aboutsummaryrefslogtreecommitdiffstats
path: root/meta-security-compliance
AgeCommit message (Collapse)Author
2019-12-15meta-security-compliance/conf/layer.conf: fix typoArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-07meta-security: add layer index calloutsArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-10-11layer.conf: Update for zeus seriesArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com> Acked-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-09-07oe-scap: Fix QA RDEPENDS errorArmin Kuster
ERROR: oe-scap-1.0-r0 do_package_qa: QA Issue: /usr/share/oe-scap/run_tests.sh contained in package oe-scap requires /bin/bash, but no providers found in RDEPENDS_oe-scap? [file-rdeps] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-09-07scap-security-guide: add depends on openscap-native do_installArmin Kuster
This ensures openscap-native does install the needed patches security guilde needs to build Minor recipe cleanup too Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-09-07openscap: Drop nostampArmin Kuster
add cleandir depends to do_install task This nostamp is causing issues with the yocto-check-layer when checking hash changes. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-24openscap: add runtime dependency on bash and python3-coreYi Zhao
Fixes: ERROR: QA Issue: /usr/bin/oscap-ssh contained in package openscap requires /bin/bash, but no providers found in RDEPENDS_openscap? [file-rdeps] ERROR: QA Issue: /usr/bin/scap-as-rpm contained in package openscap requires /usr/bin/python3, but no providers found in RDEPENDS_openscap? [file-rdeps] Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-24openscap: fix scap-security-guide build errorYi Zhao
It would fail to build scap-security-guide when use openscap-native sstate cache. Steps to reproduce: Create a new build project: $ bitbake openscap-native $ bitbake openscap-native -c clean $ bitbake scap-security-guide Error message: OpenSCAP Error: Schema file 'xccdf/1.1/xccdf-schema.xsd' not found in path '/buildarea/build/tmp/work-shared/openscap/oscap-build-artifacts/usr/share/openscap/schemas' when trying to validate '/buildarea/build/tmp/work/core2-64-poky-linux/scap-security-guide/0.1.44+gitAUTOINC+5fdfdcb2e9-r0/git/build/chromium/xccdf-unlinked-resolved.xml' [/buildarea/build/tmp/work/x86_64-linux/openscap-native/1.3.1+gitAUTOINC+4bbdb46ff6-r0/git/src/source/validate.c:104] Invalid XCCDF Checklist (1.1) content in /buildarea/build/tmp/work/core2-64-poky-linux/scap-security-guide/0.1.44+gitAUTOINC+5fdfdcb2e9-r0/git/build/chromium/xccdf-unlinked-resolved.xml. [/buildarea/build/tmp/work/x86_64-linux/openscap-native/1.3.1+gitAUTOINC+4bbdb46ff6-r0/git/src/source/oscap_source.c:346] chromium/CMakeFiles/generate-internal-chromium-xccdf-unlinked-resolved.xml.dir/build.make:63: recipe for target 'chromium/xccdf-unlinked-resolved.xml' failed When using sstate cache, the openscap-native doesn't install the artifacts to work-shared/openscap/oscap-build-artifacts when prepare recipe sysroot for scap-security-guide. Set do_install[nostamp] to 1 to ensure the openscap-native artifacts are installed to work-shared/openscap/oscap-build-artifacts even if using sstate cache. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-07scap-security-guide: fix typoYi Zhao
Fix typo: RDEPNEDS_${PN} -> RDEPENDS_${PN} Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-07openscap: cleanup DEPENDSYi Zhao
Remove autoconf-archive from DEPENDS because it is using CMake/Ninjia build now. Also remove unused dpkg-native dependency from DEPENDS_class-native. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-04scap-security-guide: update recipeYi Zhao
* Set B="${S}/build" to fix the build failure for out of source directory * Remove do_complile and do_install. Use the default functions from cmake.bbclass. * Install the artifacts to /usr/share rather than /usr/local/share Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-04openscap: update recipeYi Zhao
* Add PACKAGECONFIG for gcrypt, nss3 and selinux * Use EXTRA_OECMAKE rather than EXTRA_OECONF * Set CMAKE_SKIP_RPATH and CMAKE_SKIP_INSTALL_RPATH instead of chrpath * Remove ptest since there are many host contamination issues on target. We will add it back when these issues are solved. * Drop the unused patch * Add PV Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-07-17meta-security-compliance: add meta-pythonArmin Kuster
with some for the recipe updates, more pyton support is needed Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-07-17scap-security-guide: update to 0.1.44Armin Kuster
create a PV version to track upstream git version includes OE changes Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-07-17openscap: add 1.3.1 recipes for upstream sourceArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-07-17openscap_git: update to 1.3.0Armin Kuster
removed unneeded patch convert over to cmake refactor files Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-07-07openscap/scap-security-guide: use _git instead of versioned filenamesMark Asselstine
In order to facilate the reuse of the recipe code via layer or distro specific bbappends rename the recipe files to use _git instead of versined filenames. Specifically this allows for minimal bbappends in additional layers which may use the upstream, non-forked, repos that can be version skewed when compared to what is present in this repo. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-07-07meta-security-compliance: update READMEArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-07-07lynis: update to 2.7.5Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26layers: set warrior onlyArmin Kuster
remove TEST_SUITES from main layer.conf Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-07layer.conf: Add warrior to compatible release seriesArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-16lynis: update to 2.7.2Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-08oe-scap: fix inconsistent indentationYi Zhao
Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-08openscap-daemon: backport patch to fix build error with python 3.7Yi Zhao
Fixes build error: | Traceback (most recent call last): | File "setup.py", line 25, in <module> | from openscap_daemon import version | File "/buildarea/build/tmp/work/core2-64-poky-linux/openscap-daemon/0.1.10-r0/git/openscap_daemon/__init__.py", line 22, in <module> | from openscap_daemon.system import System | File "/buildarea/build/tmp/work/core2-64-poky-linux/openscap-daemon/0.1.10-r0/git/openscap_daemon/system.py", line 29 | from openscap_daemon import async | ^ | SyntaxError: invalid syntax Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-08scap-security-guide: use makefile generator instead of ninja for cmakeYi Zhao
Fixes build error: | make: *** No rule to make target 'openembedded'. Stop. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-12-06lynis: update to 2.7.0Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-10-31os-release: remove OS_RELEASE_FEILD extendingArmin Kuster
depends on the OS_RELEASRE_FEILD os-release changes in core otherwise yocto-check-layer will fail Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-29meta-security: add THUDArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17lynis: update to 2.6.8Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17meta-security-compliance: bump layer priorityArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17openscap-daemon: update to 1.10Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17openscap: update 1.2.17Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13meta-*: add LAYERSERIES_COMPAT to layer.conf filesArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-06conf/layer.conf: remove bbclass from BBFILESRobert Yang
Add bbclass to BBFILES doesn't make any sense. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-12-10openscap: fix build issueArmin Kuster
core2-64-oe-linux/openscap/1.2.15-r0/git/src/.libs/libopenscap.so: error: undefined reference to 'dlopen' | core2-64-oe-linux/openscap/1.2.15-r0/git/src/.libs/libopenscap.so: error: undefined reference to 'dlsym' | core2-64-oe-linux/openscap/1.2.15-r0/git/src/.libs/libopenscap.so: error: undefined reference to 'dlerror' | core2-64-oe-linux/openscap/1.2.15-r0/git/src/.libs/libopenscap.so: error: undefined reference to 'dlclose' Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-15openscape: fix ptest compile errors and updateArmin Kuster
update to 1.2.15 plus ERROR: openscap-1.2.14-r0 do_package_qa: QA Issue: /usr/lib/openscap/ptest/tests/probes/process58/all.sh contained in package openscap-ptest requires /bin/bash, but no providers found in RDEPENDS_openscap-ptest? [file-rdeps] ERROR: openscap-1.2.14-r0 do_package_qa: QA Issue: /usr/lib/openscap/ptest/tests/xmldiff.pl contained in package openscap-ptest requires /usr/bin/perl, but no providers found in RDEPENDS_openscap-ptest? [file-rdeps] ERROR: openscap-1.2.14-r0 do_package_qa: QA Issue: /usr/lib/openscap/ptest/tests/nist/test_worker.py contained in package openscap-ptest requires /usr/bin/python2, but no providers found in RDEPENDS_openscap-ptest? [file-rdeps] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-02lynis: move recipe to correct layerArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-02openscap-daemon: fix QA issueArmin Kuster
ERROR: openscap-daemon-0.1.6+gitAUTOINC+3fd5c75a08-r0 do_package_qa: QA Issue: /usr/bin/oscapd-cli contained in package openscap-daemon requires /usr/bin/python, but no providers found in RDEPENDS_openscap-daemon? [file-rdeps] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-30oe-release: add oe-release file for openscapArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-30os-release: needed by openscapArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-30openscap: Add oe specific filesArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-30openscap: add dameonArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-30openscap: add scap-security-guideArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-30openscap: add packageArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-30meta-security-compliance: add new layer for compliance and audit applicationsArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-04-28 02:59:33 +0000