Commit Graph

29 Commits

Author SHA1 Message Date
Jackie Huang ad008ee776 samhain: fix QA issue for GNU_HASH
Add LDFLAGS variable to fix QA issue for GNU_HASH:
| ERROR: samhain-client-4.2.2-r0 do_package_qa: QA Issue:
  No GNU_HASH in the elf binary: '/builddir/usr/sbin/samhain_setpwd' [ldflags]

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-15 07:15:55 -07:00
Jackie Huang 2bf6ef5645 samhain: avoid searching host dir for postgresql
Add a patch to avoid searching host dir for postgresql,
and set PGSQL_INC_DIR and PGSQL_LIB_DIR instead.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-15 07:15:55 -07:00
Jackie Huang 2a22d6be5d samhain: fix for the PACKAGECONFIG
* The "??=" assignment for PACKAGECONFIG is overridden by
  the following "+=" assignments, which is not expected,
  so combine them into one assignment with multiple lines.

* Fix a typo for postgresql.

* Remove unneeded quotation marks.

* run aotoconf to regenerate the configure, or the patch
  for ps option doesn't work:
  | configure: error: unrecognized option: --with-ps-path=/bin/ps

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-15 07:15:55 -07:00
Jackie Huang eb6297b148 samhain: depends on attr when selinux is enabled
The extended attribute is required by selinux feature,
so add the dependency when selinux is enabled.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-15 07:15:45 -07:00
Jackie Huang e593413a30 samhain: update to 4.2.2
* update to version 4.2.2
* Add new recipe for standalone mode
* Add systemd support
* Add patches to fix several issues
* samhain-standalone: add ptest support
* samhain-server: no need to depend on samhain-server-native
* Move common things from the bb to the inc file

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-02 11:26:12 -07:00
Armin Kuster 8a86287026 samhain: update to 4.2.1
remove patch integrated into update

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-04-13 14:04:00 -07:00
Armin Kuster 2f31c09f0b samhain: fix build issues when using musl
[v2]: Correct musl malloc fix.
remove HAVE_MALLOC_H define; this enables using the included defined mallinfo.

[V1]: Fix c99

x_dnmalloc.c:563:26: error: return type is an incomplete type
| #define public_mALLINFo mallinfo
| ^
| x_dnmalloc.c:1689:17: note: in expansion of macro 'public_mALLINFo'
| struct mallinfo public_mALLINFo() {

and
_dnmalloc.c:5527:17: error: unknown type name 'u_int'
| u_int rnd[(128 - 2*sizeof(struct timeval)) / sizeof(u_int)];
| ^~~~~

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-03-27 14:30:51 -07:00
Armin Kuster e82a0f18ba samhain-server: fix config error with acl
when acl is enabled this error occurrs.
configure: error: in `/home/akuster/oss/maint/openembedded-core/build/tmp-glibc/work/x86_64-linux/samhain-server-native/4.2.0-r0/samhain-4.2.0':
| configure: error: --enable-posix-acl was given, but test for acl support failed

add missing depends.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-03-24 07:27:42 -07:00
Armin Kuster 8a7b759057 samhain: update to 4.2.0
* Changes:

  - New option 'SetAuditdFlags = r|w|x|a' to (re-)define the flags supplied
    to auditd.

  - New option 'PortCheckDevice = device' for the port check module, to monitor
    a device regardless of the address assigned to it.

  - Fix for the case sensitivity of the arguments to the Severity/Class options.

  - Compiler warnings with gcc 6.2 and a few minor bugs have been fixed.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-10 13:34:46 -08:00
Armin Kuster 0a795d49ac samhain: recipe cleanup
add a few distro feature checks.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-01 09:03:15 -07:00
Wang Xin d49df5e37c samhain: 4.1.4 -> 4.1.5
1) Upgrade samhain from 4.1.4 to 4.1.5.
2) Add TARGET_CC_ARCH.Fix error.
    ERROR: samhain-server-4.1.5-r0 do_package_qa: QA Issue: No GNU_HASH in the elf binary: '/yocto/work001/fnst/wangx/poky/build/tmp/work/i586-poky-linux/samhain-server/4.1.5-r0/packages-split/samhain-server/usr/sbin/yule_setpwd'
    No GNU_HASH in the elf binary: '/yocto/work001/fnst/wangx/poky/build/tmp/work/i586-poky-linux/samhain-server/4.1.5-r0/packages-split/samhain-server/usr/sbin/yulectl' [ldflags]

Signed-off-by: Wang Xin <wangxin2015.fnst@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-10-11 01:39:11 -07:00
Armin Kuster b8319ce072 samhain: update to 4.1.4
4.1.4:
  - Fix for issues with re-evaluation of paths with wildcard patterns:
        - no re-evaluation if no match at process startup
        - if same pattern used for a file=.. and dir=.. directive, only
          one (the first in config file) is re-evaluated

  - Fix for issues with new directories created when inotify is used:
        - recursion depth is not properly set for new directory
        - directory gets watched even if recursion depth should be below zero

4.1.3:
  - Fix for a regression in DNS resolving if samhain is compiled
    with '--enable-static'

  - On Cygwin/Windows, the default for the 'AvoidBlock' option is now 'off'
    because of problems reported for this platform.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
2016-06-26 11:47:29 -07:00
Lei Maohui e5ef0f1582 samhain: Avoid empty source archiver
It is better to put necessary work into do_patch task than add a new task.
Otherwise,you can not get correct source code in some functions(such as archiver.bbclass).

Signed-off-by: Lei Maohui <leimaohui@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
2016-06-26 11:47:29 -07:00
Li Xin e55b217bfa samhain-client: Erorr Fix
The Error is as following:
 # /usr/sbin/samhain -t init -p info
 ......
 Segmentation fault
 # echo $?
 139

Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-03-14 12:52:45 -07:00
Armin Kuster f776c61311 samhain-client: update to 4.1.2
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-17 15:38:19 -08:00
Armin Kuster 623f5ed922 Samhain: package update to 4.1.2
4.1.1 Changes:
 - Fix for broken libwrap support.
 - Fix for broken baseline update (-t update) on FreeBSD and maybe other non GNU/Linux systems.
 - Fix for ungraceful handling of rotated logiles if logfile content is always zero or constant.
 - Fix for timezone offset calculation on month rollover for timezones west of GMT.

4.1.2 Changes:
 - Fix for broken rpm / rpm-light makefile targets.
 - Fix for the failure to detect open UDP ports sometimes.
 - Fix for reporting file changes with the wrong policy if both inotify is
   used and the file change occurs during a configuration reload.
 - New configure options --enable-posix-acl and --enable-selinux to turn the
   soft failure (no support for checking compiled in) into a hard failure
   if required headers/libraries are missing for this feature.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-17 15:38:19 -08:00
Li Xin 36feac0d9d Fix an error when samhain -t check
Fixes an error when "samhain -t check" is executed.
The error is like this:
'ERROR: msg=<Record with bad version number in file signature database>,
subroutine=<sh_dbIO_getdataent>, path=<(null)>'

Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-30 11:56:15 -07:00
Armin Kuster d539506f78 samhain: update to 4.1.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-30 11:55:52 -07:00
Armin Kuster e3f2b3ba8c samhain-client: update to 4.0.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-08 07:08:19 -07:00
Bian Naimeng 7ce4069b32 samhain-server: fix build warn
WARNING: QA Issue: /etc/init.d/samhain-server_samhain-server contained in package samhain-server requires /bin/bash, but no providers found in its RDEPENDS [file-rdeps]

Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-07-20 16:25:42 -07:00
Armin Kuster af8473501a samhain: update client and server to 3.1.5
Signed-off-by: Armin Kuster <akuster808@gmail.com>

fix missing bash depends in server recipe
2015-04-15 17:54:34 -07:00
Armin Kuster 8be6d8851b samhain: fix aarch64 build issues
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:11:59 -08:00
Armin Kuster 1aea14c3c8 samhain: client fix rdepends
WARNING: QA Issue: samhain-client requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:11:21 -08:00
Armin Kuster 76386bd2ca samhain: update to 3.1.3
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-11-28 19:14:10 -08:00
Armin Kuster b59053a3dd samhain: update to 3.1.2
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-10-26 12:35:39 -07:00
Armin Kuster b3f08c7b2b samhain: arm build failure
| x_sh_error.c: In function 'sh_error_string':
| x_sh_error.c:1580:31: error: incompatible type for argument 1 of 'memmove'
|  #define VA_COPY(ap1, ap2)     memmove ((ap1), (ap2), sizeof (va_list))
|                                ^
| x_sh_error.c:1720:14: note: in expansion of macro 'VA_COPY'
|        /*@i@*/VA_COPY(vl2, vl);
|               ^

this patch fixes the arm build failure.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-08-27 21:12:47 -07:00
Armin Kuster 6e72910b3e samhain: server package
This is the server portion.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-08-27 21:11:32 -07:00
Armin Kuster 2559581eaa samhain: client package
This is the client portion.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-08-27 21:11:21 -07:00
Armin Kuster f0f670c2fe samhain: New ISD package
These are the base files needed by both
client and server recipes.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-08-27 21:11:12 -07:00