109 Commits

Author SHA1 Message Date
Armin Kuster 364425ae44 tripwire: Fix build issue for armeb
add config parama for armeb

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
2016-05-17 12:14:25 -07:00
Armin Kuster f9367e71f9 suricata: update to version 2.0.9
Changes

Bug #1558: stream: retransmission not detected (2.0.x)
Bug #1550: Segmentation Fault at detect-engine-content-inspection.c:438
Bug #1564: defrag: evasion issue
Bug #1431: stream: last_ack update issue leading to stream gaps (2.0.x)
Bug #1483: 2.0.x backport: Leading whitespace in flowbits variable names
Bug #1490: http_host payload validation erroring on uppercase PCRE
metacharacters
Bug #1501: 2.0.x backport: Add HUP coverage to output json-log
Bug #1510: 2.0.x: address var parsing issue
Bug #1513: stream_size <= and >= modifiers function as < and > (equality
is not functional) (2.0.x)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-11-02 08:40:05 -08:00
Armin Kuster ef14b980c4 libhtp: update to version 0.5.18
Changes

This is a minor bug-fix release:

- Fixed [#120] Trigger request line parsing on
incomplete request [Victor Julien]

- Fixed [#119] Fix uninitialized htp_tx_t::is_last value
in in htp_tx_res_process_body_data_ex() [Fedor Sakharov]

- Fixed [#118] Coverity-identified missing break in switch [Sam Baskinger]

- Fixed [#117] Coverity-identified issue of not checking
malloc() return value [Sam Baskinger]

- Fixed [#116] Fix coverity-identified leaked file descriptors
in unit test [Sam Baskinger]

- Fixed [#113] fix pkgconfig include dir [Eric Leblond]

- Fixed [#111] Connect plain http [Victor Julien]

- Fixed [#105] Do not invoke callbacks in htp_req_run_hook_body_data()
when there is no tx running. [Sam Baskinger]

- Fixed [#104] Modifiying HTTP methods to be rfc3253 compliant [Andreas Moe]

- Fixed [#103] Fixes [Victor Julien]

- Fixed [#101] Make including the autoconf config header safer [Brian Rectanus]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-11-02 08:40:05 -08:00
Armin Kuster 003c7f00bf ccs-tools: update to 1.8.4
change LIC_CHKSUM to COPYING.css where the license statement resides.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-11-02 08:40:05 -08:00
Li Xin 294e9d8c19 Fix an error when samhain -t check
Fixes an error when "samhain -t check" is executed.
The error is like this:
'ERROR: msg=<Record with bad version number in file signature database>,
subroutine=<sh_dbIO_getdataent>, path=<(null)>'

Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-11-02 08:40:04 -08:00
Armin Kuster 5431a42274 samhain: update to 4.1.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-11-02 08:40:04 -08:00
Ioan-Adrian Ratiu b7ceefc96d clamav: Update source mirror
The source archive was deleted from the debian mirror; get it from
launchpad for now

Signed-off-by: Ioan-Adrian Ratiu <adrian.ratiu@ni.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-08 07:25:08 -07:00
Armin Kuster bd30c8d843 nmap: fix build issue.
ncat/ncat_lua.c:174: undefined reference to `lua_remove'

ncat/ncat_lua.c:167: undefined reference to `lua_insert'

use internal lua support

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-08 07:08:47 -07:00
Armin Kuster e16a42bf6b libseccomp: update to latest
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-08 07:08:36 -07:00
Jagadeesh Krishnanjanappa 5690552103 paxctl: add new recipe
paxctl  is  a tool that allows PaX flags to be modified on a per-binary
basis.  PaX is part of common  security-enhancing  kernel  patches  and
secure distributions, such as GrSecurity or Adamantix and Hardened Gen-
too, respectively.  Your system needs to be running a properly  patched
and configured kernel for this program to have any effect.

Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com>
Signed-off-by: Jeremy Puhlman <jpuhlman@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-08 07:08:27 -07:00
Armin Kuster e3f2b3ba8c samhain-client: update to 4.0.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-08 07:08:19 -07:00
Haris Okanovic 6cdf3402be tripwire: Fix path to nano in default twcfg.txt
Nano is installed under /usr/bin/, not /bin/.

Installed Tripwire on a Fido image and successfully ran
`tripwire --update` to invoke text editor.

Signed-off-by: Haris Okanovic <haris.okanovic@ni.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-31 15:41:17 -07:00
Thomas Perrot 5ec82eccd8 Corrects a typing error.
Signed-off-by: Thomas Perrot <thomas.perrot@tupi.fr>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-11 15:06:59 +05:30
Bian Naimeng 7ce4069b32 samhain-server: fix build warn
WARNING: QA Issue: /etc/init.d/samhain-server_samhain-server contained in package samhain-server requires /bin/bash, but no providers found in its RDEPENDS [file-rdeps]

Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-07-20 16:25:42 -07:00
Armin Kuster c4b6269ec7 scapy: add new package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-06-25 07:16:05 -07:00
Armin Kuster e257382625 aircrack-ng: add new package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-06-25 07:16:05 -07:00
Armin Kuster 3f95047ae1 suricata: package update to 2.0.8
includes security fix CVE-2015-0971

include nss and nspr to build

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-06-25 07:16:05 -07:00
Armin Kuster 58869bea59 libhtp: update to use suricata 2.0.8
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-06-25 07:16:05 -07:00
Armin Kuster 421fe3c081 suricata: Fix QA warnings
WARNING: QA Issue: suricata rdepends on nspr, but it isn't a build dependency? [build-deps]
WARNING: QA Issue: suricata rdepends on nss, but it isn't a build dependency? [build-deps]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-05-10 20:52:39 -07:00
Armin Kuster 58096a9c97 libseccomp: add tests
update busybox for extend head option for test suite
remove seq -f option as it is not supported buy busybox

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-04-15 17:54:40 -07:00
Armin Kuster 43fd825acf libseccomp: add ppc support
backport ppc patches

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-04-15 17:54:37 -07:00
Armin Kuster af8473501a samhain: update client and server to 3.1.5
Signed-off-by: Armin Kuster <akuster808@gmail.com>

fix missing bash depends in server recipe
2015-04-15 17:54:34 -07:00
Hugo Vasconcelos Saldanha 070ccbb476 clamav: fix ncurses configure option
Signed-off-by: Hugo Vasconcelos Saldanha <hugo.saldanha@aker.com.br>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-04-09 18:13:51 -07:00
Hugo Vasconcelos Saldanha 8090e1bf2f libmspack: update to version 0.5
SRC_URI to version 0.4 was broken.

Signed-off-by: Hugo Vasconcelos Saldanha <hugo.saldanha@aker.com.br>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-04-09 18:13:51 -07:00
Armin Kuster b0873e2939 suricata: update to 2.0.7
this includes CVE-2015-0928

moved patches and files to more generic dir name

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-03-20 09:54:14 -07:00
Armin Kuster 14d6027b9e libseccomp: update to version 2.2.0
License is now LGPL
sources come from github now
dropped patches since alt solutions included now.

Changes in the 2.2.0 release include:

* Migrated the build system to autotools
* Added support for the aarch64 architecture
* Added support for the mips, mips64, and mips64n32 architectures
* Added support for the new seccomp() syscall and thread sync
* Added Python bindings
* Updated the internal syscall tables to Linux v3.19

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-03-20 09:53:41 -07:00
Armin Kuster 666f9bd17a tripwire: Add aarch64 support to config.sub
this fixes a build issue on arm64.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-14 18:46:44 -08:00
Armin Kuster 009728f409 nmap: add aarch64 config support
allow nmap to build for arm64 qemu machine.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-14 18:46:33 -08:00
Armin Kuster a72b7c2925 libcap-ng: remove from layer
this package is not in meta-oe

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:29:01 -08:00
Armin Kuster 401cec2486 suricata: update to 2.0.6
fix new build issues with pcap-config
cleanup configure selection

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:27:00 -08:00
Armin Kuster 9503b72f57 suricata: add new ids and pds engine for meta-security
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:26:55 -08:00
Armin Kuster 2647b09a87 libhtp: add support lib for suricata
include common inc file

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:26:39 -08:00
Armin Kuster 7116603e27 packagegroup: remove libseccomp
libseccomp now includes COMPATIBLE_HOST so it will also
negate the packagegroup

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:21:42 -08:00
Armin Kuster a1dde1a9f8 libseccomp: add COMPATIBLE_HOST
don't build for ppc, ppc64, mips or aarch64

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:21:33 -08:00
Armin Kuster cfd9713682 nmap: fix QA issue
WARNING: QA Issue: nmap requires /usr/bin/python, but no providers in its RDEPENDS [file-rdeps]

move nmap.inc back into recipe

colapse  ${BPN}-${PV} to ${BP}

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 10:21:23 -08:00
Armin Kuster a456a33628 nmap: update to version 6.47
for list of changes see:
http://seclists.org/nmap-dev/2014/q3/335

use nmap.inc to house most code.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 10:21:17 -08:00
Armin Kuster 75ff99bd34 clamav: remove interal libmspack
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:12:26 -08:00
Armin Kuster 09e316367a clamav: updated reciped
added packaged define and init scripts.

patches are all debian

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:12:16 -08:00
Armin Kuster 5303fcfcb6 libmspack: add new package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:12:07 -08:00
Armin Kuster 8be6d8851b samhain: fix aarch64 build issues
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:11:59 -08:00
Armin Kuster a58d09e2f5 checksec: fix rdepend issue
WARNING: QA Issue: checksec requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:11:45 -08:00
Armin Kuster ada3eeef6d libseccomp: fix rdepends
WARNING: QA Issue: libseccomp requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:11:36 -08:00
Armin Kuster d304579112 ccs-tools: remove unused variable.
There was a ref to  DEPEND  with is meaningless so remove it.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:11:28 -08:00
Armin Kuster 1aea14c3c8 samhain: client fix rdepends
WARNING: QA Issue: samhain-client requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:11:21 -08:00
Paul Eggleton ea8f4661f4 nikto: fix SRC_URI for multilib
${BPN} should be used instead of ${PN} where you want the name without
any prefix (and ${BP} is short for ${BPN}-${PV}).

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-13 12:10:48 -08:00
Paul Eggleton 903c19e322 libseccomp: fix SRC_URI for multilib
${BPN} should be used instead of ${PN} where you want the name without
any prefix (and ${BP} is short for ${BPN}-${PV}).

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-13 12:10:40 -08:00
Armin Kuster 3ace992991 libcap-ng: fix checksums
the checksums did not get updated when upgrading package.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-13 12:10:29 -08:00
Armin Kuster 75d2b6620d nikto: fix launching errors
add several missing perl package depends so app can launch

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-03 21:21:53 -08:00
Armin Kuster 397b35c028 nikto: fix depends
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-03 21:21:32 -08:00
Armin Kuster b80abbf51d perl: reorg recipes to match meta-perl.
move security perl recipes to a more standardized
recipes-perl layout.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-03 21:21:11 -08:00