mirrors/meta-security
1
0
Fork 0
mirror of https://git.yoctoproject.org/meta-security synced 2026-01-11 15:00:34 +00:00
Code Issues Projects Releases Wiki Activity

meta-hardening: Fix override syntax

Browse Source 
Commit 352e6498a missed updating the override syntax for the
"harden" distro override.

Fixes: 352e6498a ("meta-hardening: Convert to new override syntax")

Signed-off-by: Akshay Bhat <akshay.bhat@timesys.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
This commit is contained in:
Akshay Bhat
2022-01-21 11:32:39 -05:00
committed by Armin Kuster
parent 7898fc8117
commit 9cd85e054f
5 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
meta-hardening/recipes-connectivity/openssh/openssh_%.bbappend
View File

@@ -1,4 +1,4 @@
do_install:append_harden () {
do_install:append:harden () {
# to hardend
sed -i -e 's:#AllowTcpForwarding yes:AllowTcpForwarding no:' ${D}${sysconfdir}/ssh/sshd_config
sed -i -e 's:ClientAliveCountMax 4:ClientAliveCountMax 2:' ${D}${sysconfdir}/ssh/sshd_config

2
meta-hardening/recipes-core/base-files/base-files_%.bbappend
View File

@@ -1,4 +1,4 @@
do_install:append_harden () {
do_install:append:harden () {
sed -i 's/umask.*/umask 027/g' ${D}/${sysconfdir}/profile
}

6
meta-hardening/recipes-core/initscripts/initscripts_1.0.bbappend
View File

@@ -1,8 +1,8 @@
FILESEXTRAPATHS:prepend_harden := "${THISDIR}/files:"
FILESEXTRAPATHS:prepend:harden := "${THISDIR}/files:"
SRC_URI:append_harden = " file://mountall.sh"
SRC_URI:append:harden = " file://mountall.sh"
do_install:append_harden() {
do_install:append:harden() {
install -d ${D}${sysconfdir}/init.d
install -m 0755 ${WORKDIR}/mountall.sh ${D}${sysconfdir}/init.d
}

2
meta-hardening/recipes-extended/shadow/shadow_%.bbappend
View File

@@ -1,4 +1,4 @@
do_install:append_harden () {
do_install:append:harden () {
# to hardend
sed -i -e 's:UMASK.*:UMASK 027:' ${D}${sysconfdir}/login.defs
sed -i -e 's:PASS_MAX_DAYS.*:PASS_MAX_DAYS 365:' ${D}${sysconfdir}/login.defs

4
meta-hardening/recipes-extended/sudo/sudo_%.bbappend
View File

@@ -1,6 +1,6 @@
PACKAGECONFIG:append_harden = " pam-wheel"
do_install:append_harden () {
PACKAGECONFIG:append:harden = " pam-wheel"
do_install:append:harden () {
if [ "${@bb.utils.contains('DISABLE_ROOT', 'True', 'yes', 'no', d)}" = "yes" ]; then
sed -i -e 's:root ALL=(ALL) ALL:#root ALL=(ALL) ALL:' ${D}${sysconfdir}/sudoers
fi