aboutsummaryrefslogtreecommitdiffstats
path: root/recipes-security
AgeCommit message (Collapse)Author
2019-03-31reorg: move mac recipes to recipes-macArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31clamav: drop llvm version settingArmin Kuster
There is only one llvm and its in core so drop allowing it to be overwritten. We can hardcode it now. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31samhain: fix runtime errorArmin Kuster
fix: samhain[1652]: FATAL: x_dnmalloc.c: 2790: hashval < AMOUNTHASH Killed disable dnmalloc Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31sssd: update to 1.16.4Armin Kuster
Add systemd pkgconf via DISTRO_FEATURE Fix uid/gid of sssd.conf [v2] drop non update related changes also, this includes CVE-2019-3811 Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31sssd: fix a few runtime issuesArmin Kuster
include a few more RDEPEND packages. remove init script as there really isn't one yet. [v2] Squish build tweeking done in pkg update into this changeset Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-29Revert "sssd: fix libcrypto version used"Armin Kuster
This reverts commit 2488c965d6b1b440734f43326fb33ac642ac7b82. This corrects an incorrect fix as pointed out by Adrian Bunk.
2019-03-25sssd: fix libcrypto version usedArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-25keyutils: fix pulling in glibc when musl enabledArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-16keyutils: fix QA WARNINGArmin Kuster
WARNING: keyutils-1.6-r0 do_package: QA Issue: keyutils: Files/directories were installed but not shipped in any package: /lib/pkgconfig /lib/pkgconfig/libkeyutils.pc Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-16libseccomp: update to 2.4.0Armin Kuster
Update the syscall table for Linux v5.0-rc5. also a security releated issue; https://github.com/seccomp/libseccomp/issues/139 Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-12suricata: update to 4.1.3Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-12packagegroup-core-security: change fail2ban ptest to reg python pkgArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-08tripwire: fix ptest so more tests passArmin Kuster
replace relative path with abs path for binaries. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-08keyutils: improve ptestsArmin Kuster
Tests need lsb Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06keyutils: update to 1.6Armin Kuster
remove patch now included in update: keyutils-use-relative-path-for-link.patch Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06suricata: update to 4.0.6Armin Kuster
includes: SMTP crash issue was fixed: CVE-2018-18956 Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06python-fail2ban: update 0.10.4.0Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06libmspack: update to 0.9.1Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06tripwire: update to 2.4.3.7Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06samhain: update to 4.3.2Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06xmlsec1: add PACKAGECONFIG disable-desChangqing Li
Signed-off-by: Changqing Li <changqing.li@windriver.com> Reviewed-by: Tom Rini <trini@konsulko.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11clamav: update llvm to 8.0Armin Kuster
ERROR: Nothing PROVIDES 'llvm6.0' Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11scapy: restore ptest by going to github directlyArmin Kuster
The pypi package removed the tests so go to the git repo directly. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11scapy: Fix shebang for python3Scott Ellis
Both scapy and UTscapy have python in the shebang line regardless of whether python3-scapy or python-scapy was built. Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11scapy: Add python-cryptography to RDEPENDSScott Ellis
Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11Upgrade scapy to 2.4.2Scott Ellis
Upstream MANIFEST.in removed doc and test directories so remove ptest. Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11xmlsec1: upgrade 1.2.26 -> 1.2.27Adrian Bunk
Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11xmlsec1: Make the crypto libraries a PACKAGECONFIGAdrian Bunk
Usually one doesn't need variants for all 4 different crypto libraries installed at the same time. Also remove a libgpg-error DEPENDS that is not used directly by xmlsec1. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11xmlsec1: Include libxmlsec1-*.so in the main packageAdrian Bunk
They can be dynamically loaded with xmlSecCryptoDLLoadLibrary(). Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11checksec: Remove old scriptScott Ellis
Should have been removed in previous patch. Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17apparmor: backport a patch to fix tool paths instead of seddingRoss Burton
Sedding is ugly, and as upstream have already fixed this cherry-pick the patch instead. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17apparmor: if Perl is disabled remove perl-using scriptsRoss Burton
aa-notify uses the Perl bindings, so isn't usable when perl is disabled. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17apparmor: systemd.bbclas is useful even when disabledRoss Burton
The systemd bbclass will remove any systemd files that have been installed if systemd is disabled, so always install the files and always inherit. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17apparmor: remove pointless ALLOW_EMPTYRoss Burton
${PN} has content, so there's no need to set ALLOW_EMPTY_${PN}. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17apparmor: no need to conditionalise PACKAGESRoss Burton
A package with no content is not generated, so there's no need to conditionalise assignments to PACKAGES. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17apparmor: use manpages classRoss Burton
The manpages class handles enabling/disabling the man pages based on the api-documentation DISTRO_FEATURE, and ensures that mandb is called. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17apparmor: remove redundant SRoss Burton
This is the default value, so remove it. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17apparmor: enable static libraries neatlyRoss Burton
No need to fiddle with the configure arguments as we can just neuter disable-static.inc. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17apparmor: add missing bash dependencyRoss Burton
testsuite/parser/tst/minimize.sh is a bash script, so until it is reviewed add a bash dependency to apparmor-ptest. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17Add recipe for ncrackScott Ellis
Ncrack is a network authentication cracking tool. Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-06nikto: upgrade to 2.1.6 (v2)Scott Ellis
Source now on github. Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-06checksec: Upgrade to 1.11.0Scott Ellis
Switch source to a more up to date github repo. Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-12-06apparmor: Remove tab indentations in python codeRobert Yang
Use 4 spaces to replace a tab. Fixed: apparmor_2.12.bb: python should use 4 spaces indentation, but found tabs in apparmor_2.12.bb, line 49 Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-10-31clamav: update to 0.99.4Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-10-31packagegroup-core-security: add fail2ban ptest to imageArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-10-31fail2ban: add ptestArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-10-31packagegroup-core-security: add tripwire ptestArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-10-31tripwire: add ptestArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-10-31security-build-image: remove X11Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-10-31packagegroup-core-security: add suricata-ptestArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>