aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2018-09-17fail2ban: update to 10.3.1Armin Kuster
covert to python package standard Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17sssd: update to 1.16.3Armin Kuster
Includes: CVE-2018-10852 see: https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_3.html Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17keyutils: Fix build with usrmergeAlex Kiernan
Update BINDIR and SBINDIR so keyutils builds with usrmerge ERROR: keyutils-1.5.10-r0 do_package: QA Issue: keyutils: Files/directories were installed but not shipped in any package: /sbin/key.dns_resolver /sbin/request-key /bin/keyctl Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. keyutils: 3 installed and not shipped files. [installed-vs-shipped] Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17keynote: depend on openssl10Yi Zhao
Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-01xmlsec1: upgrade 1.2.25 -> 1.2.26Yi Zhao
Drop patch xmlsec1-fix-a-typo-in-examples-verify3.c.patch since the issue had been fixed upstream. Rebase patch change-finding-path-of-nss.patch Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-01samhain: upgrade 4.2.2 -> 4.2.4Yi Zhao
Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-01ecryptfs-utils: fix usrmerge install pathMingli Yu
Update rootsbindir from /sbin to ${base_sbindir} to fix below do_install error when usrmerge enabled in DISTRO_FEATURES | chmod: cannot access '/poky-build/tmp-glibc/work/core2-64-wrs-linux/ecryptfs-utils/111-r0/image/usr/sbin/mount.ecryptfs_private': No such file or directory And pass "--with-pamdir=${base_libdir}/security" to configure script to fix below warning when usrmerge enabled in DISTRO_FEATURES | WARNING: ecryptfs-utils-111-r0 do_package: QA Issue: ecryptfs-utils: Files/directories were installed but not shipped in any package: /lib64/security/pam_ecryptfs.so Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-01keynote: add dependency on bison-nativeJoe Slater
bison/yacc is no longer automatically supplied. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-01libseccomp: Drop RDEPENDS on bashAlex Kiernan
Commit ada3eee ("libseccomp: fix rdepends") added RDEPENDS on bash, but this is no longer needed, so drop it. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-01suricata: update 4.0.5Armin Kuster
Fix rules make. Don't allow the makefile to download the rules. Use fetcher add install configs and remove manual intall of those files Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-01libhtp: update to 0.5.27Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04suricata: rename ${PN}-python to ${PN}-socketcontrolKoen Kooi
This describes the content a lot better. RDEPENDS are still missing, so it's still as non-working as before :/ Signed-off-by: Koen Kooi <koen.kooi@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04suricata: install and package threshold.configKoen Kooi
This fixes the following warning during startup: suricata[24522]: 31/7/2018 -- 13:47:15 - <Warning> - [ERRCODE: SC_ERR_FOPEN(44)] - Error opening file: "/etc/suricata//threshold.config": No such file or directory Signed-off-by: Koen Kooi <koen.kooi@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04suricata: install and package rulesKoen Kooi
This fixes the following warning during startup: suricata[22707]: 31/7/2018 -- 13:34:40 - <Warning> - [ERRCODE: SC_ERR_NO_RULES_LOADED(43)] - 47 rule files specified, but no rule was loaded at all! Signed-off-by: Koen Kooi <koen.kooi@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04suricata: enable syslog outputKoen Kooi
This fixes the following error preventing startup in daemon mode: suricata[20485]: 31/7/2018 -- 13:19:48 - <Error> - [ERRCODE: SC_ERR_MISSING_CONFIG_PARAM(118)] - NO logging compatible with daemon mode selected, suricata won't be able to log. Please update 'logging.outputs' Signed-off-by: Koen Kooi <koen.kooi@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04suricate: create and package logdirKoen Kooi
This fixes the following error preventing startup: suricata[18771]: 31/7/2018 -- 13:08:21 - <Error> - [ERRCODE: SC_ERR_LOGDIR_CONFIG(116)] - The logging directory "/var/log/suricata/" supplied by /etc/suricata/suricata.yaml (default-log-dir) doesn't exist. Shut> Signed-off-by: Koen Kooi <koen.kooi@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04suricata: add systemd unitKoen Kooi
Based on the debian systemd unit. Signed-off-by: Koen Kooi <koen.kooi@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04suricata: add 'nfq' PACKAGECONFIGKoen Kooi
For inline IPS nfqueue is nice to have, so add a PACKAGECONFIG entry for it. Signed-off-by: Koen Kooi <koen.kooi@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04suricata: mark config file as CONFFILEKoen Kooi
This preserves user edits during package upgrades. Signed-off-by: Koen Kooi <koen.kooi@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04suricata: fix packagingKoen Kooi
Move ${PN}-python in front so ${PN} can use default packaging rules. Signed-off-by: Koen Kooi <koen.kooi@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04suricata: don't start service in postinstKoen Kooi
Apart from hardcoding the wrong networking device it won't survive device restart Signed-off-by: Koen Kooi <koen.kooi@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04nmap: remove recipe as it is in meta-oe nowArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-07-07clamav: update postinitArmin Kuster
log_check] WARNING: Intentionally failing postinstall scriptlets of ['suricata', 'clamav'] to defer them to first boot is deprecated. Please place them into pkg_postinst_ontarget_${PN} () Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-07-07suricata: update postinitArmin Kuster
[log_check] WARNING: Intentionally failing postinstall scriptlets of ['suricata', 'clamav'] to defer them to first boot is deprecated. Please place them into pkg_postinst_ontarget_${PN} () Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-07-03CVE-2018-11652 nikto: arbitray OS command injection via http server field.Nagalakshmi Veeramallu
CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header, which is directly injected into a CSV report. Signed-off-by: Nagalakshmi Veeramallu <nveeramallu@mvista.com> Reviewed-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com> Signed-off-by: Armin Kuster <akuster@mvista.com>
2018-07-03samhain: correct service statusChangqing Li
status get by "systemctl status samhain" is not correct. It is active(exited) now. but actually, there is a dameon running, it should be active(running). so change Type of servive. Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-11Fix build issue for apparmor when systemd is usedJinliang Li
When systemd is used as system init manager, there is a build issue complains "can't found apparmor.service". This patch fix it. Signed-off-by: Jinliang Li <jinliang.li@linux.alibaba.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-11Fix build issue for apparmor kernel configurationJinliang Li
Set the correct path of kernel configuration file in linux-yocto_4.%.bbappend to fix the build issue, which is "Fetcher failure for URL: 'file://apparmor.cfg'. Unable to fetch URL from any source." Signed-off-by: Jinliang Li <jinliang.li@linux.alibaba.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-07xmlsec1: remove host paths from target filesWenzong Fan
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-07qemu: remove bb as this option is in coreArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13meta-security: remove depened on other security layersArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13clamav: update LLVM version to match coreArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13sssd: only include when pam in DISTRO_FEATURESArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13xmlsec1: refresh patches to fix QA warningYi Zhao
Refresh patches with devtool command. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13meta-*: add LAYERSERIES_COMPAT to layer.conf filesArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-31samhain-server: do not extend to nativeJackie Huang
No packages depend on samhain-server-native and it doesn't make sense to extend a server package to native, so remove the BBCLASSEXTEND. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-31clamav: Add missing clamav.service file to SRC_URIJagadeesh Krishnanjanappa
This solves the below error when systemd is used as init manager, -- snip -- ERROR: clamav-0.99.2-r0 do_package: SYSTEMD_SERVICE_clamav value clamav.service does not exist ERROR: clamav-0.99.2-r0 do_package: Function failed: systemd_populate_packages -- snip -- Other issue: * Ship /lib/systemd/system/clamav-freshclam.service into ${PN}-freshclam package, to solve below warning: -- snip -- [10240] WARNING: QA Issue: clamav: Files/directories were installed but not shipped in any package: /lib/systemd/system/clamav-freshclam.service -- snip -- Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-31xmlsec1: fix a typo in examples/verify3.cJackie Huang
Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-18linux-yocto: move to wildcard on bbappendArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-18linux-yocto: drop dangling dirArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-18linux-stable: drop old versions no longer in coreArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-18google-authenticator-libpam: add new packageArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-18yocto-linux/4.9: fix typo in filepathArmin Kuster
fix idea submitted but Derek Betker <derek.betker@ge.com> [Yocto 12134] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-17trousers: fix to ship leftover files into packagesJagadeesh Krishnanjanappa
While building <mlib>-trousers recipe, the below files are not shipped but has been installed. The patch packages them accordingly. -- snip -- WARNING: lib32-trousers-0.3.14+gitAUTOINC+4b9a70d578-r0 do_package: QA Issue: lib32-trousers: Files/directories were installed but not shipped in any package: /usr/src /usr/src/debug /usr/src/debug/lib32-trousers /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0 /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/git /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/git/src /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/git/src/tcs /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/git/src/trspi /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/git/src/tcsd /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/git/src/tspi /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/git/src/include /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/git/src/tddl -- snip -- Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14tpm2.0-tss: update to 1.3.0Armin Kuster
change recipe to PV style Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14tpm2-abrmd: update to 1.2.0Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14tpm2simulator: update to 138Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14clamav: update to 0.99.3Armin Kuster
removed unused hash checksums Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14freediameter: remove packageArmin Kuster
resides in meta-networking now Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14xmlsec1: Update to 1.2.25Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>