Commit Graph

95 Commits

Author SHA1 Message Date
Armin Kuster
009728f409 nmap: add aarch64 config support
allow nmap to build for arm64 qemu machine.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-14 18:46:33 -08:00
Armin Kuster
a72b7c2925 libcap-ng: remove from layer
this package is not in meta-oe

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:29:01 -08:00
Armin Kuster
7c475c26af sleuth: add sleuthkit
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:28:37 -08:00
Armin Kuster
3e12ea17ff libewf: add package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:28:22 -08:00
Armin Kuster
1d03df0ddc afflib: new package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:28:04 -08:00
Armin Kuster
401cec2486 suricata: update to 2.0.6
fix new build issues with pcap-config
cleanup configure selection

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:27:00 -08:00
Armin Kuster
9503b72f57 suricata: add new ids and pds engine for meta-security
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:26:55 -08:00
Armin Kuster
2647b09a87 libhtp: add support lib for suricata
include common inc file

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:26:39 -08:00
Armin Kuster
98193c1eea README: update layer information
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:22:14 -08:00
Armin Kuster
5f562e458e layer conf: update to include meta-networking
suricata needs a package in meta-networking

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:21:50 -08:00
Armin Kuster
7116603e27 packagegroup: remove libseccomp
libseccomp now includes COMPATIBLE_HOST so it will also
negate the packagegroup

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:21:42 -08:00
Armin Kuster
a1dde1a9f8 libseccomp: add COMPATIBLE_HOST
don't build for ppc, ppc64, mips or aarch64

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:21:33 -08:00
Armin Kuster
cfd9713682 nmap: fix QA issue
WARNING: QA Issue: nmap requires /usr/bin/python, but no providers in its RDEPENDS [file-rdeps]

move nmap.inc back into recipe

colapse  ${BPN}-${PV} to ${BP}

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 10:21:23 -08:00
Armin Kuster
a456a33628 nmap: update to version 6.47
for list of changes see:
http://seclists.org/nmap-dev/2014/q3/335

use nmap.inc to house most code.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 10:21:17 -08:00
Armin Kuster
75ff99bd34 clamav: remove interal libmspack
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:12:26 -08:00
Armin Kuster
09e316367a clamav: updated reciped
added packaged define and init scripts.

patches are all debian

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:12:16 -08:00
Armin Kuster
5303fcfcb6 libmspack: add new package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:12:07 -08:00
Armin Kuster
8be6d8851b samhain: fix aarch64 build issues
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:11:59 -08:00
Armin Kuster
a58d09e2f5 checksec: fix rdepend issue
WARNING: QA Issue: checksec requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:11:45 -08:00
Armin Kuster
ada3eeef6d libseccomp: fix rdepends
WARNING: QA Issue: libseccomp requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:11:36 -08:00
Armin Kuster
d304579112 ccs-tools: remove unused variable.
There was a ref to  DEPEND  with is meaningless so remove it.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:11:28 -08:00
Armin Kuster
1aea14c3c8 samhain: client fix rdepends
WARNING: QA Issue: samhain-client requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:11:21 -08:00
Paul Eggleton
ea8f4661f4 nikto: fix SRC_URI for multilib
${BPN} should be used instead of ${PN} where you want the name without
any prefix (and ${BP} is short for ${BPN}-${PV}).

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-13 12:10:48 -08:00
Paul Eggleton
903c19e322 libseccomp: fix SRC_URI for multilib
${BPN} should be used instead of ${PN} where you want the name without
any prefix (and ${BP} is short for ${BPN}-${PV}).

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-13 12:10:40 -08:00
Armin Kuster
3ace992991 libcap-ng: fix checksums
the checksums did not get updated when upgrading package.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-13 12:10:29 -08:00
Armin Kuster
75d2b6620d nikto: fix launching errors
add several missing perl package depends so app can launch

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-03 21:21:53 -08:00
Armin Kuster
b265a8f1c7 libwhisker2-perl: fix build issue
minor formating clean ups.
add "ssl" depend packageconf option

Change inherit perlnative to BBCLASSEXTEND = "native" to fix build issue

error: Can't install libwhisker2-perl-2.5-r0@i586: no package provides /home/akuster/oss/maint/security/poky/build/tmp/sysroots/x86_64-linux/usr/bin/perl-native/perl.real

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-03 21:21:44 -08:00
Armin Kuster
397b35c028 nikto: fix depends
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-03 21:21:32 -08:00
Armin Kuster
b80abbf51d perl: reorg recipes to match meta-perl.
move security perl recipes to a more standardized
recipes-perl layout.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-03 21:21:11 -08:00
Armin Kuster
424473d61e remove: libcurses-perl, libhtml-parser-perl, libnet-dns-perl
those packages are being moved to meta-perl.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-03 21:21:03 -08:00
Armin Kuster
5294a2c603 libcap-ng: update to 7.4 plus security fix
0.7.4
- In pscap, remove unused code
- Add CAPNG_INIT_SUPP_GRP to capng_change_id
- Drop CAP_COMPROMISE_KERNEL
- Update the autotools components
- Dynamically detect last capability (#895105)
- Add PR_SET_NO_NEW_PRIVS to capng_lock if kernel supports it
  (CVE-2014-3215)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-03 21:20:53 -08:00
Armin Kuster
76386bd2ca samhain: update to 3.1.3
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-11-28 19:14:10 -08:00
Armin Kuster
039c711f17 packagegroups [v2]: add a few more catagories
Add tripwire, samhain and checksec packages
fix ccs-tools to exclude if no kernel support

v2:
 fixed missing "}"

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-11-28 19:14:02 -08:00
Armin Kuster
4fe07fed2e pinentry: remove from layer
pinentry is now in oe-core so remove it from this layer.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-11-28 19:13:54 -08:00
Armin Kuster
93891d856d libseccomp: add package for tests.
I wanted to run the tests manually on a target. Tests are now
built and packaged.

to run: /usr/lib/libseccomp/tests/regression -a

will add ptest later.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-11-28 19:13:46 -08:00
Armin Kuster
b584aa13f6 checksecurity: update to version 2.0.15
update fixed:
 * Fix bug in the CS_NFSAFS definition in etc/check-setuid.conf that prevents
   the script from matching any filesystem. This bug was, actually, making the
   script not do anything in the default configuration.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-10-26 12:35:55 -07:00
Armin Kuster
33e45ec16c isic: Add new package
This adds the ISIC is a suite of utilities to exercise the stability of an IP and its component stacks (TCP/UDP/ICMP etc.) It generates piles of pseudo random packets with configurable tendancies, then sent to the target to penetrate its firewall rules or find bug

backported two patches from Redhat.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-10-26 12:35:48 -07:00
Armin Kuster
b59053a3dd samhain: update to 3.1.2
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-10-26 12:35:39 -07:00
Armin Kuster
b255a7137f README: update layers references
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-09-13 10:26:14 -07:00
Armin Kuster
39f1010f3a layer.conf: add layer depends.
added layerdepends check for  perl-layer and opemembedded-layer

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-09-13 10:25:35 -07:00
Armin Kuster
da8d7084fa libnet-ssleay-perl: remove from layer
libnet-ssleay-perl is now in meta-perl

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-09-13 10:25:28 -07:00
Armin Kuster
c00f6abe5d tripwire: ppc64 build failure.
| configure: error: /bin/sh ./config.sub powerpc64-poky-linux failed

config.sub did not understand the powerpc64 par.
this patch adds that understanding.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-09-13 10:25:19 -07:00
Armin Kuster
332b02ec89 nmap: New QA issue via ppc
Fixes:
WARNING: QA Issue: nmap rdepends on libpcap, but it isn't a build dependency? [build-deps]

nmap internal lua library does not compile with PPC so use OE version instead.

Changed PACKAGECONFIG assignment from "??=" to "=". It was empty when using
PPC.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-09-13 10:25:08 -07:00
Armin Kuster
1f28cd51dc nmap: Add gui support
Add zenmap to work with gtk+/x11

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-09-13 10:25:00 -07:00
Armin Kuster
20776618f2 v2] nmap: use pkgconfig and reorg
Added pkgconfig support
Since most binaries provided by nmap can be excluded via configure
  manage via pkgconfig
Aligned python packages with binaries so nmap-python is no longer needed

V2: Missed some options in EXTRA_OECONF changes

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-09-13 10:24:53 -07:00
Armin Kuster
2682cd4105 nmap: build QA Warnings
WARNING: QA Issue: nmap rdepends on libcrypto, but it isn't a build dependency? [build-deps]
WARNING: QA Issue: nmap rdepends on libssl, but it isn't a build dependency? [build-deps]

This fixes the above QA warnings.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-09-13 10:24:47 -07:00
Armin Kuster
b3f08c7b2b samhain: arm build failure
| x_sh_error.c: In function 'sh_error_string':
| x_sh_error.c:1580:31: error: incompatible type for argument 1 of 'memmove'
|  #define VA_COPY(ap1, ap2)     memmove ((ap1), (ap2), sizeof (va_list))
|                                ^
| x_sh_error.c:1720:14: note: in expansion of macro 'VA_COPY'
|        /*@i@*/VA_COPY(vl2, vl);
|               ^

this patch fixes the arm build failure.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-08-27 21:12:47 -07:00
Armin Kuster
6328a58612 pinentry: Fix QA error
This fixes: WARNING: QA Issue: pinentry rdepends on libcap, but it isn't a build dependency? [build-deps]

Also add pkgconfig support.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-08-27 21:12:31 -07:00
Armin Kuster
6e72910b3e samhain: server package
This is the server portion.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-08-27 21:11:32 -07:00
Armin Kuster
2559581eaa samhain: client package
This is the client portion.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-08-27 21:11:21 -07:00