aboutsummaryrefslogtreecommitdiffstats
path: root/recipes-security
AgeCommit message (Collapse)Author
2019-05-21python3-fail2ban: Fix build error of xrange.leimaohui
NameError: name 'xrange' is not defined Signed-off-by: Lei Maohui <leimaohui@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-21keyutils: fix library install pathArmin Kuster
[v2] fix multilib support Als add native support Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-21checksec: update to 1.11.1Armin Kuster
* checksec.sh: Updated to 1.11.1 * checksec.sh: resolved issues with readelf * checksec.sh: Added docker images for testing * checksec.sh: Added armhf and aarch64 libc locations * checksec.sh: Replace FS_COUNT with fgrep * checksec.sh: Fixed symbols count in csv * checksec.sh: Fixed RW-RPATH and RW-RUNPATH * checksec.sh: Added stack canaries generated by intel compiler * checksec.sh: Mute stat errors for non-existent directories * checksec.sh: Removed invalid json structures and duplicate kernel checks * checksec.sh: fixed spaces in -d option * checksec.sh: Added stack-protector-string check * checksec.sh: Add arm64 specific kernel checks * checksec.sh: Add REFCOUNT_FULL to kernel tests * checksec.sh: Remove OSX support Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-09libseccomp: update to 2.4.1Armin Kuster
bug fix release. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-14clamav-native: fix new build issueArmin Kuster
re-arch the reciped to build properly. Fixed /var/lib/clamav dir issue Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-14clamav: add clamav-cvd package for cvd dbArmin Kuster
Add native package to support creating a mirror of the clamav cvd and supply it in a new package. Provide a INSTALL_CLAMAV_CVD flag to bypass this creation Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-13clamav: fix llvm reference versionArmin Kuster
llvm8.0 does not exist. dropped the version part. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-07libmspack: update to 0.10.1Armin Kuster
For details see: https://github.com/kyz/libmspack/blob/master/libmspack/ChangeLog change compression to match that now being used from source Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-07ccs-tools: move to reciped-macArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31reorg ids: move ids recipes to recipes-idsArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31reorg: move mac recipes to recipes-macArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31clamav: drop llvm version settingArmin Kuster
There is only one llvm and its in core so drop allowing it to be overwritten. We can hardcode it now. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31samhain: fix runtime errorArmin Kuster
fix: samhain[1652]: FATAL: x_dnmalloc.c: 2790: hashval < AMOUNTHASH Killed disable dnmalloc Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31sssd: update to 1.16.4Armin Kuster
Add systemd pkgconf via DISTRO_FEATURE Fix uid/gid of sssd.conf [v2] drop non update related changes also, this includes CVE-2019-3811 Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31sssd: fix a few runtime issuesArmin Kuster
include a few more RDEPEND packages. remove init script as there really isn't one yet. [v2] Squish build tweeking done in pkg update into this changeset Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-29Revert "sssd: fix libcrypto version used"Armin Kuster
This reverts commit 2488c965d6b1b440734f43326fb33ac642ac7b82. This corrects an incorrect fix as pointed out by Adrian Bunk.
2019-03-25sssd: fix libcrypto version usedArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-25keyutils: fix pulling in glibc when musl enabledArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-16keyutils: fix QA WARNINGArmin Kuster
WARNING: keyutils-1.6-r0 do_package: QA Issue: keyutils: Files/directories were installed but not shipped in any package: /lib/pkgconfig /lib/pkgconfig/libkeyutils.pc Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-16libseccomp: update to 2.4.0Armin Kuster
Update the syscall table for Linux v5.0-rc5. also a security releated issue; https://github.com/seccomp/libseccomp/issues/139 Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-12suricata: update to 4.1.3Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-12packagegroup-core-security: change fail2ban ptest to reg python pkgArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-08tripwire: fix ptest so more tests passArmin Kuster
replace relative path with abs path for binaries. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-08keyutils: improve ptestsArmin Kuster
Tests need lsb Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06keyutils: update to 1.6Armin Kuster
remove patch now included in update: keyutils-use-relative-path-for-link.patch Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06suricata: update to 4.0.6Armin Kuster
includes: SMTP crash issue was fixed: CVE-2018-18956 Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06python-fail2ban: update 0.10.4.0Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06libmspack: update to 0.9.1Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06tripwire: update to 2.4.3.7Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06samhain: update to 4.3.2Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06xmlsec1: add PACKAGECONFIG disable-desChangqing Li
Signed-off-by: Changqing Li <changqing.li@windriver.com> Reviewed-by: Tom Rini <trini@konsulko.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11clamav: update llvm to 8.0Armin Kuster
ERROR: Nothing PROVIDES 'llvm6.0' Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11scapy: restore ptest by going to github directlyArmin Kuster
The pypi package removed the tests so go to the git repo directly. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11scapy: Fix shebang for python3Scott Ellis
Both scapy and UTscapy have python in the shebang line regardless of whether python3-scapy or python-scapy was built. Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11scapy: Add python-cryptography to RDEPENDSScott Ellis
Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11Upgrade scapy to 2.4.2Scott Ellis
Upstream MANIFEST.in removed doc and test directories so remove ptest. Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11xmlsec1: upgrade 1.2.26 -> 1.2.27Adrian Bunk
Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11xmlsec1: Make the crypto libraries a PACKAGECONFIGAdrian Bunk
Usually one doesn't need variants for all 4 different crypto libraries installed at the same time. Also remove a libgpg-error DEPENDS that is not used directly by xmlsec1. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11xmlsec1: Include libxmlsec1-*.so in the main packageAdrian Bunk
They can be dynamically loaded with xmlSecCryptoDLLoadLibrary(). Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11checksec: Remove old scriptScott Ellis
Should have been removed in previous patch. Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17apparmor: backport a patch to fix tool paths instead of seddingRoss Burton
Sedding is ugly, and as upstream have already fixed this cherry-pick the patch instead. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17apparmor: if Perl is disabled remove perl-using scriptsRoss Burton
aa-notify uses the Perl bindings, so isn't usable when perl is disabled. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17apparmor: systemd.bbclas is useful even when disabledRoss Burton
The systemd bbclass will remove any systemd files that have been installed if systemd is disabled, so always install the files and always inherit. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17apparmor: remove pointless ALLOW_EMPTYRoss Burton
${PN} has content, so there's no need to set ALLOW_EMPTY_${PN}. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17apparmor: no need to conditionalise PACKAGESRoss Burton
A package with no content is not generated, so there's no need to conditionalise assignments to PACKAGES. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17apparmor: use manpages classRoss Burton
The manpages class handles enabling/disabling the man pages based on the api-documentation DISTRO_FEATURE, and ensures that mandb is called. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17apparmor: remove redundant SRoss Burton
This is the default value, so remove it. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17apparmor: enable static libraries neatlyRoss Burton
No need to fiddle with the configure arguments as we can just neuter disable-static.inc. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17apparmor: add missing bash dependencyRoss Burton
testsuite/parser/tst/minimize.sh is a bash script, so until it is reviewed add a bash dependency to apparmor-ptest. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17Add recipe for ncrackScott Ellis
Ncrack is a network authentication cracking tool. Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-03 05:24:04 +0000