318 Commits

Author SHA1 Message Date
Armin Kuster 4f7be0d252 keyutils: fix library install path
[v2]
fix multilib support
Als add native support

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-16 09:16:00 -07:00
leimaohui 67b7a89e63 python3-fail2ban: Fix build error of xrange.
NameError: name 'xrange' is not defined

Signed-off-by: Lei Maohui <leimaohui@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-16 08:29:01 -07:00
Zang Ruochen 926e5c5e8a python3-scapy: solved the conflict with python-scapy
-Rename the following file to resolve the conflict with python-scapy:
	Rename /usr/bin/UTscapy to /usr/bin/UTscapy3
	Rename /usr/bin/scapy to /usr/bin/scapy3

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-10 07:38:28 -07:00
Zang Ruochen 4914a44e6a python-scapy: solved the conflict with python3-scapy
-Rename the following file to resolve the conflict with python3-scapy:
	Rename /usr/bin/UTscapy to /usr/bin/UTscapy2
	Rename /usr/bin/scapy to /usr/bin/scapy2

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-10 07:38:28 -07:00
Zang Ruochen 3a02e2dd1c python-scapy: Remove redundant sed operations
-Remove redundant sed operations.

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-10 07:38:28 -07:00
Zang Ruochen 7df33d377a bastille: solved the conflict with perl-module-text-wrap and base-files
-Remove the link to perl5 to resolve the conflict with perl-module-text-wrap.

-Remove the operation on /var/lock to resolve the conflict with base-files.

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-10 07:38:28 -07:00
Armin Kuster 5959e4f4bf clamav-native: fix new build issue
re-arch the reciped to build properly.

Fixed /var/lib/clamav dir issue

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-14 10:54:20 -07:00
Armin Kuster ab3c84c4d3 clamav: add clamav-cvd package for cvd db
Add native package to support creating a mirror
of the clamav cvd and supply it in a new package.

Provide a INSTALL_CLAMAV_CVD flag to bypass this creation

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-14 10:54:07 -07:00
Armin Kuster 67369e1428 clamav: fix llvm reference version
llvm8.0 does not exist. dropped the version part.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-13 10:31:20 -07:00
Armin Kuster 8a1f54a246 libmspack: update to 0.10.1
For details see: https://github.com/kyz/libmspack/blob/master/libmspack/ChangeLog

change compression to match that now being used from source

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-07 05:13:33 +05:30
Armin Kuster 98750e8933 ccs-tools: move to reciped-mac
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-07 05:12:43 +05:30
Armin Kuster 1460d9b86d reorg ids: move ids recipes to recipes-ids
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31 10:37:09 -07:00
Armin Kuster 75e609f7b1 reorg: move mac recipes to recipes-mac
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31 10:37:09 -07:00
Armin Kuster 6d3aa03272 clamav: drop llvm version setting
There is only one llvm and its in core so
drop allowing it to be overwritten.
We can hardcode it now.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31 10:37:09 -07:00
Armin Kuster b551fdef0e samhain: fix runtime error
fix:
samhain[1652]: FATAL: x_dnmalloc.c: 2790: hashval < AMOUNTHASH
Killed

disable dnmalloc

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31 10:37:09 -07:00
Armin Kuster 1fae87cd1c sssd: update to 1.16.4
Add systemd pkgconf via DISTRO_FEATURE

Fix uid/gid of sssd.conf

[v2]
drop non update related changes

also, this includes CVE-2019-3811

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31 10:37:09 -07:00
Armin Kuster 9553b9a8dd sssd: fix a few runtime issues
include a few more RDEPEND packages. remove init script as there really
isn't one yet.

[v2]
Squish build tweeking done in pkg update into this changeset

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-31 10:36:37 -07:00
Armin Kuster f11dbe0d6d Revert "sssd: fix libcrypto version used"
This reverts commit 2488c965d6b1b440734f43326fb33ac642ac7b82.

This corrects an incorrect fix as pointed out by Adrian Bunk.
2019-03-29 08:28:49 -07:00
Armin Kuster 0a97ed301e sssd: fix libcrypto version used
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-25 22:33:22 -07:00
Armin Kuster 228e566a55 keyutils: fix pulling in glibc when musl enabled
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-25 22:33:22 -07:00
Armin Kuster 86d2c0c66a keyutils: fix QA WARNING
WARNING: keyutils-1.6-r0 do_package: QA Issue: keyutils: Files/directories were installed but not shipped in any package:
  /lib/pkgconfig
  /lib/pkgconfig/libkeyutils.pc

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-16 04:17:29 -07:00
Armin Kuster eae5224fa8 libseccomp: update to 2.4.0
Update the syscall table for Linux v5.0-rc5.
also a security releated issue;
https://github.com/seccomp/libseccomp/issues/139

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-16 04:17:29 -07:00
Armin Kuster 712a635f37 suricata: update to 4.1.3
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-12 11:07:55 -07:00
Armin Kuster 0d8f900816 packagegroup-core-security: change fail2ban ptest to reg python pkg
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-12 11:07:46 -07:00
Armin Kuster c4f1c91377 tripwire: fix ptest so more tests pass
replace relative path with abs path for binaries.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-08 14:51:55 -08:00
Armin Kuster dd6006e8bc keyutils: improve ptests
Tests need lsb

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-08 14:51:55 -08:00
Armin Kuster 49cdcd42e9 keyutils: update to 1.6
remove patch now included in update:
keyutils-use-relative-path-for-link.patch

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06 11:49:35 -08:00
Armin Kuster 6cc71c7d07 suricata: update to 4.0.6
includes: SMTP crash issue was fixed: CVE-2018-18956

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06 11:49:35 -08:00
Armin Kuster 65097a0867 python-fail2ban: update 0.10.4.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06 11:49:35 -08:00
Armin Kuster d7fc8dd898 libmspack: update to 0.9.1
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06 11:49:35 -08:00
Armin Kuster 9c471d4d23 tripwire: update to 2.4.3.7
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06 11:49:35 -08:00
Armin Kuster 7b997bdddf samhain: update to 4.3.2
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06 11:49:35 -08:00
Changqing Li a4f226edf0 xmlsec1: add PACKAGECONFIG disable-des
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Reviewed-by: Tom Rini <trini@konsulko.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-06 11:49:25 -08:00
Armin Kuster 3580a04766 clamav: update llvm to 8.0
ERROR: Nothing PROVIDES 'llvm6.0'

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11 18:00:54 -08:00
Armin Kuster 0e8ac771a0 scapy: restore ptest by going to github directly
The pypi package removed the tests so
go to the git repo directly.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11 18:00:54 -08:00
Scott Ellis 5e7b4a96ad scapy: Fix shebang for python3
Both scapy and UTscapy have python in the shebang line
regardless of whether python3-scapy or python-scapy
was built.

Signed-off-by: Scott Ellis <scott@jumpnowtek.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11 18:00:54 -08:00
Scott Ellis 3d812a22c2 scapy: Add python-cryptography to RDEPENDS
Signed-off-by: Scott Ellis <scott@jumpnowtek.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11 18:00:54 -08:00
Scott Ellis 82118c2bd4 Upgrade scapy to 2.4.2
Upstream MANIFEST.in removed doc and test directories
so remove ptest.

Signed-off-by: Scott Ellis <scott@jumpnowtek.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11 18:00:54 -08:00
Adrian Bunk 29ef6cccea xmlsec1: upgrade 1.2.26 -> 1.2.27
Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11 18:00:54 -08:00
Adrian Bunk 73bc1f132e xmlsec1: Make the crypto libraries a PACKAGECONFIG
Usually one doesn't need variants for all 4 different
crypto libraries installed at the same time.

Also remove a libgpg-error DEPENDS that is not used
directly by xmlsec1.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11 18:00:54 -08:00
Adrian Bunk 9e163f6b99 xmlsec1: Include libxmlsec1-*.so in the main package
They can be dynamically loaded with xmlSecCryptoDLLoadLibrary().

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11 18:00:54 -08:00
Scott Ellis 7ec577c75b checksec: Remove old script
Should have been removed in previous patch.

Signed-off-by: Scott Ellis <scott@jumpnowtek.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-02-11 18:00:46 -08:00
Ross Burton 48ccc9a08d apparmor: backport a patch to fix tool paths instead of sedding
Sedding is ugly, and as upstream have already fixed this cherry-pick the patch
instead.

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17 15:53:25 -08:00
Ross Burton 4918d0b025 apparmor: if Perl is disabled remove perl-using scripts
aa-notify uses the Perl bindings, so isn't usable when perl is disabled.

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17 15:53:25 -08:00
Ross Burton 230ee1fc35 apparmor: systemd.bbclas is useful even when disabled
The systemd bbclass will remove any systemd files that have been installed if
systemd is disabled, so always install the files and always inherit.

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17 15:53:25 -08:00
Ross Burton a648a295dd apparmor: remove pointless ALLOW_EMPTY
${PN} has content, so there's no need to set ALLOW_EMPTY_${PN}.

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17 15:53:25 -08:00
Ross Burton 769b1cc468 apparmor: no need to conditionalise PACKAGES
A package with no content is not generated, so there's no need to conditionalise
assignments to PACKAGES.

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17 15:53:25 -08:00
Ross Burton 448eee287f apparmor: use manpages class
The manpages class handles enabling/disabling the man pages based on the
api-documentation DISTRO_FEATURE, and ensures that mandb is called.

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17 15:53:25 -08:00
Ross Burton 1159085fd1 apparmor: remove redundant S
This is the default value, so remove it.

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17 15:53:25 -08:00
Ross Burton 07fbfa0a6e apparmor: enable static libraries neatly
No need to fiddle with the configure arguments as we can just neuter
disable-static.inc.

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-01-17 15:53:25 -08:00