ptest later. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-10-26checksecurity: update to version 2.0.15Armin Kuster
update fixed: * Fix bug in the CS_NFSAFS definition in etc/check-setuid.conf that prevents the script from matching any filesystem. This bug was, actually, making the script not do anything in the default configuration. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-10-26isic: Add new packageArmin Kuster
This adds the ISIC is a suite of utilities to exercise the stability of an IP and its component stacks (TCP/UDP/ICMP etc.) It generates piles of pseudo random packets with configurable tendancies, then sent to the target to penetrate its firewall rules or find bug backported two patches from Redhat. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-10-26samhain: update to 3.1.2Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-09-13README: update layers referencesArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-09-13layer.conf: add layer depends.Armin Kuster
added layerdepends check for perl-layer and opemembedded-layer Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-09-13libnet-ssleay-perl: remove from layerArmin Kuster
libnet-ssleay-perl is now in meta-perl Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-09-13tripwire: ppc64 build failure.Armin Kuster
| configure: error: /bin/sh ./config.sub powerpc64-poky-linux failed config.sub did not understand the powerpc64 par. this patch adds that understanding. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-09-13nmap: New QA issue via ppcArmin Kuster
Fixes: WARNING: QA Issue: nmap rdepends on libpcap, but it isn't a build dependency? [build-deps] nmap internal lua library does not compile with PPC so use OE version instead. Changed PACKAGECONFIG assignment from "??=" to "=". It was empty when using PPC. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-09-13nmap: Add gui supportArmin Kuster
Add zenmap to work with gtk+/x11 Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-09-13v2] nmap: use pkgconfig and reorgArmin Kuster
Added pkgconfig support Since most binaries provided by nmap can be excluded via configure manage via pkgconfig Aligned python packages with binaries so nmap-python is no longer needed V2: Missed some options in EXTRA_OECONF changes Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-09-13nmap: build QA WarningsArmin Kuster
WARNING: QA Issue: nmap rdepends on libcrypto, but it isn't a build dependency? [build-deps] WARNING: QA Issue: nmap rdepends on libssl, but it isn't a build dependency? [build-deps] This fixes the above QA warnings. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-08-27samhain: arm build failureArmin Kuster
| x_sh_error.c: In function 'sh_error_string': | x_sh_error.c:1580:31: error: incompatible type for argument 1 of 'memmove' | #define VA_COPY(ap1, ap2) memmove ((ap1), (ap2), sizeof (va_list)) | ^ | x_sh_error.c:1720:14: note: in expansion of macro 'VA_COPY' | /*@i@*/VA_COPY(vl2, vl); | ^ this patch fixes the arm build failure. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-08-27pinentry: Fix QA errorArmin Kuster
This fixes: WARNING: QA Issue: pinentry rdepends on libcap, but it isn't a build dependency? [build-deps] Also add pkgconfig support. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-08-27samhain: server packageArmin Kuster
This is the server portion. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-08-27samhain: client packageArmin Kuster
This is the client portion. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-08-27samhain: New ISD packageArmin Kuster
These are the base files needed by both client and server recipes. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-08-27tripwire: Add files for package supportArmin Kuster
Signed-off-by: Armin Kuster <akuster@mvista.com>
2014-08-27tripwire: Add new package to layerArmin Kuster
Signed-off-by: Armin Kuster <akuster@mvista.com>
2014-08-20tomoyo: Add kconfigArmin Kuster
V2: Fixed path to init program Fix typo in name Add kernel config to enable tomoyo Signed-off-by: Armin Kuster <akuster@mvista.com>
2014-08-20tomoyo: ccs-toolsArmin Kuster
Add userland support program ccs-tools V2: Added RDEPEND on systemd Fixed Description Moved man page to doc packaged Added Requiered distro feature on kernel component. Fixed typo in path for init program Signed-off-by: Armin Kuster <akuster@mvista.com>
2014-08-10libnetaddr-ip-perl: Blacklist recipeArmin Kuster
As far as I can tell, this is not used by any reciped in meta-security. It does not build so I am Black listing it. Signed-off-by: Armin Kuster <akuster@mvista.com>
2014-08-10libcurses-perl: Fix build issueArmin Kuster
Update to later vesrion to fix build issue. Signed-off-by: Armin Kuster <akuster@mvista.com>
2014-08-06V2 packagegroup: Add initial set of package groupsArmin Kuster
Signed-off-by: Armin Kuster <akuster@mvista.com>
2014-08-06checksec: Add new alsr pic pie test scriptArmin Kuster
Signed-off-by: Armin Kuster <akuster@mvista.com>
2014-08-06pinentry: Fix do_package_qa issueArmin Kuster
This fixes; ERROR: QA Issue: pinentry: The compile log indicates that host include and/or library paths were used. Signed-off-by: Armin Kuster <akuster@mvista.com>
2014-08-06nmap: update to 6.46Armin Kuster
Updated to later version on nmap. remove patch which is included in update Added ndiff package Include zenmap build changes but commented out for now and untested Signed-off-by: Armin Kuster <akuster@mvista.com>
2014-07-02libcap-ng: resolved issue related with LONG_BIT definitionAlexandru.Vaduva
The problem is well known for 64 bits architectures and the solution is offered in the same recibe but in the meta-selinux layer. Signed-off-by: Alexandru.Vaduva <Alexandru.Vaduva at enea.com> Signed-off-by: Armin Kuster <akuster@mvista.com>
2014-07-02meta-security: Add MaintainersArmin Kuster
Add Maintainers statement to README and add self to list. Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2014-05-07nmap: inherit autotools-brokensep to allow B=S build.Nick D'Ademo
Signed-off-by: Nick D'Ademo <nickdademo@gmail.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-11-05lib-perl: Fix quoting in DESCRIPTIONSaul Wold
My mistake for taking the older version, I thought I had the latest Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-11-04libseccomp: add latest stable version, add ptestJoe MacDonald
A new stable version of libseccomp is available, so update the recipe. At the same time, integrate the ptest support that's currently being discussed on the libseccomp list. Signed-off-by: Joe MacDonald <joe@deserted.net> Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-10-23meta-security: Bump buck-security to new version and remove patch file.mulhern
Since I am maintaining buck-security it has accepted the patch take_root_dir.patch and the new version (0.7) contains the result of applying the patch. Signed-off-by: mulhern <mulhern@yoctoproject.org>