summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorArmin Kuster <akuster808@gmail.com>2021-07-29 16:32:30 -0700
committerArmin Kuster <akuster808@gmail.com>2021-08-01 08:47:08 -0700
commit352e6498a4b6a929facaa9082b0b07a5bf5c7032 (patch)
treea1e8cbd0b1931b0520d8ea0efee2a3af66c7889d
parentb8554aae23cb66378866bff7d5ef6c6324fa486a (diff)
downloadmeta-security-352e6498a4b6a929facaa9082b0b07a5bf5c7032.tar.gz
meta-hardening: Convert to new override syntax
Signed-off-by: Armin Kuster <akuster808@gmail.com>
-rw-r--r--meta-hardening/conf/distro/harden.conf2
-rw-r--r--meta-hardening/recipes-connectivity/openssh/openssh_%.bbappend2
-rw-r--r--meta-hardening/recipes-core/base-files/base-files_%.bbappend2
-rw-r--r--meta-hardening/recipes-core/images/harden-image-minimal.bb2
-rw-r--r--meta-hardening/recipes-core/initscripts/initscripts_1.0.bbappend6
-rw-r--r--meta-hardening/recipes-core/packagegroups/packagegroup-hardening.bb2
-rw-r--r--meta-hardening/recipes-extended/shadow/shadow_%.bbappend2
-rw-r--r--meta-hardening/recipes-extended/sudo/sudo_%.bbappend4
8 files changed, 11 insertions, 11 deletions
diff --git a/meta-hardening/conf/distro/harden.conf b/meta-hardening/conf/distro/harden.conf
index 66db9b7..1a5eb3d 100644
--- a/meta-hardening/conf/distro/harden.conf
+++ b/meta-hardening/conf/distro/harden.conf
@@ -6,6 +6,6 @@ DISTRO_FEATURES = " acl xattr pci ext2 pam ipv4 ipv6 ipsec largefile usbhost"
6 6
7VIRTUAL-RUNTIME_base-utils-syslog ?= "rsyslog" 7VIRTUAL-RUNTIME_base-utils-syslog ?= "rsyslog"
8IMAGE_ROOTFS_EXTRA_SPACE = "524288" 8IMAGE_ROOTFS_EXTRA_SPACE = "524288"
9EXTRA_IMAGE_FEATURES_remove = "debug-tweaks" 9EXTRA_IMAGE_FEATURES:remove = "debug-tweaks"
10 10
11DISABLE_ROOT ?= "True" 11DISABLE_ROOT ?= "True"
diff --git a/meta-hardening/recipes-connectivity/openssh/openssh_%.bbappend b/meta-hardening/recipes-connectivity/openssh/openssh_%.bbappend
index 67be3f3..17c06ed 100644
--- a/meta-hardening/recipes-connectivity/openssh/openssh_%.bbappend
+++ b/meta-hardening/recipes-connectivity/openssh/openssh_%.bbappend
@@ -1,4 +1,4 @@
1do_install_append_harden () { 1do_install:append_harden () {
2 # to hardend 2 # to hardend
3 sed -i -e 's:#AllowTcpForwarding yes:AllowTcpForwarding no:' ${D}${sysconfdir}/ssh/sshd_config 3 sed -i -e 's:#AllowTcpForwarding yes:AllowTcpForwarding no:' ${D}${sysconfdir}/ssh/sshd_config
4 sed -i -e 's:ClientAliveCountMax 4:ClientAliveCountMax 2:' ${D}${sysconfdir}/ssh/sshd_config 4 sed -i -e 's:ClientAliveCountMax 4:ClientAliveCountMax 2:' ${D}${sysconfdir}/ssh/sshd_config
diff --git a/meta-hardening/recipes-core/base-files/base-files_%.bbappend b/meta-hardening/recipes-core/base-files/base-files_%.bbappend
index 3956304..0f0384f 100644
--- a/meta-hardening/recipes-core/base-files/base-files_%.bbappend
+++ b/meta-hardening/recipes-core/base-files/base-files_%.bbappend
@@ -1,4 +1,4 @@
1 1
2do_install_append_harden () { 2do_install:append_harden () {
3 sed -i 's/umask.*/umask 027/g' ${D}/${sysconfdir}/profile 3 sed -i 's/umask.*/umask 027/g' ${D}/${sysconfdir}/profile
4} 4}
diff --git a/meta-hardening/recipes-core/images/harden-image-minimal.bb b/meta-hardening/recipes-core/images/harden-image-minimal.bb
index daed3fb..c35c257 100644
--- a/meta-hardening/recipes-core/images/harden-image-minimal.bb
+++ b/meta-hardening/recipes-core/images/harden-image-minimal.bb
@@ -1,7 +1,7 @@
1SUMMARY = "A small image for an example hardening OE." 1SUMMARY = "A small image for an example hardening OE."
2 2
3IMAGE_INSTALL = "packagegroup-core-boot packagegroup-hardening" 3IMAGE_INSTALL = "packagegroup-core-boot packagegroup-hardening"
4IMAGE_INSTALL_append = " os-release" 4IMAGE_INSTALL:append = " os-release"
5 5
6IMAGE_FEATURES = "" 6IMAGE_FEATURES = ""
7IMAGE_LINGUAS = " " 7IMAGE_LINGUAS = " "
diff --git a/meta-hardening/recipes-core/initscripts/initscripts_1.0.bbappend b/meta-hardening/recipes-core/initscripts/initscripts_1.0.bbappend
index f943cb3..b27dee9 100644
--- a/meta-hardening/recipes-core/initscripts/initscripts_1.0.bbappend
+++ b/meta-hardening/recipes-core/initscripts/initscripts_1.0.bbappend
@@ -1,8 +1,8 @@
1FILESEXTRAPATHS_prepend_harden := "${THISDIR}/files:" 1FILESEXTRAPATHS:prepend_harden := "${THISDIR}/files:"
2 2
3SRC_URI_append_harden = " file://mountall.sh" 3SRC_URI:append_harden = " file://mountall.sh"
4 4
5do_install_append_harden() { 5do_install:append_harden() {
6 install -d ${D}${sysconfdir}/init.d 6 install -d ${D}${sysconfdir}/init.d
7 install -m 0755 ${WORKDIR}/mountall.sh ${D}${sysconfdir}/init.d 7 install -m 0755 ${WORKDIR}/mountall.sh ${D}${sysconfdir}/init.d
8} 8}
diff --git a/meta-hardening/recipes-core/packagegroups/packagegroup-hardening.bb b/meta-hardening/recipes-core/packagegroups/packagegroup-hardening.bb
index 1dcd5fc..51676b2 100644
--- a/meta-hardening/recipes-core/packagegroups/packagegroup-hardening.bb
+++ b/meta-hardening/recipes-core/packagegroups/packagegroup-hardening.bb
@@ -11,7 +11,7 @@ PACKAGES = "${PN} \
11 packagegroup-${PN} \ 11 packagegroup-${PN} \
12" 12"
13 13
14RDEPENDS_${PN} = "\ 14RDEPENDS:${PN} = "\
15 init-ifupdown \ 15 init-ifupdown \
16 ${VIRTUAL-RUNTIME_base-utils-syslog} \ 16 ${VIRTUAL-RUNTIME_base-utils-syslog} \
17 sudo \ 17 sudo \
diff --git a/meta-hardening/recipes-extended/shadow/shadow_%.bbappend b/meta-hardening/recipes-extended/shadow/shadow_%.bbappend
index 3f363f0..3058b55 100644
--- a/meta-hardening/recipes-extended/shadow/shadow_%.bbappend
+++ b/meta-hardening/recipes-extended/shadow/shadow_%.bbappend
@@ -1,4 +1,4 @@
1do_install_append_harden () { 1do_install:append_harden () {
2 # to hardend 2 # to hardend
3 sed -i -e 's:UMASK.*:UMASK 027:' ${D}${sysconfdir}/login.defs 3 sed -i -e 's:UMASK.*:UMASK 027:' ${D}${sysconfdir}/login.defs
4 sed -i -e 's:PASS_MAX_DAYS.*:PASS_MAX_DAYS 365:' ${D}${sysconfdir}/login.defs 4 sed -i -e 's:PASS_MAX_DAYS.*:PASS_MAX_DAYS 365:' ${D}${sysconfdir}/login.defs
diff --git a/meta-hardening/recipes-extended/sudo/sudo_%.bbappend b/meta-hardening/recipes-extended/sudo/sudo_%.bbappend
index a31c081..97c5f49 100644
--- a/meta-hardening/recipes-extended/sudo/sudo_%.bbappend
+++ b/meta-hardening/recipes-extended/sudo/sudo_%.bbappend
@@ -1,6 +1,6 @@
1 1
2PACKAGECONFIG_append_harden = " pam-wheel" 2PACKAGECONFIG:append_harden = " pam-wheel"
3do_install_append_harden () { 3do_install:append_harden () {
4 if [ "${@bb.utils.contains('DISABLE_ROOT', 'True', 'yes', 'no', d)}" = "yes" ]; then 4 if [ "${@bb.utils.contains('DISABLE_ROOT', 'True', 'yes', 'no', d)}" = "yes" ]; then
5 sed -i -e 's:root ALL=(ALL) ALL:#root ALL=(ALL) ALL:' ${D}${sysconfdir}/sudoers 5 sed -i -e 's:root ALL=(ALL) ALL:#root ALL=(ALL) ALL:' ${D}${sysconfdir}/sudoers
6 fi 6 fi