aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2021-07-28packagegroup-core-security.bb: fix suricat-ptest inclusionArmin Kuster
drop libseccomp ptest Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-07-28crowdsec: add pkgArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-07-28add meta-rustArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-07-28suricata: Drop 4.1.x its EOLArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-07-28suricata.inc: exclude ppc in rust versionArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-07-17Do not use clang toolchain in Parsec recipesAnton Antonov
Signed-off-by: Anton Antonov <Anton.Antonov@arm.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-07-10tpm-tools: fix build issueArmin Kuster
This error occurs randomly. /bin/bash: pod2man: command not found [Yocto #14304] minor space/tab cleanup Signed-off-by: Armin Kuster <akuster808@gmail.com> Cc: Ben <koncept1@gmail.com>
2021-07-10.gitlab-ci.yml: fix qemux86 musl orderArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-07-10apparmor: use its own initscript and service filesYi Zhao
Use initscript and service files provided by apparmor. Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
2021-07-10apparmor: upgrade 3.0 -> 3.0.1Yi Zhao
Drop backport patches: 0001-apparmor-fix-manpage-order.patch 0001-libapparmor-add-missing-include-for-socklen_t.patch 0002-libapparmor-add-aa_features_new_from_file-to-public-.patch 0003-libapparmor-add-_aa_asprintf-to-private-symbols.patch 0001-aa_status-Fix-build-issue-with-musl.patch 0001-parser-Makefile-dont-force-host-cpp-to-detect-reallo.patch Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
2021-07-06kas/kas-security-alt.yml: add meta-rustArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-07-06suricata: update to 6.0.3Armin Kuster
add new crates minor cleanup Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-07-04sssd: update to 2.5.1Armin Kuster
See full change log: https://sssd.io/release-notes/sssd-2.5.1.html Including a musl build work around Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-29initramfs-framework: rename files dirArmin Kuster
Fixes: ERROR: initramfs-framework-1.0-r4 do_fetch: Fetcher failure for URL: 'file://dmverity'. Unable to fetch URL from any source. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-29packagegroup-core-security: add sshguardArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-29ssshgaurd: add packaageArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-29initramfs-framework: fix typo in conditionalArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-20smack: add 3 cves to allowlistSekine Shigeki
CVE-2014-0363, CVE-2014-0364, CVE-2016-10027 are not for smack of smack-team(https://github.com/smack-team/smack) but other project. Signed-off-by: Sekine Shigeki <sekine.shigeki@fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-20aircrack-ng: update to 1.6Federico Pellegrin
Signed-off-by: Federico Pellegrin <fede@evolware.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-20sssd: add fix-ldblibdir.patch backKai Kang
The patch fix-ldblibdir.patch has been dropped when update sssd to 2.5.0. But it fails to start sssd without this patch. So add it back. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-20sssd: set pid path with /runKai Kang
/var/run is deprecated and set pid path with /run to store pid files for the SSSD. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-06meta-integrity/recipe-kernel: use sanity checkArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-06meta-integrity: add sanity checkArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-06meta-tpm/linux-yocto: use sanity supportArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-06meta-tpm: add layer sanity checkArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-06linux-yocto-dev: drop bbappendArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-06meta-security/recipe-kernel: use sanity checkArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-06meta-security: add sanity checkArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-05meta-hardening/initscripts: missed overide.Armin Kuster
Helps pass YCL. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-05libgssglue: update SRC_URIYi Zhao
Update SRC_URI to use Debian mirror because the original site is unaccessible. Fixes do_fetch error: ERROR: libgssglue-0.4-r0 do_fetch: Fetcher failure for URL: 'http://www.citi.umich.edu/projects/nfsv4/linux/libgssglue/libgssglue-0.4.tar.gz'. Unable to fetch URL from any source. Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
2021-06-05Correct "securiyt" typo in maintainers.incRobert P. J. Day
Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-05packagegroup-core-security: drop python3-scapyArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-05python3-scapy: drop , now in meta-pythonArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-05initramfs-framework: fix YCL issue.Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-05linux-%_5.%.bbappend: drop recipeArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-05busybox: drop as libsecomp is in coreArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-05tpm2-tss: fix usrmerge udev install pathRicardo Salveti
Update ${base_prefix}/lib to ${nonarch_base_libdir} to fix a package QA issue when usrmerge is enabled in DISTRO_FEATURES. QA Issue: tpm2-tss package is not obeying usrmerge distro feature. /lib should be relocated to /usr. [usrmerge] Signed-off-by: Ricardo Salveti <ricardo@foundries.io> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-05sssd: update to 2.5.0Armin Kuster
Add new depends Drop obsolete patches Signed-off-by: Armin Kuster <akuster808@gmail.com> ---- v2] Fix issue with nsupdate check don't use host bind
2021-06-05ossec-hids: musl not compatableArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-05packagegroup-core-security: exclude ossec-hids from muslArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-05lkrg-module: update 0.9.1Armin Kuster
LIC_FILES_CHKSUM updated do to yr change and adding new copyrights Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-05python3-scapy: update to 2.4.5Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-05opendnssec: upgrade 2.1.8 -> 2.1.9Upgrade Helper
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-05clamav: upgrade to latest revisionUpgrade Helper
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-16packagegroup-core-security: add clamav-daemonArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-16clamav: fix systemd startupArmin Kuster
cleanup recipe Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-16.gitlab-ci: drop clean up combine alt w baseArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-16packagegroup-core-security: add aide and ossecArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-16aide: Add another idsArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-16Apparmor: fix multi config build issue.Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>