summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* packagegroup-core-security.bb: fix suricat-ptest inclusionArmin Kuster2021-07-281-2/+1
| | | | | | drop libseccomp ptest Signed-off-by: Armin Kuster <akuster808@gmail.com>
* crowdsec: add pkgArmin Kuster2021-07-281-0/+42
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* add meta-rustArmin Kuster2021-07-281-0/+6
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: Drop 4.1.x its EOLArmin Kuster2021-07-2811-1556/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata.inc: exclude ppc in rust versionArmin Kuster2021-07-281-0/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* Do not use clang toolchain in Parsec recipesAnton Antonov2021-07-172-4/+1
| | | | | Signed-off-by: Anton Antonov <Anton.Antonov@arm.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm-tools: fix build issueArmin Kuster2021-07-101-6/+6
| | | | | | | | | | | | This error occurs randomly. /bin/bash: pod2man: command not found [Yocto #14304] minor space/tab cleanup Signed-off-by: Armin Kuster <akuster808@gmail.com> Cc: Ben <koncept1@gmail.com>
* .gitlab-ci.yml: fix qemux86 musl orderArmin Kuster2021-07-101-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apparmor: use its own initscript and service filesYi Zhao2021-07-107-640/+118
| | | | | | Use initscript and service files provided by apparmor. Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
* apparmor: upgrade 3.0 -> 3.0.1Yi Zhao2021-07-109-259/+2
| | | | | | | | | | | | Drop backport patches: 0001-apparmor-fix-manpage-order.patch 0001-libapparmor-add-missing-include-for-socklen_t.patch 0002-libapparmor-add-aa_features_new_from_file-to-public-.patch 0003-libapparmor-add-_aa_asprintf-to-private-symbols.patch 0001-aa_status-Fix-build-issue-with-musl.patch 0001-parser-Makefile-dont-force-host-cpp-to-detect-reallo.patch Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
* kas/kas-security-alt.yml: add meta-rustArmin Kuster2021-07-061-0/+5
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: update to 6.0.3Armin Kuster2021-07-063-8/+16
| | | | | | | add new crates minor cleanup Signed-off-by: Armin Kuster <akuster808@gmail.com>
* sssd: update to 2.5.1Armin Kuster2021-07-042-2/+57
| | | | | | | | See full change log: https://sssd.io/release-notes/sssd-2.5.1.html Including a musl build work around Signed-off-by: Armin Kuster <akuster808@gmail.com>
* initramfs-framework: rename files dirArmin Kuster2021-06-292-1/+1
| | | | | | | Fixes: ERROR: initramfs-framework-1.0-r4 do_fetch: Fetcher failure for URL: 'file://dmverity'. Unable to fetch URL from any source. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-core-security: add sshguardArmin Kuster2021-06-291-0/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ssshgaurd: add packaageArmin Kuster2021-06-291-0/+11
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* initramfs-framework: fix typo in conditionalArmin Kuster2021-06-291-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* smack: add 3 cves to allowlistSekine Shigeki2021-06-201-0/+5
| | | | | | | CVE-2014-0363, CVE-2014-0364, CVE-2016-10027 are not for smack of smack-team(https://github.com/smack-team/smack) but other project. Signed-off-by: Sekine Shigeki <sekine.shigeki@fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* aircrack-ng: update to 1.6Federico Pellegrin2021-06-201-3/+5
| | | | | Signed-off-by: Federico Pellegrin <fede@evolware.org> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* sssd: add fix-ldblibdir.patch backKai Kang2021-06-202-0/+26
| | | | | | | | The patch fix-ldblibdir.patch has been dropped when update sssd to 2.5.0. But it fails to start sssd without this patch. So add it back. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* sssd: set pid path with /runKai Kang2021-06-201-2/+3
| | | | | | | | /var/run is deprecated and set pid path with /run to store pid files for the SSSD. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-integrity/recipe-kernel: use sanity checkArmin Kuster2021-06-062-5/+6
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-integrity: add sanity checkArmin Kuster2021-06-063-1/+31
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-tpm/linux-yocto: use sanity supportArmin Kuster2021-06-062-17/+18
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-tpm: add layer sanity checkArmin Kuster2021-06-063-0/+33
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-yocto-dev: drop bbappendArmin Kuster2021-06-061-1/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-security/recipe-kernel: use sanity checkArmin Kuster2021-06-063-6/+5
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-security: add sanity checkArmin Kuster2021-06-063-0/+32
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-hardening/initscripts: missed overide.Armin Kuster2021-06-051-1/+1
| | | | | | Helps pass YCL. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libgssglue: update SRC_URIYi Zhao2021-06-051-3/+3
| | | | | | | | | | | | Update SRC_URI to use Debian mirror because the original site is unaccessible. Fixes do_fetch error: ERROR: libgssglue-0.4-r0 do_fetch: Fetcher failure for URL: 'http://www.citi.umich.edu/projects/nfsv4/linux/libgssglue/libgssglue-0.4.tar.gz'. Unable to fetch URL from any source. Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
* Correct "securiyt" typo in maintainers.incRobert P. J. Day2021-06-051-1/+1
| | | | | Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-core-security: drop python3-scapyArmin Kuster2021-06-051-2/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-scapy: drop , now in meta-pythonArmin Kuster2021-06-052-34/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* initramfs-framework: fix YCL issue.Armin Kuster2021-06-052-16/+17
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-%_5.%.bbappend: drop recipeArmin Kuster2021-06-051-4/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* busybox: drop as libsecomp is in coreArmin Kuster2021-06-053-5/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss: fix usrmerge udev install pathRicardo Salveti2021-06-051-2/+2
| | | | | | | | | | | Update ${base_prefix}/lib to ${nonarch_base_libdir} to fix a package QA issue when usrmerge is enabled in DISTRO_FEATURES. QA Issue: tpm2-tss package is not obeying usrmerge distro feature. /lib should be relocated to /usr. [usrmerge] Signed-off-by: Ricardo Salveti <ricardo@foundries.io> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* sssd: update to 2.5.0Armin Kuster2021-06-058-183/+89
| | | | | | | | | | | | Add new depends Drop obsolete patches Signed-off-by: Armin Kuster <akuster808@gmail.com> ---- v2] Fix issue with nsupdate check don't use host bind
* ossec-hids: musl not compatableArmin Kuster2021-06-051-0/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-core-security: exclude ossec-hids from muslArmin Kuster2021-06-051-0/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lkrg-module: update 0.9.1Armin Kuster2021-06-051-2/+2
| | | | | | LIC_FILES_CHKSUM updated do to yr change and adding new copyrights Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-scapy: update to 2.4.5Armin Kuster2021-06-051-3/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* opendnssec: upgrade 2.1.8 -> 2.1.9Upgrade Helper2021-06-051-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* clamav: upgrade to latest revisionUpgrade Helper2021-06-051-2/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-core-security: add clamav-daemonArmin Kuster2021-05-161-2/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* clamav: fix systemd startupArmin Kuster2021-05-162-21/+48
| | | | | | cleanup recipe Signed-off-by: Armin Kuster <akuster808@gmail.com>
* .gitlab-ci: drop clean up combine alt w baseArmin Kuster2021-05-161-73/+4
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-core-security: add aide and ossecArmin Kuster2021-05-161-0/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* aide: Add another idsArmin Kuster2021-05-162-0/+135
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* Apparmor: fix multi config build issue.Armin Kuster2021-05-161-1/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>