Commit Graph

926 Commits

Author SHA1 Message Date
Armin Kuster 2634aba3e1 samhain: update to 4.3.3
remove PV from recipes names to make package update easier.

PV set in include file now

drop samhain-cross-compile.patch as stripping appears to have been removed.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-04 12:17:25 -07:00
Armin Kuster 270eefd758 waf-cross-answers: remove files
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-04 12:17:25 -07:00
Armin Kuster c138442bbc libldb: remove recipe
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-08-04 12:17:18 -07:00
Armin Kuster eca01510bf meta-security-compliance: add meta-python
with some for the recipe updates, more pyton support is needed

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-07-17 16:56:39 -07:00
Armin Kuster a64348d0df scap-security-guide: update to 0.1.44
create a PV version to track upstream
git version includes OE changes

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-07-17 16:56:39 -07:00
Armin Kuster 90ccc8b4f5 openscap: add 1.3.1 recipes for upstream source
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-07-17 16:56:39 -07:00
Armin Kuster 37040cfb76 openscap_git: update to 1.3.0
removed unneeded patch
convert over to cmake

refactor files

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-07-17 16:56:02 -07:00
Mark Asselstine eabb07f6d2 openscap/scap-security-guide: use _git instead of versioned filenames
In order to facilate the reuse of the recipe code via layer or distro
specific bbappends rename the recipe files to use _git instead of
versined filenames. Specifically this allows for minimal bbappends in
additional layers which may use the upstream, non-forked, repos that
can be version skewed when compared to what is present in this repo.

Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-07-07 19:18:41 -07:00
Armin Kuster 217e33ff31 meta-security-compliance: update README
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-07-07 19:18:41 -07:00
Armin Kuster 0581604172 lynis: update to 2.7.5
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-07-07 19:18:18 -07:00
He Zhe 586f40897a kernel: Add conditional inclusion of fragments for linux-yocto-dev
Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26 15:47:47 -07:00
Armin Kuster 3f253ddab8 clamav: minor recipe cleanup
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26 15:47:47 -07:00
Armin Kuster 37dc57c998 libmspack: update SRC_URI and package
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26 15:47:47 -07:00
Armin Kuster f59c5437d6 tpm2-tss-engine: update to 1.0.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26 15:47:47 -07:00
Armin Kuster 6cd8959569 tpm2-totp: update to offical release v0.1.1
Clean up recipe to match actual app

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26 15:47:47 -07:00
Armin Kuster cdd44a61c6 tpm2-tss: update to 2.2.3
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26 15:47:47 -07:00
Armin Kuster 1a02980de6 tpm2-tools: update to 3.2.0
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26 15:47:47 -07:00
Armin Kuster 432dafda41 tpm2-tcti-uefi: update to tip
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26 15:47:47 -07:00
Armin Kuster 90e47de316 tpm2-pkcs11/tpm2-pkcs11: update to tip
license-check-sum: Add SPDX format

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26 15:47:47 -07:00
Armin Kuster 7af4d16f33 tpm image: split out tpm2
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26 15:47:47 -07:00
Armin Kuster 44cb58c3e8 tpm2 images: create tpm2 image and fix packagegroup
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26 15:47:47 -07:00
Armin Kuster 6aae738ee6 runtime: tpm2 fix names in packagecheck
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26 15:47:47 -07:00
Armin Kuster f63db8ce1d ima-evm-utils: update to tip
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26 15:47:47 -07:00
Armin Kuster 88350b1267 test-image: add a few more packages to image
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26 15:47:47 -07:00
Armin Kuster 2098981e0c test-image: add packagegroup-core-security-ptest
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26 15:47:47 -07:00
Armin Kuster 55ff4e2434 packagegroup-core-security: cleanup and remove ptest
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26 15:47:47 -07:00
Armin Kuster c44f8f3cb2 runtime: clamav test cleanup
mirror test is independant of download

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26 15:47:47 -07:00
Armin Kuster ee580bd011 security-test-image: add a testing image
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26 15:47:47 -07:00
Armin Kuster 723cd9e372 layers: set warrior only
remove TEST_SUITES from main layer.conf

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26 15:47:47 -07:00
Armin Kuster 51a4c6b517 linux-bbappends: simplify
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-26 15:46:52 -07:00
Zang Ruochen c28b72e91d python3-scapy: solved the conflict with python-scapy
-Rename the following file to resolve the conflict with python-scapy:
	Rename /usr/bin/UTscapy to /usr/bin/UTscapy3
	Rename /usr/bin/scapy to /usr/bin/scapy3

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-10 07:35:35 -07:00
Zang Ruochen 470271aea7 python-scapy: solved the conflict with python3-scapy
-Rename the following file to resolve the conflict with python3-scapy:
	Rename /usr/bin/UTscapy to /usr/bin/UTscapy2
	Rename /usr/bin/scapy to /usr/bin/scapy2

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-10 07:35:35 -07:00
Zang Ruochen b1e379ee5c python-scapy: Remove redundant sed operations
-Remove redundant sed operations.

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-10 07:35:27 -07:00
Zang Ruochen 376d34368e bastille: solved the conflict with perl-module-text-wrap and base-files
-Remove the link to perl5 to resolve the conflict with perl-module-text-wrap.

-Remove the operation on /var/lock to resolve the conflict with base-files.

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-06-10 07:35:18 -07:00
Changqing Li 74445465e3 samhain: add rconflict for client and server mode
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-28 07:38:52 -07:00
Armin Kuster 41708b0b0c image: add image for testing
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-28 07:38:52 -07:00
Armin Kuster 4970243bfc runtime qa: moderize ima test
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-28 07:38:52 -07:00
Armin Kuster 7b287954f7 initramfs: clean up to pull in packages.
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-28 07:38:52 -07:00
Armin Kuster d1d4e78708 data: remove policies
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-28 07:38:52 -07:00
Armin Kuster cf0123e130 policy: add ima appraise all policy
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-28 07:38:52 -07:00
Armin Kuster 1293478068 ima_policy_simple: add another sample policy
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-28 07:38:52 -07:00
Armin Kuster c84f39f8e0 ima-policy-hashed: add new recipe
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-28 07:38:52 -07:00
Armin Kuster 8910674d19 base-files: add appending to automount securityfs
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-28 07:38:52 -07:00
Armin Kuster e7771ce287 linux: update bbappend
remove untested code

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-28 07:38:52 -07:00
Armin Kuster f26869aef3 ima.cfg: update to 5.0 kernel
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-28 07:38:52 -07:00
Armin Kuster 756a1649b7 ima-evm-utils: cleanup and update to tip
update to tip
backported patches to fix build issues.
fix native support

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-28 07:38:52 -07:00
Armin Kuster d86d3353b2 README: update
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-28 07:38:52 -07:00
Armin Kuster b2587711d1 layer.conf: add LAYERSERIES_COMPAT
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-28 07:38:52 -07:00
Armin Kuster 6680225c05 meta-integrity: port over from meta-intel-iot-security
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-28 07:38:41 -07:00
leimaohui 479d9cc23a python3-fail2ban: Fix build error of xrange.
NameError: name 'xrange' is not defined

Signed-off-by: Lei Maohui <leimaohui@cn.fujitsu.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-05-21 08:18:36 -07:00