summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* clamav: update to 0.101.5Armin Kuster2020-01-031-39/+24
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lib/oeqa/runtime: fix clamav test orderArmin Kuster2020-01-031-9/+9
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* smack-test: add feature check for smackArmin Kuster2019-12-251-0/+4
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* google-authenticator-libpam: update to 1.07Armin Kuster2019-12-251-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-fail2ban: include python-fail2ban.incArmin Kuster2019-12-251-4/+47
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python-fail2ban: Drop python2 packageArmin Kuster2019-12-252-53/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* smack: add distro checkArmin Kuster2019-12-251-1/+6
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apparmor: add distro checkArmin Kuster2019-12-251-1/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: update to 4.1.6Armin Kuster2019-12-162-4/+3
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lib/oeqa/runtime: suricata add testsArmin Kuster2019-12-161-7/+56
| | | | | | | drop the unit test as it should be run via ptest add more tests for python3-suricata-update Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libhtp: bugfix only update 0.5.32Armin Kuster2019-12-161-0/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-suricata-update: update to 1.1.1Armin Kuster2019-12-161-2/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libseccomp: upgrade 2.4.1 -> 2.4.2Yi Zhao2019-12-162-1/+47
| | | | | | | Backport a patch to fix ptest build failure on arm64. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-security-compliance/conf/layer.conf: fix typoArmin Kuster2019-12-151-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-abrmd: Port command line options to new version.Philip Tricca2019-12-071-1/+1
| | | | | | | | These have changed upstream. Signed-off-by: Philip Tricca <flihp@twobit.org> Signed-off-by: Diego Santa Cruz <Diego.SantaCruz@spinetix.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-abrmd-init.sh: fix for /dev/tpmrmXTrevor Woerner2019-12-071-1/+1
| | | | | | | | | | | | Newer kernels, in addition to the traditional /dev/tpmX device nodes, are now also creating /dev/tpmrmX device nodes. This causes this script to get confused and abort, meaning tpm2-abrmd does not get started during boot. Fix for https://github.com/flihp/meta-measured/issues/56 Signed-off-by: Trevor Woerner <twoerner@gmail.com> Signed-off-by: Diego Santa Cruz <Diego.SantaCruz@spinetix.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-security: add layer index calloutsArmin Kuster2019-12-073-0/+5
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* README: update mailing list to new groups.ioArmin Kuster2019-12-051-3/+3
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-totp: update to 0.2.0Armin Kuster2019-12-052-39/+3
| | | | | | | LIC_FILES_CHKSUM update to be true BSD-3-clause text Drop patch included Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss-engine: update to tip to us tss-tools 4.0.xArmin Kuster2019-12-051-2/+2
| | | | | | LIC_FILES_CHKSUM update to be true BSD-3-clause text Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tools: update to 4.0.1Armin Kuster2019-12-052-15/+14
| | | | | | | | LIC_FILES_CHKSUM added new copyrights Migrate to https d/l from git clone Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-abrmd": update to 2.3.0Armin Kuster2019-12-051-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-pkcs11: update to tipArmin Kuster2019-12-051-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta: inherit features_check instead of distro_features_checkMing Liu2019-11-274-4/+4
| | | | | | | distro_features_check has been deprecated in OE. Signed-off-by: Ming Liu <liu.ming50@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: add tmpfiles.d configChristopher Larson2019-11-272-10/+20
| | | | | | | | This is needed to ensure our /var/log directory is created when using systemd. Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* clamav: add tmpfiles.d configChristopher Larson2019-11-272-1/+10
| | | | | | | | This is needed to ensure freshclam's /var/log directory and file are created when using systemd. Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* checksecurity: use more portable find argsChristopher Larson2019-11-272-1/+25
| | | | | Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_2.3.1.bb: add new udev dir to FILES ↵Norbert Kaminski2019-11-271-1/+3
| | | | | | | | | | | | and append EXTRA_OECONF The tpm2 tool freezes in a XEN distro. It stores the udev rules in /lib/udev directory, thus these changes append the FILES and EXTRA_OECONF to make tpm2 work properly. Signed-off-by: Norbert Kaminski <norbert.kaminski@3mdeb.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* cryptsetup tpm incubator: fix installed vs shippedChristophe PRIOUZEAU2019-11-271-0/+1
| | | | | | | | Fix [installed-vs-shipped] by adding /usr/lib/tmpfiles.d on FILES. Signed-off-by: Christophe Priouzeau <christophe.priouzeau@st.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apparmor: ptest fail to build on armArmin Kuster2019-10-171-0/+18
| | | | | | | | | | exclude arm and aarch64 ptest tasks [v2&3] Sent before committing. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apparmor: fix systemd support so it worksArmin Kuster2019-10-161-5/+11
| | | | | | [Yocto # 13568] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* checksec: add missing rdepends to readelfArmin Kuster2019-10-142-1/+2
| | | | | | update test to check for depends Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: fix compile issueArmin Kuster2019-10-141-3/+0
| | | | | | | cp: cannot stat '/...../tmp-glibc/work/core2-32-oe-linux/suricata/4.1.5-r0/rules': No such file or directory | WARNING: exit code 1 from a shell command. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apparmor: make bash dependency optionalAlexander Kanavin2019-10-131-2/+6
| | | | | | | | | Bash is only needed by one not particularly important script, so not requiring bash is a useful option for builds that cannot have gpl3 components. Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apparmor: add PRIVATE_LIBS for ptest packageAlexander Kanavin2019-10-131-0/+2
| | | | | | | | | Otherwise, the following occurs: ERROR: apparmor-2.13.3-r0 do_package: apparmor: Multiple shlib providers for libapparmor.so.1: apparmor, apparmor-ptest (used by files: /home/alexander/development/poky/build-metaoe/tmp/work/core2-32-poky-linux/apparmor/2.13.3-r0/packages-split/apparmor/usr/lib/perl5/vendor_perl/5.30.0/i686-linux/auto/LibAppArmor/LibAppArmor.so) ERROR: apparmor-2.13.3-r0 do_package: apparmor: Multiple shlib providers for libapparmor.so.1: apparmor, apparmor-ptest (used by files: /home/alexander/development/poky/build-metaoe/tmp/work/core2-32-poky-linux/apparmor/2.13.3-r0/packages-split/apparmor/usr/lib/python3.7/site-packages/LibAppArmor/_LibAppArmor.cpython-37m-i686-linux-gnu.so) Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* layer.conf: Update for zeus seriesArmin Kuster2019-10-114-4/+4
| | | | | | Signed-off-by: Armin Kuster <akuster808@gmail.com> Acked-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata-update: add package to pull rulesArmin Kuster2019-10-081-0/+15
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata/libhtp: update to 4.1.5/0.5.31Armin Kuster2019-10-085-13/+8
| | | | | | | | | same sources refresh patch drop rules tar ball Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apparmor: suppress appending of installation to perllocal.podNaveen Saini2019-09-292-0/+29
| | | | | | | | | | | | | | | | | | | | | | perl modules when gets installed can produce a perllocal.pod file for documenting a list of locally installed perl modules. This can conflict if multiple packages generate the file. Hits the conflict with apparmor & rrdtool packages. Error: Transaction check error: file /usr/lib/perl5/5.30.0/x86_64-linux/perllocal.pod conflicts between attempted installs of rrdtool-1.7.2-r0.corei7_64 and apparmor-2.13.3-r0.corei7_64 perllocal.pod files are for documentation purpose, so disabling does not harm. Generating perllocal.pod for perl module is disabled by passing NO_PERLLOCAL=1 with ExtUtils::MakeMaker utility. https://perldoc.perl.org/5.30.0/ExtUtils/MakeMaker.html#Using-Attributes-and-Parameters [YOCTO #13491] Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ncrack: update to tipScott Ellis2019-09-291-2/+2
| | | | | | | | | | | | LIC_FILES_CHKSUM changed do to the date bumped to 2018 to 2019. The license is the same as nmap and the nmap recipe in meta-openembedded has that beginline/endline grab stuff. Went for consistency as ncrack is an nmap project. Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-pkcs11: update to tipArmin Kuster2019-09-121-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tcti-uefi: update to tipArmin Kuster2019-09-121-2/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-totp: update to 0.1.2Armin Kuster2019-09-121-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss-engine: update to 1.0.1Armin Kuster2019-09-121-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss: update to 2.3.0Armin Kuster2019-09-122-87/+2
| | | | | | drop patch already in update Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-abrmd: update to 2.2.0Armin Kuster2019-09-121-2/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* swtpm: update to 0.2.0Armin Kuster2019-09-121-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libtpm: update to 0.7.0Armin Kuster2019-09-121-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: update to 4.1.4Armin Kuster2019-09-074-8/+35
| | | | | | Backport patch to fix build against newer kernels. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* oe-scap: Fix QA RDEPENDS errorArmin Kuster2019-09-071-1/+1
| | | | | | ERROR: oe-scap-1.0-r0 do_package_qa: QA Issue: /usr/share/oe-scap/run_tests.sh contained in package oe-scap requires /bin/bash, but no providers found in RDEPENDS_oe-scap? [file-rdeps] Signed-off-by: Armin Kuster <akuster808@gmail.com>