summaryrefslogtreecommitdiffstats
path: root/recipes-security
Commit message (Collapse)AuthorAgeFilesLines
* samhain: update to 4.2.2master-wip2Jackie Huang2017-08-2217-83/+763
| | | | | | | | | | | | | * update to version 4.2.2 * Add new recipe for standalone mode * Add systemd support * Add patches to fix several issues * samhain-standalone: add ptest support * samhain-server: no need to depend on samhain-server-native * Move common things from the bb to the inc file Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apparmor: Additional runtime fixesTom Rini2017-07-292-8/+28
| | | | | | | | | | | | | | | | | - We need various python3 modules and we can only really solve this problem by including all python3-modules. - aa-easyprof needs to have its shebang corrected, do so. - The apparmor initscript depends on functions that LSB does not require so we must provide them. In some cases it's using non-standard function, so we just use more appropriate names. - The apparmor sysvinit-style initscript assumes that systemd-detect-virt will exist on the filesystem. Change this to check that it does before trying to execute it. [for aa-easyprof:] Reported-by: Anders Montonen <Anders.Montonen@iki.fi> Signed-off-by: Tom Rini <trini@konsulko.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libmhash: add new recipeJackie Huang2017-07-294-0/+94
| | | | | | | | | | Mhash is a free (under GNU Lesser GPL) library which provides a uniform interface to a large number of hash algorithms. These algorithms can be used to compute checksums, message digests, and other signatures. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libgssglue: add new recipeJackie Huang2017-07-296-0/+223
| | | | | | | | libgssglue exports a gssapi interface which calls other gssapi libraries. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nmap: upgrade to 7.50Jackie Huang2017-07-293-11/+97
| | | | | | | | | | | | | | | | | | | - Add a patch to fix python library install dir for multilib. - Add a patch to fix race condition with mkdir command. - Inherit pythonnative instead of python-dir and install python modules for ndiff to fix the following errors: """ root@qemux86-64:~# ndiff --help -sh: /usr/bin/ndiff: /path_to_build/tmp/hosttools/python: bad interpreter: No such file or directory root@qemux86-64:~# python /usr/bin/ndiff Could not import the ndiff module: 'No module named ndiff'. """ Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* keynote: add new recipeJackie Huang2017-07-294-0/+126
| | | | | | | | | KeyNote is a simple and flexible trust-management system designed to work well for a variety of large- and small- scale Internet-based applications Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* xmlsec1: add new recipeJackie Huang2017-06-206-0/+296
| | | | | | | XML Security Library is a C library based on LibXML2 and OpenSSL. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apparmor: Rework such that the utilities are functional by defaultTom Rini2017-06-203-7/+54
| | | | | | | | | | | | | | | | | | | | | | This introduces a number of changes: - Fix the python PACKAGECONFIG knob - The included python support is python3-based, so use those classes. - When set, make sure to RDEPEND on the python modules the tools use. - Fix the perl PACKAGECONFIG knob - Add two patches so that configure will find perl and then compile will cross-compile the library correctly. - So that we place perl modules in the correct location we need cpan to be inherited. - When disabled, remove the RDEPENDS on perl as the RDEPENDS comes in via inherit. - Default to enabling the python and perl PACKAGECONFIG knobs as the majority of the userspace tools are python3 based, and the few that aren't that nor C based are perl based. - Because of the above we must drop the -python package because it's required for the utilities in the main package. Signed-off-by: Tom Rini <trini@konsulko.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apparmor: fix python packaging issueArmin Kuster2017-05-301-2/+2
| | | | | | | | | | | | | WARNING: apparmor-2.11.0-r0 do_package: QA Issue: apparmor: Files/directories were installed but not shipped in any package: /usr/lib/python2.7 /usr/lib/python2.7/site-packages /usr/lib/python2.7/site-packages/apparmor-2.11.0-py2.7.egg-info /usr/lib/python2.7/site-packages/apparmor /usr/lib/python2.7/site-packages/apparmor/regex.py use python2 instead of python3 Signed-off-by: Armin Kuster <akuster@mvista.com>
* ecryptfs-utils: add new recipeJackie Huang2017-05-303-0/+137
| | | | | | | | | | eCryptfs is a stacked cryptographic filesystem that ships in Linux kernel versions 2.6.19 and above. This package provides the mount helper and supporting libraries to perform key management and mount functions. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* keyutils: add new recipeJackie Huang2017-05-305-0/+159
| | | | | | | | | | | | keyutils is utilities to control the kernel key management facility and to provide a mechanism by which the kernel call back to userspace to get a key instantiated. It's required by ecryptfs-utils. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* security-core package group: add few more appsArmin Kuster2017-05-091-1/+6
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* clamav: fix new build errorArmin Kuster2017-05-091-1/+1
| | | | | | | | configure: error: The installed zlib version may contain a security bug. Please upgrade to 1.2.2 or later: http://www.zlib.net. You can omit this check with --disable-zlib-vcheck but DO NOT REPORT any stability issues then! bypass check as our zlib is 1.2.11 Signed-off-by: Armin Kuster <akuster808@gmail.com>
* sssd: update SRC_URI as git.fedorahosted.org shut downArmin Kuster2017-05-091-11/+9
| | | | | | build fixes too Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup: remove tpm componentsArmin Kuster2017-05-081-14/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* change tpm from distro to machine featureArmin Kuster2017-05-081-2/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* freediameter: Add recipeArmin Kuster2017-04-254-0/+493
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* samhain: update to 4.2.1Armin Kuster2017-04-134-21/+2
| | | | | | remove patch integrated into update Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apparmor: update to 2.11.0 plus ptestArmin Kuster2017-04-043-116/+130
| | | | | | | | | update to 2.11 Add basic ptest support v2: remove none existent file Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libseccomp: update to 2.3.2Armin Kuster2017-04-011-3/+3
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* samhain: fix build issues when using muslArmin Kuster2017-03-272-0/+23
| | | | | | | | | | | | | | | | | | | | [v2]: Correct musl malloc fix. remove HAVE_MALLOC_H define; this enables using the included defined mallinfo. [V1]: Fix c99 x_dnmalloc.c:563:26: error: return type is an incomplete type | #define public_mALLINFo mallinfo | ^ | x_dnmalloc.c:1689:17: note: in expansion of macro 'public_mALLINFo' | struct mallinfo public_mALLINFo() { and _dnmalloc.c:5527:17: error: unknown type name 'u_int' | u_int rnd[(128 - 2*sizeof(struct timeval)) / sizeof(u_int)]; | ^~~~~ Signed-off-by: Armin Kuster <akuster808@gmail.com>
* build-image: remove ROOTFS_PKGMANAGE_BOOTSTRAPArmin Kuster2017-03-241-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* samhain-server: fix config error with aclArmin Kuster2017-03-241-2/+2
| | | | | | | | | | when acl is enabled this error occurrs. configure: error: in `/home/akuster/oss/maint/openembedded-core/build/tmp-glibc/work/x86_64-linux/samhain-server-native/4.2.0-r0/samhain-4.2.0': | configure: error: --enable-posix-acl was given, but test for acl support failed add missing depends. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: update to 3.2.1Armin Kuster2017-03-242-11/+13
| | | | | | | cleaned up ptyhon package creation. dropped patch no longer needed Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libseccomp: convert test package to ptestWenzong Fan2017-03-022-12/+16
| | | | | Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* scapy: fix the pickling issueJackie Huang2017-02-182-0/+112
| | | | | | | | | Backport a patch to fix the pickling issue when save_session: PicklingError: Can't pickle <type 'function'>: attribute lookup __builtin__.function failed Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libseccomp: update to tipArmin Kuster2017-02-181-2/+2
| | | | | | | adds support for 4.9 and 4.10-rc1 kernels adds support for python 3.x Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apparmor: Add new packageArmin Kuster2017-02-186-0/+751
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: update package to 3.1.3Armin Kuster2016-11-103-3/+3
| | | | | | | | | | | | | | | | | *Changes* Bug #1861: Suricata with multi tenancy does not start in 3.1/3.1.1 Bug #1889: Suricata doesn't error on missing semicolon Bug #1910: libhtp 0.5.23 (3.1.x) Bug #1912: http.memcap reached condition can lead to dead lock Bug #1913: af-packet fanout detection broken on Debian Jessie Bug #1933: unix-command socket created with last character missing (3.1.x) Bug #1934: make install-full does not install tls-events.rules (3.1.x) Bug #1941: Can't set fast_pattern on tls_sni content (3.1.x) Bug #1942: dns - back to back requests results in loss of response (3.1.x) Bug #1943: Check redis reply in non pipeline mode (3.1.x) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* samhain: update to 4.2.0Armin Kuster2016-11-103-2/+2
| | | | | | | | | | | | | | | | * Changes: - New option 'SetAuditdFlags = r|w|x|a' to (re-)define the flags supplied to auditd. - New option 'PortCheckDevice = device' for the port check module, to monitor a device regardless of the address assigned to it. - Fix for the case sensitivity of the arguments to the Severity/Class options. - Compiler warnings with gcc 6.2 and a few minor bugs have been fixed. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nmap: Upgrade package to 7.31Armin Kuster2016-11-101-5/+5
| | | | | | | LIC_FILES_CHKSUM change do to yr going from 2015 to 2016 in file. Added "no update" config option. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* smack: Add new packageArmin Kuster2016-11-103-0/+75
| | | | | | | V2: Fix typo and add LDFLAG to makefile Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: update package to 3.1.2Armin Kuster2016-11-012-3/+3
| | | | | | | v2: rebased against master-next which has 3.1 Signed-off-by: Armin Kuster <akuster808@gmail.com>
* samhain: recipe cleanupArmin Kuster2016-11-013-37/+38
| | | | | | add a few distro feature checks. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* package-group: fix tpm package listArmin Kuster2016-11-011-2/+5
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* images: add a client and server imageArmin Kuster2016-11-012-0/+37
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* package-group: Add tpm packagesArmin Kuster2016-11-011-0/+13
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* image: at image to help test buildsArmin Kuster2016-11-011-0/+21
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: package update to 3.1.0Armin Kuster2016-10-192-3/+3
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* clamav: fixup improper quotingMark Asselstine2016-10-111-1/+1
| | | | | | | | | | | | | | | Commit 217e06badb146539122732ab0eb27fd17cce09e5 [clamav: fix gcc 6.x build failure.] fixed a typo in "PACKAGECONFIG" (was missing the 'G') but unfortunately the PACKAGECONFIG string was incorrectly formed due to mismatched quotes. This caused a parsing error: ERROR: Unable to parse .../meta-security/recipes-security/clamav/clamav_0.99.2.bb ... Removed the unneeded quotes to fix the parsing issue. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* scapy: upgrade to 2.3.2Jackie Huang2016-10-112-4/+15
| | | | | | | | | | * update the SRC_URI since it's been moved from bitbucket to github. * add ptest support Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* paxctl: Fix QA warningArmin Kuster2016-10-111-0/+3
| | | | | | WARNING: paxctl-0.9-r0 do_package_qa: QA Issue: No GNU_HASH in the elf binary: '...../build/tmp-glibc/work/core2-64-oe-linux/paxctl/0.9-r0/packages-split/paxctl/sbin/paxctl' [ldflags] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* paxctl: allow build of paxctl-nativeJoe Slater2016-10-111-0/+15
| | | | | | | | | | | | | | paxctl-native is needed to build paxtest. Do not use the install target in Makefile for paxctl-native, it will fail with error: install: cannot change ownership of '.../sbin/paxctl': \ Operation not permitted Signed-off-by: Joe Slater <jslater@windriver.com> Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* clamav: fix gcc 6.x build failure.Armin Kuster2016-10-111-4/+18
| | | | | | | | | | | | | | ./llvm/include/llvm/Support/AlignOf.h:57:24: error: expected unqualified-id before 'alignof' static inline unsigned alignof() { return AlignOf<T>::Alignment; } ^~~~~~~ configure --with-system-llvm --with-llvm-linking=dynamic. define use with meta-oe LLVM3.3 via config option Fix typo for systemd PACKAGECONFIG Signed-off-by: Armin Kuster <akuster808@gmail.com>
* samhain: 4.1.4 -> 4.1.5Wang Xin2016-10-113-2/+4
| | | | | | | | | | 1) Upgrade samhain from 4.1.4 to 4.1.5. 2) Add TARGET_CC_ARCH.Fix error. ERROR: samhain-server-4.1.5-r0 do_package_qa: QA Issue: No GNU_HASH in the elf binary: '/yocto/work001/fnst/wangx/poky/build/tmp/work/i586-poky-linux/samhain-server/4.1.5-r0/packages-split/samhain-server/usr/sbin/yule_setpwd' No GNU_HASH in the elf binary: '/yocto/work001/fnst/wangx/poky/build/tmp/work/i586-poky-linux/samhain-server/4.1.5-r0/packages-split/samhain-server/usr/sbin/yulectl' [ldflags] Signed-off-by: Wang Xin <wangxin2015.fnst@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libseccomp: update to latestJonathan Liu2016-08-2017-3272/+3
| | | | | Signed-off-by: Jonathan Liu <net147@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: update to 3.0.2Armin Kuster2016-06-263-3/+3
| | | | | Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Armin Kuster <akuster@mvista.com>
* tripwire: update to 2.4.3.1Armin Kuster2016-06-263-90/+12
| | | | | | | | | this also fixes clang and gcc 5.3 build issues remove merged patches Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Armin Kuster <akuster@mvista.com>
* samhain: update to 4.1.4Armin Kuster2016-06-263-2/+2
| | | | | | | | | | | | | | | | | | | | | | 4.1.4: - Fix for issues with re-evaluation of paths with wildcard patterns: - no re-evaluation if no match at process startup - if same pattern used for a file=.. and dir=.. directive, only one (the first in config file) is re-evaluated - Fix for issues with new directories created when inotify is used: - recursion depth is not properly set for new directory - directory gets watched even if recursion depth should be below zero 4.1.3: - Fix for a regression in DNS resolving if samhain is compiled with '--enable-static' - On Cygwin/Windows, the default for the 'AvoidBlock' option is now 'off' because of problems reported for this platform. Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Armin Kuster <akuster@mvista.com>
* nmap: fix several new QA warnings.Armin Kuster2016-06-261-14/+9
| | | | | | | | | | | | | | | | | | | | | WARNING: nmap-7.12-r0 do_package: QA Issue: nmap: Files/directories were installed but not shipped in any package: /usr/lib /usr/bin/ndiff /usr/bin/nping /usr/bin/ncat /usr/lib/python2.7 /usr/lib/python2.7/site-packages /usr/lib/python2.7/site-packages/ndiff.pyc /usr/lib/python2.7/site-packages/ndiff.py Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. nmap: 8 installed and not shipped files. [installed-vs-shipped] remove crazyness and let the system figure out packaging info remove ndiff.py* as the compiled version is installed in /usr/bin and remove the leftover python site-package cruft. Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Armin Kuster <akuster@mvista.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-07-22 22:12:13 +0000