summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* python3-fail2ban: add 2-3 conversion changesArmin Kuster2020-02-163-2/+2530
| | | | | | | Had to use the fail2ban-2.3 program to create py3 code Add it as a patch Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ibmswtpm2: update to 1563Armin Kuster2020-02-103-24/+53
| | | | | | | | | fix build issue [v2] Fix subject line Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss: update to 2.3.2Armin Kuster2020-02-101-9/+9
| | | | | | clean up reciped. drop git fetching Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tcti-uefi: fix build issue for i386 machineArmin Kuster2020-02-104-12/+77
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tools: update to 4.1.1Armin Kuster2020-02-102-14/+17
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* bastille: convert to py3Armin Kuster2020-02-101-2/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* scap-security-guide: fix xml parsing error when build remediation filesYi Zhao2020-02-093-1/+78
| | | | | | | | | | | | | | Backport 2 patches to fix the build error: Processing fix.text for: java_jre_configure_crypto_policy rule Unable to extract part of the fix.text after inclusion of remediation functions. Aborting.. jre/CMakeFiles/generate-internal-jre-bash-fixes.xml.dir/build.make:60: recipe for target 'jre/bash-fixes.xml' failed make[2]: *** [jre/bash-fixes.xml] Error 1 make[2]: *** Deleting file 'jre/bash-fixes.xml' Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ecryptfs-utils: search nspr header files in ${STAGING_INCDIR}/nspr directoryArmin Kuster2020-02-021-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* swtpm: fix configure errorArmin Kuster2020-02-011-0/+1
| | | | | | checking for whether to build with seccomp profile... configure: error: "Is libseccomp-devel installed? -- could not get cflags for libseccomp" Signed-off-by: Armin Kuster <akuster808@gmail.com>
* buck-security: fix rdebends and minor style cleanupArmin Kuster2020-01-281-34/+16
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* checksecurity: fix runtime issuesArmin Kuster2020-01-281-1/+1
| | | | | | add some missing perl modules Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-yocto-dev: remove "+"Armin Kuster2020-01-281-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* google-authenticator-libpam: upgrade 1.07 -> 1.08Pierre-Jean Texier via Lists.Yoctoproject.Org2020-01-281-1/+1
| | | | | | | See changelog: https://github.com/google/google-authenticator-libpam/releases/tag/1.08 Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* samhain: fix build with new version attrYi Zhao2020-01-282-0/+74
| | | | | | | | | | | The attr/xattr.h has been removed from attr 2.4.48 with commit: http://git.savannah.nongnu.org/cgit/attr.git/commit/include?id=7921157890d07858d092f4003ca4c6bae9fd2c38 The xattr syscalls are provided by sys/xattr.h from glibc now. Remove the checking code to adapt it otherwise it would fail to build with selinux support. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* Apparmor: fix some runtime dependsArmin Kuster2020-01-231-1/+1
| | | | | | missing xargs and comm Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-fail2ban: update to latestArmin Kuster2020-01-211-12/+10
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* sssd: drop py2 supportArmin Kuster2020-01-211-4/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* README: add pull request optionArmin Kuster2020-01-191-0/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* fail2ban: fix runtime errorArmin Kuster2020-01-051-4/+4
| | | | | | use success/failure calls in initd/function Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-integrity: fix issues with yocto-check-layerArmin Kuster2020-01-046-2/+18
| | | | | | | [v2] re-did solutions Signed-off-by: Armin Kuster <akuster808@gmail.com>
* clamav: update to 0.101.5Armin Kuster2020-01-031-39/+24
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lib/oeqa/runtime: fix clamav test orderArmin Kuster2020-01-031-9/+9
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* smack-test: add feature check for smackArmin Kuster2019-12-251-0/+4
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* google-authenticator-libpam: update to 1.07Armin Kuster2019-12-251-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-fail2ban: include python-fail2ban.incArmin Kuster2019-12-251-4/+47
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python-fail2ban: Drop python2 packageArmin Kuster2019-12-252-53/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* smack: add distro checkArmin Kuster2019-12-251-1/+6
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apparmor: add distro checkArmin Kuster2019-12-251-1/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: update to 4.1.6Armin Kuster2019-12-162-4/+3
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lib/oeqa/runtime: suricata add testsArmin Kuster2019-12-161-7/+56
| | | | | | | drop the unit test as it should be run via ptest add more tests for python3-suricata-update Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libhtp: bugfix only update 0.5.32Armin Kuster2019-12-161-0/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-suricata-update: update to 1.1.1Armin Kuster2019-12-161-2/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libseccomp: upgrade 2.4.1 -> 2.4.2Yi Zhao2019-12-162-1/+47
| | | | | | | Backport a patch to fix ptest build failure on arm64. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-security-compliance/conf/layer.conf: fix typoArmin Kuster2019-12-151-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-abrmd: Port command line options to new version.Philip Tricca2019-12-071-1/+1
| | | | | | | | These have changed upstream. Signed-off-by: Philip Tricca <flihp@twobit.org> Signed-off-by: Diego Santa Cruz <Diego.SantaCruz@spinetix.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-abrmd-init.sh: fix for /dev/tpmrmXTrevor Woerner2019-12-071-1/+1
| | | | | | | | | | | | Newer kernels, in addition to the traditional /dev/tpmX device nodes, are now also creating /dev/tpmrmX device nodes. This causes this script to get confused and abort, meaning tpm2-abrmd does not get started during boot. Fix for https://github.com/flihp/meta-measured/issues/56 Signed-off-by: Trevor Woerner <twoerner@gmail.com> Signed-off-by: Diego Santa Cruz <Diego.SantaCruz@spinetix.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-security: add layer index calloutsArmin Kuster2019-12-073-0/+5
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* README: update mailing list to new groups.ioArmin Kuster2019-12-051-3/+3
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-totp: update to 0.2.0Armin Kuster2019-12-052-39/+3
| | | | | | | LIC_FILES_CHKSUM update to be true BSD-3-clause text Drop patch included Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss-engine: update to tip to us tss-tools 4.0.xArmin Kuster2019-12-051-2/+2
| | | | | | LIC_FILES_CHKSUM update to be true BSD-3-clause text Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tools: update to 4.0.1Armin Kuster2019-12-052-15/+14
| | | | | | | | LIC_FILES_CHKSUM added new copyrights Migrate to https d/l from git clone Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-abrmd": update to 2.3.0Armin Kuster2019-12-051-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-pkcs11: update to tipArmin Kuster2019-12-051-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta: inherit features_check instead of distro_features_checkMing Liu2019-11-274-4/+4
| | | | | | | distro_features_check has been deprecated in OE. Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: add tmpfiles.d configChristopher Larson2019-11-272-10/+20
| | | | | | | | This is needed to ensure our /var/log directory is created when using systemd. Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* clamav: add tmpfiles.d configChristopher Larson2019-11-272-1/+10
| | | | | | | | This is needed to ensure freshclam's /var/log directory and file are created when using systemd. Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* checksecurity: use more portable find argsChristopher Larson2019-11-272-1/+25
| | | | | Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_2.3.1.bb: add new udev dir to FILES ↵Norbert Kaminski2019-11-271-1/+3
| | | | | | | | | | | | and append EXTRA_OECONF The tpm2 tool freezes in a XEN distro. It stores the udev rules in /lib/udev directory, thus these changes append the FILES and EXTRA_OECONF to make tpm2 work properly. Signed-off-by: Norbert Kaminski <norbert.kaminski@3mdeb.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* cryptsetup tpm incubator: fix installed vs shippedChristophe PRIOUZEAU2019-11-271-0/+1
| | | | | | | | Fix [installed-vs-shipped] by adding /usr/lib/tmpfiles.d on FILES. Signed-off-by: Christophe Priouzeau <christophe.priouzeau@st.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apparmor: ptest fail to build on armArmin Kuster2019-10-171-0/+18
| | | | | | | | | | exclude arm and aarch64 ptest tasks [v2&3] Sent before committing. Signed-off-by: Armin Kuster <akuster808@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-07-23 06:56:39 +0000