aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2017-02-18swtpm: fix compiler format warningPatrick Ohly
When building for x86-64, gcc complains: tpm_ioctl.c:866:9: error: format ‘%llx’ expects argument of type ‘long long unsigned int’, but argument 2 has type ‘long unsigned int’ [-Werror=format=] | printf("ptm capability is 0x%llx\n", (uint64_t)devtoh64(is_chardev, cap)); | ^ | cc1: all warnings being treated as errors Casting to "long long unsigned" matches the format specifier in all cases, including those where "long long" is larger than 64 bits. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-18swtpm: depends on tpm-toolsPatrick Ohly
The configure script checks for tpm_nvdefine from tpm-tools and fails when it is not present. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-18swtpm: enable native and nativesdk flavorsPatrick Ohly
For use with qemu-tpm as described in the swtpm main README, swtpm must be compiled natively. nativesdk is added just in case that someone wants to add this to an SDK. The fix_lib_search_path.patch was recently removed during the version update, but it is still needed when building natively. Here's a version that applies cleanly again. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-18trousers: tcsd.conf must be owned tss:tssPatrick Ohly
The upstream dist/Makefile.am ensures that /etc/tcsd.conf is owned by tss:tss, and that must not be changed because otherwise tcsd refuses to start. In addition, tss group and user should be added as special system group resp. user, because they are not normal users. This also avoids the host-user-contaminated QA warning because the "tss" user will typically not get assigned a UID from the same range as the host user that is used for building. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-18trousers: recommend tcsdPatrick Ohly
Installing tpm-tools for tools like tpm_takeown pull in the libtspi package, but the resulting system is not functional unless the tcsd (from the main "trousers" package) also gets installed. A RRECOMMENDS entry for that takes care of that automatically. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-18trousers: missing libtspi.so.1 in libtspi packagePatrick Ohly
The soname of libtspi.so is "libtspi.so.1" and therefore apps linked against that library depend on the libtspi.so.1 symlink to find the library. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-18swtpm: update to tipArmin Kuster
fix signed build issues Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Patrick Ohly <patrick.ohly@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-18libtpm: update to tipArmin Kuster
fix several build issues Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Patrick Ohly <patrick.ohly@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-18trousers: update to 0.3.14Armin Kuster
convert to git and remove incorperated patches Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Patrick Ohly <patrick.ohly@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-18tpm-tools: update to 1.3.9Armin Kuster
remove incorperated patches. Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Patrick Ohly <patrick.ohly@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-18qemu: use wildcard for PVArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Patrick Ohly <patrick.ohly@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-18tpm2.0-tss: fix musl build errorArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Patrick Ohly <patrick.ohly@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-18apparmor: Add new packageArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-18yocto-kernel: add apparmor fragmentsArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-12-15trousers: fix musl compilationAndré Draszik
Backport patches to fix compilation. Signed-off-by: André Draszik <adraszik@tycoint.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Armin Kuster <akuster@mvista.com>
2016-11-10suricata: update package to 3.1.3Armin Kuster
*Changes* Bug #1861: Suricata with multi tenancy does not start in 3.1/3.1.1 Bug #1889: Suricata doesn't error on missing semicolon Bug #1910: libhtp 0.5.23 (3.1.x) Bug #1912: http.memcap reached condition can lead to dead lock Bug #1913: af-packet fanout detection broken on Debian Jessie Bug #1933: unix-command socket created with last character missing (3.1.x) Bug #1934: make install-full does not install tls-events.rules (3.1.x) Bug #1941: Can't set fast_pattern on tls_sni content (3.1.x) Bug #1942: dns - back to back requests results in loss of response (3.1.x) Bug #1943: Check redis reply in non pipeline mode (3.1.x) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-10samhain: update to 4.2.0Armin Kuster
* Changes: - New option 'SetAuditdFlags = r|w|x|a' to (re-)define the flags supplied to auditd. - New option 'PortCheckDevice = device' for the port check module, to monitor a device regardless of the address assigned to it. - Fix for the case sensitivity of the arguments to the Severity/Class options. - Compiler warnings with gcc 6.2 and a few minor bugs have been fixed. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-10nmap: Upgrade package to 7.31Armin Kuster
LIC_FILES_CHKSUM change do to yr going from 2015 to 2016 in file. Added "no update" config option. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-10smack: Add new packageArmin Kuster
V2: Fix typo and add LDFLAG to makefile Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-10smack kernel: add smack kernel config fragmentsArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-01python-pycrypto: simplify to use pypi classArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-01suricata: update package to 3.1.2Armin Kuster
v2: rebased against master-next which has 3.1 Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-01libnetaddr-ip-perl: remove package. not used by anyone in this layerArmin Kuster
latest version does not build either Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-01samhain: recipe cleanupArmin Kuster
add a few distro feature checks. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-01package-group: fix tpm package listArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-01images: add a client and server imageArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-01linux-yocto-4.8: add tpm fragmentsArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-01tpm-tools: Fix gcc6 compile issueArmin Kuster
.8/src/tpm_mgmt/tpm_present.c | ../../../tpm-tools-1.3.8/src/tpm_mgmt/tpm_present.c: In function 'main': | ../../../tpm-tools-1.3.8/src/tpm_mgmt/tpm_present.c:358:5: error: this 'if' clause does not guard... [-Werror=misleading-indentation] | if (szTpmPasswd && !isWellKnown) | ^~ | ../../../tpm-tools-1.3.8/src/tpm_mgmt/tpm_present.c:360:2: note: ...this statement, but the latter is misleadingly indented as if it is guarded by the 'if' | return iRc; | ^~~~~~ Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-01package-group: Add tpm packagesArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-01layer.conf: Add filesystem dependsArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-01image: at image to help test buildsArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-01qemu: Add tpm flagArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-01tpm2simulator: add packageArmin Kuster
V2: Change ${S} and add OECMAKE_SOURCEPATH use ${S} instead of ${WORKDIR} in sed cmd Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-01swtpm: add new packageArmin Kuster
V2: remove CACHED_CONFIGUREVARS, not needed after all fix typo in selinux option Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-01libtpm: add new packageArmin Kuster
V2: - use SRCPV Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-01tpm-tools: add native supportArmin Kuster
V2: - drop 1.0 from PV Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-01tpm2.0-tss: Add new packageArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-10-19suricata: package update to 3.1.0Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-10-11clamav: fixup improper quotingMark Asselstine
Commit 217e06badb146539122732ab0eb27fd17cce09e5 [clamav: fix gcc 6.x build failure.] fixed a typo in "PACKAGECONFIG" (was missing the 'G') but unfortunately the PACKAGECONFIG string was incorrectly formed due to mismatched quotes. This caused a parsing error: ERROR: Unable to parse .../meta-security/recipes-security/clamav/clamav_0.99.2.bb ... Removed the unneeded quotes to fix the parsing issue. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-10-11scapy: upgrade to 2.3.2Jackie Huang
* update the SRC_URI since it's been moved from bitbucket to github. * add ptest support Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-10-11paxctl: Fix QA warningArmin Kuster
WARNING: paxctl-0.9-r0 do_package_qa: QA Issue: No GNU_HASH in the elf binary: '...../build/tmp-glibc/work/core2-64-oe-linux/paxctl/0.9-r0/packages-split/paxctl/sbin/paxctl' [ldflags] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-10-11paxctl: allow build of paxctl-nativeJoe Slater
paxctl-native is needed to build paxtest. Do not use the install target in Makefile for paxctl-native, it will fail with error: install: cannot change ownership of '.../sbin/paxctl': \ Operation not permitted Signed-off-by: Joe Slater <jslater@windriver.com> Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-10-11clamav: fix gcc 6.x build failure.Armin Kuster
./llvm/include/llvm/Support/AlignOf.h:57:24: error: expected unqualified-id before 'alignof' static inline unsigned alignof() { return AlignOf<T>::Alignment; } ^~~~~~~ configure --with-system-llvm --with-llvm-linking=dynamic. define use with meta-oe LLVM3.3 via config option Fix typo for systemd PACKAGECONFIG Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-10-11samhain: 4.1.4 -> 4.1.5Wang Xin
1) Upgrade samhain from 4.1.4 to 4.1.5. 2) Add TARGET_CC_ARCH.Fix error. ERROR: samhain-server-4.1.5-r0 do_package_qa: QA Issue: No GNU_HASH in the elf binary: '/yocto/work001/fnst/wangx/poky/build/tmp/work/i586-poky-linux/samhain-server/4.1.5-r0/packages-split/samhain-server/usr/sbin/yule_setpwd' No GNU_HASH in the elf binary: '/yocto/work001/fnst/wangx/poky/build/tmp/work/i586-poky-linux/samhain-server/4.1.5-r0/packages-split/samhain-server/usr/sbin/yulectl' [ldflags] Signed-off-by: Wang Xin <wangxin2015.fnst@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-08-20python-pycrypto: fix build errorArmin Kuster
| DEBUG: Executing shell function do_compile | make: *** No targets specified and no makefile found. Stop. add null do_compile Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-08-20libseccomp: update to latestJonathan Liu
Signed-off-by: Jonathan Liu <net147@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-08-20Fix a trousers build on when not in use systemd: unparsed line: 'inherit'Thomas Perrot
Signed-off-by: Thomas Perrot <thomas.perrot@tupi.fr> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-06-26suricata: update to 3.0.2Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Armin Kuster <akuster@mvista.com>
2016-06-26tripwire: update to 2.4.3.1Armin Kuster
this also fixes clang and gcc 5.3 build issues remove merged patches Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Armin Kuster <akuster@mvista.com>
2016-06-26samhain: update to 4.1.4Armin Kuster
4.1.4: - Fix for issues with re-evaluation of paths with wildcard patterns: - no re-evaluation if no match at process startup - if same pattern used for a file=.. and dir=.. directive, only one (the first in config file) is re-evaluated - Fix for issues with new directories created when inotify is used: - recursion depth is not properly set for new directory - directory gets watched even if recursion depth should be below zero 4.1.3: - Fix for a regression in DNS resolving if samhain is compiled with '--enable-static' - On Cygwin/Windows, the default for the 'AvoidBlock' option is now 'off' because of problems reported for this platform. Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Armin Kuster <akuster@mvista.com>