aboutsummaryrefslogtreecommitdiffstats
path: root/recipes-security
AgeCommit message (Collapse)Author
2019-08-04keyutils: remove from meta-securityArmin Kuster
now in meta-oe Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26clamav: minor recipe cleanupArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26libmspack: update SRC_URI and packageArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26test-image: add a few more packages to imageArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26test-image: add packagegroup-core-security-ptestArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26packagegroup-core-security: cleanup and remove ptestArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26security-test-image: add a testing imageArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-10python3-scapy: solved the conflict with python-scapyZang Ruochen
-Rename the following file to resolve the conflict with python-scapy: Rename /usr/bin/UTscapy to /usr/bin/UTscapy3 Rename /usr/bin/scapy to /usr/bin/scapy3 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-10python-scapy: solved the conflict with python3-scapyZang Ruochen
-Rename the following file to resolve the conflict with python3-scapy: Rename /usr/bin/UTscapy to /usr/bin/UTscapy2 Rename /usr/bin/scapy to /usr/bin/scapy2 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-10python-scapy: Remove redundant sed operationsZang Ruochen
-Remove redundant sed operations. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-10bastille: solved the conflict with perl-module-text-wrap and base-filesZang Ruochen
-Remove the link to perl5 to resolve the conflict with perl-module-text-wrap. -Remove the operation on /var/lock to resolve the conflict with base-files. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-21python3-fail2ban: Fix build error of xrange.leimaohui
NameError: name 'xrange' is not defined Signed-off-by: Lei Maohui <leimaohui@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-21keyutils: fix library install pathArmin Kuster
[v2] fix multilib support Als add native support Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-21checksec: update to 1.11.1Armin Kuster
* checksec.sh: Updated to 1.11.1 * checksec.sh: resolved issues with readelf * checksec.sh: Added docker images for testing * checksec.sh: Added armhf and aarch64 libc locations * checksec.sh: Replace FS_COUNT with fgrep * checksec.sh: Fixed symbols count in csv * checksec.sh: Fixed RW-RPATH and RW-RUNPATH * checksec.sh: Added stack canaries generated by intel compiler * checksec.sh: Mute stat errors for non-existent directories * checksec.sh: Removed invalid json structures and duplicate kernel checks * checksec.sh: fixed spaces in -d option * checksec.sh: Added stack-protector-string check * checksec.sh: Add arm64 specific kernel checks * checksec.sh: Add REFCOUNT_FULL to kernel tests * checksec.sh: Remove OSX support Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-09libseccomp: update to 2.4.1Armin Kuster
bug fix release. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-14clamav-native: fix new build issueArmin Kuster
re-arch the reciped to build properly. Fixed /var/lib/clamav dir issue Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-14clamav: add clamav-cvd package for cvd dbArmin Kuster
Add native package to support creating a mirror of the clamav cvd and supply it in a new package. Provide a INSTALL_CLAMAV_CVD flag to bypass this creation Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-13clamav: fix llvm reference versionArmin Kuster
llvm8.0 does not exist. dropped the version part. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-07libmspack: update to 0.10.1Armin Kuster
For details see: https://github.com/kyz/libmspack/blob/master/libmspack/ChangeLog change compression to match that now being used from source Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-07ccs-tools: move to reciped-macArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31reorg ids: move ids recipes to recipes-idsArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31reorg: move mac recipes to recipes-macArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31clamav: drop llvm version settingArmin Kuster
There is only one llvm and its in core so drop allowing it to be overwritten. We can hardcode it now. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31samhain: fix runtime errorArmin Kuster
fix: samhain[1652]: FATAL: x_dnmalloc.c: 2790: hashval < AMOUNTHASH Killed disable dnmalloc Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31sssd: update to 1.16.4Armin Kuster
Add systemd pkgconf via DISTRO_FEATURE Fix uid/gid of sssd.conf [v2] drop non update related changes also, this includes CVE-2019-3811 Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31sssd: fix a few runtime issuesArmin Kuster
include a few more RDEPEND packages. remove init script as there really isn't one yet. [v2] Squish build tweeking done in pkg update into this changeset Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-29Revert "sssd: fix libcrypto version used"Armin Kuster
This reverts commit 2488c965d6b1b440734f43326fb33ac642ac7b82. This corrects an incorrect fix as pointed out by Adrian Bunk.
2019-03-25sssd: fix libcrypto version usedArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-25keyutils: fix pulling in glibc when musl enabledArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-16keyutils: fix QA WARNINGArmin Kuster
WARNING: keyutils-1.6-r0 do_package: QA Issue: keyutils: Files/directories were installed but not shipped in any package: /lib/pkgconfig /lib/pkgconfig/libkeyutils.pc Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-16libseccomp: update to 2.4.0Armin Kuster
Update the syscall table for Linux v5.0-rc5. also a security releated issue; https://github.com/seccomp/libseccomp/issues/139 Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-12suricata: update to 4.1.3Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-12packagegroup-core-security: change fail2ban ptest to reg python pkgArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-08tripwire: fix ptest so more tests passArmin Kuster
replace relative path with abs path for binaries. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-08keyutils: improve ptestsArmin Kuster
Tests need lsb Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06keyutils: update to 1.6Armin Kuster
remove patch now included in update: keyutils-use-relative-path-for-link.patch Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06suricata: update to 4.0.6Armin Kuster
includes: SMTP crash issue was fixed: CVE-2018-18956 Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06python-fail2ban: update 0.10.4.0Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06libmspack: update to 0.9.1Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06tripwire: update to 2.4.3.7Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06samhain: update to 4.3.2Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06xmlsec1: add PACKAGECONFIG disable-desChangqing Li
Signed-off-by: Changqing Li <changqing.li@windriver.com> Reviewed-by: Tom Rini <trini@konsulko.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11clamav: update llvm to 8.0Armin Kuster
ERROR: Nothing PROVIDES 'llvm6.0' Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11scapy: restore ptest by going to github directlyArmin Kuster
The pypi package removed the tests so go to the git repo directly. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11scapy: Fix shebang for python3Scott Ellis
Both scapy and UTscapy have python in the shebang line regardless of whether python3-scapy or python-scapy was built. Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11scapy: Add python-cryptography to RDEPENDSScott Ellis
Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11Upgrade scapy to 2.4.2Scott Ellis
Upstream MANIFEST.in removed doc and test directories so remove ptest. Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11xmlsec1: upgrade 1.2.26 -> 1.2.27Adrian Bunk
Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11xmlsec1: Make the crypto libraries a PACKAGECONFIGAdrian Bunk
Usually one doesn't need variants for all 4 different crypto libraries installed at the same time. Also remove a libgpg-error DEPENDS that is not used directly by xmlsec1. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11xmlsec1: Include libxmlsec1-*.so in the main packageAdrian Bunk
They can be dynamically loaded with xmlSecCryptoDLLoadLibrary(). Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Armin Kuster <akuster808@gmail.com>