aboutsummaryrefslogtreecommitdiffstats
path: root/recipes-security
AgeCommit message (Collapse)Author
2021-11-07python3-fail2ban: remove /runArmin Kuster
Fixes: ERROR: python3-fail2ban-0.11.2-r0 do_package_qa: QA Issue: python3-fail2ban installs files in /run, but it is expected to be empty [empty-dirs] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-11-07bastille: Create /var/log/Bastille in runtimeArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-11-07sssd: Create /var/log/sssd in runtimeArmin Kuster
/var/log is normally a link to /var/volatile/log and /var/volatile is a tmpfs mount. So anything created in /var/log will not be available when the tmpfs is mounted. [Thanks to Peter Kjellerstedt for example] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-11-04recipes: Update SRC_URI branch and protocolsArmin Kuster
This patch updates SRC_URIs using git to include branch=master if no branch is set and also to use protocol=https for github urls as generated by the conversion script in OE-Core. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-24opendnssec: blacklist do to ldns being blacklistedArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-18sssd: re-package to fix QA issuesKai Kang
It packages all file in ${libdir} to package sssd, including the .so symlink files. Then it causes QA issues: | ERROR: QA Issue: sssd rdepends on dbus-dev [dev-deps] | ERROR: QA Issue: sssd rdepends on ding-libs-dev [dev-deps] So re-package sssd then the .so symlink files and .pc files are packaged to sssd-dev which should be. File ${libdir}/libsss_sudo.so is not a symlink file but packaged to sssd-dev too. Then causes another QA issue: | ERROR: sssd-2.5.2-r0 do_package_qa: QA Issue: -dev package sssd-dev contains non-symlink .so '/usr/lib/libsss_sudo.so' [dev-elf] So create a new sub-package libsss-sudo to package file libsss_sudo.so and make sssd rdepends on it. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-18python3-fail2ban: fix build failure and cleanupArmin Kuster
Fixes: error in fail2ban setup command: use_2to3 is invalid. ERROR: 'python3 setup.py build ' execution failed. drop custom fail2ban_setup.py remove pyhton-fail2ban as its a symlink to python3 Update to tip for 11.2 branch Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-18recipes-security/chipsec: platform security assessment frameworkLiwei Song
Add chipsec, tools to dump and analyzing hardware, system firmware components, like PCH register, ioport or iomem configuration space. Signed-off-by: Liwei Song <liwei.song@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-09-28recipes-security/fscrypt: Add fscrypt .bb fileBhupesh Sharma
fscrypt is a high-level tool for the management of Linux filesystem encryption. fscrypt manages metadata, key generation, key wrapping, PAM integration, and provides a uniform interface for creating and modifying encrypted directories. Add recipe for the same in 'recipes-security'. Signed-off-by: Bhupesh Sharma <bhupesh.sharma@linaro.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-09-15isic: set precise BSD licenseArmin Kuster
"BSD" is ambiguous, use the precise licenses BSD-2-Clause Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-09-15opendnssec: set precise BSD licenseArmin Kuster
"BSD" is ambiguous, use the precise licenses BSD-2-Clause Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-09-15cryfs: drop recipeArmin Kuster
it was accidently pushed and is incmomplete Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-09-10sssd: 2.5.1 -> 2.5.2Kai Kang
SSSD 2.5.2 Highlights * General information - originalADgidNumber attribute in the SSSD cache is now indexed * New features - Debug messages in data provider include a unique request ID that can be used to track the request from its start to its end (requires libtevent >= 0.11.0) * Important fixes - Update large files in the files provider in batches to avoid timeouts * Configuration changes - Add new config option fallback_to_nss Full release notes: * https://sssd.io/release-notes/sssd-2.5.2.html And backport patch to fix CVE-2021-3621. CVE: CVE-2021-3621 Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-08-26krill: Rust is in core nowArmin Kuster
drop dynamic-layer Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-08-26cryfs: add new packageArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-08-01meta-security: Convert to new override syntaxArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-07-04sssd: update to 2.5.1Armin Kuster
See full change log: https://sssd.io/release-notes/sssd-2.5.1.html Including a musl build work around Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-29ssshgaurd: add packaageArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-20aircrack-ng: update to 1.6Federico Pellegrin
Signed-off-by: Federico Pellegrin <fede@evolware.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-20sssd: add fix-ldblibdir.patch backKai Kang
The patch fix-ldblibdir.patch has been dropped when update sssd to 2.5.0. But it fails to start sssd without this patch. So add it back. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-20sssd: set pid path with /runKai Kang
/var/run is deprecated and set pid path with /run to store pid files for the SSSD. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-05libgssglue: update SRC_URIYi Zhao
Update SRC_URI to use Debian mirror because the original site is unaccessible. Fixes do_fetch error: ERROR: libgssglue-0.4-r0 do_fetch: Fetcher failure for URL: 'http://www.citi.umich.edu/projects/nfsv4/linux/libgssglue/libgssglue-0.4.tar.gz'. Unable to fetch URL from any source. Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
2021-06-05python3-scapy: drop , now in meta-pythonArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-05sssd: update to 2.5.0Armin Kuster
Add new depends Drop obsolete patches Signed-off-by: Armin Kuster <akuster808@gmail.com> ---- v2] Fix issue with nsupdate check don't use host bind
2021-06-05python3-scapy: update to 2.4.5Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-05opendnssec: upgrade 2.1.8 -> 2.1.9Upgrade Helper
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-16python3-scapy: add UPSTREAM_CHECK_COMMITSArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-26libseccomp: drop recipe. In core nowArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-12Use libest "main" branch instead of "master".Anton Antonov
This patch fixes the issue: WARNING: libest-3.2.0-r0 do_fetch: Failed to fetch URL git://github.com/cisco/libest, attempting MIRRORS if available ERROR: libest-3.2.0-r0 do_fetch: Fetcher failure: Unable to find revision 4ca02c6d7540f2b1bcea278a4fbe373daac7103b in branch master even from upstream ERROR: libest-3.2.0-r0 do_fetch: Fetcher failure for URL: 'git://github.com/cisco/libest'. Unable to fetch URL from any source. Signed-off-by: Anton Antonov <Anton.Antonov@arm.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-02python3-privacyidea: upgrade 3.5.1 -> 3.5.2Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-18fscryptctl: Fix installation pathlukasz plachno
- Without the patch fscryptctl is installed in /usr/bin/usr/local/bin instead of /usr/bin. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-09python3-fail2ban: fix building with ptest enabledArmin Kuster
Use new structure for testing. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-02python3-fail2ban: update to 0.11.2Armin Kuster
drop hard python3 patch and create it dufing compile. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-02opendnssec: update to 2.1.8Armin Kuster
refresh libdns_conf_fix.patch Drop fix_fprint.patch includd in update Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-03-02python3-scapy: upgrade 2.4.3 -> 2.4.4Armin Kuster
2021-03-02python3-privacyidea: upgrade 3.3 -> 3.5.1Armin Kuster
2021-03-02libseccomp: upgrade 2.5.0 -> 2.5.1Armin Kuster
drop patch merged in update
2021-03-02fscryptctl: upgrade 0.1.0 -> 1.0.0Armin Kuster
2021-03-02ding-libs: upgrade 0.5.0 -> 0.6.1Armin Kuster
2021-02-23nikito: Update common-licenses references to match new namesArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-23softhsm: drop pkg as meta-oe has itArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-10-10sssd: update to latest ltm 1.16.5Armin Kuster
fix musl support Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-10-10libest: fix musl build.Armin Kuster
fixes est.c:38:10: fatal error: execinfo.h: No such file or directory | 38 | #include <execinfo.h> | | ^~~~~~~~~~~~ Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-10-10ecryptfs-utils: fix musl buildArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-10-01libseccomp: fix ptest failures.Armin Kuster
Fixes: BusyBox v1.32.0 () multi-call binary. Usage: dd [if=FILE] [of=FILE] [bs=N] [count=N] [skip=N] Don't use Busybox dd, not compatable. Use coreutils Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-29opendnssec: add recipeArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-29libest: add recipeArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-29softHSM: add pkgArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-12nss: update patch to fix do_patch errorQi.Chen@windriver.com
Currently sssd's do_patch task fails. Update the patch to fix this problem. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-05sssd: Avoid nss function conflicts with glibc nss.hArmin Kuster
glibc 2.32 will define these varibles [1] which results in conflicts with these static function names, backport a fix from upstream [1] https://sourceware.org/git/?p=glibc.git;a=commit;h=499a92df8b9fc64a054cf3b7f728f8967fc1da7d Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-20 00:21:22 +0000