aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2021-12-03sssd: re-package to fix QA issueshardknottJeremy A. Puhlman
It packages all file in ${libdir} to package sssd, including the .so symlink files. Then it causes QA issues: | ERROR: QA Issue: sssd rdepends on dbus-dev [dev-deps] | ERROR: QA Issue: sssd rdepends on ding-libs-dev [dev-deps] So re-package sssd then the .so symlink files and .pc files are packaged to sssd-dev which should be. File ${libdir}/libsss_sudo.so is not a symlink file but packaged to sssd-dev too. Then causes another QA issue: | ERROR: sssd-2.5.2-r0 do_package_qa: QA Issue: -dev package sssd-dev contains non-symlink .so '/usr/lib/libsss_sudo.so' [dev-elf] So create a new sub-package libsss-sudo to package file libsss_sudo.so and make sssd rdepends on it. JP: Updated for version differences. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit e81c15f851ca5396c78c8737967ee38db0ebe0cd) Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-12-03recipes: Update SRC_URI branch and protocolsArmin Kuster
This patch updates SRC_URIs using git to include branch=master if no branch is set and also to use protocol=https for github urls as generated by the conversion script in OE-Core. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-09-10sssd: fix CVE-2021-3621Kai Kang
Backport patch to fix CVE-2021-3621. CVE: CVE-2021-3621 Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-09-09linux-%_5.%.bbappend: drop recipeArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit 833ae34c8f3222358f65e8ee3fdbac565485694e)
2021-07-10tpm-tools: fix build issueArmin Kuster
This error occurs randomly. /bin/bash: pod2man: command not found [Yocto #14304] minor space/tab cleanup Signed-off-by: Armin Kuster <akuster808@gmail.com> Cc: Ben <koncept1@gmail.com>
2021-04-19kas-security-base: fix feature namespace for tpm*Armin Kuster
They are MACHINE not DISTRO FEATURES Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-19.gitlab-ci: use kas shell in some cases.Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-19packagegroup-core-security: exclude apparmor in mips64Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-18kas: cleanup some kas filesArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-18gitlab-ci: add new before scriptArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-18gitlab-ci: cleanup after_scriptArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-18.gitlab-ci: work on pipelimeArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-18gitlab-ci: move tpm buildArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-18*-tpm.yml: drop tpms jobsArmin Kuster
way too many jobs. TPM have there own images, use that Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-18kas-security-base: Move some DISTRO_FEATURES aroundArmin Kuster
Move FEATURES that affect kernel configuation to minimize rebuilds Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-18gitlab-ci: Move all parsec builds into a separate jobAnton Antonov
Signed-off-by: Anton Antonov <Anton.Antonov@arm.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-15kas-security-base: add hardknott local dirsArmin Kuster
move to different builder and define SSTATE_DIR Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-14kas-security-base: change branch to hardknottArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-14lkrg-module: Add Linux Kernel Runtime GuardArmin Kuster
For more info see: https://github.com/openwall/lkrg Add to local.conf: IMAGE_INSTALL_append = " kernel-module-lkrg" Need these kconfig options enabled: CONFIG_KALLSYMS_ALL=y CONFIG_JUMP_LABEL=y CONFIG_DEBUG_KERNEL=y To invoke module: sudo insmod {path-to-modules}/p_lkrg.ko kint_enforce=1 Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-14clamav: remove rest of mirror.dat refArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-14Clearly define clang toolchain in Parsec recipesAnton Antonov
Signed-off-by: Anton Antonov <Anton.Antonov@arm.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-14gitlab-ci: fine tune orderArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-14kas-security-base.yml: tweek build varsArmin Kuster
add meta-filesystems Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-14.gitlab-ci.yml: reorder to speed up buildsArmin Kuster
Also clean up extra spaces Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-14initramfs-framework-ima: introduce IMA_FORCEMing Liu
Introduce IMA_FORCE to allow the IMA policy be applied forcely even 'no_ima' boot parameter is available. This ensures the end users have a way to disable 'no_ima' support if they want to, because it may expose a security risk if an attacker can find a way to change kernel arguments, it will easily bypass rootfs authenticity checks. Signed-off-by: Sergio Prado <sergio.prado@toradex.com> Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-14Define secure images with parsec-service and parsec-tool included and add ↵Anton Antonov
the images into gitlab CI Signed-off-by: Anton Antonov <Anton.Antonov@arm.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-14Add meta-parsec layer into meta-security.Anton Antonov
The layer contains recipes for Parsec service version 0.7.0 and parsec-tool version 0.3.0. The Parsec service is built with all supported providers and deployed with the MbedCrypto provider enabled. Both systemd and sysv-init are supported. Signed-off-by: Anton Antonov <Anton.Antonov@arm.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-12Use libest "main" branch instead of "master".Anton Antonov
This patch fixes the issue: WARNING: libest-3.2.0-r0 do_fetch: Failed to fetch URL git://github.com/cisco/libest, attempting MIRRORS if available ERROR: libest-3.2.0-r0 do_fetch: Fetcher failure: Unable to find revision 4ca02c6d7540f2b1bcea278a4fbe373daac7103b in branch master even from upstream ERROR: libest-3.2.0-r0 do_fetch: Fetcher failure for URL: 'git://github.com/cisco/libest'. Unable to fetch URL from any source. Signed-off-by: Anton Antonov <Anton.Antonov@arm.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-12python3-suricata-update: update to 1.2.1Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-12swtpm: fix check for tscd deamon on hostArmin Kuster
Found a few places that tscd check was trying to run the hosts. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-02swtpm: file pip3 issueArmin Kuster
need native pip3, was using host's Signed-off-by: Armin Kuster <akuster808@gmail.com> -- V2] add python3-cryptography-native to DEPENDS forgot to add changes.
2021-04-02swtpm: now need python-cryptography, pull in layerArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-02clamav: fix systemd service installArmin Kuster
ERROR: clamav-0.104.0-r0 do_package: QA Issue: clamav: Files/directories were installed but not shipped in any package: /lib/systemd/system/clamav-daemon.service /lib/systemd/system/clamav-clamonacc.service Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-02python3-privacyidea: upgrade 3.5.1 -> 3.5.2Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-02meta: drop IMA_POLICY from policy recipesMing Liu
IMA_POLICY is being referred as policy recipe name in some places and it is also being referred as policy file in other places, they are conflicting with each other which make it impossible to set a IMA_POLICY global variable in config file. Fix it by dropping IMA_POLICY definitions from policy recipes Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-02clamav: upgrade 104.0Armin Kuster
convert to cmake and general cleanup include on oe env patch and glibc 2.33 header fixup if running w/in qemu, need to add qemuparams="-m 2048" to allow freshclam not to oom Signed-off-by: Armin Kuster <akuster808@gmail.com> --- V2] Bump PV to match what is being d/l
2021-04-02packagegroup-core-security: drop clamav-cvdArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-25swtpm: update to 0.5.2Armin Kuster
Add python package Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-25tpm2-tss-engine: update 1.1.0Armin Kuster
LIC_FILES_CHKSUM hash changed between branches. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-18layer.conf: Add hardknott to LAYERSERIES_COMPATArmin Kuster
Thats codename for 3.3 Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-18ima-evm-keys: add file-checksums to IMA_EVM_X509Ming Liu
This ensures when a end user change the IMA_EVM_X509 key file, ima-evm-keys recipe will be rebuilt. Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-18samhain: fix compile error on powerpcKai Kang
It fails to comile samhain for powerpc(qemuppc): | x_sh_dbIO.c: In function 'swap_short': | x_sh_dbIO.c:229:36: error: initializer element is not constant | 229 | static unsigned short ooop = *iptr; | | ^ Assign after initialization of the static variable to avoid the failure. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-18fscryptctl: Fix installation pathlukasz plachno
- Without the patch fscryptctl is installed in /usr/bin/usr/local/bin instead of /usr/bin. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-09python3-fail2ban: fix building with ptest enabledArmin Kuster
Use new structure for testing. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-09tpm-tools: update to 1.3.9.1Armin Kuster
drop patch included in update Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-09trousers: update to 0.3.15Armin Kuster
includes: CVE-2020-24332, CVE-2020-24330, CVE-2020-24331 Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-09tpm2-topt: update 0.3.0Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-09tpm2-pkcs11: update to 1.5.0Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-09tpm2-tss: update to 3.0.3Armin Kuster
include automate 2.70 fix Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-09tpm2-tools: update to 5.0Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-04-24 07:28:19 +0000