aboutsummaryrefslogtreecommitdiffstats
path: root/lib
AgeCommit message (Collapse)Author
2018-12-29srtool: remove obsolete fixture filesDavid Reyna
The functionality was moved to the more flexible 'datasource.json' files. Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-12-28srtool: allow fetch alt cve data for guests, add user doc linkDavid Reyna
* Move the "Fetch Alt Sources" out of the authenticated user block * Connect "Documentation" to the new User wiki page * Minor typos and debugging line fixes Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-12-21srtool: fix superuser group value in user tableDavid Reyna
[YOCTO: 13099] Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-12-21srtool: fix pylint reported issuesDavid Reyna
[YOCTO #13093] Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-12-21srtool: cummulative fixes 12/21/2018David Reyna
Fixes: * Support Django development head in version check (e.g. '2.2.dev20181217100344') * Remove the single quotes around the comments content * Include Documentation/Export links for Guest users * Allow 'ip:port/acme' to link to 'acme_hello' Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-12-21srtool: make apps order deterministicDavid Reyna
Remove the app/uls scanning code in 'srtmain/urls.py' in favor of a fixed deterministic app (and thus URL) ordering. This will insure that any templates added to the custom app (e.g. 'acme') will superceed content in 'srtgui', and anything in srtgui will superceed anythinging in 'users'. Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-12-19report: incorrect class in super()Ross Burton
2018-12-19views: use Django 2's django.urls.resolveRoss Burton
2018-12-19reports: fix variable name typoRoss Burton
2018-12-19srtmain/perf: fix indentationRoss Burton
2018-12-19srtmain: handle debug-toolbar not being installedRoss Burton
2018-12-18lib: fix typo in get_name_sortRoss Burton
Ideally, these are all centralised.
2018-12-18api: correctly decode UTF-8Ross Burton
2018-12-18lsupdates: remove obsolete importRoss Burton
2018-12-18reports: remove obsolete importRoss Burton
2018-12-18srtool: remove obsolete migration fileDavid Reyna
All of the current init/migration are consolidated into the "0001_initial.py" file. Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-12-17srtool: port to Django-2.xDavid Reyna
Support Django-2.2: Move 'django.core.urlresolvers' to 'django.urls' Disable 'register.assignment_tag' tags Move settings 'MIDDLEWARE_CLASSES' to 'MIDDLEWARE' Move urlpatterns 'include' to 'path' Move 'regex.pattern' to 'pattern.regex.pattern' Maintain Django-1.11 support General Fixes: Fix commit for notify_categories Add more error halt checks during lsupdates Add explicit 'on_delete=models.CASCADE' for all ForeignKey's Fix 'get_defect_tag' processing [YOCTO #13091] Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-12-16srtool: add sample 'acme' product dir, small fixesDavid Reyna
1. Add the 'acme' product directory and URLs, including a sample hello page, a defects toaster table, a products toaster table, and a product table. These can be reached under <IPADD>/acme/hello 2. Small fixes to the CVE selection page. Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-12-14srtool: add sample organization source, add debuggingDavid Reyna
1. Create the sample "bin/acme_sample" organization data source, to assist companies in adopting and customizing SRTool. 2. Add error detection and halting to the startup datasource scripts. Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-12-13srtool: cummulative update 12/13/2018David Reyna
Changes: Repartition the data sources Reconfigure the data sources into self-contained directories under the "bin" directory. Implement dynamic data source discovery and import Remove all hard coded data source data (e.g. fixtures, data, CVE lookups) Add license files to all data sources Django User model Add "users" Django application dir Login page Self create user account page Password change page User access and delete management CVE Name sorting by hidden 'name_sort' field (CVE-nnnn-0nnnnnn) CVE Triage Auto import reserved CVEs Add MITRE CVE records where NIST missing Add data source count to triage page Easy checkbox toggle by clicking any field Triage any CVE status category (not just new) Assign to any CVE status category Object create/delete Create/Delete Vulnerablities Create/Delete Investigations from Vulnerablity page Add "Historical" CVE status When bootstraping system, all CVEs older than 60 days preset to "Historical" Add CVEs withint 60 days preset to "New" Can be overridden by defect and systaining status imports Preadd Debian data for "New" CVEs Abstraction Add generic Product mappings to defect system ("defect_tag": defect prefix) Add generic Product mappings to product system ("product_tag": product reference, related) Manage functions via "srt" script For example add superuser Normalize Vulnerability to Investigation mapping Replace orm_vulnerabilityproduct with orm_vulnerabilitytoinvestigation General Enable the 'srtool-requirements.txt' Django test Speed the CVE scoring by pre-fetching the datasources Progress display cleanup Move and update srtool_defect prototype to 'bin/yp' Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-11-09srtool: nist timezones, mitre exec, reports updateDavid Reyna
Fix the NIST update check to skip the UTC offset. Add the exec to MITRE update to create data cache dir, update report.py for cve data source schema changes. [YOCTO #12996] [YOCTO #12997] Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-10-09srtool: change list for non-vulnerable CVE's, errant messageDavid Reyna
Add the change list alert for non-vulnerable CVE triage. Fix the mistaken error message from srtool_common.py. Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-09-27srtool: cummulative update 9/27/2018David Reyna
Changes: * Local CVE rename support * Fix CVE edit submit * Move tools links to topbar * Fix year extraction * Add is_local flag for CVEs * Revise local CVE naming * Common page header class for inline buttons * Fix url links for named inv/vul URLs Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-09-24srtool: edit local CVE namesDavid Reyna
Add the ability to edit the names for local CVE's. This can specifically be used to create placeholders for reserved CVEs (which are not included in the NIST data) and then download the data from the alternate CVE sources. Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-09-22srtool: cumulative update 9/20/2018David Reyna
Summary: * CVE management enhancements * Lookup Mitre, Red Hat, Debian * Local CVE's * Edit CVE's * CVE triage: create defects and notifications * Packages * Table, packages to C/V/I/D * Filter model update * Triage filtering script * Notifications * Upstream CVE changes * Upstream defect changes * Notices and reminders * Creation * Emails * Productization * Move DataSource to Init/Update/Lookup model * Add defect details to Management home page * Add author to notification records * Move fixture data and SrtSettings to JSON files * database column mappings for scripts generated directly from database * srtool_utils.py: add [backup|restore]_cve_packages Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-08-11Various fixes.David Reyna
* Improve the CVE detail caching * Fix the "_FALLBACK" settings management * Fix the YP "samples" fixture file * Rename "srtool_cve.py" as "srtool_nist.cy" Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-08-10Cummulative development update August 2018David Reyna
* Add incremental NIST scans and import to CVE database * Add modified NIST scans and import to CVE database * Moved CVE details out of SRTool database to reduce size * Add CVE details lookup in cached CVE upstream files * Added edit support for Vulnerabilies and Investigations * Comments * Attachments and downloads * Product list * History audit trail * Add Vulnerability and Investigation creation from CVE triage * Add user id to session variables * Add defect import placeholder script * Modularize the fixture files for common versus site-specific setup Signed-off-by: Moayer, Puya <Puya.Moayer@windriver.com> Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-06-05update default user, rename WR tab to 'Local'David Reyna
Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-06-05fix empty CVE list, Non-vulnerable split, no selected productsDavid Reyna
Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-06-04Implement CVE triage, change History tablesDavid Reyna
Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-05-21Fix WR'isms: 'Jira,RCPL,wr_comments' to 'Defect,release_version,comments'David Reyna
Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-05-17Add sample data, fix missing fixture files, update READMEDavid Reyna
Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-05-15remove WR-ism 'Jira'David Reyna
Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-05-15remove WR-isms from template files, update 'toaster' executable to 'srt' ↵David Reyna
executable Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-05-14Add SRTool updated files version 0.03David Reyna
Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-05-14Remove old Toaster-specific filesDavid Reyna
Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-05-14rename base SRTool directories, update README filesDavid Reyna
Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-05-14Initial reorganiztion from 'bitbake' to 'toaster' centricDavid Reyna
Signed-off-by: David Reyna <David.Reyna@windriver.com>
2018-04-26toaster: add 'Sumo' to release selectionDavid Reyna
Add Sumo (YP-2.5) to the release selection for new projects. [YOCTO #12713] Signed-off-by: David Reyna <david.reyna@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-04-23lib/bb/utils: prevent movefile from changing dest dir permissionsMattias Hansson
Prevent movefile from falsely setting the source file's owner and permissions on the destination directory instead of the destination file when moving between devices. This bug caused the last file moved into a directory to dictate the directory's owner and permissions. Signed-off-by: Mattias Hansson <mattias.hansson@axis.com> Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-04-06cookerdata: Issue warning if layer doesn't set LAYERSERIES_COMPAT_xRichard Purdie
We'd like layers to set this variable so that we know which layers are compatible with which others, even if the branch is a generic un-updated "master" branch. Start printing a warning to highlight this issue. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-03-28toaster: do not fail on optional 'custom.xml' fileDavid Reyna
Explicitly capture and ignore errors when trying to load the optional 'custom.xml' fixture file. [YOCTO #12554] Signed-off-by: David Reyna <David.Reyna@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-03-28fetch2/git: log exception if ls-remote failsRoss Burton
Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-03-28tests/fetch: state which upstream failedRoss Burton
Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-03-15utils.py: Add option for explode_dep_versions2 to return unsortedAmanda Brindle
Before, explode_dep_versions2 would sort the OrderedDict before returning. This function will still sort the OrderedDict by default, but will now have the option to return the OrderedDict unsorted. This option will allow us to check if the order of the package list has changed. Signed-off-by: Amanda Brindle <amanda.r.brindle@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-03-03cooker: Fix environment double key expansion issueRichard Purdie
The base configuration needs key expansion and anon python execution, the parsed configurations do not. Fix this consistently, its been broken and causing double key expansion for a while, only relised when we started double anonymous python exeution too. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-03-03cooker: Run registered anonymous python before displaying environmentRichard Purdie
The output of bitbake -e can differ from what actually is used due to anonymous python making changes to the data store. Execute any anonymous python added in the base configuration to make things more consistent. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-03-03parse/ast: Abstract anonymous function execution into a functionRichard Purdie
This allows us to call this code from other contexts without duplicating it. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-02-27runqueue: Ensure only recursive task dependencies are prunedRichard Purdie
If a standalone tasks adds a dependency on X:do_build, the code in runqueue would currently remove it if that do_build was part of an image recipe which uses recrdeptask on do_build. Such individual tasks shouldn't do this, therefore tweak the recursive reference code to only process recurseive tasks, not all tasks. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-02-09bitbake: toaster: don't use git fetch --allRobert Yang
The '--all'' fetches all remotes, including the ones in $HOME/.gitconfig, which causes the fetching very slow, so don't use "--all", git fetch should be enough. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-27 02:39:10 +0000