Commit Graph

1722 Commits

Author SHA1 Message Date
mulhern 5ec81ec5b1 Bastille: document the current status and usability of the Bastille install.
The README file is updated to indicate the functionality of Bastille that is
actually available.

The recipe file is updated with a pointer to the README file.

An additional patch is added so that when Bastille is run in interactive mode
it will not attempt to make any changes to the system. This is better than
attempting to make the changes and making the screen flicker . The text on the
final screen has been updated appropriately.

Signed-off-by: mulhern <mulhern@yoctoproject.org>
2013-08-30 15:42:10 -04:00
mulhern ec1c761ad8 Bastille: set Yocto specific questions via config file.
The python script, set_required_questions.py reads the list of questions and
answers from the config file and edits the REQUIRE_DISTRO field for those
questions in the questions file so that it includes "Yocto" if it is not
already present. This has the effect of causing Bastille, when loading
questions for the Yocto distribution, to load only those that are answered
in the existing config file. Under the assumption that the exisitng config
file contains question/answer pairs that are relevant to the Yocto project,
this will cause the interactive question screen to have answers that are
relevant to the Yocto project.

Signed-off-by: mulhern <mulhern@yoctoproject.org>
2013-08-30 15:39:58 -04:00
mulhern 6e23502b38 Bastille: accept and observe --os flag in multiple situations.
[YOCTO #3867]

Five additional patches which cause the --os flag to be accepted and observed
are added. An additional distro, Yocto, is added. The individual patches
are described below.

upgrade_options_processing.patch: Changes setOptions procedure so that it
accepts named parameters for greater flexibility and adjusts all invocations
accordingly. Uses more precise specifications in invocatiosn of
Getop::Long::GetOptions. Omits code associated with a commented out flag.

accept_os_flag_in_backend.patch: Accepts and observes an additional --os
flag in BastilleBackEnd.

allow_os_with_assess.patch: No longer print a usage message and quit if
--assess or its related flags are specified along with the --os flag.

edit_usage_message.patch: Edit usage message to include the specification of
an --os flag with the specification of an --assess flag.

organize_distro_discovery.patch: Separates inferring the distro from
specifying the distro. Adds a "Yocto" distro among the other Linux
distros. Causes the specified distro to override the inferred
distro with a warning message when they are different. Previously if
either the inferred distro or the specified distro was not among supported
distros Bastille would quit with an error.

Signed-off-by: mulhern <mulhern@yoctoproject.org>
2013-08-30 15:38:50 -04:00
mulhern abb566ce89 Bastille: change in behavior of bastille -l.
[YOCTO #3867]

bastille -l now reports existing configuration file paths even if it has
not previously been run. Previously, it exited with an error if it detected
an absence of log files indicating a previous run.

Signed-off-by: mulhern <mulhern@yoctoproject.org>
2013-08-30 15:32:32 -04:00
mulhern 7672e9a8a2 Bastille: Miscellaneous fixes to the Bastille code base.
[YOCTO #3867]

Adds four additional small patches which address miscellaneous small problems
in Bastille.

The four patches are:

fix_missing_use_directives.patch: A number of use directives were missing from
several files. These were added as discovered.

fix_number_of_modules.patch: The curses interface includes a title for most
screens which gives a module, a module number, and the number of modules in the
series. Previously the last value was always 0, now it is simply
omitted. It would be more desirable to give the correct number, but this would
require a significant change to the code base.

remove_questions_text_file_references.patch: This version of Bastille does
not make use of a Questions.txt file, therefore the specification of the
location of this file in the OSMap/*.bastille files has been removed.

simplify_B_place.patch: This patch discards redundant variables, mostly
defined but not used cases, and makes the error reporting more informative.

Signed-off-by: mulhern <mulhern@yoctoproject.org>
2013-08-30 15:31:28 -04:00
mulhern 7654815dbf Bastille: Preliminary cleanup of existing patches.
[YOCTO #3867]

Renames existing patches and removes some changes.

Curses-and-IOLoader-changes.patch is renamed to call_output_config.patch. The
new patch omits the removal of the pruning step in Load_Questions but
retains the replacement of a call to a non-existant function with a call
to an appropriate implemented function.

yocto-standard-patch.patch is renamed to fixed_defined_warnings.patch. The
new patch omits the definition of a yocto distro but includes the defined
warnings fix.

The recipe file is changed to include the new patches and also to omit a
related action in the do_install script.

Signed-off-by: mulhern <mulhern@yoctoproject.org>
2013-08-30 15:29:48 -04:00
mulhern 600a74468b lib-perl: Change description to match package.
[YOCTO #4196] -- https://bugzilla.yoctoproject.org/show_bug.cgi?id=4196

The description field in the recipe was changed to match the package.

Signed-off-by: mulhern <mulhern@yoctoproject.org>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-08-20 08:39:35 -07:00
mulhern cbacab464c curses-perl: Change description to match package.
[YOCTO #4196] -- https://bugzilla.yoctoproject.org/show_bug.cgi?id=4196

The description field in the recipe was changed to match the package.

Signed-off-by: mulhern <mulhern@yoctoproject.org>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-08-20 08:39:31 -07:00
Andrei Dinu 4f2821cb7b removed rpm dependency on redhat-security
rpm dependency was removed.

https://bugzilla.yoctoproject.org/show_bug.cgi?id=4956

Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com>
2013-08-01 12:16:29 +03:00
Andrei Dinu 9534de459e Added missing functionality to buck-security
* added pinentry recipe needed for buck-security option
 * added missing rdepends to recipe
 * added functionality patch
 * updated README file

Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com>
2013-08-01 10:52:33 +03:00
Andrei Dinu 37a5e5d66f fixed patch name in recipe
Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com>
2013-07-31 11:50:36 +03:00
Andrei Dinu ce5be7fd76 Solved bastille config saving issue
Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com>
2013-07-30 16:47:36 +03:00
Andrei Dinu a76f79b1c6 Fixed redhat-security tools problems
- added libcap-ng needed recipe
 - tweaked the scripts
 - updated README file

Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com>
2013-07-25 16:56:37 +03:00
Saul Wold e1a1986d8e README: Fix Layer Dependencies
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-07-12 11:17:10 -07:00
Saul Wold 4fafb7e614 redhat-security: added file as an RDEPENDS since its used by the scripts
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-07-11 13:43:52 -07:00
Saul Wold f3eb806c54 checksecurity: added coreutils as an RDEPENDS
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-07-11 13:43:27 -07:00
Saul Wold af70e556d3 README: removed coreutils note
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-07-11 13:43:10 -07:00
Saul Wold 94d6ac59be bastille: fix typo
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-07-11 10:41:18 -07:00
Andrei Dinu 2d0c61a39f meta-security-1.0-final
Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com>
2013-07-11 17:37:43 +03:00
Andrei Dinu d54c9d7dad Security layer version 1.0
Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com>
2013-07-10 16:41:44 +03:00
Andrei Dinu f359c35ab2 security layer updated work
Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com>
2013-07-01 16:45:26 +03:00
Andrei Dinu 60d90b2563 meta-security : initial commit
Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com>
2013-06-17 17:24:38 +03:00