aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2019-05-21checksec: add runtime testArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-21keyutils: fix library install pathArmin Kuster
[v2] fix multilib support Als add native support Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-21checksec: update to 1.11.1Armin Kuster
* checksec.sh: Updated to 1.11.1 * checksec.sh: resolved issues with readelf * checksec.sh: Added docker images for testing * checksec.sh: Added armhf and aarch64 libc locations * checksec.sh: Replace FS_COUNT with fgrep * checksec.sh: Fixed symbols count in csv * checksec.sh: Fixed RW-RPATH and RW-RUNPATH * checksec.sh: Added stack canaries generated by intel compiler * checksec.sh: Mute stat errors for non-existent directories * checksec.sh: Removed invalid json structures and duplicate kernel checks * checksec.sh: fixed spaces in -d option * checksec.sh: Added stack-protector-string check * checksec.sh: Add arm64 specific kernel checks * checksec.sh: Add REFCOUNT_FULL to kernel tests * checksec.sh: Remove OSX support Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-12smack: kernel fragment updateArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-12oe-selftest: add running cve checkerArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-12apparmor: fetch from gitAlexander Kanavin
Tarballs from archive.ubuntu.com can and do disappear (similar to archive.debian.org). Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-09libseccomp: update to 2.4.1Armin Kuster
bug fix release. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-09libldb: add earlier versionArmin Kuster
This version does not have a dependacy on samba Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-09samhain: add more tests and fix ret checksArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-09smack-test: add smack tests from meta-intel-iot-securityArmin Kuster
ported over smack tests Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-09smack: move patch to smack dirArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-09apparmor: add a few more runtimeArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-09apparmor: fix fragment for 5.0 kernelArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-01meta-tpm/README: updateYi Zhao
Add more description Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-01meta-tpm/conf/layer.conf: update layer dependenciesYi Zhao
Add openembedded-layer to layer dependencies. Fix the following build errors: ERROR: Required build target 'tpm2-pkcs11' has no buildable providers. Missing or unbuildable dependency chain was: ['tpm2-pkcs11', 'dstat'] ERROR: Required build target 'cryptsetup-tpm-incubator' has no buildable providers. Missing or unbuildable dependency chain was: ['cryptsetup-tpm-incubator', 'libdevmapper'] ERROR: Required build target 'tpm2-totp' has no buildable providers. Missing or unbuildable dependency chain was: ['tpm2-totp', 'qrencode'] Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-14clamav-native: fix new build issueArmin Kuster
re-arch the reciped to build properly. Fixed /var/lib/clamav dir issue Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-14clamav: add clamav-cvd package for cvd dbArmin Kuster
Add native package to support creating a mirror of the clamav cvd and supply it in a new package. Provide a INSTALL_CLAMAV_CVD flag to bypass this creation Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-13clamav: runtime fix local routingArmin Kuster
This addes the localhost to resolve.conf to fix: ERROR: Can't get information about database.clamav.net: Temporary failure in name resolution ERROR: Can't download main.cvd from database.clamav.net Giving up on database.clamav.net... Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-13libldb: add waf-cross-answeresArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-13clamav: fix llvm reference versionArmin Kuster
llvm8.0 does not exist. dropped the version part. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-13clamav runtime: add resolve.conf supportArmin Kuster
and ping test too Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-07libmspack: update to 0.10.1Armin Kuster
For details see: https://github.com/kyz/libmspack/blob/master/libmspack/ChangeLog change compression to match that now being used from source Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-07ccs-tools: move to reciped-macArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-07layer.conf: Add warrior to compatible release seriesArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-01linux-yocto/5.0: add apparmor fragmentsArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-01linux-yocto: make bbappend version neutralArmin Kuster
update apparmor configs [v2] Just update configs. leave versions intact. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31apparmor: add basic runtime testArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31apparmor: update to 2.13.2Armin Kuster
Drop patch included in update: tool-paths.patch Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31reorg ids: move ids recipes to recipes-idsArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31reorg: move mac recipes to recipes-macArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31clamav: add basic runtime testsArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31clamav: drop llvm version settingArmin Kuster
There is only one llvm and its in core so drop allowing it to be overwritten. We can hardcode it now. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31samhain: add basic runtime testArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31samhain: fix runtime errorArmin Kuster
fix: samhain[1652]: FATAL: x_dnmalloc.c: 2790: hashval < AMOUNTHASH Killed disable dnmalloc Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31suricata: add runtime testingArmin Kuster
Today there are no failures so set the trigger to zero. [v2] fix match string and conditional Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31tripwire: add runtime testArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31sssd: update to 1.16.4Armin Kuster
Add systemd pkgconf via DISTRO_FEATURE Fix uid/gid of sssd.conf [v2] drop non update related changes also, this includes CVE-2019-3811 Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31sssd: fix a few runtime issuesArmin Kuster
include a few more RDEPEND packages. remove init script as there really isn't one yet. [v2] Squish build tweeking done in pkg update into this changeset Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-29sssd: Add basic runtime testArmin Kuster
This does some basic testing and checks. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-29Revert "sssd: fix libcrypto version used"Armin Kuster
This reverts commit 2488c965d6b1b440734f43326fb33ac642ac7b82. This corrects an incorrect fix as pointed out by Adrian Bunk.
2019-03-25sssd: fix libcrypto version usedArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-25keyutils: fix pulling in glibc when musl enabledArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-25tpm2.0 prefix: rename to tpm2 take2Armin Kuster
v1 was commited. This is the additional changes. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-23packagegroup-security-tpm2: update to name changeArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-23meta-tpm: add maintainers fileArmin Kuster
This simples checking package updates Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-23tpm2.0 prefix: rename to tpm2Armin Kuster
this aligns with the rest of the tpm2 recipes Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-23tpm2simulator: replaced by ibmswtpm2Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-23meta-tpm: add runtime test for tpm2Armin Kuster
This runs a basic tpm test using the simulator Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-23ibmswtpm2: Add new recipeArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-17packagegroup-security-tpm2: add new packagesArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>