mirror of
https://git.yoctoproject.org/meta-security
synced 2026-05-06 16:48:42 +00:00
meta-security: move perl and python recipes to dynamic layers structure
Signed-off-by: Armin Kuster <akuster808@gmail.com>
This commit is contained in:
@@ -1,21 +0,0 @@
|
||||
SUMMARY = "basic system security checks"
|
||||
DESCRIPTION = "checksecurity is a simple package which will scan your system for several simple security holes."
|
||||
SECTION = "security"
|
||||
LICENSE = "GPL-2.0-only"
|
||||
LIC_FILES_CHKSUM = "file://${COMMON_LICENSE_DIR}/GPL-2.0-only;md5=801f80980d171dd6425610833a22dbe6"
|
||||
|
||||
SRC_URI = "http://ftp.de.debian.org/debian/pool/main/c/checksecurity/checksecurity_${PV}.tar.gz \
|
||||
file://setuid-log-folder.patch \
|
||||
file://check-setuid-use-more-portable-find-args.patch"
|
||||
|
||||
SRC_URI[md5sum] = "a30161c3e24d3be710b2fd13fcd1f32f"
|
||||
SRC_URI[sha256sum] = "67abe3d6391c96146e96f376d3fd6eb7a9418b0f7fe205b465219889791dba32"
|
||||
|
||||
do_compile() {
|
||||
}
|
||||
|
||||
do_install() {
|
||||
oe_runmake PREFIX=${D}
|
||||
}
|
||||
|
||||
RDEPENDS:${PN} = "perl libenv-perl perl-module-tie-array perl-module-getopt-long perl-module-file-glob perl-module-carp perl-module-env perl-module-tap-parser-iterator-array util-linux findutils coreutils"
|
||||
@@ -1,23 +0,0 @@
|
||||
From f3073b8e06a607677d47ad9a19533b2e33408a4f Mon Sep 17 00:00:00 2001
|
||||
From: Christopher Larson <chris_larson@mentor.com>
|
||||
Date: Wed, 5 Sep 2018 23:21:43 +0500
|
||||
Subject: [PATCH] check-setuid: use more portable find args
|
||||
|
||||
Signed-off-by: Christopher Larson <chris_larson@mentor.com>
|
||||
---
|
||||
plugins/check-setuid | 6 +++---
|
||||
1 file changed, 3 insertions(+), 3 deletions(-)
|
||||
|
||||
Index: checksecurity-2.0.15/plugins/check-setuid
|
||||
===================================================================
|
||||
--- checksecurity-2.0.15.orig/plugins/check-setuid 2018-09-06 00:49:23.930934294 +0500
|
||||
+++ checksecurity-2.0.15/plugins/check-setuid 2018-09-06 00:49:49.694934757 +0500
|
||||
@@ -99,7 +99,7 @@
|
||||
ionice -t -c3 \
|
||||
find `mount | grep -vE "$CHECKSECURITY_FILTER" | cut -d ' ' -f 3` \
|
||||
-xdev $PATHCHK \
|
||||
- \( -type f -perm +06000 -o \( \( -type b -o -type c \) \
|
||||
+ \( -type f \( -perm -4000 -o -perm -2000 \) -o \( \( -type b -o -type c \) \
|
||||
$DEVCHK \) \) \
|
||||
-ignore_readdir_race \
|
||||
-printf "%8i %5m %3n %-10u %-10g %9s %t %h/%f\n" |
|
||||
@@ -1,52 +0,0 @@
|
||||
From 24dbeec135ff83f2fd35ef12fe9842f02d6fd337 Mon Sep 17 00:00:00 2001
|
||||
From: Andrei Dinu <andrei.adrianx.dinu@intel.com>
|
||||
Date: Thu, 20 Jun 2013 15:14:55 +0300
|
||||
Subject: [PATCH] changed log folder for check-setuid
|
||||
|
||||
check-setuid was creating logs in /var/log directory,
|
||||
which cannot be created persistently. To avoid errors
|
||||
the log folder was changed to /etc/checksecurity/.
|
||||
|
||||
Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com>
|
||||
---
|
||||
etc/check-setuid.conf | 2 +-
|
||||
plugins/check-setuid | 6 +++---
|
||||
2 files changed, 4 insertions(+), 4 deletions(-)
|
||||
|
||||
diff --git a/etc/check-setuid.conf b/etc/check-setuid.conf
|
||||
index 621336f..e1532c0 100644
|
||||
--- a/etc/check-setuid.conf
|
||||
+++ b/etc/check-setuid.conf
|
||||
@@ -116,4 +116,4 @@ CHECKSECURITY_PATHFILTER="-false"
|
||||
#
|
||||
# Location of setuid file databases.
|
||||
#
|
||||
-LOGDIR=/var/log/setuid
|
||||
+LOGDIR=/etc/checksecurity/
|
||||
diff --git a/plugins/check-setuid b/plugins/check-setuid
|
||||
index 8d6f90b..bdb21c1 100755
|
||||
--- a/plugins/check-setuid
|
||||
+++ b/plugins/check-setuid
|
||||
@@ -44,8 +44,8 @@ if [ `/usr/bin/id -u` != 0 ] ; then
|
||||
exit 1
|
||||
fi
|
||||
|
||||
-TMPSETUID=${LOGDIR:=/var/log/setuid}/setuid.new.tmp
|
||||
-TMPDIFF=${LOGDIR:=/var/log/setuid}/setuid.diff.tmp
|
||||
+TMPSETUID=${LOGDIR:=/etc/checksecurity/}/setuid.new.tmp
|
||||
+TMPDIFF=${LOGDIR:=/etc/checksecurity/}/setuid.diff.tmp
|
||||
|
||||
#
|
||||
# Check for NFS/AFS mounts that are not nosuid/nodev
|
||||
@@ -75,7 +75,7 @@ if [ "$CHECKSECURITY_NOFINDERRORS" = "TRUE" ] ; then
|
||||
fi
|
||||
|
||||
# Guard against undefined vars
|
||||
-[ -z "$LOGDIR" ] && LOGDIR=/var/log/setuid
|
||||
+[ -z "$LOGDIR" ] && LOGDIR=/etc/checksecurity/
|
||||
if [ ! -e "$LOGDIR" ] ; then
|
||||
echo "ERROR: Log directory $LOGDIR does not exist"
|
||||
exit 1
|
||||
--
|
||||
1.7.9.5
|
||||
|
||||
Reference in New Issue
Block a user