Commit Graph

  • 06979d5548 integrity-image-minimal: Fix IMAGE_INSTALL Leon Anavi 2024-01-31 16:28:58 +02:00
  • d444b7d7da linux-yocto%.bbappend: Add audit.cfg Leon Anavi 2024-01-31 16:28:57 +02:00
  • 3791852532 scap-security-guide: update to 0.1.71 Armin Kuster 2024-01-26 07:01:27 -05:00
  • d25b348394 python3-fail2ban: remove unused distutils dependency Armin Kuster 2024-01-25 09:18:29 -05:00
  • 4982aa40b7 python3-pyinotify: do not rely on smtpd module Armin Kuster 2024-01-23 09:37:43 -05:00
  • 79b5f135a8 meta-security: libhoth: SRCREV bump e520f8f...e482716 Yushi Sun 2024-01-17 16:36:47 -08:00
  • 7fab92b3c0 parsec-tool: fix serialNumber check Mikko Rapeli 2024-01-03 15:35:19 +02:00
  • b2e1511338 python3-pyinotify: fail2ban needs this module Armin Kuster 2023-12-26 22:00:44 -05:00
  • 73e03651ef dm-verity-img.bbclass: add DM_VERITY_DEPLOY_DIR Mikko Rapeli 2023-12-21 09:57:30 +02:00
  • fd295b2c28 dm-verity-img.bbclass: remove IMAGE_NAME_SUFFIX Erik Schilling 2023-12-21 09:57:29 +02:00
  • 57723ce65e dm-verity-img.bbclass: use bc-native Erik Schilling 2023-12-21 09:57:28 +02:00
  • 3767ca82cf tpm2-tss: support native builds Mikko Rapeli 2023-12-21 09:57:27 +02:00
  • e67e3d377e arpwatch: adjust CONFIGURE params to allow to build again. Armin Kuster 2023-12-17 19:55:06 -05:00
  • 0bc38b348b layers: Move READMEs to markdown format Armin Kuster 2023-12-14 20:38:05 -05:00
  • a0731b7b3c lynis: Update SRC_URI to improve updater Armin Kuster 2023-12-14 20:34:02 -05:00
  • 699ffcbdaf python3-privacyidea: Update to 3.9.1 Armin Kuster 2023-12-13 20:50:39 -05:00
  • 7ee7b8903d libhoth recipe update Dawid Dabrowski 2023-12-12 14:58:16 -08:00
  • 6cf4d653dc libgssglue: update to 0.8 Armin Kuster 2023-12-13 18:47:08 -05:00
  • 5938fa5839 ima,evm: Add two variables to write filenames and signatures into nanbield Stefan Berger 2023-11-01 13:13:17 -04:00
  • f19903f880 samhain: remove the buildpath Mingli Yu 2023-10-08 14:36:57 +08:00
  • 070a1e82cc ima,evm: Add two variables to write filenames and signatures into Stefan Berger 2023-11-01 13:13:17 -04:00
  • 9769990db3 samhain: remove the buildpath Mingli Yu 2023-10-08 14:36:57 +08:00
  • 5044e35d8c Update parsec recipes Gowtham Suresh Kumar 2023-10-30 12:26:47 +00:00
  • ad7dd6cc44 Update parsec recipes Gowtham Suresh Kumar 2023-10-30 12:26:47 +00:00
  • 3f7d40b0fc fail2ban: add useful recommendations Rasmus Villemoes 2023-10-04 22:51:11 +02:00
  • e63009af19 fail2ban: change sqlite3 dependency to python3-sqlite3 Rasmus Villemoes 2023-10-04 22:51:10 +02:00
  • 31b70d93fc fail2ban: add systemd support Rasmus Villemoes 2023-10-04 22:51:09 +02:00
  • 1a3e42cedb smack-test: more py3 covertion Armin Kuster 2023-09-26 09:49:22 +02:00
  • f99844d793 smack-test: switch to python3 Armin Kuster 2023-09-26 09:49:21 +02:00
  • aca6d4a9e7 scap-security-guide: Drop Poky patch and update to tip Armin Kuster 2023-09-12 11:10:39 -04:00
  • 4f79979c54 libhoth: Update John Broadbent 2023-09-19 19:43:03 +00:00
  • c3c84aef49 lynis: Update to 3.0.9 Armin Kuster 2023-09-17 19:31:22 -04:00
  • d2b1bd962f swtpm: update 0.8.1 Armin Kuster 2023-09-17 19:18:43 -04:00
  • 49103c45ac libhtp: update to 0.5.45 Armin Kuster 2023-09-17 14:42:34 -04:00
  • 00c161827a lkrg-module: update to 0.9.7 Armin Kuster 2023-09-17 14:40:24 -04:00
  • a13f453f69 python3-privacyidea: update to 3.8.1 Armin Kuster 2023-09-17 14:38:53 -04:00
  • 0d47c43dce openscap: update to 1.3.9 Armin Kuster 2023-09-17 14:35:57 -04:00
  • ff8d871caf sssd: Update to 2.9.2 Armin Kuster 2023-09-16 12:19:43 -04:00
  • 254b6094b5 suricata: Update to 7.0.0 Armin Kuster 2023-09-13 07:55:44 -04:00
  • 83ac8fc1bd suricata: fix build issue. Armin Kuster 2023-09-12 07:28:06 -04:00
  • 1856a7cf43 layer.conf: update LAYERSERIES_COMPAT for nanbield Martin Jansa 2023-09-10 11:59:47 +02:00
  • 8ffa79641f ccs-tools: Fix do_package QA Issue. Lei Maohui 2023-09-01 09:20:21 +08:00
  • 830817cc14 paxctl: Fix do_package QA Issue. Lei Maohui 2023-09-01 09:20:10 +08:00
  • 8a91e5e9d1 scap-security-guide: update to 0.1.69+ Armin Kuster 2023-08-31 07:54:32 -04:00
  • 533da3cd2b scap-security-guide: pass the correct cpe/schemas/xsl paths to oscap Yi Zhao 2023-08-30 22:38:59 +08:00
  • b9bc938785 layer: add QA_WARNINGS to all layers Armin Kuster 2023-08-01 11:37:34 -04:00
  • 39d373acd1 meta-tpm linux-yocto-rt: Add the bbappend for rt kernel Armin Kuster 2023-08-01 11:14:38 -04:00
  • b727a4c94d linux-yocto-rt: Add the bbappend for rt kernel Kevin Hao 2023-07-31 13:33:16 +08:00
  • 02f285b276 sshguard: Update to 2.4.3 Armin Kuster 2023-07-31 06:27:03 -04:00
  • 782251aa8f sssd: 2.7.4 -> 2.9.1 Kai Kang 2023-07-28 14:30:08 +08:00
  • 21bb5627e0 glome: update to tip Luke Granger-Brown 2023-07-25 14:17:54 +00:00
  • a94674c5bc dm-verity-image-initramfs: Allow compressed image types Wurm, Stephan 2023-07-21 08:44:05 +00:00
  • d47553303c meta-integrity: drop ima.cfg in favor of new k-cache Armin Kuster 2023-07-19 20:26:09 -04:00
  • 686c7c0b8a python3-json2html: add new pkg Armin Kuster 2023-07-16 15:03:56 -04:00
  • b713a8e661 python3-json2html: add new pkg Armin Kuster 2023-07-16 15:03:25 -04:00
  • 108ab6d75e python3-yamlpath: Add new pkg Armin Kuster 2023-07-16 15:02:51 -04:00
  • 1ca654ef4f scap-security-guide: enable ptest Armin Kuster 2023-07-07 13:44:28 -04:00
  • ef184ce03a openscap: fix buildpaths issue Kai Kang 2023-06-29 15:25:29 +08:00
  • be8b6b20d6 packagegroup-security-tpm2: add more pkgs Armin Kuster 2023-07-06 16:50:31 -04:00
  • 64b8f9b68e scap-security-guide: refactor patches Armin Kuster 2023-06-23 15:58:40 -04:00
  • 4c787f3258 clamav: update SRC_URI Armin Kuster 2023-07-05 09:17:43 -04:00
  • c3d96a66fe packagegroup: add python3-tpm2-pytss Armin Kuster 2023-07-03 11:10:59 -04:00
  • c56573730f python3-tpm2-pytss: add python tss2 support Armin Kuster 2023-07-03 11:10:25 -04:00
  • 1dd076d3a7 firejail: only allow x86-64 and arm64 to build Armin Kuster 2023-06-30 07:16:18 -04:00
  • e4318a3c5a packagegroup-core-security: only include firejail x86-64 and arch64 Armin Kuster 2023-06-30 07:15:05 -04:00
  • cfe7335568 qemu: move qemu setting to image and out of layer.conf Armin Kuster 2023-06-28 14:13:39 -04:00
  • 4306007fee python3-privacyidea: fixup REDPENDS Armin Kuster 2023-06-26 21:25:06 -04:00
  • 4678955b35 python3-segno: add new package Armin Kuster 2023-06-26 21:25:45 -04:00
  • 0e62092564 python3-flask-script: add package Armin Kuster 2023-06-26 21:29:09 -04:00
  • 3d2533f329 ossec-hids: Fix usermod Armin Kuster 2023-06-26 13:06:17 -04:00
  • 7840dd1b53 bastille: bastille/config should not be world writeable. Armin Kuster 2023-06-26 09:31:15 -04:00
  • 06c240c3c2 tpm2-tss: ignore CVE-2023-22745 Peter Marko 2023-06-30 00:10:20 +02:00
  • 405cca4028 .patch: remove probably unused patches Martin Jansa 2023-06-22 16:52:45 +02:00
  • df8a1eb479 *.patch: fix malformed Upstream-Status and SOB lines Martin Jansa 2023-06-22 16:35:51 +02:00
  • f5bc417f32 dynamic-layers: *.patch: fix malformed and missing Upstream-Status lines Martin Jansa 2023-06-22 16:48:45 +02:00
  • a070c55ac7 meta-tpm: *.patch: fix malformed Upstream-Status lines Martin Jansa 2023-06-22 16:40:55 +02:00
  • 515dd792ba packagegroup-core-security: add os-release Armin Kuster 2023-06-22 12:16:42 -04:00
  • 1fa205aedf openscap: update to 1.3.8 Armin Kuster 2023-06-22 12:13:41 -04:00
  • 6cf7d71885 scap-security-guide: Does not build for musl Armin Kuster 2023-06-22 11:16:38 -04:00
  • 965dee3282 scap-security-guide: add Upstream-Status Armin Kuster 2023-06-22 11:11:52 -04:00
  • d776915199 arpwatch: Fix typo in COMPATIBLE_HOST:libc-musl = "null" Armin Kuster 2023-06-22 11:09:13 -04:00
  • 53c6324c5f scap-security-guide: Add Poky Armin Kuster 2023-06-22 06:51:02 -04:00
  • f1591a1579 dm-verity: add sample systemd separate hash example and doc Paul Gortmaker 2023-06-21 10:13:35 -07:00
  • 521e7b040a dm-verity: hook separate hash into initramfs framework Paul Gortmaker 2023-06-21 10:13:34 -07:00
  • 3b88f75323 dm-verity: add wks.in fragment with dynamic build hash data Paul Gortmaker 2023-06-21 10:13:33 -07:00
  • 4922b3053a dm-verity: add support for hash storage on separate partition Paul Gortmaker 2023-06-21 10:13:32 -07:00
  • 39c69c8b5d dm-verity: save veritysetup args beside runtime environment Paul Gortmaker 2023-06-21 10:13:31 -07:00
  • fc12521b08 dm-verity: restructure the veritysetup arg parsing Paul Gortmaker 2023-06-21 10:13:30 -07:00
  • b6ec838e8f dm-verity: add descriptive strings for "wic list images" Paul Gortmaker 2023-06-21 10:13:29 -07:00
  • 2eb05e11c0 isic: fine tune Upstream-Status Armin Kuster 2023-06-21 19:10:16 -04:00
  • 1459cf9cd5 clamav: drop unused patch Armin Kuster 2023-06-21 19:06:49 -04:00
  • ea97a23986 *.patch: add Upstream-Status to all patches Martin Jansa 2023-06-21 12:42:15 +02:00
  • 2b052a6165 scap-security-guide: bump the number of test that pass Armin Kuster 2023-06-21 10:19:14 -04:00
  • 4dc2b52027 openscap: Update to tip to get OE/Poky support Armin Kuster 2023-06-20 18:39:07 -04:00
  • ca8bd5faf8 meta-security-isafw: drop layer isafw project archived Armin Kuster 2023-06-17 15:20:22 -04:00
  • 97ab23ef64 kas: ci changes do to meta-security-compliance being removed Armin Kuster 2023-06-14 09:15:48 -04:00
  • 6ae25c7673 packagegroup-core-security: add compliance pkg group Armin Kuster 2023-06-14 09:07:19 -04:00
  • c4c7592dcb scap-security-guide: add OE support Armin Kuster 2023-06-13 15:10:36 -04:00
  • 49de76c980 openscap: add support for OpenEmbedded nodistro and Poky Armin Kuster 2023-06-05 11:35:06 -04:00
  • 51a0714862 meta-security-compliance: remove layer Armin Kuster 2023-06-13 11:31:32 -04:00