aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2020-02-02ecryptfs-utils: search nspr header files in ${STAGING_INCDIR}/nspr directoryArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-01swtpm: fix configure errorArmin Kuster
checking for whether to build with seccomp profile... configure: error: "Is libseccomp-devel installed? -- could not get cflags for libseccomp" Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-28buck-security: fix rdebends and minor style cleanupArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-28checksecurity: fix runtime issuesArmin Kuster
add some missing perl modules Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-28linux-yocto-dev: remove "+"Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-28google-authenticator-libpam: upgrade 1.07 -> 1.08Pierre-Jean Texier via Lists.Yoctoproject.Org
See changelog: https://github.com/google/google-authenticator-libpam/releases/tag/1.08 Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-28samhain: fix build with new version attrYi Zhao
The attr/xattr.h has been removed from attr 2.4.48 with commit: http://git.savannah.nongnu.org/cgit/attr.git/commit/include?id=7921157890d07858d092f4003ca4c6bae9fd2c38 The xattr syscalls are provided by sys/xattr.h from glibc now. Remove the checking code to adapt it otherwise it would fail to build with selinux support. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-23Apparmor: fix some runtime dependsArmin Kuster
missing xargs and comm Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-21python3-fail2ban: update to latestArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-21sssd: drop py2 supportArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-19README: add pull request optionArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-05fail2ban: fix runtime errorArmin Kuster
use success/failure calls in initd/function Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-04meta-integrity: fix issues with yocto-check-layerArmin Kuster
[v2] re-did solutions Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-03clamav: update to 0.101.5Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-03lib/oeqa/runtime: fix clamav test orderArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-25smack-test: add feature check for smackArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-25google-authenticator-libpam: update to 1.07Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-25python3-fail2ban: include python-fail2ban.incArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-25python-fail2ban: Drop python2 packageArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-25smack: add distro checkArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-25apparmor: add distro checkArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-16suricata: update to 4.1.6Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-16lib/oeqa/runtime: suricata add testsArmin Kuster
drop the unit test as it should be run via ptest add more tests for python3-suricata-update Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-16libhtp: bugfix only update 0.5.32Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-16python3-suricata-update: update to 1.1.1Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-16libseccomp: upgrade 2.4.1 -> 2.4.2Yi Zhao
Backport a patch to fix ptest build failure on arm64. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-15meta-security-compliance/conf/layer.conf: fix typoArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-07tpm2-abrmd: Port command line options to new version.Philip Tricca
These have changed upstream. Signed-off-by: Philip Tricca <flihp@twobit.org> Signed-off-by: Diego Santa Cruz <Diego.SantaCruz@spinetix.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-07tpm2-abrmd-init.sh: fix for /dev/tpmrmXTrevor Woerner
Newer kernels, in addition to the traditional /dev/tpmX device nodes, are now also creating /dev/tpmrmX device nodes. This causes this script to get confused and abort, meaning tpm2-abrmd does not get started during boot. Fix for https://github.com/flihp/meta-measured/issues/56 Signed-off-by: Trevor Woerner <twoerner@gmail.com> Signed-off-by: Diego Santa Cruz <Diego.SantaCruz@spinetix.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-07meta-security: add layer index calloutsArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-05README: update mailing list to new groups.ioArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-05tpm2-totp: update to 0.2.0Armin Kuster
LIC_FILES_CHKSUM update to be true BSD-3-clause text Drop patch included Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-05tpm2-tss-engine: update to tip to us tss-tools 4.0.xArmin Kuster
LIC_FILES_CHKSUM update to be true BSD-3-clause text Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-05tpm2-tools: update to 4.0.1Armin Kuster
LIC_FILES_CHKSUM added new copyrights Migrate to https d/l from git clone Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-05tpm2-abrmd": update to 2.3.0Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-05tpm2-pkcs11: update to tipArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-11-27meta: inherit features_check instead of distro_features_checkMing Liu
distro_features_check has been deprecated in OE. Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-11-27suricata: add tmpfiles.d configChristopher Larson
This is needed to ensure our /var/log directory is created when using systemd. Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-11-27clamav: add tmpfiles.d configChristopher Larson
This is needed to ensure freshclam's /var/log directory and file are created when using systemd. Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-11-27checksecurity: use more portable find argsChristopher Larson
Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-11-27meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_2.3.1.bb: add new udev dir to FILES ↵Norbert Kaminski
and append EXTRA_OECONF The tpm2 tool freezes in a XEN distro. It stores the udev rules in /lib/udev directory, thus these changes append the FILES and EXTRA_OECONF to make tpm2 work properly. Signed-off-by: Norbert Kaminski <norbert.kaminski@3mdeb.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-11-27cryptsetup tpm incubator: fix installed vs shippedChristophe PRIOUZEAU
Fix [installed-vs-shipped] by adding /usr/lib/tmpfiles.d on FILES. Signed-off-by: Christophe Priouzeau <christophe.priouzeau@st.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-10-17apparmor: ptest fail to build on armArmin Kuster
exclude arm and aarch64 ptest tasks [v2&3] Sent before committing. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-10-16apparmor: fix systemd support so it worksArmin Kuster
[Yocto # 13568] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-10-14checksec: add missing rdepends to readelfArmin Kuster
update test to check for depends Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-10-14suricata: fix compile issueArmin Kuster
cp: cannot stat '/...../tmp-glibc/work/core2-32-oe-linux/suricata/4.1.5-r0/rules': No such file or directory | WARNING: exit code 1 from a shell command. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-10-13apparmor: make bash dependency optionalAlexander Kanavin
Bash is only needed by one not particularly important script, so not requiring bash is a useful option for builds that cannot have gpl3 components. Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-10-13apparmor: add PRIVATE_LIBS for ptest packageAlexander Kanavin
Otherwise, the following occurs: ERROR: apparmor-2.13.3-r0 do_package: apparmor: Multiple shlib providers for libapparmor.so.1: apparmor, apparmor-ptest (used by files: /home/alexander/development/poky/build-metaoe/tmp/work/core2-32-poky-linux/apparmor/2.13.3-r0/packages-split/apparmor/usr/lib/perl5/vendor_perl/5.30.0/i686-linux/auto/LibAppArmor/LibAppArmor.so) ERROR: apparmor-2.13.3-r0 do_package: apparmor: Multiple shlib providers for libapparmor.so.1: apparmor, apparmor-ptest (used by files: /home/alexander/development/poky/build-metaoe/tmp/work/core2-32-poky-linux/apparmor/2.13.3-r0/packages-split/apparmor/usr/lib/python3.7/site-packages/LibAppArmor/_LibAppArmor.cpython-37m-i686-linux-gnu.so) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-10-11layer.conf: Update for zeus seriesArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com> Acked-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-10-08suricata-update: add package to pull rulesArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>