mirrors/meta-security
1
0
Fork 0
mirror of https://git.yoctoproject.org/meta-security synced 2026-01-12 03:10:13 +00:00
Code Issues Projects Releases Wiki Activity
1,001 Commits 37 Branches 0 Tags
7a1691c0372662139e844fa0699c348d03b6486a
Commit Graph

1001 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Armin Kuster
7a1691c037 suricata: Drop 4.1.x its EOL 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-07-28 18:21:25 -07:00
Armin Kuster
7dcf98aa9b suricata.inc: exclude ppc in rust version 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-07-28 18:21:25 -07:00
Anton Antonov
152cdb506b Do not use clang toolchain in Parsec recipes 
Signed-off-by: Anton Antonov <Anton.Antonov@arm.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-07-17 05:47:44 -07:00
Armin Kuster
e161900985 tpm-tools: fix build issue 
This error occurs randomly.
/bin/bash: pod2man: command not found

[Yocto #14304]

minor space/tab cleanup

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Cc: Ben <koncept1@gmail.com>
 2021-07-10 05:16:52 -07:00
Armin Kuster
2fbaa47803 .gitlab-ci.yml: fix qemux86 musl order 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-07-10 05:16:52 -07:00
Yi Zhao
cab0c7d343 apparmor: use its own initscript and service files 
Use initscript and service files provided by apparmor.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
 2021-07-10 05:16:52 -07:00
Yi Zhao
366bd7026f apparmor: upgrade 3.0 -> 3.0.1 
Drop backport patches:
  0001-apparmor-fix-manpage-order.patch
  0001-libapparmor-add-missing-include-for-socklen_t.patch
  0002-libapparmor-add-aa_features_new_from_file-to-public-.patch
  0003-libapparmor-add-_aa_asprintf-to-private-symbols.patch
  0001-aa_status-Fix-build-issue-with-musl.patch
  0001-parser-Makefile-dont-force-host-cpp-to-detect-reallo.patch

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
 2021-07-10 05:16:26 -07:00
Armin Kuster
5fbf2b8b7f kas/kas-security-alt.yml: add meta-rust 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-07-06 22:21:47 -07:00
Armin Kuster
e7a4fb09c4 suricata: update to 6.0.3 
add new crates
minor cleanup

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-07-06 22:10:19 -07:00
Armin Kuster
aa84cc36dc sssd: update to 2.5.1 
See full change log: https://sssd.io/release-notes/sssd-2.5.1.html

Including a musl build work around

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-07-04 10:59:17 -07:00
Armin Kuster
be53d1a467 initramfs-framework: rename files dir 
Fixes:
ERROR: initramfs-framework-1.0-r4 do_fetch: Fetcher failure for URL: 'file://dmverity'. Unable to fetch URL from any source.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-29 09:31:13 -07:00
Armin Kuster
8f313d951c packagegroup-core-security: add sshguard 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-29 09:31:13 -07:00
Armin Kuster
1ec2783d62 ssshgaurd: add packaage 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-29 09:31:13 -07:00
Armin Kuster
54186fc738 initramfs-framework: fix typo in conditional 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-29 09:31:13 -07:00
Sekine Shigeki
46f7e7acbe smack: add 3 cves to allowlist 
CVE-2014-0363, CVE-2014-0364, CVE-2016-10027 are not for smack of smack-team(https://github.com/smack-team/smack) but other project.

Signed-off-by: Sekine Shigeki <sekine.shigeki@fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-20 15:49:26 -07:00
Federico Pellegrin
fcd4a8bbf6 aircrack-ng: update to 1.6 
Signed-off-by: Federico Pellegrin <fede@evolware.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-20 15:49:26 -07:00
Kai Kang
94aa6efec6 sssd: add fix-ldblibdir.patch back 
The patch fix-ldblibdir.patch has been dropped when update sssd to
2.5.0. But it fails to start sssd without this patch. So add it back.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-20 15:49:26 -07:00
Kai Kang
0705f60b81 sssd: set pid path with /run 
/var/run is deprecated and set pid path with /run to store pid files for
the SSSD.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-20 15:49:16 -07:00
Armin Kuster
48c7b34ec3 meta-integrity/recipe-kernel: use sanity check 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-06 13:03:37 -07:00
Armin Kuster
6e75e751ff meta-integrity: add sanity check 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-06 13:03:37 -07:00
Armin Kuster
35e1b61750 meta-tpm/linux-yocto: use sanity support 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-06 13:03:37 -07:00
Armin Kuster
2bfc09017d meta-tpm: add layer sanity check 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-06 13:03:37 -07:00
Armin Kuster
b226ebdc4a linux-yocto-dev: drop bbappend 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-06 13:03:37 -07:00
Armin Kuster
1955c143de meta-security/recipe-kernel: use sanity check 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-06 13:03:37 -07:00
Armin Kuster
c1235f6aff meta-security: add sanity check 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-06 13:03:37 -07:00
Armin Kuster
34d6b479b8 meta-hardening/initscripts: missed overide. 
Helps pass YCL.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-05 19:25:24 +00:00
Yi Zhao
f9ac521497 libgssglue: update SRC_URI 
Update SRC_URI to use Debian mirror because the original site is
unaccessible.

Fixes do_fetch error:
ERROR: libgssglue-0.4-r0 do_fetch: Fetcher failure for URL:
'http://www.citi.umich.edu/projects/nfsv4/linux/libgssglue/libgssglue-0.4.tar.gz'.
Unable to fetch URL from any source.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
 2021-06-05 19:25:24 +00:00
Robert P. J. Day
c1fd602be6 Correct "securiyt" typo in maintainers.inc 
Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-05 19:25:24 +00:00
Armin Kuster
0c26950b0d packagegroup-core-security: drop python3-scapy 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-05 19:25:24 +00:00
Armin Kuster
bb06a7cbda python3-scapy: drop , now in meta-python 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-05 19:25:24 +00:00
Armin Kuster
f40fdc7e6d initramfs-framework: fix YCL issue. 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-05 19:25:24 +00:00
Armin Kuster
833ae34c8f linux-%_5.%.bbappend: drop recipe 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-05 19:25:24 +00:00
Armin Kuster
a1d5476acc busybox: drop as libsecomp is in core 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-05 19:25:23 +00:00
Ricardo Salveti
8236d78343 tpm2-tss: fix usrmerge udev install path 
Update ${base_prefix}/lib to ${nonarch_base_libdir} to fix a package QA
issue when usrmerge is enabled in DISTRO_FEATURES.

QA Issue: tpm2-tss package is not obeying usrmerge distro feature. /lib
should be relocated to /usr. [usrmerge]

Signed-off-by: Ricardo Salveti <ricardo@foundries.io>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-05 19:25:22 +00:00
Armin Kuster
e471ff0926 sssd: update to 2.5.0 
Add new depends
Drop obsolete patches

Signed-off-by: Armin Kuster <akuster808@gmail.com>

----
v2]
Fix issue with nsupdate check
don't use host bind
 2021-06-05 19:25:19 +00:00
Armin Kuster
a57799000e ossec-hids: musl not compatable 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-05 19:25:17 +00:00
Armin Kuster
e1f0699492 packagegroup-core-security: exclude ossec-hids from musl 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-05 19:25:17 +00:00
Armin Kuster
72c5043d84 lkrg-module: update 0.9.1 
LIC_FILES_CHKSUM updated do to yr change and adding new copyrights

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-05 19:25:17 +00:00
Armin Kuster
951ea7ca15 python3-scapy: update to 2.4.5 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-05 19:25:17 +00:00
Upgrade Helper
ed6e250b4d opendnssec: upgrade 2.1.8 -> 2.1.9 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-05 19:25:17 +00:00
Upgrade Helper
77db981282 clamav: upgrade to latest revision 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-06-05 19:25:17 +00:00
Armin Kuster
ab239f1497 packagegroup-core-security: add clamav-daemon 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-05-16 13:23:55 -07:00
Armin Kuster
448426a1ba clamav: fix systemd startup 
cleanup recipe

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-05-16 13:23:55 -07:00
Armin Kuster
10f866a458 .gitlab-ci: drop clean up combine alt w base 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-05-16 13:23:55 -07:00
Armin Kuster
31e5b3e08f packagegroup-core-security: add aide and ossec 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-05-16 13:23:55 -07:00
Armin Kuster
2f49b2dad0 aide: Add another ids 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-05-16 13:23:55 -07:00
Armin Kuster
44a345dbb1 Apparmor: fix multi config build issue. 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-05-16 13:23:55 -07:00
Armin Kuster
06101dd3da packagegroup-core-security: fix typo for mips 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-05-16 13:23:55 -07:00
Armin Kuster
2410c36f1f ibmtpm2tss: update to tip 
Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-05-16 13:23:55 -07:00
Armin Kuster
ab9da58c3a ibmswtpm2: update to 1661 
Drop patch now included in updated

Signed-off-by: Armin Kuster <akuster808@gmail.com>
 2021-05-16 13:23:55 -07:00