39 Commits

Author SHA1 Message Date
Yi Zhao 6d399b34ab openscap: add runtime dependency on bash and python3-core
Fixes:
ERROR: QA Issue: /usr/bin/oscap-ssh contained in package openscap requires /bin/bash, but no providers found in RDEPENDS_openscap? [file-rdeps]
ERROR: QA Issue: /usr/bin/scap-as-rpm contained in package openscap requires /usr/bin/python3, but no providers found in RDEPENDS_openscap?  [file-rdeps]

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-24 12:58:37 -07:00
Yi Zhao 7fb8569f0b openscap: fix scap-security-guide build error
It would fail to build scap-security-guide when use openscap-native
sstate cache.

Steps to reproduce:
Create a new build project:
$ bitbake openscap-native
$ bitbake openscap-native -c clean
$ bitbake scap-security-guide

Error message:
OpenSCAP Error: Schema file 'xccdf/1.1/xccdf-schema.xsd' not found in path
'/buildarea/build/tmp/work-shared/openscap/oscap-build-artifacts/usr/share/openscap/schemas'
when trying to validate
'/buildarea/build/tmp/work/core2-64-poky-linux/scap-security-guide/0.1.44+gitAUTOINC+5fdfdcb2e9-r0/git/build/chromium/xccdf-unlinked-resolved.xml'
[/buildarea/build/tmp/work/x86_64-linux/openscap-native/1.3.1+gitAUTOINC+4bbdb46ff6-r0/git/src/source/validate.c:104]
Invalid XCCDF Checklist (1.1) content in
/buildarea/build/tmp/work/core2-64-poky-linux/scap-security-guide/0.1.44+gitAUTOINC+5fdfdcb2e9-r0/git/build/chromium/xccdf-unlinked-resolved.xml.
[/buildarea/build/tmp/work/x86_64-linux/openscap-native/1.3.1+gitAUTOINC+4bbdb46ff6-r0/git/src/source/oscap_source.c:346]
chromium/CMakeFiles/generate-internal-chromium-xccdf-unlinked-resolved.xml.dir/build.make:63: recipe for target 'chromium/xccdf-unlinked-resolved.xml' failed

When using sstate cache, the openscap-native doesn't install the
artifacts to work-shared/openscap/oscap-build-artifacts when prepare
recipe sysroot for scap-security-guide.

Set do_install[nostamp] to 1 to ensure the openscap-native artifacts
are installed to work-shared/openscap/oscap-build-artifacts even if
using sstate cache.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-24 12:54:57 -07:00
Yi Zhao 531f6c1a4d scap-security-guide: fix typo
Fix typo: RDEPNEDS_${PN} -> RDEPENDS_${PN}

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-07 07:09:50 -07:00
Yi Zhao daf92c57fa openscap: cleanup DEPENDS
Remove autoconf-archive from DEPENDS because it is using CMake/Ninjia
build now. Also remove unused dpkg-native dependency from
DEPENDS_class-native.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-07 07:09:50 -07:00
Yi Zhao 0a73a14fbb scap-security-guide: update recipe
* Set B="${S}/build" to fix the build failure for out of source
  directory
* Remove do_complile and do_install. Use the default functions from
  cmake.bbclass.
* Install the artifacts to /usr/share rather than /usr/local/share

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-04 12:17:25 -07:00
Yi Zhao b9b575823d openscap: update recipe
* Add PACKAGECONFIG for gcrypt, nss3 and selinux
* Use EXTRA_OECMAKE rather than EXTRA_OECONF
* Set CMAKE_SKIP_RPATH and CMAKE_SKIP_INSTALL_RPATH instead of chrpath
* Remove ptest since there are many host contamination issues on target.
  We will add it back when these issues are solved.
* Drop the unused patch
* Add PV

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-04 12:17:25 -07:00
Armin Kuster eca01510bf meta-security-compliance: add meta-python
with some for the recipe updates, more pyton support is needed

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-07-17 16:56:39 -07:00
Armin Kuster a64348d0df scap-security-guide: update to 0.1.44
create a PV version to track upstream
git version includes OE changes

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-07-17 16:56:39 -07:00
Armin Kuster 90ccc8b4f5 openscap: add 1.3.1 recipes for upstream source
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-07-17 16:56:39 -07:00
Armin Kuster 37040cfb76 openscap_git: update to 1.3.0
removed unneeded patch
convert over to cmake

refactor files

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-07-17 16:56:02 -07:00
Mark Asselstine eabb07f6d2 openscap/scap-security-guide: use _git instead of versioned filenames
In order to facilate the reuse of the recipe code via layer or distro
specific bbappends rename the recipe files to use _git instead of
versined filenames. Specifically this allows for minimal bbappends in
additional layers which may use the upstream, non-forked, repos that
can be version skewed when compared to what is present in this repo.

Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-07-07 19:18:41 -07:00
Armin Kuster 217e33ff31 meta-security-compliance: update README
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-07-07 19:18:41 -07:00
Armin Kuster 0581604172 lynis: update to 2.7.5
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-07-07 19:18:18 -07:00
Armin Kuster 723cd9e372 layers: set warrior only
remove TEST_SUITES from main layer.conf

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26 15:47:47 -07:00
Armin Kuster 63af29ba48 layer.conf: Add warrior to compatible release series
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-04-07 05:10:15 +05:30
Armin Kuster eb6fa0cf47 lynis: update to 2.7.2
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-16 04:17:29 -07:00
Yi Zhao d0fc8c6f70 oe-scap: fix inconsistent indentation
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-08 14:51:55 -08:00
Yi Zhao 70802667ab openscap-daemon: backport patch to fix build error with python 3.7
Fixes build error:
  | Traceback (most recent call last):
  |   File "setup.py", line 25, in <module>
  |     from openscap_daemon import version
  |   File "/buildarea/build/tmp/work/core2-64-poky-linux/openscap-daemon/0.1.10-r0/git/openscap_daemon/__init__.py", line 22, in <module>
  |     from openscap_daemon.system import System
  |   File "/buildarea/build/tmp/work/core2-64-poky-linux/openscap-daemon/0.1.10-r0/git/openscap_daemon/system.py", line 29
  |     from openscap_daemon import async
  |                                     ^
  | SyntaxError: invalid syntax

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-08 14:51:55 -08:00
Yi Zhao b081fdc807 scap-security-guide: use makefile generator instead of ninja for cmake
Fixes build error:
  | make: *** No rule to make target 'openembedded'.  Stop.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-03-08 14:51:55 -08:00
Armin Kuster de9d6d1793 lynis: update to 2.7.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-12-06 22:37:33 -08:00
Armin Kuster e920ff6e40 os-release: remove OS_RELEASE_FEILD extending
depends on the OS_RELEASRE_FEILD os-release changes in core
otherwise yocto-check-layer will fail

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-10-31 09:02:21 -07:00
Armin Kuster 04ef9df593 meta-security: add THUD
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-29 10:42:53 -07:00
Armin Kuster 76ae9a21f7 lynis: update to 2.6.8
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster 17f0700b9f meta-security-compliance: bump layer priority
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster 7aa34f55a6 openscap-daemon: update to 1.10
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster 58ab731ab6 openscap: update 1.2.17
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster f1e482a498 meta-*: add LAYERSERIES_COMPAT to layer.conf files
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13 08:18:28 -07:00
Robert Yang 3963c388a3 conf/layer.conf: remove bbclass from BBFILES
Add bbclass to BBFILES doesn't make any sense.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-06 21:16:48 +05:30
Armin Kuster 694ab819bc openscap: fix build issue
core2-64-oe-linux/openscap/1.2.15-r0/git/src/.libs/libopenscap.so: error: undefined reference to 'dlopen'
| core2-64-oe-linux/openscap/1.2.15-r0/git/src/.libs/libopenscap.so: error: undefined reference to 'dlsym'
| core2-64-oe-linux/openscap/1.2.15-r0/git/src/.libs/libopenscap.so: error: undefined reference to 'dlerror'
| core2-64-oe-linux/openscap/1.2.15-r0/git/src/.libs/libopenscap.so: error: undefined reference to 'dlclose'

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-12-10 15:03:46 -08:00
Armin Kuster d9145660cc openscape: fix ptest compile errors and update
update to 1.2.15

plus
ERROR: openscap-1.2.14-r0 do_package_qa: QA Issue: /usr/lib/openscap/ptest/tests/probes/process58/all.sh contained in package openscap-ptest requires /bin/bash, but no providers found in RDEPENDS_openscap-ptest? [file-rdeps]
ERROR: openscap-1.2.14-r0 do_package_qa: QA Issue: /usr/lib/openscap/ptest/tests/xmldiff.pl contained in package openscap-ptest requires /usr/bin/perl, but no providers found in RDEPENDS_openscap-ptest? [file-rdeps]
ERROR: openscap-1.2.14-r0 do_package_qa: QA Issue: /usr/lib/openscap/ptest/tests/nist/test_worker.py contained in package openscap-ptest requires /usr/bin/python2, but no providers found in RDEPENDS_openscap-ptest? [file-rdeps]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-15 16:35:15 -07:00
Armin Kuster 4f2d306f8a lynis: move recipe to correct layer
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-02 07:49:23 -07:00
Armin Kuster 8229c88275 openscap-daemon: fix QA issue
ERROR: openscap-daemon-0.1.6+gitAUTOINC+3fd5c75a08-r0 do_package_qa: QA Issue: /usr/bin/oscapd-cli contained in package openscap-daemon requires /usr/bin/python, but no providers found in RDEPENDS_openscap-daemon? [file-rdeps]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-02 07:49:23 -07:00
Armin Kuster f42925b1c3 oe-release: add oe-release file for openscap
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-30 11:47:20 -07:00
Armin Kuster 01a20104b2 os-release: needed by openscap
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-30 11:47:20 -07:00
Armin Kuster a633d83537 openscap: Add oe specific files
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-30 11:47:20 -07:00
Armin Kuster 922deffe04 openscap: add dameon
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-30 11:47:20 -07:00
Armin Kuster 692864f6e8 openscap: add scap-security-guide
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-30 11:47:20 -07:00
Armin Kuster 55dade4391 openscap: add package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-30 11:47:20 -07:00
Armin Kuster c1781db5be meta-security-compliance: add new layer for compliance and audit applications
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-30 11:47:20 -07:00