aboutsummaryrefslogtreecommitdiffstats
path: root/recipes-security
AgeCommit message (Collapse)Author
2020-10-10ecryptfs-utils: fix musl buildArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-10-01libseccomp: fix ptest failures.Armin Kuster
Fixes: BusyBox v1.32.0 () multi-call binary. Usage: dd [if=FILE] [of=FILE] [bs=N] [count=N] [skip=N] Don't use Busybox dd, not compatable. Use coreutils Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-29opendnssec: add recipeArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-29libest: add recipeArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-29softHSM: add pkgArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-12nss: update patch to fix do_patch errorQi.Chen@windriver.com
Currently sssd's do_patch task fails. Update the patch to fix this problem. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-05sssd: Avoid nss function conflicts with glibc nss.hArmin Kuster
glibc 2.32 will define these varibles [1] which results in conflicts with these static function names, backport a fix from upstream [1] https://sourceware.org/git/?p=glibc.git;a=commit;h=499a92df8b9fc64a054cf3b7f728f8967fc1da7d Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-08-29sssd: Make manpages buildableJonatan Pålsson
Some XML related fixes are needed to make the sssd manpages buildable Signed-off-by: Jonatan Pålsson <jonatan.p@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-08-04libseccomp: fix cross compile error for mipsKai Kang
Backport patch to fix cross compile error for mips: | syscalls.h:44:6: error: expected identifier or '(' before numeric constant | 44 | int mips; | | ^~~~ Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-27libseccomp: update to 2.5.0Armin Kuster
Notable changes: Add support for the 64-bit RISC-V architecture Update the syscall tables to Linux v5.8.0-rc5 Python bindings and build now default to Python 3.x for more info see: https://github.com/seccomp/libseccomp/blob/master/CHANGELOG Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-27libsecomp: rv32/rv64 target builds are not supported yetArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-25security packagegroups: move to recipes-coreArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-25security images: Move to recipe-coreArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-18python3-privacyidea: adding initial support for mfaArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-14bastille: Deleted redundant inherit to fix error when enable multilib.Zheng Ruoqin
There is no need to inherit module-base. Because this inherit will stop bastille to build to lib32-bastille. Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-06packagegroup-core-security-ptest: update fail2ban ptest pkg nameArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-06-23sssd: disable build secretsKai Kang
It requires http_parser.h to build secrets: | configure: error: | You must have the header file http_parser.h installed to build sssd | with secrets responder. If you want to build sssd without secret responder | then specify --without-secrets when running configure. The header file is from package http-parser[1] rather than apache2. But there is no recipe http-parser in openembedded. So disable build secrets for sssd and remove related systemd service and socket files. Reference: 1. https://github.com/nodejs/http-parser Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-27sssd: Add infopipe PACKAGECONFIGJonatan Pålsson
infopipe was previously on by default, so add it to the default PACKAGECONFIG. The systemd files are only installed when --with-infopipe is passed to configure, so conditionally add them to SYSTEMD_SERVICE. Signed-off-by: Jonatan Pålsson <jonatan.p@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-27sssd: Add missing DEPENDS on janssonJonatan Pålsson
When building with the curl PACKAGECONFIG, sssd will depend on the jansson library. Fixes the following error: | checking for JANSSON... no | checking jansson.h usability... no | checking jansson.h presence... no | checking for jansson.h... no | configure: error: | You must have the header file jansson.h installed to build sssd | with secrets and KCM responder. If you want to build sssd without these | responders then specify --without-secrets --without-kcm when running configure. Signed-off-by: Jonatan Pålsson <jonatan.p@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-27sssd: Add missing files to SYSTEMD_SERVICEJonatan Pålsson
These files are installed when the ssh or curl PACKAGECONFIGs are enabled. Fixes the following error: ERROR: sssd-1.16.4-r0 do_package: QA Issue: sssd: Files/directories were installed but not shipped in any package: /lib/systemd/system/sssd-kcm.socket /lib/systemd/system/sssd-kcm.service /lib/systemd/system/sssd-ssh.socket /lib/systemd/system/sssd-ssh.service Signed-off-by: Jonatan Pålsson <jonatan.p@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-27sssd: Add sudo PACKAGECONFIGJonatan Pålsson
sudo was previously on by default, so add it to the default PACKAGECONFIG. The systemd files are only installed when --with-sudo is passed to configure, so conditionally add them to SYSTEMD_SERVICE. Signed-off-by: Jonatan Pålsson <jonatan.p@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-27sssd: Add autofs PACKAGECONFIGJonatan Pålsson
autofs was previously on by default, so add it to the default PACKAGECONFIG. The systemd files are only installed when --with-autofs is passed to configure, so conditionally add them to SYSTEMD_SERVICE. Signed-off-by: Jonatan Pålsson <jonatan.p@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-27sssd: Sort PACKAGECONFIG entriesJonatan Pålsson
Signed-off-by: Jonatan Pålsson <jonatan.p@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-27buck-security: move to recipes-scannersArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-27checksecurity: move to recipes-scannersArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-27checksec: move to recipe-scannersArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-27clamav: move to recipes-scannersArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-27fail2ban: change hardcoded sysklogd to VIRTUAL-RUNTIME_base-utils-syslogArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-08libseccomp: update to 2.4.3Armin Kuster
dropped patch now included in update Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-08sssd: python2 not supportedArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-08sssd: DEPEND on nss if nothing else is chosenJonatan Pålsson
sssd will attempt to build against nss if no crypto is selected. If a bbappend sets PACKAGECONFIG = <list without nss or crypto>, the appropriate DEPEND is not established. Fixes the following configure error: ... snip ... | checking for NSS... configure: error: Package requirements (nss) were not met: | | No package 'nss' found | | Consider adjusting the PKG_CONFIG_PATH environment variable if you | installed software in a non-standard prefix. | | Alternatively, you may set the environment variables NSS_CFLAGS | and NSS_LIBS to avoid the need to call pkg-config. | See the pkg-config man page for more details. | | WARNING: exit code 1 from a shell command. Signed-off-by: Jonatan Pålsson <jonatan.p@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-08sssd: Fix typo in PACKAGECONFIG. cyrpto -> cryptoJonatan Pålsson
Signed-off-by: Jonatan Pålsson <jonatan.p@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-08sssd: Add PACKAGECONFIG for python2Jonatan Pålsson
Fixes the following build error: .. snip .. | checking for python2... no | checking for python3... (cached) python3.8 | configure: error: | The program python2 was not found in search path. | Please ensure that it is installed and its directory is included in the search | path. It is required for building python2 bindings. If you do not want to build | them please use argument --without-python2-bindings when running configure. | WARNING: exit code 1 from a shell command. Signed-off-by: Jonatan Pålsson <jonatan.p@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-05sssd: fix for ldblibdir and systemd etcKai Kang
Fix sssd issue for ldblibdir, systemd, pam etc. * fix ldblibdir which is not calculated right for cross compile * create directory /var/log/sssd which is required by sssd daemon * disable building python2 binding * fix pam module path * update systemd configure options and service files Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-01secuirty*-image: remove dead var and minor cleanupArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-01clamav-native: missed bison fixArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-01clamav: add bison-native to dependArmin Kuster
fixes build issue: clamav/0.101.5-r0/git/config/ylwrap: line 176: yacc: command not found Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-16google-authenticator-libpam: install module in pam locationArmin Kuster
pam_google_authenticator.so was being installed where pam could not find it. Move it where the rest of the pam modules site. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-16python3-fail2ban: add 2-3 conversion changesArmin Kuster
Had to use the fail2ban-2.3 program to create py3 code Add it as a patch Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-10bastille: convert to py3Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-02ecryptfs-utils: search nspr header files in ${STAGING_INCDIR}/nspr directoryArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-28buck-security: fix rdebends and minor style cleanupArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-28checksecurity: fix runtime issuesArmin Kuster
add some missing perl modules Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-28google-authenticator-libpam: upgrade 1.07 -> 1.08Pierre-Jean Texier via Lists.Yoctoproject.Org
See changelog: https://github.com/google/google-authenticator-libpam/releases/tag/1.08 Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-21python3-fail2ban: update to latestArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-21sssd: drop py2 supportArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-05fail2ban: fix runtime errorArmin Kuster
use success/failure calls in initd/function Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-03clamav: update to 0.101.5Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-25google-authenticator-libpam: update to 1.07Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-25python3-fail2ban: include python-fail2ban.incArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-04-30 19:57:03 +0000