Commit Graph

335 Commits

Author SHA1 Message Date
Yi Zhao f4293d9fe8 xmlsec1: refresh patches to fix QA warning
Refresh patches with devtool command.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13 08:18:36 -07:00
Armin Kuster f1e482a498 meta-*: add LAYERSERIES_COMPAT to layer.conf files
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13 08:18:28 -07:00
Jackie Huang 8f6969a775 samhain-server: do not extend to native
No packages depend on samhain-server-native and it doesn't
make sense to extend a server package to native, so remove
the BBCLASSEXTEND.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-31 11:50:13 -07:00
Jagadeesh Krishnanjanappa 58c23b4787 clamav: Add missing clamav.service file to SRC_URI
This solves the below error when systemd is used as init manager,
-- snip --
ERROR: clamav-0.99.2-r0 do_package: SYSTEMD_SERVICE_clamav value clamav.service does not exist
ERROR: clamav-0.99.2-r0 do_package: Function failed: systemd_populate_packages
-- snip --

Other issue:
*  Ship /lib/systemd/system/clamav-freshclam.service into ${PN}-freshclam
   package, to solve below warning:
-- snip --
[10240] WARNING: QA Issue: clamav: Files/directories were installed but not shipped in any package:
  /lib/systemd/system/clamav-freshclam.service
-- snip --

Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-31 11:50:13 -07:00
Jackie Huang 7ac11e2274 xmlsec1: fix a typo in examples/verify3.c
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-31 11:50:07 -07:00
Armin Kuster ab8d219c43 linux-yocto: move to wildcard on bbappend
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-18 19:31:59 -08:00
Armin Kuster f5c93d5f73 linux-yocto: drop dangling dir
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-18 19:31:59 -08:00
Armin Kuster 30b911b282 linux-stable: drop old versions no longer in core
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-18 19:31:59 -08:00
Armin Kuster b31e6a9ed4 google-authenticator-libpam: add new package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-18 19:31:59 -08:00
Armin Kuster b890929335 yocto-linux/4.9: fix typo in filepath
fix idea submitted but Derek Betker <derek.betker@ge.com>

[Yocto 12134]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-18 19:31:53 -08:00
Jagadeesh Krishnanjanappa f2c765ea98 trousers: fix to ship leftover files into packages
While building <mlib>-trousers recipe, the below files are
not shipped but has been installed. The patch packages them
accordingly.

-- snip --
WARNING: lib32-trousers-0.3.14+gitAUTOINC+4b9a70d578-r0 do_package: QA Issue: lib32-trousers: Files/directories were installed but not shipped in any package:
  /usr/src
  /usr/src/debug
  /usr/src/debug/lib32-trousers
  /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0
  /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/git
  /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/git/src
  /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/git/src/tcs
  /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/git/src/trspi
  /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/git/src/tcsd
  /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/git/src/tspi
  /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/git/src/include
  /usr/src/debug/lib32-trousers/0.3.14+gitAUTOINC+4b9a70d578-r0/git/src/tddl
-- snip --

Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-17 09:42:58 -08:00
Armin Kuster a5400486f5 tpm2.0-tss: update to 1.3.0
change recipe to PV style

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14 11:56:35 -08:00
Armin Kuster 22976cccb7 tpm2-abrmd: update to 1.2.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14 11:56:35 -08:00
Armin Kuster 7536fd9871 tpm2simulator: update to 138
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14 11:56:35 -08:00
Armin Kuster f4e950c03b clamav: update to 0.99.3
removed unused hash checksums

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14 11:56:35 -08:00
Armin Kuster 9e26f1307e freediameter: remove package
resides in meta-networking now

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14 11:56:35 -08:00
Armin Kuster 064b9321e6 xmlsec1: Update to 1.2.25
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14 11:56:35 -08:00
Armin Kuster 9cdde3cc46 fail2ban: update to 0.10.2
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14 11:56:35 -08:00
Armin Kuster db41118438 smack: update to 1.3.1
drop git hash from PV
Use master branch

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14 11:56:35 -08:00
Armin Kuster 195ca4f48e sssd: update to 1.16.0
update some PACKAGECONFIG changes

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14 11:56:35 -08:00
Armin Kuster 62803a0ecc scapy: update to 2.3.3
Drop patch included in update.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14 11:56:35 -08:00
Armin Kuster 181d03751a tripwire: Update to 2.4.3.6
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14 11:56:35 -08:00
Armin Kuster 1163dcc00b libseccomp: update to 2.3.3
Drop git PV for bb reciped PV.

supports 4.15 kernel

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-14 11:56:29 -08:00
José Bollo aedbec5ea3 xmlsec1: Allow native builds
When used in native builds, the variable STAGING_DIR_HOST expands
to the empty string. This leads 'sed' to an error because the pattern
is empty. Using STAGING_DIR instead of STAGING_DIR_HOST allows
to use xmlsec1 in native builds with the correct behaviour.

Change-Id: I55f40ac2413863c489d4219e0080f7e4e274a6db
Signed-off-by: José Bollo <jose.bollo@iot.bzh>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-06 21:16:55 +05:30
Robert Yang 3963c388a3 conf/layer.conf: remove bbclass from BBFILES
Add bbclass to BBFILES doesn't make any sense.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-02-06 21:16:48 +05:30
Patrick Ohly 16812dac96 swtpm/libtpm: update to latest master
This allows dropping some patches for issues that were addressed
upstream. It also brings in support for connecting swtpm to qemu
without relying on CUSE.

Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-12-10 15:03:55 -08:00
Mingli Yu d95d99386c samhain: remove the path for start-stop-daemon
Remove the absolute path for start-stop-daemon
to fix samhain start-up as start-stop-daemon
sometimes located in /usr/sbin, not the expected
/sbin.

Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-12-10 15:03:55 -08:00
Armin Kuster 694ab819bc openscap: fix build issue
core2-64-oe-linux/openscap/1.2.15-r0/git/src/.libs/libopenscap.so: error: undefined reference to 'dlopen'
| core2-64-oe-linux/openscap/1.2.15-r0/git/src/.libs/libopenscap.so: error: undefined reference to 'dlsym'
| core2-64-oe-linux/openscap/1.2.15-r0/git/src/.libs/libopenscap.so: error: undefined reference to 'dlerror'
| core2-64-oe-linux/openscap/1.2.15-r0/git/src/.libs/libopenscap.so: error: undefined reference to 'dlclose'

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-12-10 15:03:46 -08:00
André Draszik 756f65f0f8 trousers: allow overriding localstatedir mandir sysconfdir
It is currently impossible to override localstatedir,
mandir and sysconfdir during ./configure, because they
are being overriden unconditionally.

With this patch it is now possible to set above
locations as needed.

Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-11-06 12:17:50 -08:00
André Draszik fc75466e0b trousers: make initscript more reliable
The combination of using start-stop-daemon and pidof is
not working reliably in all cases. Sometimes, the
tcsd daemon isn't running yet at the time pidof is being
invoked.

This results in an empty /var/run/tcsd.pid, making it
impossible to stop tcsd using the init script.

To solve this, one could either add a delay before calling
pidof, or alternatively use start-stop-daemon's built-in
functionality to achieve the same.

Let's do the latter.

Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-11-06 12:17:42 -08:00
André Draszik de48d57a7f fscryptctl: add v0.1.0
fscryptctl is a low-level tool written in C that handles
raw keys and manages policies for Linux filesystem
encryption [1].

For a tool that presents a higher level interface and
manages metadata, key generation, key wrapping, PAM
integration, and passphrase hashing, see fscrypt [2].

[1] https://lwn.net/Articles/639427
[2] https://github.com/google/fscrypt

Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-24 14:04:57 -07:00
Armin Kuster d9145660cc openscape: fix ptest compile errors and update
update to 1.2.15

plus
ERROR: openscap-1.2.14-r0 do_package_qa: QA Issue: /usr/lib/openscap/ptest/tests/probes/process58/all.sh contained in package openscap-ptest requires /bin/bash, but no providers found in RDEPENDS_openscap-ptest? [file-rdeps]
ERROR: openscap-1.2.14-r0 do_package_qa: QA Issue: /usr/lib/openscap/ptest/tests/xmldiff.pl contained in package openscap-ptest requires /usr/bin/perl, but no providers found in RDEPENDS_openscap-ptest? [file-rdeps]
ERROR: openscap-1.2.14-r0 do_package_qa: QA Issue: /usr/lib/openscap/ptest/tests/nist/test_worker.py contained in package openscap-ptest requires /usr/bin/python2, but no providers found in RDEPENDS_openscap-ptest? [file-rdeps]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-15 16:35:15 -07:00
Dengke Du 4b67ec8263 keynote: update the SRC_URI
The old URL can't be available, give the new URL to keynote.
The project already moved to:

    https://sourceforge.net/projects/keynote-2-3/

The different between old and new tarball was:

    the old tarball contains doc directory, source codes were same.

Signed-off-by: Dengke Du <dengke.du@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-10 07:24:59 -07:00
Armin Kuster aeb9e6c571 openssl-tpm-engine: add package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-10 07:24:59 -07:00
Armin Kuster ef1e8d9144 tpm2-abrmd: add package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-10 07:24:59 -07:00
Armin Kuster f6d48f6006 tpm-quote-tools: Add package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-10 07:24:59 -07:00
Armin Kuster 5ada70014f pcr-extend: add new package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-10 07:24:59 -07:00
Armin Kuster 1c56da015d README: update with basic info
needed to pass yocto-check-layer

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-10 07:24:59 -07:00
Armin Kuster bc9ff10730 swtpm: fix cuse depends
if cuse is enabled, depend on fuse which is in meta-filesystems
throw error is layer is missing.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-10 07:24:59 -07:00
Armin Kuster 607d2bc7dd linux-yocto/4.12: update path version
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-02 07:49:23 -07:00
Armin Kuster 24f3e574ab bastile: fix QA issue
WARNING: bastille-3.2.1-r0 do_package_qa: QA Issue: Symlink /usr/sbin/UndoBastille in bastille points to TMPDIR [symlink-to-sysroot]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-02 07:49:23 -07:00
Armin Kuster 4f2d306f8a lynis: move recipe to correct layer
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-02 07:49:23 -07:00
Armin Kuster 8229c88275 openscap-daemon: fix QA issue
ERROR: openscap-daemon-0.1.6+gitAUTOINC+3fd5c75a08-r0 do_package_qa: QA Issue: /usr/bin/oscapd-cli contained in package openscap-daemon requires /usr/bin/python, but no providers found in RDEPENDS_openscap-daemon? [file-rdeps]

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-02 07:49:23 -07:00
Armin Kuster 6f5b7b303f suricata: update to 4.0.0
libhtp updated in // as suricata contains the sources

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-02 07:49:23 -07:00
Armin Kuster 1e0d5ee5bf redhat-security: remove PR and fix style
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-02 07:49:23 -07:00
Armin Kuster cb8f175108 checksecurity: fix recipe style
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-02 07:49:23 -07:00
Armin Kuster 0db37f2c69 libenv-perl: add recipe removed from core
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-02 07:49:23 -07:00
Armin Kuster 906002f4af layer.conf: update layer depends
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-02 07:49:23 -07:00
Armin Kuster fba6132c5a libewf: fix build issue
ERROR: gettext-native required but not in DEPENDS for file /build/build_artifacts/master/tmp-glibc/work/i586-oe-linux/libewf/20140608-r0/libewf-20140608/configure.ac.
Missing inherit gettext?

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-10-02 07:49:18 -07:00
Armin Kuster f42925b1c3 oe-release: add oe-release file for openscap
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-09-30 11:47:20 -07:00