Commit Graph

395 Commits

Author SHA1 Message Date
Changqing Li
729fca6d2c bseccomp: fix do package qa warning
Fix below warning:

lib32-libseccomp-2.3.3-r0 do_package: QA Issue: lib32-libseccomp:
Files/directories were installed but not shipped in any package:

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-29 10:43:01 -07:00
Yi Zhao
29b5ec44c7 keynote: remove recipe
The keynote is unmaintained for a long time. It had been removed from
main distributions (Fedora, Suse and Debian).
See: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=594867

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-29 10:43:01 -07:00
Armin Kuster
04ef9df593 meta-security: add THUD
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-29 10:42:53 -07:00
Armin Kuster
4bbc0d9d94 samhain: update to 4.3.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-23 15:34:10 -07:00
Armin Kuster
64153a0f51 forensics: drop all un supported pacakges
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster
76ae9a21f7 lynis: update to 2.6.8
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster
e535ac49fd aircrack: update to 1.3
remove unneeded patch.
minor cleanups

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster
d255fa5bfb swtpm: update to tip for openssl 1.1 support
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster
6faa2504ef libtpm: update to tip
LIC_FILES_CHKSUM changed do to "Extend license texts with TPM 2 specifics"

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster
3bae06e29b openssl-tpm-engine: update SRC_URI and update to 0.5.0
change to a fork that is being maintained and that enabled openssl 1.1
Refresh patches
Drop one no longer needed

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster
49a7a7a8e1 pcr-extend: fix building with openssl 1.1
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster
2e784636c9 tor: remove not used
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster
5a9f865792 packagegroup-core-security: change scapy to python name
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster
62e7b5798d bastille: fix QA error
bastille_3.2.1.bb: cannot map 'allarch' to a linux kernel architecture

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster
db794a634f tpm-tools: update to latest 1.3.9.1
refresh patch
backport debian fixes
Fix additional openssl 1.1 issue

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster
93c5ab6687 suricata: include a emerging rules snapshot
it appears to be changing w/o version control so
keep a snapshot when reciped was updated.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster
17f0700b9f meta-security-compliance: bump layer priority
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster
229b7a45cc meta-tpm: bump layer priority
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster
a877bb374b tpm2-abrmd: update to 2.0.1
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster
692a2c2009 tpm2.0-tools: update to 3.1.2
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster
8f9dc0378f layer_conf: increase priority
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster
26786fab30 tpm2.0: update to 2.0.1
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster
7aa34f55a6 openscap-daemon: update to 1.10
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster
58ab731ab6 openscap: update 1.2.17
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster
c9a21aae52 apparmor: update to 2.12
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster
9ef4c66498 fscryptctl: update to tip
fix mkfs.ext4 invocation

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster
561d0806a9 scapy: update to 2.4.0 and covert
convert package to python standard

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster
32def3971b fail2ban: update to 10.3.1
covert to python package standard

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Armin Kuster
d743e44710 sssd: update to 1.16.3
Includes:
CVE-2018-10852

see:
https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_3.html

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Alex Kiernan
31de145fe1 keyutils: Fix build with usrmerge
Update BINDIR and SBINDIR so keyutils builds with usrmerge

ERROR: keyutils-1.5.10-r0 do_package: QA Issue: keyutils: Files/directories were installed but not shipped in any package:
  /sbin/key.dns_resolver
  /sbin/request-key
  /bin/keyctl
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
keyutils: 3 installed and not shipped files. [installed-vs-shipped]

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Yi Zhao
6e8d6f96d2 keynote: depend on openssl10
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-17 21:08:19 -07:00
Yi Zhao
9449ba75ea xmlsec1: upgrade 1.2.25 -> 1.2.26
Drop patch xmlsec1-fix-a-typo-in-examples-verify3.c.patch since the
issue had been fixed upstream.

Rebase patch change-finding-path-of-nss.patch

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-01 10:34:02 -07:00
Yi Zhao
108cb736d9 samhain: upgrade 4.2.2 -> 4.2.4
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-01 10:34:02 -07:00
Mingli Yu
492b8b8f4a ecryptfs-utils: fix usrmerge install path
Update rootsbindir from /sbin to ${base_sbindir}
to fix below do_install error when usrmerge
enabled in DISTRO_FEATURES
| chmod: cannot access '/poky-build/tmp-glibc/work/core2-64-wrs-linux/ecryptfs-utils/111-r0/image/usr/sbin/mount.ecryptfs_private': No such file or directory

And pass "--with-pamdir=${base_libdir}/security"
to configure script to fix below warning when
usrmerge enabled in DISTRO_FEATURES
| WARNING: ecryptfs-utils-111-r0 do_package: QA Issue: ecryptfs-utils: Files/directories were installed but not shipped in any package:
  /lib64/security/pam_ecryptfs.so

Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-01 10:34:02 -07:00
Joe Slater
46d81c4737 keynote: add dependency on bison-native
bison/yacc is no longer automatically supplied.

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-01 10:34:02 -07:00
Alex Kiernan
1d1c293819 libseccomp: Drop RDEPENDS on bash
Commit ada3eee ("libseccomp: fix rdepends") added RDEPENDS on bash, but
this is no longer needed, so drop it.

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-01 10:34:02 -07:00
Armin Kuster
e296c53687 suricata: update 4.0.5
Fix rules make. Don't allow the makefile to download the rules. Use
fetcher

add install configs and remove manual intall of those files

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-01 10:34:02 -07:00
Armin Kuster
407abe22ef libhtp: update to 0.5.27
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-09-01 10:33:53 -07:00
Koen Kooi
68a727e9cb suricata: rename ${PN}-python to ${PN}-socketcontrol
This describes the content a lot better. RDEPENDS are still missing, so it's still as non-working as before :/

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04 07:50:07 -07:00
Koen Kooi
95e21e8cd9 suricata: install and package threshold.config
This fixes the following warning during startup:

  suricata[24522]: 31/7/2018 -- 13:47:15 - <Warning> - [ERRCODE: SC_ERR_FOPEN(44)] - Error opening file: "/etc/suricata//threshold.config": No such file or directory

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04 07:50:07 -07:00
Koen Kooi
cce040956e suricata: install and package rules
This fixes the following warning during startup:

  suricata[22707]: 31/7/2018 -- 13:34:40 - <Warning> - [ERRCODE: SC_ERR_NO_RULES_LOADED(43)] - 47 rule files specified, but no rule was loaded at all!

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04 07:50:07 -07:00
Koen Kooi
2c266a1cfe suricata: enable syslog output
This fixes the following error preventing startup in daemon mode:

  suricata[20485]: 31/7/2018 -- 13:19:48 - <Error> - [ERRCODE: SC_ERR_MISSING_CONFIG_PARAM(118)] - NO logging compatible with daemon mode selected, suricata won't be able to log. Please update  'logging.outputs'

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04 07:50:07 -07:00
Koen Kooi
111835003d suricate: create and package logdir
This fixes the following error preventing startup:

  suricata[18771]: 31/7/2018 -- 13:08:21 - <Error> - [ERRCODE: SC_ERR_LOGDIR_CONFIG(116)] - The logging directory "/var/log/suricata/" supplied by /etc/suricata/suricata.yaml (default-log-dir) doesn't exist. Shut>

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04 07:50:07 -07:00
Koen Kooi
e58ad185be suricata: add systemd unit
Based on the debian systemd unit.

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04 07:50:07 -07:00
Koen Kooi
a0a3160923 suricata: add 'nfq' PACKAGECONFIG
For inline IPS nfqueue is nice to have, so add a PACKAGECONFIG entry for
it.

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04 07:50:07 -07:00
Koen Kooi
ccd9950ebd suricata: mark config file as CONFFILE
This preserves user edits during package upgrades.

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04 07:50:07 -07:00
Koen Kooi
c933696e9e suricata: fix packaging
Move ${PN}-python in front so ${PN} can use default packaging rules.

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04 07:50:07 -07:00
Koen Kooi
3277886451 suricata: don't start service in postinst
Apart from hardcoding the wrong networking device it won't survive device restart

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04 07:50:07 -07:00
Armin Kuster
7c6532e1c0 nmap: remove recipe as it is in meta-oe now
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-08-04 07:49:58 -07:00
Armin Kuster
4d139b95c4 clamav: update postinit
log_check] WARNING: Intentionally failing postinstall scriptlets of ['suricata', 'clamav'] to defer them to first boot is deprecated. Please place them into pkg_postinst_ontarget_${PN} ()

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-07-07 08:14:54 -07:00