Commit Graph

360 Commits

Author SHA1 Message Date
Alex Kiernan 1d1c293819 libseccomp: Drop RDEPENDS on bash
Commit ada3eee ("libseccomp: fix rdepends") added RDEPENDS on bash, but
this is no longer needed, so drop it.

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-01 10:34:02 -07:00
Armin Kuster e296c53687 suricata: update 4.0.5
Fix rules make. Don't allow the makefile to download the rules. Use
fetcher

add install configs and remove manual intall of those files

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-01 10:34:02 -07:00
Armin Kuster 407abe22ef libhtp: update to 0.5.27
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-01 10:33:53 -07:00
Koen Kooi 68a727e9cb suricata: rename ${PN}-python to ${PN}-socketcontrol
This describes the content a lot better. RDEPENDS are still missing, so it's still as non-working as before :/

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04 07:50:07 -07:00
Koen Kooi 95e21e8cd9 suricata: install and package threshold.config
This fixes the following warning during startup:

  suricata[24522]: 31/7/2018 -- 13:47:15 - <Warning> - [ERRCODE: SC_ERR_FOPEN(44)] - Error opening file: "/etc/suricata//threshold.config": No such file or directory

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04 07:50:07 -07:00
Koen Kooi cce040956e suricata: install and package rules
This fixes the following warning during startup:

  suricata[22707]: 31/7/2018 -- 13:34:40 - <Warning> - [ERRCODE: SC_ERR_NO_RULES_LOADED(43)] - 47 rule files specified, but no rule was loaded at all!

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04 07:50:07 -07:00
Koen Kooi 2c266a1cfe suricata: enable syslog output
This fixes the following error preventing startup in daemon mode:

  suricata[20485]: 31/7/2018 -- 13:19:48 - <Error> - [ERRCODE: SC_ERR_MISSING_CONFIG_PARAM(118)] - NO logging compatible with daemon mode selected, suricata won't be able to log. Please update  'logging.outputs'

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04 07:50:07 -07:00
Koen Kooi 111835003d suricate: create and package logdir
This fixes the following error preventing startup:

  suricata[18771]: 31/7/2018 -- 13:08:21 - <Error> - [ERRCODE: SC_ERR_LOGDIR_CONFIG(116)] - The logging directory "/var/log/suricata/" supplied by /etc/suricata/suricata.yaml (default-log-dir) doesn't exist. Shut>

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04 07:50:07 -07:00
Koen Kooi e58ad185be suricata: add systemd unit
Based on the debian systemd unit.

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04 07:50:07 -07:00
Koen Kooi a0a3160923 suricata: add 'nfq' PACKAGECONFIG
For inline IPS nfqueue is nice to have, so add a PACKAGECONFIG entry for
it.

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04 07:50:07 -07:00
Koen Kooi ccd9950ebd suricata: mark config file as CONFFILE
This preserves user edits during package upgrades.

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04 07:50:07 -07:00
Koen Kooi c933696e9e suricata: fix packaging
Move ${PN}-python in front so ${PN} can use default packaging rules.

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04 07:50:07 -07:00
Koen Kooi 3277886451 suricata: don't start service in postinst
Apart from hardcoding the wrong networking device it won't survive device restart

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04 07:50:07 -07:00
Armin Kuster 7c6532e1c0 nmap: remove recipe as it is in meta-oe now
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04 07:49:58 -07:00
Armin Kuster 4d139b95c4 clamav: update postinit
log_check] WARNING: Intentionally failing postinstall scriptlets of ['suricata', 'clamav'] to defer them to first boot is deprecated. Please place them into pkg_postinst_ontarget_${PN} ()

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-07-07 08:14:54 -07:00
Armin Kuster d2946afbd2 suricata: update postinit
[log_check] WARNING: Intentionally failing postinstall scriptlets of ['suricata', 'clamav'] to defer them to first boot is deprecated. Please place them into pkg_postinst_ontarget_${PN} ()

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-07-07 08:14:47 -07:00
Nagalakshmi Veeramallu a1406fe1c8 CVE-2018-11652 nikto: arbitray OS command injection via http server field.
CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers
to inject arbitrary OS commands via the Server field in an HTTP response header,
 which is directly injected into a CSV report.

Signed-off-by: Nagalakshmi Veeramallu <nveeramallu@mvista.com>
Reviewed-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
2018-07-03 15:30:51 -07:00
Changqing Li 0551002922 samhain: correct service status
status get by "systemctl status samhain" is not correct.
It is active(exited) now. but actually, there is a dameon
running, it should be active(running). so change Type of
servive.

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-07-03 15:30:40 -07:00
Jinliang Li f9c5e2022b Fix build issue for apparmor when systemd is used
When systemd is used as system init manager, there is a build issue complains
"can't found apparmor.service". This patch fix it.

Signed-off-by: Jinliang Li <jinliang.li@linux.alibaba.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-11 10:57:43 -07:00
Jinliang Li b38f027b93 Fix build issue for apparmor kernel configuration
Set the correct path of kernel configuration file in linux-yocto_4.%.bbappend
to fix the build issue, which is "Fetcher failure for URL: 'file://apparmor.cfg'.
Unable to fetch URL from any source."

Signed-off-by: Jinliang Li <jinliang.li@linux.alibaba.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-06-11 10:57:37 -07:00
Wenzong Fan 7a503cbfa2 xmlsec1: remove host paths from target files
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-07 15:19:06 -07:00
Armin Kuster d01d18ad95 qemu: remove bb as this option is in core
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-07 15:18:58 -07:00
Armin Kuster 16ff910cca meta-security: remove depened on other security layers
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13 08:18:36 -07:00
Armin Kuster d2a71316f2 clamav: update LLVM version to match core
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13 08:18:36 -07:00
Armin Kuster 295d3f2bc9 sssd: only include when pam in DISTRO_FEATURES
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13 08:18:36 -07:00
Yi Zhao f4293d9fe8 xmlsec1: refresh patches to fix QA warning
Refresh patches with devtool command.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13 08:18:36 -07:00
Armin Kuster f1e482a498 meta-*: add LAYERSERIES_COMPAT to layer.conf files
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13 08:18:28 -07:00
Jackie Huang 8f6969a775 samhain-server: do not extend to native
No packages depend on samhain-server-native and it doesn't
make sense to extend a server package to native, so remove
the BBCLASSEXTEND.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-31 11:50:13 -07:00
Jagadeesh Krishnanjanappa 58c23b4787 clamav: Add missing clamav.service file to SRC_URI
This solves the below error when systemd is used as init manager,
-- snip --
ERROR: clamav-0.99.2-r0 do_package: SYSTEMD_SERVICE_clamav value clamav.service does not exist
ERROR: clamav-0.99.2-r0 do_package: Function failed: systemd_populate_packages
-- snip --

Other issue:
*  Ship /lib/systemd/system/clamav-freshclam.service into ${PN}-freshclam
   package, to solve below warning:
-- snip --
[10240] WARNING: QA Issue: clamav: Files/directories were installed but not shipped in any package:
  /lib/systemd/system/clamav-freshclam.service
-- snip --

Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-31 11:50:13 -07:00
Jackie Huang 7ac11e2274 xmlsec1: fix a typo in examples/verify3.c
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-31 11:50:07 -07:00
Armin Kuster ab8d219c43 linux-yocto: move to wildcard on bbappend
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-18 19:31:59 -08:00
Armin Kuster f5c93d5f73 linux-yocto: drop dangling dir
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-18 19:31:59 -08:00
Armin Kuster 30b911b282 linux-stable: drop old versions no longer in core
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-18 19:31:59 -08:00
Armin Kuster b31e6a9ed4 google-authenticator-libpam: add new package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-18 19:31:59 -08:00
Armin Kuster b890929335 yocto-linux/4.9: fix typo in filepath
fix idea submitted but Derek Betker <derek.betker@ge.com>

[Yocto 12134]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-18 19:31:53 -08:00
Jagadeesh Krishnanjanappa f2c765ea98 trousers: fix to ship leftover files into packages
While building <mlib>-trousers recipe, the below files are
not shipped but has been installed. The patch packages them
accordingly.

-- snip --
WARNING: lib32-trousers-0.3.14+gitAUTOINC+4b9a70d578-r0 do_package: QA Issue: lib32-trousers: Files/directories were installed but not shipped in any package:
  /usr/src
  /usr/src/debug
  /usr/src/debug/lib32-trousers
  /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0
  /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/git
  /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/git/src
  /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/git/src/tcs
  /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/git/src/trspi
  /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/git/src/tcsd
  /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/git/src/tspi
  /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/git/src/include
  /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/git/src/tddl
-- snip --

Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-17 09:42:58 -08:00
Armin Kuster a5400486f5 tpm2.0-tss: update to 1.3.0
change recipe to PV style

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14 11:56:35 -08:00
Armin Kuster 22976cccb7 tpm2-abrmd: update to 1.2.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14 11:56:35 -08:00
Armin Kuster 7536fd9871 tpm2simulator: update to 138
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14 11:56:35 -08:00
Armin Kuster f4e950c03b clamav: update to 0.99.3
removed unused hash checksums

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14 11:56:35 -08:00
Armin Kuster 9e26f1307e freediameter: remove package
resides in meta-networking now

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14 11:56:35 -08:00
Armin Kuster 064b9321e6 xmlsec1: Update to 1.2.25
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14 11:56:35 -08:00
Armin Kuster 9cdde3cc46 fail2ban: update to 0.10.2
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14 11:56:35 -08:00
Armin Kuster db41118438 smack: update to 1.3.1
drop git hash from PV
Use master branch

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14 11:56:35 -08:00
Armin Kuster 195ca4f48e sssd: update to 1.16.0
update some PACKAGECONFIG changes

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14 11:56:35 -08:00
Armin Kuster 62803a0ecc scapy: update to 2.3.3
Drop patch included in update.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14 11:56:35 -08:00
Armin Kuster 181d03751a tripwire: Update to 2.4.3.6
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14 11:56:35 -08:00
Armin Kuster 1163dcc00b libseccomp: update to 2.3.3
Drop git PV for bb reciped PV.

supports 4.15 kernel

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14 11:56:29 -08:00
José Bollo aedbec5ea3 xmlsec1: Allow native builds
When used in native builds, the variable STAGING_DIR_HOST expands
to the empty string. This leads 'sed' to an error because the pattern
is empty. Using STAGING_DIR instead of STAGING_DIR_HOST allows
to use xmlsec1 in native builds with the correct behaviour.

Change-Id: I55f40ac2413863c489d4219e0080f7e4e274a6db
Signed-off-by: José Bollo <jose.bollo@iot.bzh>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-06 21:16:55 +05:30
Robert Yang 3963c388a3 conf/layer.conf: remove bbclass from BBFILES
Add bbclass to BBFILES doesn't make any sense.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-06 21:16:48 +05:30