summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* libldb: remove recipeArmin Kuster2019-08-044-328/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-security-compliance: add meta-pythonArmin Kuster2019-07-171-3/+1
| | | | | | with some for the recipe updates, more pyton support is needed Signed-off-by: Armin Kuster <akuster808@gmail.com>
* scap-security-guide: update to 0.1.44Armin Kuster2019-07-173-55/+63
| | | | | | | create a PV version to track upstream git version includes OE changes Signed-off-by: Armin Kuster <akuster808@gmail.com>
* openscap: add 1.3.1 recipes for upstream sourceArmin Kuster2019-07-173-8/+17
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* openscap_git: update to 1.3.0Armin Kuster2019-07-173-116/+78
| | | | | | | | | removed unneeded patch convert over to cmake refactor files Signed-off-by: Armin Kuster <akuster808@gmail.com>
* openscap/scap-security-guide: use _git instead of versioned filenamesMark Asselstine2019-07-072-0/+2
| | | | | | | | | | | In order to facilate the reuse of the recipe code via layer or distro specific bbappends rename the recipe files to use _git instead of versined filenames. Specifically this allows for minimal bbappends in additional layers which may use the upstream, non-forked, repos that can be version skewed when compared to what is present in this repo. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-security-compliance: update READMEArmin Kuster2019-07-071-2/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lynis: update to 2.7.5Armin Kuster2019-07-071-2/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* kernel: Add conditional inclusion of fragments for linux-yocto-devHe Zhe2019-06-261-0/+11
| | | | | Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* clamav: minor recipe cleanupArmin Kuster2019-06-261-4/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libmspack: update SRC_URI and packageArmin Kuster2019-06-261-5/+5
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss-engine: update to 1.0.0Armin Kuster2019-06-261-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-totp: update to offical release v0.1.1Armin Kuster2019-06-262-17/+18
| | | | | | Clean up recipe to match actual app Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss: update to 2.2.3Armin Kuster2019-06-261-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tools: update to 3.2.0Armin Kuster2019-06-261-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tcti-uefi: update to tipArmin Kuster2019-06-261-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-pkcs11/tpm2-pkcs11: update to tipArmin Kuster2019-06-261-2/+2
| | | | | | license-check-sum: Add SPDX format Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm image: split out tpm2Armin Kuster2019-06-261-4/+3
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2 images: create tpm2 image and fix packagegroupArmin Kuster2019-06-262-1/+22
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* runtime: tpm2 fix names in packagecheckArmin Kuster2019-06-261-2/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ima-evm-utils: update to tipArmin Kuster2019-06-261-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* test-image: add a few more packages to imageArmin Kuster2019-06-261-0/+8
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* test-image: add packagegroup-core-security-ptestArmin Kuster2019-06-262-3/+26
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-core-security: cleanup and remove ptestArmin Kuster2019-06-261-17/+3
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* runtime: clamav test cleanupArmin Kuster2019-06-261-1/+1
| | | | | | mirror test is independant of download Signed-off-by: Armin Kuster <akuster808@gmail.com>
* security-test-image: add a testing imageArmin Kuster2019-06-261-0/+27
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* layers: set warrior onlyArmin Kuster2019-06-263-5/+3
| | | | | | remove TEST_SUITES from main layer.conf Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux-bbappends: simplifyArmin Kuster2019-06-266-4/+3
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-scapy: solved the conflict with python-scapyZang Ruochen2019-06-101-0/+4
| | | | | | | | | -Rename the following file to resolve the conflict with python-scapy: Rename /usr/bin/UTscapy to /usr/bin/UTscapy3 Rename /usr/bin/scapy to /usr/bin/scapy3 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python-scapy: solved the conflict with python3-scapyZang Ruochen2019-06-101-0/+5
| | | | | | | | | -Rename the following file to resolve the conflict with python3-scapy: Rename /usr/bin/UTscapy to /usr/bin/UTscapy2 Rename /usr/bin/scapy to /usr/bin/scapy2 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python-scapy: Remove redundant sed operationsZang Ruochen2019-06-101-7/+0
| | | | | | | -Remove redundant sed operations. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* bastille: solved the conflict with perl-module-text-wrap and base-filesZang Ruochen2019-06-101-3/+1
| | | | | | | | | -Remove the link to perl5 to resolve the conflict with perl-module-text-wrap. -Remove the operation on /var/lock to resolve the conflict with base-files. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* samhain: add rconflict for client and server modeChangqing Li2019-05-282-0/+2
| | | | | Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* image: add image for testingArmin Kuster2019-05-281-0/+22
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* runtime qa: moderize ima testArmin Kuster2019-05-283-82/+129
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* initramfs: clean up to pull in packages.Armin Kuster2019-05-281-8/+4
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* data: remove policiesArmin Kuster2019-05-283-110/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* policy: add ima appraise all policyArmin Kuster2019-05-282-0/+47
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ima_policy_simple: add another sample policyArmin Kuster2019-05-282-0/+22
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ima-policy-hashed: add new recipeArmin Kuster2019-05-282-0/+97
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* base-files: add appending to automount securityfsArmin Kuster2019-05-282-0/+6
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* linux: update bbappendArmin Kuster2019-05-281-115/+2
| | | | | | remove untested code Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ima.cfg: update to 5.0 kernelArmin Kuster2019-05-282-16/+18
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ima-evm-utils: cleanup and update to tipArmin Kuster2019-05-286-22/+200
| | | | | | | | update to tip backported patches to fix build issues. fix native support Signed-off-by: Armin Kuster <akuster808@gmail.com>
* README: updateArmin Kuster2019-05-281-4/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* layer.conf: add LAYERSERIES_COMPATArmin Kuster2019-05-281-0/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-integrity: port over from meta-intel-iot-securityArmin Kuster2019-05-2830-0/+1402
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-fail2ban: Fix build error of xrange.leimaohui2019-05-212-0/+32
| | | | | | | NameError: name 'xrange' is not defined Signed-off-by: Lei Maohui <leimaohui@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* checksec: add runtime testArmin Kuster2019-05-211-0/+33
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* keyutils: fix library install pathArmin Kuster2019-05-212-6/+36
| | | | | | | | [v2] fix multilib support Als add native support Signed-off-by: Armin Kuster <akuster808@gmail.com>