mirrors/meta-security
1
0
Fork 0
mirror of https://git.yoctoproject.org/meta-security synced 2026-05-07 04:58:47 +00:00
Code Issues Projects Releases Wiki Activity
303 Commits 39 Branches 0 Tags
4b67ec826350409916feb60af622a67518eb0a51
Commit Graph

303 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Armin Kuster 43fd825acf libseccomp: add ppc support 
backport ppc patches

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-04-15 17:54:37 -07:00
Armin Kuster af8473501a samhain: update client and server to 3.1.5 
Signed-off-by: Armin Kuster <akuster808@gmail.com>

fix missing bash depends in server recipe
 2015-04-15 17:54:34 -07:00
Hugo Vasconcelos Saldanha 070ccbb476 clamav: fix ncurses configure option 
Signed-off-by: Hugo Vasconcelos Saldanha <hugo.saldanha@aker.com.br>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-04-09 18:13:51 -07:00
Hugo Vasconcelos Saldanha 8090e1bf2f libmspack: update to version 0.5 
SRC_URI to version 0.4 was broken.

Signed-off-by: Hugo Vasconcelos Saldanha <hugo.saldanha@aker.com.br>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-04-09 18:13:51 -07:00
Armin Kuster b0873e2939 suricata: update to 2.0.7 
this includes CVE-2015-0928

moved patches and files to more generic dir name

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-03-20 09:54:14 -07:00
Armin Kuster 14d6027b9e libseccomp: update to version 2.2.0 
License is now LGPL
sources come from github now
dropped patches since alt solutions included now.

Changes in the 2.2.0 release include:

* Migrated the build system to autotools
* Added support for the aarch64 architecture
* Added support for the mips, mips64, and mips64n32 architectures
* Added support for the new seccomp() syscall and thread sync
* Added Python bindings
* Updated the internal syscall tables to Linux v3.19

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-03-20 09:53:41 -07:00
Armin Kuster 7b1d78f1b9 tomoyo: fix typos in scc file 
thanks to rday for pointing it out.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-03-20 09:53:06 -07:00
Armin Kuster 666f9bd17a tripwire: Add aarch64 support to config.sub 
this fixes a build issue on arm64.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-02-14 18:46:44 -08:00
Armin Kuster 009728f409 nmap: add aarch64 config support 
allow nmap to build for arm64 qemu machine.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-02-14 18:46:33 -08:00
Armin Kuster a72b7c2925 libcap-ng: remove from layer 
this package is not in meta-oe

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-02-13 17:29:01 -08:00
Armin Kuster 7c475c26af sleuth: add sleuthkit 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-02-13 17:28:37 -08:00
Armin Kuster 3e12ea17ff libewf: add package 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-02-13 17:28:22 -08:00
Armin Kuster 1d03df0ddc afflib: new package 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-02-13 17:28:04 -08:00
Armin Kuster 401cec2486 suricata: update to 2.0.6 
fix new build issues with pcap-config
cleanup configure selection

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-02-13 17:27:00 -08:00
Armin Kuster 9503b72f57 suricata: add new ids and pds engine for meta-security 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-02-13 17:26:55 -08:00
Armin Kuster 2647b09a87 libhtp: add support lib for suricata 
include common inc file

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-02-13 17:26:39 -08:00
Armin Kuster 98193c1eea README: update layer information 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-02-13 17:22:14 -08:00
Armin Kuster 5f562e458e layer conf: update to include meta-networking 
suricata needs a package in meta-networking

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-02-13 17:21:50 -08:00
Armin Kuster 7116603e27 packagegroup: remove libseccomp 
libseccomp now includes COMPATIBLE_HOST so it will also
negate the packagegroup

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-02-13 17:21:42 -08:00
Armin Kuster a1dde1a9f8 libseccomp: add COMPATIBLE_HOST 
don't build for ppc, ppc64, mips or aarch64

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-02-13 17:21:33 -08:00
Armin Kuster cfd9713682 nmap: fix QA issue 
WARNING: QA Issue: nmap requires /usr/bin/python, but no providers in its RDEPENDS [file-rdeps]

move nmap.inc back into recipe

colapse  ${BPN}-${PV} to ${BP}

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-02-01 10:21:23 -08:00
Armin Kuster a456a33628 nmap: update to version 6.47 
for list of changes see:
http://seclists.org/nmap-dev/2014/q3/335

use nmap.inc to house most code.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-02-01 10:21:17 -08:00
Armin Kuster 75ff99bd34 clamav: remove interal libmspack 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-02-01 08:12:26 -08:00
Armin Kuster 09e316367a clamav: updated reciped 
added packaged define and init scripts.

patches are all debian

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-02-01 08:12:16 -08:00
Armin Kuster 5303fcfcb6 libmspack: add new package 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-02-01 08:12:07 -08:00
Armin Kuster 8be6d8851b samhain: fix aarch64 build issues 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-02-01 08:11:59 -08:00
Armin Kuster a58d09e2f5 checksec: fix rdepend issue 
WARNING: QA Issue: checksec requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-02-01 08:11:45 -08:00
Armin Kuster ada3eeef6d libseccomp: fix rdepends 
WARNING: QA Issue: libseccomp requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-02-01 08:11:36 -08:00
Armin Kuster d304579112 ccs-tools: remove unused variable. 
There was a ref to  DEPEND  with is meaningless so remove it.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-02-01 08:11:28 -08:00
Armin Kuster 1aea14c3c8 samhain: client fix rdepends 
WARNING: QA Issue: samhain-client requires /bin/bash, but no providers in its RDEPENDS [file-rdeps]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-02-01 08:11:21 -08:00
Paul Eggleton ea8f4661f4 nikto: fix SRC_URI for multilib 
${BPN} should be used instead of ${PN} where you want the name without
any prefix (and ${BP} is short for ${BPN}-${PV}).

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-01-13 12:10:48 -08:00
Paul Eggleton 903c19e322 libseccomp: fix SRC_URI for multilib 
${BPN} should be used instead of ${PN} where you want the name without
any prefix (and ${BP} is short for ${BPN}-${PV}).

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-01-13 12:10:40 -08:00
Armin Kuster 3ace992991 libcap-ng: fix checksums 
the checksums did not get updated when upgrading package.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-01-13 12:10:29 -08:00
Armin Kuster 75d2b6620d nikto: fix launching errors 
add several missing perl package depends so app can launch

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-01-03 21:21:53 -08:00
Armin Kuster b265a8f1c7 libwhisker2-perl: fix build issue 
minor formating clean ups.
add "ssl" depend packageconf option

Change inherit perlnative to BBCLASSEXTEND = "native" to fix build issue

error: Can't install libwhisker2-perl-2.5-r0@i586: no package provides /home/akuster/oss/maint/security/poky/build/tmp/sysroots/x86_64-linux/usr/bin/perl-native/perl.real

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-01-03 21:21:44 -08:00
Armin Kuster 397b35c028 nikto: fix depends 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-01-03 21:21:32 -08:00
Armin Kuster b80abbf51d perl: reorg recipes to match meta-perl. 
move security perl recipes to a more standardized
recipes-perl layout.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-01-03 21:21:11 -08:00
Armin Kuster 424473d61e remove: libcurses-perl, libhtml-parser-perl, libnet-dns-perl 
those packages are being moved to meta-perl.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-01-03 21:21:03 -08:00
Armin Kuster 5294a2c603 libcap-ng: update to 7.4 plus security fix 
0.7.4
- In pscap, remove unused code
- Add CAPNG_INIT_SUPP_GRP to capng_change_id
- Drop CAP_COMPROMISE_KERNEL
- Update the autotools components
- Dynamically detect last capability (#895105)
- Add PR_SET_NO_NEW_PRIVS to capng_lock if kernel supports it
  (CVE-2014-3215)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2015-01-03 21:20:53 -08:00
Armin Kuster 76386bd2ca samhain: update to 3.1.3 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2014-11-28 19:14:10 -08:00
Armin Kuster 039c711f17 packagegroups [v2]: add a few more catagories 
Add tripwire, samhain and checksec packages
fix ccs-tools to exclude if no kernel support

v2:
 fixed missing "}"

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2014-11-28 19:14:02 -08:00
Armin Kuster 4fe07fed2e pinentry: remove from layer 
pinentry is now in oe-core so remove it from this layer.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2014-11-28 19:13:54 -08:00
Armin Kuster 93891d856d libseccomp: add package for tests. 
I wanted to run the tests manually on a target. Tests are now
built and packaged.

to run: /usr/lib/libseccomp/tests/regression -a

will add ptest later.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2014-11-28 19:13:46 -08:00
Armin Kuster b584aa13f6 checksecurity: update to version 2.0.15 
update fixed:
 * Fix bug in the CS_NFSAFS definition in etc/check-setuid.conf that prevents
   the script from matching any filesystem. This bug was, actually, making the
   script not do anything in the default configuration.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2014-10-26 12:35:55 -07:00
Armin Kuster 33e45ec16c isic: Add new package 
This adds the ISIC is a suite of utilities to exercise the stability of an IP and its component stacks (TCP/UDP/ICMP etc.) It generates piles of pseudo random packets with configurable tendancies, then sent to the target to penetrate its firewall rules or find bug

backported two patches from Redhat.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2014-10-26 12:35:48 -07:00
Armin Kuster b59053a3dd samhain: update to 3.1.2 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2014-10-26 12:35:39 -07:00
Armin Kuster b255a7137f README: update layers references 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2014-09-13 10:26:14 -07:00
Armin Kuster 39f1010f3a layer.conf: add layer depends. 
added layerdepends check for  perl-layer and opemembedded-layer

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2014-09-13 10:25:35 -07:00
Armin Kuster da8d7084fa libnet-ssleay-perl: remove from layer 
libnet-ssleay-perl is now in meta-perl

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2014-09-13 10:25:28 -07:00
Armin Kuster c00f6abe5d tripwire: ppc64 build failure. 
| configure: error: /bin/sh ./config.sub powerpc64-poky-linux failed

config.sub did not understand the powerpc64 par.
this patch adds that understanding.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2014-09-13 10:25:19 -07:00