mirrors/meta-security
1
0
Fork 0
mirror of https://git.yoctoproject.org/meta-security synced 2026-07-15 15:37:18 +00:00
Code Issues Projects Releases Wiki Activity
1,270 Commits 40 Branches 0 Tags
langdale
Commit Graph

57 Commits

Author SHA1 Message Date
Armin Kuster b59691b3d9 suricata: fix compile issue 
make[2]: *** No rule to make target '../rust/target/arm-poky-linux-gnueabi/release/libsuricata.a', needed by 'suricata'

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-09-12 11:11:50 -04:00
Mingli Yu ea5bb2f2e7 samhain-standalone: fix buildpaths issue 
Fixes:
  WARNING: samhain-standalone-4.4.9-r0 do_package_qa: QA Issue: File /usr/share/doc/samhain-standalone/scripts/samhain.ebuild-light in package samhain-standalone-doc contains reference to TMPDIR
  File /usr/share/doc/samhain-standalone/scripts/samhain.ebuild in package samhain-standalone-doc contains reference to TMPDIR [buildpaths]

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-08-25 08:14:21 -04:00
Armin Kuster 0202c4ad1b aide: add UPSTREAM_CHECK_URI 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-08-02 13:45:26 -07:00
Armin Kuster 01d58e266d suricata: update to 6.0.5 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-07-30 14:11:27 -07:00
Armin Kuster 6dedb1de70 aide.conf: adjust to allow for build time db creation 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-06-23 18:47:59 -07:00
Armin Kuster 1f11389089 aide: add native support for build time db creation 
This will help create a aide db during build that is
then installed on the rootfs for verification at boot time.

This work was inspired by:
Marco Cavallini
Yocto Project Ambassador

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-06-23 18:47:59 -07:00
Armin Kuster 36d0577057 aide: add a few more config options 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-06-23 18:47:59 -07:00
Yi Zhao b0b626721e aide: fix typo 
Fix typo:
RDPENDS_${PN} -> RDEPENDS:${PN}

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-06-18 06:48:22 -07:00
Armin Kuster 2c534791b0 samhain: update to 4.4.9 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-05-23 07:11:55 -07:00
Armin Kuster 972953e1e0 suricata: update to 5.0.5 
libhtp rolls with it
 2022-05-23 07:11:55 -07:00
Armin Kuster 025d758738 ossec-hids: update to 3.7.0 
See https://github.com/ossec/ossec-hids/releases/tag/3.7.0

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-05-23 07:11:55 -07:00
Armin Kuster 5a5edebbb8 aide: Update 01.17.4 
Precalculate buffer size in base64 functions (CVE-2021-45417)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-05-23 07:11:55 -07:00
Jeremy A. Puhlman a8fba7a8ef aide: Add depend on audit when audit is enabled. 
| checking for libaudit.h... no
| configure: error: You don't have libaudit properly installed. Install it if you need it.
| NOTE: The following config.log files may provide further information.

Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-05-23 07:11:55 -07:00
Armin Kuster c21d1a04eb suricata: drop nfnetlink from pkg config 
nfnetlink has a layer dependancy to meta-networking.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-05-14 10:51:32 -07:00
Joe Slater 93f2146211 LICENSE: update to SPDX standard names 
Use convert-spdx-licenses.py to update LICENSE in recipes.

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-04-13 13:45:44 -07:00
Ranjitsinh Rathod 4158c871a6 samhain.inc: Correct LICENSE to GPL-2.0-only 
It seems below change done manually and so LICENSE variable modified
from GPLv2 to GPL-2.0-or-later. But it should be GPL-2.0-only
Link: https://git.yoctoproject.org/meta-security/commit/?id=c56ae450c93a1383a1ce800a32a6ef2c3fbbae1c

Signed-off-by: Ranjitsinh Rathod <ranjitsinhrathod1991@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-04-13 13:45:44 -07:00
Armin Kuster 48d6ff13e3 samhain: update to 4.4.7 
This fixes musl builds too.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-04-07 10:26:45 -07:00
Ashish Sharma c56ae450c9 meta-security : Use SPDX style licensing format 
WARNING: selinux-sandbox-3.3-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2+ [obsolete-license] \
WARNING: selinux-gui-3.3-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2+ [obsolete-license] \
WARNING: semodule-utils-3.3-r0.1 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2+ [obsolete-license] \
WARNING: selinux-dbus-3.3-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2+ [obsolete-license] \
WARNING: libwhisker2-perl-2.5-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPL-1.0+ [obsolete-license] \
WARNING: lib-perl-0.63-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPL-1.0+ [obsolete-license] \
WARNING: libhtp-0.5.39-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2 [obsolete-license] \
...

Signed-off-by: Ashish Sharma <asharma@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-04-02 11:21:42 -07:00
Armin Kuster 419946655d recipes: Use renamed SKIP_RECIPE varFlag 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-02-22 08:09:54 -08:00
Armin Kuster c62664348d suricata: update to 6.0.4 
bump lexical-core to 0.6.8

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-02-04 12:56:43 -08:00
Yi Zhao c763e2715c samhain: upgrade 4.4.3 -> 4.4.6 
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2022-01-30 12:14:37 -08:00
Armin Kuster 7e27eb5fca recipes: Update SRC_URI branch and protocols 
This patch updates SRC_URIs using git to include branch=master if no branch is set
and also to use protocol=https for github urls as generated by the conversion script
in OE-Core.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-11-04 08:18:00 -07:00
Armin Kuster 818a8646a6 suricata: rust is in core 
drop dynamic-layer

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-08-26 21:45:14 -07:00
Armin Kuster 11a67b861a meta-security: Convert to new override syntax 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-08-01 08:47:08 -07:00
Armin Kuster c1714b299c crowdsec: add pkg 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-07-28 18:21:25 -07:00
Armin Kuster 7a1691c037 suricata: Drop 4.1.x its EOL 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-07-28 18:21:25 -07:00
Armin Kuster a57799000e ossec-hids: musl not compatable 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-05 19:25:17 +00:00
Armin Kuster 2f49b2dad0 aide: Add another ids 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-05-16 13:23:55 -07:00
Armin Kuster cb6b4ae505 suricata: 4.1.x add UPSTREAM_CHECK_URI 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-05-16 13:23:55 -07:00
Armin Kuster 8a098010c1 ossec-hids: add UPSTREAM_CHECK_COMMITS 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-05-16 13:23:55 -07:00
Armin Kuster 7db47965a2 tripwire: Blacklist pkg, upstream seems abandond 
Last update was 2018. Does not build with gcc11.
There are other actively maintained IDS options.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-05-16 13:23:55 -07:00
Armin Kuster f1f517c919 ossec-hids: add new pkg 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-04-26 14:32:51 +00:00
Armin Kuster a00b285f8c python3-suricata-update: update to 1.2.1 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-04-12 07:00:47 -07:00
Kai Kang db86cfad19 samhain: fix compile error on powerpc 
It fails to comile samhain for powerpc(qemuppc):

| x_sh_dbIO.c: In function 'swap_short':
| x_sh_dbIO.c:229:36: error: initializer element is not constant
|   229 |       static unsigned short ooop = *iptr;
|       |                                    ^

Assign after initialization of the static variable to avoid the failure.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-03-18 08:01:19 -07:00
Armin Kuster 0085b2cda9 suricata: update to 4.10.0 
This is the last 4.x. Will need rust support to move to 6.x

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-03-02 11:56:27 -08:00
Armin Kuster dc28e175e3 samhain: update to 4.4.3 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-03-02 11:56:27 -08:00
Armin Kuster 8f51c5b9a2 python3-suricata-update: Inherit python3targetconfig 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-02-23 20:34:51 -08:00
Armin Kuster c40e8f8d9d samhain: update to 4.4.2 
refresh a few patches too

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2020-11-03 15:16:53 -08:00
Yi Zhao 97cac84f7f suricata: unify volatiles file name 
Make the volatiles file name starts with digital.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2020-11-03 15:16:23 -08:00
Armin Kuster 3ce8b759c9 suricata: update to 4.1.9 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2020-10-10 16:21:48 -07:00
Armin Kuster d3aff039c9 suricata: fix compiling on gcc10 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2020-10-09 07:02:01 -07:00
Armin Kuster 3283cf26ad suricata: update to 4.1.8 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2020-07-06 09:40:59 -07:00
Jeremy Puhlman 9d93ad22a0 tripwire: Remove makefiles from the man directories. 
Signed-off-by: Jeremy Puhlman <jpuhlman@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2020-06-19 16:03:23 -07:00
Haseeb Ashraf 95fe86eb98 samhain: dnmalloc hash fix for aarch64 and mips64 
fix runtime error:
samhain[4069]: FATAL: x_dnmalloc.c: 2790: hashval < AMOUNTHASH
Killed

The proper fix is not to disable dnmalloc. This change is in
continuation of samhain-mips64-aarch64-dnmalloc-hash-fix.patch
which requires CONFIG_ARCH_AARCH64 or CONFIG_ARCH_MIPS64 to be
defined for the corresponding architecture

Signed-off-by: Haseeb Ashraf <Haseeb_Ashraf@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2020-05-15 05:28:21 -07:00
Yi Zhao 9168152b1e samhain-server: add volatile file for systemd 
Add volatile file to create /var/log/yule when using systemd. Also
remove unused /var/log directory in do_install.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2020-05-15 05:28:21 -07:00
Yi Zhao 4f65c58251 samhain: fix build with new version attr 
The attr/xattr.h has been removed from attr 2.4.48 with commit:
http://git.savannah.nongnu.org/cgit/attr.git/commit/include?id=7921157890d07858d092f4003ca4c6bae9fd2c38
The xattr syscalls are provided by sys/xattr.h from glibc now.
Remove the checking code to adapt it otherwise it would fail to build
with selinux support.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2020-01-28 10:02:21 -08:00
Armin Kuster 3001c3ebfc suricata: update to 4.1.6 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2019-12-16 20:51:47 -08:00
Armin Kuster 79983488a7 libhtp: bugfix only update 0.5.32 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2019-12-16 20:51:13 -08:00
Armin Kuster 195157e5a0 python3-suricata-update: update to 1.1.1 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2019-12-16 20:51:08 -08:00
Christopher Larson 36d656fe72 suricata: add tmpfiles.d config 
This is needed to ensure our /var/log directory is created when using
systemd.

Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2019-11-27 13:38:58 -08:00