Armin Kuster
e2ce1c2f54
tpm2-tss-engine: update to 1.2.0
...
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-11-24 20:15:36 -05:00
Armin Kuster
17a171876f
tpm2-pkcs11: update to 1.9.1
...
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-11-24 20:15:36 -05:00
Armin Kuster
a34dfd210c
tpm2-tss: update to 4.1.3
...
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-11-24 20:15:36 -05:00
Armin Kuster
0055dfe35d
layer.conf: Update to walnascar (5.2) layer/release series
...
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-11-24 20:15:36 -05:00
Anusmita Dutta Mazumder
84d9cd5699
Add styhead LAYERSERIES_COMPAT
...
oe-core has switched to styhead only.
Add layer compatibility to meta-parsec
for styhead.
Signed-off-by: Anusmita Dutta Mazumder <anusmita.duttamazumder@linaro.org >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-09-15 11:29:14 -04:00
Armin Kuster
5e742d7fb0
layer.conf: Update to styhead release name series
...
few more layers to fixup
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-09-15 11:27:10 -04:00
Martin Jansa
594018f8a5
layer.conf: Update to styhead release name series
...
oe-core switched to styhead only in:
https://git.openembedded.org/openembedded-core/commit/?h=styhead&id=b4cf6d5236a3eacaf56ca2f805b006efac65b26c
Signed-off-by: Martin Jansa <martin.jansa@gmail.com >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-09-09 19:36:44 -04:00
Martin Jansa
90e9ae0f48
suricata: run whole autotools_do_configure not just oe_runconf
...
Otherwise Makefile isn't regenerated and do_compile fails with:
suricata/7.0.0/suricata-7.0.0/missing: line 81: aclocal-1.16: command not found
after automake upgrade from 1.16.5 to 1.17 from:
https://git.openembedded.org/openembedded-core/commit/?id=b98328a6ff07119e7ba4f1072090d789e69edef8
Fixes:
CDPATH="${ZSH_VERSION+.}:" && cd . && /bin/bash 'TOPDIR/BUILD/work/mach-distro-linux/suricata/7.0.0/suricata-7.0.0/missing' aclocal-1.16 -I m4
TOPDIR/BUILD/work/mach-distro-linux/suricata/7.0.0/suricata-7.0.0/missing: line 81: aclocal-1.16: command not found
WARNING: 'aclocal-1.16' is missing on your system.
You should only need it if you modified 'acinclude.m4' or
'configure.ac' or m4 files included by 'configure.ac'.
The 'aclocal' program is part of the GNU Automake package:
<https://www.gnu.org/software/automake >
It also requires GNU Autoconf, GNU m4 and Perl in order to run:
<https://www.gnu.org/software/autoconf >
<https://www.gnu.org/software/m4/ >
<https://www.perl.org/ >
make: *** [Makefile:465: aclocal.m4] Error 127
Signed-off-by: Martin Jansa <martin.jansa@gmail.com >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-09-09 19:34:06 -04:00
Chen Qi
baaafdf08b
libgssglue: switch to use git source
...
The 0.8 orig.tar.gz is not in debian mirror any more. In fact, we
really should avoid using orig.tar.gz like this because distros
like debian will just delete those that they don't maintain any more.
Switch to use git source.
Signed-off-by: Chen Qi <Qi.Chen@windriver.com >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-09-09 19:33:20 -04:00
Yi Zhao
83788ca34d
scap-security-guide: upgrade 0.1.73 -> 0.1.74
...
ChangeLog:
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.74
Signed-off-by: Yi Zhao <yi.zhao@windriver.com >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-08-20 13:03:46 -04:00
Yi Zhao
f6bb41ca4a
openscap: upgrade 1.3.10 -> 1.4.0
...
ChangeLog:
https://github.com/OpenSCAP/openscap/releases/tag/1.4.0
Signed-off-by: Yi Zhao <yi.zhao@windriver.com >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-08-20 13:03:42 -04:00
Armin Kuster
fbcaf87ba5
gitlab-ci: minor tweaks to try
...
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-08-10 12:47:10 -04:00
Armin Kuster
f9946faf52
python3-tpm2-pyts: switch to PEP-517 build backend
...
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-08-10 12:43:45 -04:00
Armin Kuster
783c08cb22
switch to PEP-517 build backend
...
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-08-10 12:42:05 -04:00
Armin Kuster
97789e4fad
python3-privacyidea: switch to PEP-517 build backend
...
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-08-10 12:25:35 -04:00
Vijay Anusuri
bc1227d9b9
tpm2-tools: Upgrade 5.5 -> 5.7
...
Include Security fixes:
Fixed CVE-2024-29038
Fixed CVE-2024-29039
Changelog:
https://github.com/tpm2-software/tpm2-tools/releases/tag/5.7
https://github.com/tpm2-software/tpm2-tools/releases/tag/5.6
Signed-off-by: Vijay Anusuri <vanusuri@mvista.com >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-08-06 09:32:51 -04:00
Armin Kuster
c8b633ce70
aide: update to latest stable.
...
address new configure error.
Enable pthread always
mhash is being dropped in the next release so switch to gcrypt for now.
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-08-03 19:30:44 -04:00
Armin Kuster
c08a91e5e6
harden-image-minima: Fix usermod
...
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-31 21:10:13 -04:00
Armin Kuster
d7012a22be
harden/initscripts: UNPACKDIR fix
...
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-31 21:10:13 -04:00
Armin Kuster
03c0e8e03a
ima-policy: Fix S=UNPACKDIR
...
Drop BP , these are files not src bundle
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-31 21:10:13 -04:00
Mikko Rapeli
5a7efe2ed8
ima-policy-simple: set S
...
Build with latest poky fails without it
Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-31 21:10:13 -04:00
Mikko Rapeli
7fd6a97183
ima-policy-appraise-all: set S
...
Build with latest poky requires it
Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-31 21:10:13 -04:00
Mikko Rapeli
bcbe3fd60a
ima-policy-hashed: set S
...
Build with latest poky fails without
Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-31 21:10:13 -04:00
Mikko Rapeli
139d3e6487
ima-policy-simple: UNPACKDIR fix
...
New poky uses UNPACKDIR instead of WORKDIR
Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-31 21:10:13 -04:00
Mikko Rapeli
0edcbd0b82
ima-policy-appraise-all: UNPACKDIR fix
...
New poky uses UNPACKDIR instead of WORKDIR
Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-31 21:10:13 -04:00
Mikko Rapeli
7028cd2266
initramfs-framework-ima: UNPACKDIR fix
...
New poky uses UNPACKDIR instead of WORKDIR
Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-31 21:10:13 -04:00
Armin Kuster
52c381af17
tpm-tools: fix QA and compile errors.
...
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-31 21:10:13 -04:00
Rasmus Villemoes
a2ec4fc275
fail2ban: update to 1.1.0+
...
Current 1.0.2 version does not work with scarthgap or later releases,
as the asynchat module has been removed (as scheduled) from python's
stdlib as of v3.12.
fail2ban 1.1.0 also does not work out-of-the-box, as the distutils
module which the pyinotify and systemd backends depend has also been
removed.
So update the recipe to point at commit ac62658c10f4, which fixes
those two backends to no longer depend on distutils.
Upstream's out-of-the-box ban action now uses the 'nft'
command. People can still override and customize that in
jail.conf/jail.local, but to make the recipe useful without
customizing things back to use iptables, change the dependency
iptables->nftables.
Since 1.1.0, fail2ban has been python3-only, so the recipe becomes
somewhat simpler since the whole do_compile preparation step can be
removed.
Signed-off-by: Rasmus Villemoes <rasmus.villemoes@prevas.dk >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-31 21:10:05 -04:00
Armin Kuster
db91051c6a
chipsec: Fix QA Warnings
...
ERROR: chipsec-1.9.1-r0 do_package_qa: QA Issue: File /usr/lib/python3.12/site-packages/chipsec/helper/linux/chipsec.ko in package chipsec contains reference to TMPDIR [buildpaths]
ERROR: chipsec-1.9.1-r0 do_package_qa: QA Issue: File /usr/lib/python3.12/site-packages/chipsec/helper/linux/.debug/chipsec.ko in package chipsec-dbg contains reference to TMPDIR [buildpaths]
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-29 20:07:01 -04:00
Mikko Rapeli
f261a2b95a
bastille: UNPACKDIR fixes
...
New poky version uses UNPACKDIR instead of WORKDIR
Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-29 20:07:01 -04:00
Mikko Rapeli
58daab21b7
parsec-service: UNPACKDIR fixes
...
New poky uses UNPACKDIR instead of WORKDIR
Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-29 20:07:01 -04:00
Armin Kuster
24da916254
arpwatch: Fix compile error
...
| ./dns.c:118:24: error: implicit declaration of function '_getshort'; did you mean '__putshort'? [-Wimplicit-function-declaration]
upon others
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-29 20:07:01 -04:00
Armin Kuster
2e21e54812
isic: Fix config error
...
configure: error: installation or configuration problem: C compiler cannot create executables.
| NOTE: The following config.log files may provide further information.
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-29 20:07:01 -04:00
Armin Kuster
c0e3fecc3b
suricata: fix QA warnings
...
ERROR: suricata-7.0.0-r0 do_package: QA Issue: File '/usr/bin/suricata' from suricata was already stripped, this will prevent future debugging! [already-stripped]
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-29 20:07:01 -04:00
Armin Kuster
2aa07876ba
krill: Fix QA warnings
...
ERROR: krill-0.12.3-r0 do_package_qa: QA Issue: File /usr/bin/.debug/krill in package krill-dbg contains reference to TMPDIR
File /usr/bin/.debug/krillc in package krill-dbg contains reference to TMPDIR
File /usr/bin/.debug/krillup in package krill-dbg contains reference to TMPDIR [buildpaths]
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-29 20:07:01 -04:00
Armin Kuster
fce3cf312d
python3-fail2ban: convert WORKDIR->UNPACKDIR
...
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-29 20:07:01 -04:00
Armin Kuster
9d38b8754f
apparmor: fix QA Warnings
...
RROR: apparmor-3.1.3-r0 do_package_qa: QA Issue: File /usr/src/debug/apparmor/3.1.3/libraries/libapparmor/swig/perl/libapparmor_wrap.c in package apparmor-src contains reference to TMPDIR [buildpaths]
ERROR: apparmor-3.1.3-r0 do_package_qa: QA Issue: File /usr/lib/python3.12/site-packages/LibAppArmor/.debug/_LibAppArmor.cpython-312-aarch64-linux-gnu.so in package apparmor-dbg contains reference to TMPDIR [buildpaths]
ERROR: apparmor-3.1.3-r0 do_package_qa: QA Issue: File /usr/lib/perl5/vendor_perl/5.38.2/aarch64-linux/auto/LibAppArmor/.packlist in package apparmor contains reference to TMPDIR [buildpaths]
ERROR: apparmor-3.1.3-r0 do_package_qa: Fatal QA errors were found, failing task.
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-29 20:07:01 -04:00
Hitendra Prajapati
ecdd682b92
sssd: Fix CVE-2023-3758
...
A race condition flaw was found in sssd where the GPO policy is
not consistently applied for authenticated users. This may lead
to improper authorization issues, granting or denying access to
resources inappropriately.
References:
https://nvd.nist.gov/vuln/detail/CVE-2023-3758
Upstream-patch:
f4ebe1408ehprajapati@mvista.com >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-29 20:07:01 -04:00
Mikko Rapeli
8d50defcdf
python3-tpm2-pytss: update from 2.1.0 to 2.3.0
...
Upstream changlog shows that python 3.12 support
was added/fixed in version 2.2.0:
https://github.com/tpm2-software/tpm2-pytss/blob/master/CHANGELOG.md
To fix build error:
| DEBUG: Executing python function autotools_aclocals
| DEBUG: SITE files ['endian-little', 'bit-64', 'arm-common', 'arm-64', 'common-linux', 'common-glibc', 'aarch64-linux', 'common']
| DEBUG: Python function autotools_aclocals finished
| DEBUG: Executing shell function do_compile
| /home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/recipe-sysroot-native/usr/lib/python3.12/site-packages/setuptools/__init__.py:80: _DeprecatedInstaller: setuptools.installer and fetch_build_eggs are deprecated.
| !!
|
| ********************************************************************************
| Requirements should be satisfied by a PEP 517 installer.
| If you are using pip, you can try `pip install --use-pep517`.
| ********************************************************************************
|
| !!
| dist.fetch_build_eggs(dist.setup_requires)
| /home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/tpm2-pytss-2.1.0/scripts/prepare_headers.py:27: SyntaxWarning: invalid escape sequence '\('
| s = re.sub("#define TSS2_RC_LAYER\(level\).*", "", s)
| /home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/tpm2-pytss-2.1.0/scripts/prepare_headers.py:28: SyntaxWarning: invalid escape sequence '\('
| s = re.sub("(#define.*)TSS2_RC_LAYER\(0xff\)", "\g<1>0xff0000", s)
| /home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/tpm2-pytss-2.1.0/scripts/prepare_headers.py:28: SyntaxWarning: invalid escape sequence '\g'
| s = re.sub("(#define.*)TSS2_RC_LAYER\(0xff\)", "\g<1>0xff0000", s)
| /home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/tpm2-pytss-2.1.0/scripts/prepare_headers.py:31: SyntaxWarning: invalid escape sequence '\*'
| s = re.sub("/\*.*?\*/", "", s, flags=re.MULTILINE)
| /home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/tpm2-pytss-2.1.0/scripts/prepare_headers.py:34: SyntaxWarning: invalid escape sequence '\('
| s = re.sub("(#define [A-Za-z0-9_]+) +\(\(.*?\) \(.*?\)\)", "\g<1>...", s)
| /home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/tpm2-pytss-2.1.0/scripts/prepare_headers.py:34: SyntaxWarning: invalid escape sequence '\g'
| s = re.sub("(#define [A-Za-z0-9_]+) +\(\(.*?\) \(.*?\)\)", "\g<1>...", s)
| /home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/tpm2-pytss-2.1.0/scripts/prepare_headers.py:35: SyntaxWarning: invalid escape sequence '\('
| s = re.sub("(#define [A-Za-z0-9_]+) +\(\(.*?\).*?\) ", "\g<1>...", s)
| /home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/tpm2-pytss-2.1.0/scripts/prepare_headers.py:35: SyntaxWarning: invalid escape sequence '\g'
| s = re.sub("(#define [A-Za-z0-9_]+) +\(\(.*?\).*?\) ", "\g<1>...", s)
| /home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/tpm2-pytss-2.1.0/scripts/prepare_headers.py:37: SyntaxWarning: invalid escape sequence '\)'
| "(#define [A-Za-z0-9_]+) .*\n.*?.*\)\)", "\g<1>...", s, flags=re.MULTILINE
| /home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/tpm2-pytss-2.1.0/scripts/prepare_headers.py:37: SyntaxWarning: invalid escape sequence '\g'
| "(#define [A-Za-z0-9_]+) .*\n.*?.*\)\)", "\g<1>...", s, flags=re.MULTILINE
| /home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/tpm2-pytss-2.1.0/scripts/prepare_headers.py:39: SyntaxWarning: invalid escape sequence '\g'
| s = re.sub("(#define [A-Za-z0-9_]+) .*", "\g<1>...", s)
| /home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/tpm2-pytss-2.1.0/scripts/prepare_headers.py:42: SyntaxWarning: invalid escape sequence '\['
| s = re.sub("\[.+?\]", "[...]", s)
| /home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/tpm2-pytss-2.1.0/scripts/prepare_headers.py:77: SyntaxWarning: invalid escape sequence '\)'
| "#define TPM2_MAX_TAGGED_POLICIES.*\n.*TPMS_TAGGED_POLICY\)\)",
| /home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/tpm2-pytss-2.1.0/scripts/prepare_headers.py:262: SyntaxWarning: invalid escape sequence '\s'
| "TSS2_RC\s+Tss2_MU_BYTE_Marshal\(.+?\);", s, re.DOTALL | re.MULTILINE
| /home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/tpm2-pytss-2.1.0/scripts/prepare_headers.py:266: SyntaxWarning: invalid escape sequence '\s'
| "TSS2_RC\s+Tss2_MU_BYTE_Marshal\(.+?\);", "", s, 1, re.DOTALL | re.MULTILINE
| /home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/tpm2-pytss-2.1.0/scripts/prepare_headers.py:270: SyntaxWarning: invalid escape sequence '\s'
| "TSS2_RC\s+Tss2_MU_BYTE_Unmarshal\(.+?\);", s, re.DOTALL | re.MULTILINE
| /home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/tpm2-pytss-2.1.0/scripts/prepare_headers.py:274: SyntaxWarning: invalid escape sequence '\s'
| "TSS2_RC\s+Tss2_MU_BYTE_Unmarshal\(.+?\);",
| adding path: /home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/tpm2-pytss-2.1.0/scripts
| Traceback (most recent call last):
| File "/home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/tpm2-pytss-2.1.0/setup.py", line 280, in <module>
| setup(
| File "/home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/recipe-sysroot-native/usr/lib/python3.12/site-packages/setuptools/__init__.py", line 103, in setup
| return distutils.core.setup(**attrs)
| ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
| File "/home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/recipe-sysroot-native/usr/lib/python3.12/site-packages/setuptools/_distutils/core.py", line 146, in setup
| _setup_distribution = dist = klass(attrs)
| ^^^^^^^^^^^^
| File "/home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/recipe-sysroot-native/usr/lib/python3.12/site-packages/setuptools/dist.py", line 307, in __init__
| _Distribution.__init__(self, dist_attrs)
| File "/home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/recipe-sysroot-native/usr/lib/python3.12/site-packages/setuptools/_distutils/dist.py", line 286, in __init__
| self.finalize_options()
| File "/home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/recipe-sysroot-native/usr/lib/python3.12/site-packages/setuptools/dist.py", line 659, in finalize_options
| ep(self)
| File "/home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/recipe-sysroot-native/usr/lib/python3.12/site-packages/setuptools/dist.py", line 679, in _finalize_setup_keywords
| ep.load()(self, ep.name, value)
| File "/home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/recipe-sysroot-native/usr/lib/python3.12/site-packages/cffi/setuptools_ext.py", line 216, in cffi_modules
| add_cffi_module(dist, cffi_module)
| File "/home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/recipe-sysroot-native/usr/lib/python3.12/site-packages/cffi/setuptools_ext.py", line 49, in add_cffi_module
| execfile(build_file_name, mod_vars)
| File "/home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/recipe-sysroot-native/usr/lib/python3.12/site-packages/cffi/setuptools_ext.py", line 25, in execfile
| exec(code, glob, glob)
| File "scripts/libtss2_build.py", line 69, in <module>
| ffibuilder.cdef(open("libesys.h").read())
| File "/home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/recipe-sysroot-native/usr/lib/python3.12/site-packages/cffi/api.py", line 112, in cdef
| self._cdef(csource, override=override, packed=packed, pack=pack)
| File "/home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/recipe-sysroot-native/usr/lib/python3.12/site-packages/cffi/api.py", line 126, in _cdef
| self._parser.parse(csource, override=override, **options)
| File "/home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/recipe-sysroot-native/usr/lib/python3.12/site-packages/cffi/cparser.py", line 389, in parse
| self._internal_parse(csource)
| File "/home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/recipe-sysroot-native/usr/lib/python3.12/site-packages/cffi/cparser.py", line 396, in _internal_parse
| self._process_macros(macros)
| File "/home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/recipe-sysroot-native/usr/lib/python3.12/site-packages/cffi/cparser.py", line 479, in _process_macros
| raise CDefError(
| cffi.CDefError: only supports one of the following syntax:
| #define TPM2_HR_PCR ... (literally dot-dot-dot)
| #define TPM2_HR_PCR NUMBER (with NUMBER an integer constant, decimal/hex/octal)
| got:
| #define TPM2_HR_PCR ...<< TPM2_HR_SHIFT)
| ERROR: 'python3 setup.py build ' execution failed.
| WARNING: /home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/temp/run.do_compile.2430604:190 exit 1 from 'exit 1'
| WARNING: Backtrace (BB generated script):
| #1 : bbfatal_log, /home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/temp/run.do_compile.2430604, line 190
| #2 : setuptools3_legacy_do_compile, /home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/temp/run.do_compile.2430604, line 180
| #3 : do_compile, /home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/temp/run.do_compile.2430604, line 162
| #4 : main, /home/builder/src/base/build/tmp_trs-qemuarm64/work/cortexa57-trs-linux/python3-tpm2-pytss/2.1.0/temp/run.do_compile.2430604, line 194
NOTE: recipe python3-tpm2-pytss-2.1.0-r0: task do_compile: Failed
ERROR: Task (/home/builder/src/base/build/../meta-security/meta-tpm/recipes-tpm2/tpm2-pytss/python3-tpm2-pytss_2.1.0.bb:do_compile) failed with exit code '1'
Signed-off-by: Mikko Rapeli <mikko.rapeli@linaro.org >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-29 20:07:01 -04:00
Armin Kuster
ca10975033
recipes-*: convert WORKDIR->UNPACKDIR
...
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-29 20:07:01 -04:00
Siddharth Doshi
f0deac3787
Suricata: Security Fix for CVE-2024-37151, CVE-2024-38534, CVE-2024-38535, CVE-2024-38536
...
Upstream-Status: Backport from [aab7f35c76a753cdbe84c82fa5ca0d2bd3bd0e31sdoshi@mvista.com >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-29 20:07:01 -04:00
Wang Mingyu
6880ab150e
trousers: Start WORKDIR -> UNPACKDIR transition
...
Replace references of WORKDIR with UNPACKDIR where it makes sense to do so in preparation for changing the default value of UNPACKDIR.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-29 20:07:01 -04:00
Yi Zhao
61f2428158
openscap: fix PACKAGECONFIG[remediate_service]
...
* Fix typo: remdediate_service -> remediate_service
* No need to manually install oscap-remediate.service, as it is already
installed when ENABLE_OSCAP_REMEDIATE_SERVICE=ON is set.
* Add a patch to fix installation directory for systemd service file.
Signed-off-by: Yi Zhao <yi.zhao@windriver.com >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-01 07:07:58 -04:00
Ricardo Salveti
5f5e00ec4e
tpm2-tss: drop libgcrypt
...
Upstream removed gcrypt backend as part of the 3.0.0 release
(https://github.com/tpm2-software/tpm2-tss/pull/1781 ), but it was not
removed from the recipe during the update.
Signed-off-by: Ricardo Salveti <ricardo@foundries.io >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-01 07:07:58 -04:00
Stefan Berger
37e5a930d7
meta-integrity: Enable passing private key password
...
Allow users to pass the private key password using
IMA_EVM_EVMCTL_KEY_PASSWORD.
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-01 07:07:58 -04:00
Stefan Berger
06bd46276f
meta-integrity: Add IMA_EVM_PRIVKEY_KEY_OPT to pass options to evmctl
...
Introduce IMA_EVM_PRIVKEY_KEY_OPT to pass additional options to evmctl
when signing files. An example is --keyid <id> that makes evmctl use
a specific key id when signing files.
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-01 07:07:58 -04:00
Stefan Berger
d2d125de92
meta-integrity: Remove stale variables and documentation
...
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-01 07:07:58 -04:00
Martin Jansa
81d5a6edc7
README.md: fix sendemail.to value
...
* other places were updated to use yocto-patches, but not this one
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-01 07:07:58 -04:00
Martin Jansa
e674c91b65
{tcp,udp}-smack-test: fix few more implicit-function-declaration issues fatal with gcc-14
...
tcp-smack-test:
tcp_server.c: In function 'main':
tcp_server.c:50:16: error: implicit declaration of function 'atoi' [-Wimplicit-function-declaration]
50 | port = atoi(argv[1]);
| ^~~~
tcp_server.c:62:12: error: implicit declaration of function 'fsetxattr' [-Wimplicit-function-declaration]
62 | if(fsetxattr(sock, attr_in, label_in, strlen(label_in),0) < 0)
| ^~~~~~~~~
udp-smack-test:
udp_client.c: In function 'main':
udp_client.c:52:12: error: implicit declaration of function 'fsetxattr' [-Wimplicit-function-declaration]
52 | if(fsetxattr(sock, attr, label, strlen(label),0) < 0)
| ^~~~~~~~~
udp_client.c:67:9: error: implicit declaration of function 'close'; did you mean 'pclose'? [-Wimplicit-function-declaration]
67 | close(sock);
| ^~~~~
| pclose
udp_server.c: In function 'main':
udp_server.c:42:16: error: implicit declaration of function 'atoi' [-Wimplicit-function-declaration]
42 | port = atoi(argv[1]);
| ^~~~
udp_server.c:57:12: error: implicit declaration of function 'fsetxattr' [-Wimplicit-function-declaration]
57 | if(fsetxattr(sock, attr, label, strlen(label), 0) < 0)
| ^~~~~~~~~
udp_server.c:84:9: error: implicit declaration of function 'close'; did you mean 'pclose'? [-Wimplicit-function-declaration]
84 | close(sock);
| ^~~~~
| pclose
Signed-off-by: Martin Jansa <martin.jansa@gmail.com >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-07-01 07:07:49 -04:00
Wang Mingyu
abfa203aa6
suricata: Start WORKDIR -> UNPACKDIR transition
...
Replace references of WORKDIR with UNPACKDIR where it makes sense to do so in preparation for changing the default value of UNPACKDIR.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com >
Signed-off-by: Armin Kuster <akuster808@gmail.com >
2024-06-17 08:29:11 -04:00
