diff options
author | Armin Kuster <akuster808@gmail.com> | 2021-07-29 16:32:30 -0700 |
---|---|---|
committer | Armin Kuster <akuster808@gmail.com> | 2021-08-01 08:47:08 -0700 |
commit | 352e6498a4b6a929facaa9082b0b07a5bf5c7032 (patch) | |
tree | a1e8cbd0b1931b0520d8ea0efee2a3af66c7889d | |
parent | b8554aae23cb66378866bff7d5ef6c6324fa486a (diff) | |
download | meta-security-352e6498a4b6a929facaa9082b0b07a5bf5c7032.tar.gz |
meta-hardening: Convert to new override syntax
Signed-off-by: Armin Kuster <akuster808@gmail.com>
8 files changed, 11 insertions, 11 deletions
diff --git a/meta-hardening/conf/distro/harden.conf b/meta-hardening/conf/distro/harden.conf index 66db9b7..1a5eb3d 100644 --- a/meta-hardening/conf/distro/harden.conf +++ b/meta-hardening/conf/distro/harden.conf | |||
@@ -6,6 +6,6 @@ DISTRO_FEATURES = " acl xattr pci ext2 pam ipv4 ipv6 ipsec largefile usbhost" | |||
6 | 6 | ||
7 | VIRTUAL-RUNTIME_base-utils-syslog ?= "rsyslog" | 7 | VIRTUAL-RUNTIME_base-utils-syslog ?= "rsyslog" |
8 | IMAGE_ROOTFS_EXTRA_SPACE = "524288" | 8 | IMAGE_ROOTFS_EXTRA_SPACE = "524288" |
9 | EXTRA_IMAGE_FEATURES_remove = "debug-tweaks" | 9 | EXTRA_IMAGE_FEATURES:remove = "debug-tweaks" |
10 | 10 | ||
11 | DISABLE_ROOT ?= "True" | 11 | DISABLE_ROOT ?= "True" |
diff --git a/meta-hardening/recipes-connectivity/openssh/openssh_%.bbappend b/meta-hardening/recipes-connectivity/openssh/openssh_%.bbappend index 67be3f3..17c06ed 100644 --- a/meta-hardening/recipes-connectivity/openssh/openssh_%.bbappend +++ b/meta-hardening/recipes-connectivity/openssh/openssh_%.bbappend | |||
@@ -1,4 +1,4 @@ | |||
1 | do_install_append_harden () { | 1 | do_install:append_harden () { |
2 | # to hardend | 2 | # to hardend |
3 | sed -i -e 's:#AllowTcpForwarding yes:AllowTcpForwarding no:' ${D}${sysconfdir}/ssh/sshd_config | 3 | sed -i -e 's:#AllowTcpForwarding yes:AllowTcpForwarding no:' ${D}${sysconfdir}/ssh/sshd_config |
4 | sed -i -e 's:ClientAliveCountMax 4:ClientAliveCountMax 2:' ${D}${sysconfdir}/ssh/sshd_config | 4 | sed -i -e 's:ClientAliveCountMax 4:ClientAliveCountMax 2:' ${D}${sysconfdir}/ssh/sshd_config |
diff --git a/meta-hardening/recipes-core/base-files/base-files_%.bbappend b/meta-hardening/recipes-core/base-files/base-files_%.bbappend index 3956304..0f0384f 100644 --- a/meta-hardening/recipes-core/base-files/base-files_%.bbappend +++ b/meta-hardening/recipes-core/base-files/base-files_%.bbappend | |||
@@ -1,4 +1,4 @@ | |||
1 | 1 | ||
2 | do_install_append_harden () { | 2 | do_install:append_harden () { |
3 | sed -i 's/umask.*/umask 027/g' ${D}/${sysconfdir}/profile | 3 | sed -i 's/umask.*/umask 027/g' ${D}/${sysconfdir}/profile |
4 | } | 4 | } |
diff --git a/meta-hardening/recipes-core/images/harden-image-minimal.bb b/meta-hardening/recipes-core/images/harden-image-minimal.bb index daed3fb..c35c257 100644 --- a/meta-hardening/recipes-core/images/harden-image-minimal.bb +++ b/meta-hardening/recipes-core/images/harden-image-minimal.bb | |||
@@ -1,7 +1,7 @@ | |||
1 | SUMMARY = "A small image for an example hardening OE." | 1 | SUMMARY = "A small image for an example hardening OE." |
2 | 2 | ||
3 | IMAGE_INSTALL = "packagegroup-core-boot packagegroup-hardening" | 3 | IMAGE_INSTALL = "packagegroup-core-boot packagegroup-hardening" |
4 | IMAGE_INSTALL_append = " os-release" | 4 | IMAGE_INSTALL:append = " os-release" |
5 | 5 | ||
6 | IMAGE_FEATURES = "" | 6 | IMAGE_FEATURES = "" |
7 | IMAGE_LINGUAS = " " | 7 | IMAGE_LINGUAS = " " |
diff --git a/meta-hardening/recipes-core/initscripts/initscripts_1.0.bbappend b/meta-hardening/recipes-core/initscripts/initscripts_1.0.bbappend index f943cb3..b27dee9 100644 --- a/meta-hardening/recipes-core/initscripts/initscripts_1.0.bbappend +++ b/meta-hardening/recipes-core/initscripts/initscripts_1.0.bbappend | |||
@@ -1,8 +1,8 @@ | |||
1 | FILESEXTRAPATHS_prepend_harden := "${THISDIR}/files:" | 1 | FILESEXTRAPATHS:prepend_harden := "${THISDIR}/files:" |
2 | 2 | ||
3 | SRC_URI_append_harden = " file://mountall.sh" | 3 | SRC_URI:append_harden = " file://mountall.sh" |
4 | 4 | ||
5 | do_install_append_harden() { | 5 | do_install:append_harden() { |
6 | install -d ${D}${sysconfdir}/init.d | 6 | install -d ${D}${sysconfdir}/init.d |
7 | install -m 0755 ${WORKDIR}/mountall.sh ${D}${sysconfdir}/init.d | 7 | install -m 0755 ${WORKDIR}/mountall.sh ${D}${sysconfdir}/init.d |
8 | } | 8 | } |
diff --git a/meta-hardening/recipes-core/packagegroups/packagegroup-hardening.bb b/meta-hardening/recipes-core/packagegroups/packagegroup-hardening.bb index 1dcd5fc..51676b2 100644 --- a/meta-hardening/recipes-core/packagegroups/packagegroup-hardening.bb +++ b/meta-hardening/recipes-core/packagegroups/packagegroup-hardening.bb | |||
@@ -11,7 +11,7 @@ PACKAGES = "${PN} \ | |||
11 | packagegroup-${PN} \ | 11 | packagegroup-${PN} \ |
12 | " | 12 | " |
13 | 13 | ||
14 | RDEPENDS_${PN} = "\ | 14 | RDEPENDS:${PN} = "\ |
15 | init-ifupdown \ | 15 | init-ifupdown \ |
16 | ${VIRTUAL-RUNTIME_base-utils-syslog} \ | 16 | ${VIRTUAL-RUNTIME_base-utils-syslog} \ |
17 | sudo \ | 17 | sudo \ |
diff --git a/meta-hardening/recipes-extended/shadow/shadow_%.bbappend b/meta-hardening/recipes-extended/shadow/shadow_%.bbappend index 3f363f0..3058b55 100644 --- a/meta-hardening/recipes-extended/shadow/shadow_%.bbappend +++ b/meta-hardening/recipes-extended/shadow/shadow_%.bbappend | |||
@@ -1,4 +1,4 @@ | |||
1 | do_install_append_harden () { | 1 | do_install:append_harden () { |
2 | # to hardend | 2 | # to hardend |
3 | sed -i -e 's:UMASK.*:UMASK 027:' ${D}${sysconfdir}/login.defs | 3 | sed -i -e 's:UMASK.*:UMASK 027:' ${D}${sysconfdir}/login.defs |
4 | sed -i -e 's:PASS_MAX_DAYS.*:PASS_MAX_DAYS 365:' ${D}${sysconfdir}/login.defs | 4 | sed -i -e 's:PASS_MAX_DAYS.*:PASS_MAX_DAYS 365:' ${D}${sysconfdir}/login.defs |
diff --git a/meta-hardening/recipes-extended/sudo/sudo_%.bbappend b/meta-hardening/recipes-extended/sudo/sudo_%.bbappend index a31c081..97c5f49 100644 --- a/meta-hardening/recipes-extended/sudo/sudo_%.bbappend +++ b/meta-hardening/recipes-extended/sudo/sudo_%.bbappend | |||
@@ -1,6 +1,6 @@ | |||
1 | 1 | ||
2 | PACKAGECONFIG_append_harden = " pam-wheel" | 2 | PACKAGECONFIG:append_harden = " pam-wheel" |
3 | do_install_append_harden () { | 3 | do_install:append_harden () { |
4 | if [ "${@bb.utils.contains('DISABLE_ROOT', 'True', 'yes', 'no', d)}" = "yes" ]; then | 4 | if [ "${@bb.utils.contains('DISABLE_ROOT', 'True', 'yes', 'no', d)}" = "yes" ]; then |
5 | sed -i -e 's:root ALL=(ALL) ALL:#root ALL=(ALL) ALL:' ${D}${sysconfdir}/sudoers | 5 | sed -i -e 's:root ALL=(ALL) ALL:#root ALL=(ALL) ALL:' ${D}${sysconfdir}/sudoers |
6 | fi | 6 | fi |