Commit Graph

107 Commits

Author SHA1 Message Date
Armin Kuster
3f95047ae1 suricata: package update to 2.0.8
includes security fix CVE-2015-0971

include nss and nspr to build

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-06-25 07:16:05 -07:00
Armin Kuster
58869bea59 libhtp: update to use suricata 2.0.8
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-06-25 07:16:05 -07:00
Armin Kuster
421fe3c081 suricata: Fix QA warnings
WARNING: QA Issue: suricata rdepends on nspr, but it isn't a build dependency? [build-deps]
WARNING: QA Issue: suricata rdepends on nss, but it isn't a build dependency? [build-deps]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-05-10 20:52:39 -07:00
Armin Kuster
58096a9c97 libseccomp: add tests
update busybox for extend head option for test suite
remove seq -f option as it is not supported buy busybox

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-04-15 17:54:40 -07:00
Armin Kuster
43fd825acf libseccomp: add ppc support
backport ppc patches

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-04-15 17:54:37 -07:00
Armin Kuster
af8473501a samhain: update client and server to 3.1.5
Signed-off-by: Armin Kuster <akuster808@gmail.com>

fix missing bash depends in server recipe
2015-04-15 17:54:34 -07:00
Hugo Vasconcelos Saldanha
070ccbb476 clamav: fix ncurses configure option
Signed-off-by: Hugo Vasconcelos Saldanha <hugo.saldanha@aker.com.br>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-04-09 18:13:51 -07:00
Hugo Vasconcelos Saldanha
8090e1bf2f libmspack: update to version 0.5
SRC_URI to version 0.4 was broken.

Signed-off-by: Hugo Vasconcelos Saldanha <hugo.saldanha@aker.com.br>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-04-09 18:13:51 -07:00
Armin Kuster
b0873e2939 suricata: update to 2.0.7
this includes CVE-2015-0928

moved patches and files to more generic dir name

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-03-20 09:54:14 -07:00
Armin Kuster
14d6027b9e libseccomp: update to version 2.2.0
License is now LGPL
sources come from github now
dropped patches since alt solutions included now.

Changes in the 2.2.0 release include:

* Migrated the build system to autotools
* Added support for the aarch64 architecture
* Added support for the mips, mips64, and mips64n32 architectures
* Added support for the new seccomp() syscall and thread sync
* Added Python bindings
* Updated the internal syscall tables to Linux v3.19

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-03-20 09:53:41 -07:00
Armin Kuster
7b1d78f1b9 tomoyo: fix typos in scc file
thanks to rday for pointing it out.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-03-20 09:53:06 -07:00
Armin Kuster
666f9bd17a tripwire: Add aarch64 support to config.sub
this fixes a build issue on arm64.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-14 18:46:44 -08:00
Armin Kuster
009728f409 nmap: add aarch64 config support
allow nmap to build for arm64 qemu machine.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-14 18:46:33 -08:00
Armin Kuster
a72b7c2925 libcap-ng: remove from layer
this package is not in meta-oe

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:29:01 -08:00
Armin Kuster
7c475c26af sleuth: add sleuthkit
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:28:37 -08:00
Armin Kuster
3e12ea17ff libewf: add package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:28:22 -08:00
Armin Kuster
1d03df0ddc afflib: new package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:28:04 -08:00
Armin Kuster
401cec2486 suricata: update to 2.0.6
fix new build issues with pcap-config
cleanup configure selection

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:27:00 -08:00
Armin Kuster
9503b72f57 suricata: add new ids and pds engine for meta-security
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:26:55 -08:00
Armin Kuster
2647b09a87 libhtp: add support lib for suricata
include common inc file

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:26:39 -08:00
Armin Kuster
98193c1eea README: update layer information
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:22:14 -08:00
Armin Kuster
5f562e458e layer conf: update to include meta-networking
suricata needs a package in meta-networking

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:21:50 -08:00
Armin Kuster
7116603e27 packagegroup: remove libseccomp
libseccomp now includes COMPATIBLE_HOST so it will also
negate the packagegroup

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:21:42 -08:00
Armin Kuster
a1dde1a9f8 libseccomp: add COMPATIBLE_HOST
don't build for ppc, ppc64, mips or aarch64

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-13 17:21:33 -08:00
Armin Kuster
cfd9713682 nmap: fix QA issue
WARNING: QA Issue: nmap requires /usr/bin/python, but no providers in its RDEPENDS [file-rdeps]

move nmap.inc back into recipe

colapse  ${BPN}-${PV} to ${BP}

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 10:21:23 -08:00
Armin Kuster
a456a33628 nmap: update to version 6.47
for list of changes see:
http://seclists.org/nmap-dev/2014/q3/335

use nmap.inc to house most code.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 10:21:17 -08:00
Armin Kuster
75ff99bd34 clamav: remove interal libmspack
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:12:26 -08:00
Armin Kuster
09e316367a clamav: updated reciped
added packaged define and init scripts.

patches are all debian

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:12:16 -08:00
Armin Kuster
5303fcfcb6 libmspack: add new package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:12:07 -08:00
Armin Kuster
8be6d8851b samhain: fix aarch64 build issues
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:11:59 -08:00
Armin Kuster
a58d09e2f5 checksec: fix rdepend issue
WARNING: QA Issue: checksec requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:11:45 -08:00
Armin Kuster
ada3eeef6d libseccomp: fix rdepends
WARNING: QA Issue: libseccomp requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:11:36 -08:00
Armin Kuster
d304579112 ccs-tools: remove unused variable.
There was a ref to  DEPEND  with is meaningless so remove it.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:11:28 -08:00
Armin Kuster
1aea14c3c8 samhain: client fix rdepends
WARNING: QA Issue: samhain-client requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-02-01 08:11:21 -08:00
Paul Eggleton
ea8f4661f4 nikto: fix SRC_URI for multilib
${BPN} should be used instead of ${PN} where you want the name without
any prefix (and ${BP} is short for ${BPN}-${PV}).

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-13 12:10:48 -08:00
Paul Eggleton
903c19e322 libseccomp: fix SRC_URI for multilib
${BPN} should be used instead of ${PN} where you want the name without
any prefix (and ${BP} is short for ${BPN}-${PV}).

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-13 12:10:40 -08:00
Armin Kuster
3ace992991 libcap-ng: fix checksums
the checksums did not get updated when upgrading package.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-13 12:10:29 -08:00
Armin Kuster
75d2b6620d nikto: fix launching errors
add several missing perl package depends so app can launch

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-03 21:21:53 -08:00
Armin Kuster
b265a8f1c7 libwhisker2-perl: fix build issue
minor formating clean ups.
add "ssl" depend packageconf option

Change inherit perlnative to BBCLASSEXTEND = "native" to fix build issue

error: Can't install libwhisker2-perl-2.5-r0@i586: no package provides /home/akuster/oss/maint/security/poky/build/tmp/sysroots/x86_64-linux/usr/bin/perl-native/perl.real

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-03 21:21:44 -08:00
Armin Kuster
397b35c028 nikto: fix depends
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-03 21:21:32 -08:00
Armin Kuster
b80abbf51d perl: reorg recipes to match meta-perl.
move security perl recipes to a more standardized
recipes-perl layout.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-03 21:21:11 -08:00
Armin Kuster
424473d61e remove: libcurses-perl, libhtml-parser-perl, libnet-dns-perl
those packages are being moved to meta-perl.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-03 21:21:03 -08:00
Armin Kuster
5294a2c603 libcap-ng: update to 7.4 plus security fix
0.7.4
- In pscap, remove unused code
- Add CAPNG_INIT_SUPP_GRP to capng_change_id
- Drop CAP_COMPROMISE_KERNEL
- Update the autotools components
- Dynamically detect last capability (#895105)
- Add PR_SET_NO_NEW_PRIVS to capng_lock if kernel supports it
  (CVE-2014-3215)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-01-03 21:20:53 -08:00
Armin Kuster
76386bd2ca samhain: update to 3.1.3
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-11-28 19:14:10 -08:00
Armin Kuster
039c711f17 packagegroups [v2]: add a few more catagories
Add tripwire, samhain and checksec packages
fix ccs-tools to exclude if no kernel support

v2:
 fixed missing "}"

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-11-28 19:14:02 -08:00
Armin Kuster
4fe07fed2e pinentry: remove from layer
pinentry is now in oe-core so remove it from this layer.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-11-28 19:13:54 -08:00
Armin Kuster
93891d856d libseccomp: add package for tests.
I wanted to run the tests manually on a target. Tests are now
built and packaged.

to run: /usr/lib/libseccomp/tests/regression -a

will add ptest later.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-11-28 19:13:46 -08:00
Armin Kuster
b584aa13f6 checksecurity: update to version 2.0.15
update fixed:
 * Fix bug in the CS_NFSAFS definition in etc/check-setuid.conf that prevents
   the script from matching any filesystem. This bug was, actually, making the
   script not do anything in the default configuration.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-10-26 12:35:55 -07:00
Armin Kuster
33e45ec16c isic: Add new package
This adds the ISIC is a suite of utilities to exercise the stability of an IP and its component stacks (TCP/UDP/ICMP etc.) It generates piles of pseudo random packets with configurable tendancies, then sent to the target to penetrate its firewall rules or find bug

backported two patches from Redhat.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-10-26 12:35:48 -07:00
Armin Kuster
b59053a3dd samhain: update to 3.1.2
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2014-10-26 12:35:39 -07:00