Commit Graph

148 Commits

Author SHA1 Message Date
Armin Kuster
a7ae942a5d nmap: fix several new QA warnings.
WARNING: nmap-7.12-r0 do_package: QA Issue: nmap: Files/directories were installed but not shipped in any package:
  /usr/lib
  /usr/bin/ndiff
  /usr/bin/nping
  /usr/bin/ncat
  /usr/lib/python2.7
  /usr/lib/python2.7/site-packages
  /usr/lib/python2.7/site-packages/ndiff.pyc
  /usr/lib/python2.7/site-packages/ndiff.py
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
nmap: 8 installed and not shipped files. [installed-vs-shipped]

remove crazyness and let the system figure out packaging info
remove ndiff.py* as the compiled version is installed in /usr/bin
  and remove the leftover python site-package cruft.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
2016-06-26 11:51:41 -07:00
Lei Maohui
05e71050f0 samhain: Avoid empty source archiver
It is better to put necessary work into do_patch task than add a new task.
Otherwise,you can not get correct source code in some functions(such as archiver.bbclass).

Signed-off-by: Lei Maohui <leimaohui@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
2016-06-26 11:50:57 -07:00
Armin Kuster
d1e8ef4b29 tpm-tools: add package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-23 08:03:42 -07:00
Armin Kuster
f2f70c2de9 trousers: add package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-23 08:03:42 -07:00
Armin Kuster
ae256956d8 sssd: add new package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-23 08:03:42 -07:00
Armin Kuster
b27f894dc9 libdhash: add package
required by sssd

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-23 08:03:42 -07:00
Armin Kuster
6636db9dcd clamav: fix lib version mismatch
drop lib version in package name
drop insane and remove broken symlink
Use LEAD_SONAME
Don't hard code lib version in tasks
Use native chrpath not the host provided version

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-23 08:03:09 -07:00
Armin Kuster
73f384257d clamav: update to 0.99.1
removed debian patches
brut force remove rpaths

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-23 08:02:56 -07:00
Armin Kuster
d3ec54611d suricata: update package to 3.0.1
- fixes for multiple stability issues
- many memory leak fixes
- Hyperscan MPM support (experimental)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-23 08:02:48 -07:00
Armin Kuster
6b96adf479 nmap: update to 7.12
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-23 08:02:42 -07:00
Armin Kuster
f6aaf45604 paxctl: fix compile issue.
use CC from build not host via EXTRA_OEMAKE

thanks khem

this fixes the below error.
WARNING: paxctl-0.9-r0 do_package_qa: QA Issue: /sbin/paxctl contained in package paxctl requires libc.so.6(GLIBC_2.3.4)(64bit), but no providers found in RDEPENDS_paxctl? [file-rdeps]

minor recipe cleanup

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-11 07:31:28 -07:00
Armin Kuster
edb340e81d nmap: update to 7.11
https://nmap.org/changelog.html

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-04-11 07:31:28 -07:00
Li Xin
e55b217bfa samhain-client: Erorr Fix
The Error is as following:
 # /usr/sbin/samhain -t init -p info
 ......
 Segmentation fault
 # echo $?
 139

Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-03-14 12:52:45 -07:00
Armin Kuster
ab117a8642 tripwire: Fix build issue for armeb
add config parama for armeb

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-03-14 12:52:45 -07:00
Armin Kuster
162653fd27 suricata: update to 3.0
removed patch no longer needded.
LIC_FILES_CHKSUM changed do to copyright date updates.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-03-14 12:52:45 -07:00
Armin Kuster
86ae983fb2 nmap: update to version 7.0.1
fixed WARNING: QA Issue: /usr/bin/ndiff_nmap contained in package nmap requires /usr/bin/python2.7, but no providers found in its RDEPENDS [file-rdeps]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-03-14 12:52:32 -07:00
Thomas Perrot
631693cc76 linux-yocto_3.14: remove bbappend from master
Remove recipe for the kernel 3.14 from master branch, to fix a build error.
ERROR: No recipes available for: meta-security/recipes-kernel/linux/linux-yocto_3.14.bbappend

Signed-off-by: Thomas Perrot <thomas.perrot@tupi.fr>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-17 15:38:42 -08:00
Armin Kuster
40741acf5c suricata: package update to 2.0.11
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-17 15:38:19 -08:00
Armin Kuster
f776c61311 samhain-client: update to 4.1.2
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-17 15:38:19 -08:00
Armin Kuster
623f5ed922 Samhain: package update to 4.1.2
4.1.1 Changes:
 - Fix for broken libwrap support.
 - Fix for broken baseline update (-t update) on FreeBSD and maybe other non GNU/Linux systems.
 - Fix for ungraceful handling of rotated logiles if logfile content is always zero or constant.
 - Fix for timezone offset calculation on month rollover for timezones west of GMT.

4.1.2 Changes:
 - Fix for broken rpm / rpm-light makefile targets.
 - Fix for the failure to detect open UDP ports sometimes.
 - Fix for reporting file changes with the wrong policy if both inotify is
   used and the file change occurs during a configuration reload.
 - New configure options --enable-posix-acl and --enable-selinux to turn the
   soft failure (no support for checking compiled in) into a hard failure
   if required headers/libraries are missing for this feature.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-17 15:38:19 -08:00
Armin Kuster
9eba881355 nmap: package update to 7.0
removed integrated patch
Changed LIC_FILES_CHKSUM from generic OE to a file within the package
sources.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-01-17 15:37:58 -08:00
Armin Kuster
41bac8038a suricata: update to version 2.0.9
Changes

Bug #1558: stream: retransmission not detected (2.0.x)
Bug #1550: Segmentation Fault at detect-engine-content-inspection.c:438
Bug #1564: defrag: evasion issue
Bug #1431: stream: last_ack update issue leading to stream gaps (2.0.x)
Bug #1483: 2.0.x backport: Leading whitespace in flowbits variable names
Bug #1490: http_host payload validation erroring on uppercase PCRE
metacharacters
Bug #1501: 2.0.x backport: Add HUP coverage to output json-log
Bug #1510: 2.0.x: address var parsing issue
Bug #1513: stream_size <= and >= modifiers function as < and > (equality
is not functional) (2.0.x)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-30 11:59:06 -07:00
Armin Kuster
81d33f70de libhtp: update to version 0.5.18
Changes

This is a minor bug-fix release:

- Fixed [#120] Trigger request line parsing on
incomplete request [Victor Julien]

- Fixed [#119] Fix uninitialized htp_tx_t::is_last value
in in htp_tx_res_process_body_data_ex() [Fedor Sakharov]

- Fixed [#118] Coverity-identified missing break in switch [Sam Baskinger]

- Fixed [#117] Coverity-identified issue of not checking
malloc() return value [Sam Baskinger]

- Fixed [#116] Fix coverity-identified leaked file descriptors
in unit test [Sam Baskinger]

- Fixed [#113] fix pkgconfig include dir [Eric Leblond]

- Fixed [#111] Connect plain http [Victor Julien]

- Fixed [#105] Do not invoke callbacks in htp_req_run_hook_body_data()
when there is no tx running. [Sam Baskinger]

- Fixed [#104] Modifiying HTTP methods to be rfc3253 compliant [Andreas Moe]

- Fixed [#103] Fixes [Victor Julien]

- Fixed [#101] Make including the autoconf config header safer [Brian Rectanus]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-30 11:58:58 -07:00
Armin Kuster
e3e0178af6 ccs-tools: update to 1.8.4
change LIC_CHKSUM to COPYING.css where the license statement resides.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-30 11:56:43 -07:00
Armin Kuster
b0c1edfe23 ccs-patch: Add ccs kernel patches
add 4.1 kernel support for css

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-30 11:56:30 -07:00
Li Xin
36feac0d9d Fix an error when samhain -t check
Fixes an error when "samhain -t check" is executed.
The error is like this:
'ERROR: msg=<Record with bad version number in file signature database>,
subroutine=<sh_dbIO_getdataent>, path=<(null)>'

Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-30 11:56:15 -07:00
Armin Kuster
d539506f78 samhain: update to 4.1.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-30 11:55:52 -07:00
Ioan-Adrian Ratiu
b7ceefc96d clamav: Update source mirror
The source archive was deleted from the debian mirror; get it from
launchpad for now

Signed-off-by: Ioan-Adrian Ratiu <adrian.ratiu@ni.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-08 07:25:08 -07:00
Armin Kuster
bd30c8d843 nmap: fix build issue.
ncat/ncat_lua.c:174: undefined reference to `lua_remove'

ncat/ncat_lua.c:167: undefined reference to `lua_insert'

use internal lua support

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-08 07:08:47 -07:00
Armin Kuster
e16a42bf6b libseccomp: update to latest
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-08 07:08:36 -07:00
Jagadeesh Krishnanjanappa
5690552103 paxctl: add new recipe
paxctl  is  a tool that allows PaX flags to be modified on a per-binary
basis.  PaX is part of common  security-enhancing  kernel  patches  and
secure distributions, such as GrSecurity or Adamantix and Hardened Gen-
too, respectively.  Your system needs to be running a properly  patched
and configured kernel for this program to have any effect.

Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com>
Signed-off-by: Jeremy Puhlman <jpuhlman@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-08 07:08:27 -07:00
Armin Kuster
e3f2b3ba8c samhain-client: update to 4.0.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-10-08 07:08:19 -07:00
Haris Okanovic
6cdf3402be tripwire: Fix path to nano in default twcfg.txt
Nano is installed under /usr/bin/, not /bin/.

Installed Tripwire on a Fido image and successfully ran
`tripwire --update` to invoke text editor.

Signed-off-by: Haris Okanovic <haris.okanovic@ni.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-31 15:41:17 -07:00
Thomas Perrot
5ec82eccd8 Corrects a typing error.
Signed-off-by: Thomas Perrot <thomas.perrot@tupi.fr>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-08-11 15:06:59 +05:30
Bian Naimeng
7ce4069b32 samhain-server: fix build warn
WARNING: QA Issue: /etc/init.d/samhain-server_samhain-server contained in package samhain-server requires /bin/bash, but no providers found in its RDEPENDS [file-rdeps]

Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-07-20 16:25:42 -07:00
Armin Kuster
8f9b5f3f52 afflib: fix new build issue
cleanup PACKAGECONFIG

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-07-20 16:25:18 -07:00
Armin Kuster
fad79e6fe8 libewf: update hashs
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-06-25 07:16:17 -07:00
Armin Kuster
c4b6269ec7 scapy: add new package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-06-25 07:16:05 -07:00
Armin Kuster
da6d34655d python-pycrypto: add new package
adding crypto package for use by scampy.

I will remove once it is moved to meta-python

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-06-25 07:16:05 -07:00
Armin Kuster
e257382625 aircrack-ng: add new package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-06-25 07:16:05 -07:00
Armin Kuster
c01a103d27 libewf: update to version 20140608
drop ubuntu patches, never used them.

Fix GCC 5.0 build.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-06-25 07:16:05 -07:00
Armin Kuster
3f95047ae1 suricata: package update to 2.0.8
includes security fix CVE-2015-0971

include nss and nspr to build

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-06-25 07:16:05 -07:00
Armin Kuster
58869bea59 libhtp: update to use suricata 2.0.8
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-06-25 07:16:05 -07:00
Armin Kuster
421fe3c081 suricata: Fix QA warnings
WARNING: QA Issue: suricata rdepends on nspr, but it isn't a build dependency? [build-deps]
WARNING: QA Issue: suricata rdepends on nss, but it isn't a build dependency? [build-deps]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-05-10 20:52:39 -07:00
Armin Kuster
58096a9c97 libseccomp: add tests
update busybox for extend head option for test suite
remove seq -f option as it is not supported buy busybox

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-04-15 17:54:40 -07:00
Armin Kuster
43fd825acf libseccomp: add ppc support
backport ppc patches

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-04-15 17:54:37 -07:00
Armin Kuster
af8473501a samhain: update client and server to 3.1.5
Signed-off-by: Armin Kuster <akuster808@gmail.com>

fix missing bash depends in server recipe
2015-04-15 17:54:34 -07:00
Hugo Vasconcelos Saldanha
070ccbb476 clamav: fix ncurses configure option
Signed-off-by: Hugo Vasconcelos Saldanha <hugo.saldanha@aker.com.br>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-04-09 18:13:51 -07:00
Hugo Vasconcelos Saldanha
8090e1bf2f libmspack: update to version 0.5
SRC_URI to version 0.4 was broken.

Signed-off-by: Hugo Vasconcelos Saldanha <hugo.saldanha@aker.com.br>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-04-09 18:13:51 -07:00
Armin Kuster
b0873e2939 suricata: update to 2.0.7
this includes CVE-2015-0928

moved patches and files to more generic dir name

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2015-03-20 09:54:14 -07:00