aboutsummaryrefslogtreecommitdiffstats
path: root/recipes-security
AgeCommit message (Collapse)Author
2020-03-27checksec: move to recipe-scannersArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-27clamav: move to recipes-scannersArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-27fail2ban: change hardcoded sysklogd to VIRTUAL-RUNTIME_base-utils-syslogArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-08libseccomp: update to 2.4.3Armin Kuster
dropped patch now included in update Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-08sssd: python2 not supportedArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-08sssd: DEPEND on nss if nothing else is chosenJonatan Pålsson
sssd will attempt to build against nss if no crypto is selected. If a bbappend sets PACKAGECONFIG = <list without nss or crypto>, the appropriate DEPEND is not established. Fixes the following configure error: ... snip ... | checking for NSS... configure: error: Package requirements (nss) were not met: | | No package 'nss' found | | Consider adjusting the PKG_CONFIG_PATH environment variable if you | installed software in a non-standard prefix. | | Alternatively, you may set the environment variables NSS_CFLAGS | and NSS_LIBS to avoid the need to call pkg-config. | See the pkg-config man page for more details. | | WARNING: exit code 1 from a shell command. Signed-off-by: Jonatan Pålsson <jonatan.p@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-08sssd: Fix typo in PACKAGECONFIG. cyrpto -> cryptoJonatan Pålsson
Signed-off-by: Jonatan Pålsson <jonatan.p@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-08sssd: Add PACKAGECONFIG for python2Jonatan Pålsson
Fixes the following build error: .. snip .. | checking for python2... no | checking for python3... (cached) python3.8 | configure: error: | The program python2 was not found in search path. | Please ensure that it is installed and its directory is included in the search | path. It is required for building python2 bindings. If you do not want to build | them please use argument --without-python2-bindings when running configure. | WARNING: exit code 1 from a shell command. Signed-off-by: Jonatan Pålsson <jonatan.p@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-05sssd: fix for ldblibdir and systemd etcKai Kang
Fix sssd issue for ldblibdir, systemd, pam etc. * fix ldblibdir which is not calculated right for cross compile * create directory /var/log/sssd which is required by sssd daemon * disable building python2 binding * fix pam module path * update systemd configure options and service files Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-01secuirty*-image: remove dead var and minor cleanupArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-01clamav-native: missed bison fixArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-03-01clamav: add bison-native to dependArmin Kuster
fixes build issue: clamav/0.101.5-r0/git/config/ylwrap: line 176: yacc: command not found Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-16google-authenticator-libpam: install module in pam locationArmin Kuster
pam_google_authenticator.so was being installed where pam could not find it. Move it where the rest of the pam modules site. Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-16python3-fail2ban: add 2-3 conversion changesArmin Kuster
Had to use the fail2ban-2.3 program to create py3 code Add it as a patch Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-10bastille: convert to py3Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-02-02ecryptfs-utils: search nspr header files in ${STAGING_INCDIR}/nspr directoryArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-28buck-security: fix rdebends and minor style cleanupArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-28checksecurity: fix runtime issuesArmin Kuster
add some missing perl modules Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-28google-authenticator-libpam: upgrade 1.07 -> 1.08Pierre-Jean Texier via Lists.Yoctoproject.Org
See changelog: https://github.com/google/google-authenticator-libpam/releases/tag/1.08 Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-21python3-fail2ban: update to latestArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-21sssd: drop py2 supportArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-05fail2ban: fix runtime errorArmin Kuster
use success/failure calls in initd/function Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-01-03clamav: update to 0.101.5Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-25google-authenticator-libpam: update to 1.07Armin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-25python3-fail2ban: include python-fail2ban.incArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-25python-fail2ban: Drop python2 packageArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-12-16libseccomp: upgrade 2.4.1 -> 2.4.2Yi Zhao
Backport a patch to fix ptest build failure on arm64. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-11-27meta: inherit features_check instead of distro_features_checkMing Liu
distro_features_check has been deprecated in OE. Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-11-27clamav: add tmpfiles.d configChristopher Larson
This is needed to ensure freshclam's /var/log directory and file are created when using systemd. Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-11-27checksecurity: use more portable find argsChristopher Larson
Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-10-14checksec: add missing rdepends to readelfArmin Kuster
update test to check for depends Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-09-29ncrack: update to tipScott Ellis
LIC_FILES_CHKSUM changed do to the date bumped to 2018 to 2019. The license is the same as nmap and the nmap recipe in meta-openembedded has that beginline/endline grab stuff. Went for consistency as ncrack is an nmap project. Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-09-07packagegroup-core-security: update package nameArmin Kuster
Also remove tpm packagegroup reference Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-09-07packagegroup-core-security-ptest: only included if ptest is enabledArmin Kuster
update python package names Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-09-01libseccomp: build static library alwaysStefan Agner
Always build static library. This is required e.g. for runc from meta-virtualization in its default configuration. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-09-01python-scapy: drop py2 packageArmin Kuster
fixup run-ptest Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-29checksec: upgrade 1.11.1 -> 2.1.0Yuan Chao
Signed-off-by: Yuan Chao <yuanc.fnst@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-29python-scapy: upgrade 2.4.2 -> 2.4.3Yuan Chao
License file changed from bin/scapy to LICENSE Signed-off-by: Yuan Chao <yuanc.fnst@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-28xmlsec1: Remove, moved to meta-oeAdrian Bunk
Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-28ecryptfs-utils: fix race condition in do_installQi.Chen@windriver.com
The rootsbindir is a self-defined directory. The install-rootsbinPROGRAMS is actually treated as part of install-data instead of install-exec. Do making install-exec-am depend on it actually results in the following Makefile contents. install-data-am: install-rootsbinPROGRAMS install-exec-am: install-binPROGRAMS install-binSCRIPTS @$(NORMAL_INSTALL) $(MAKE) $(AM_MAKEFLAGS) install-exec-hook install-exec-hook: install-rootsbinPROGRAMS And this results in race condition as two install commands of the same file running at the same time. Error message is like below. TOPDIR/tmp-glibc/hosttools/install: cannot create regular file 'TOPDIR/tmp-glibc/work/aarch64-wrs-linux/ecryptfs-utils/111-r0/image/sbin/mount.ecryptfs': File exists Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-28ecryptfs-utils: remove openssl PACKAGECONFIGQi.Chen@windriver.com
ecryptfs-utils does not build with openssl1.1. Previously this openssl PACKAGECONFIG is disabled by default, so we are not getting build failures by default. But if we enable it, we get do_compile failure. This package is from ubuntu source, and the one ubuntu ships does not depend on openssl. The development of this package has stopped for about 3 years. I don't see it will fix the build offically. So remove this PACKAGECONFIG and use '--disable-openssl' directly. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-11xmlsec1: upgrade 1.2.27 -> 1.2.28Yi Zhao
Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-04keyutils: remove from meta-securityArmin Kuster
now in meta-oe Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26clamav: minor recipe cleanupArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26libmspack: update SRC_URI and packageArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26test-image: add a few more packages to imageArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26test-image: add packagegroup-core-security-ptestArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26packagegroup-core-security: cleanup and remove ptestArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26security-test-image: add a testing imageArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-10python3-scapy: solved the conflict with python-scapyZang Ruochen
-Rename the following file to resolve the conflict with python-scapy: Rename /usr/bin/UTscapy to /usr/bin/UTscapy3 Rename /usr/bin/scapy to /usr/bin/scapy3 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-06 17:48:25 +0000