summaryrefslogtreecommitdiffstats
path: root/recipes-security
Commit message (Collapse)AuthorAgeFilesLines
* firejail: only allow x86-64 and arm64 to buildArmin Kuster2023-07-311-1/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* *.patch: fix malformed Upstream-Status and SOB linesMartin Jansa2023-06-255-5/+5
| | | | | | | | | | | | | | | | | | | | | | * as reported by openembedded-core/scripts/contrib/patchreview.py -v . Malformed Signed-off-by 'Signed-Off-By:' (./recipes-mac/AppArmor/files/crosscompile_perl_bindings.patch) Malformed Signed-off-by 'Signed-Off-By:' (./recipes-mac/AppArmor/files/disable_perl_h_check.patch) Missing Upstream-Status tag (./recipes-compliance/scap-security-guide/files/0001-standard.profile-expand-checks.patch) Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-ids/samhain/files/samhain-not-run-ptest-on-host.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-ids/samhain/files/samhain-pid-path.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-ids/suricata/files/fixup.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-scanners/clamav/files/fix2_libcurl_check.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/ecryptfs-utils/files/ecryptfs-utils-CVE-2016-6224.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/isic/files/configure_fix.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/krill/files/panic_workaround.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/opendnssec/files/libdns_conf_fix.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/opendnssec/files/libxml2_conf.patch Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* isic: fine tune Upstream-StatusArmin Kuster2023-06-253-9/+4
| | | | | | These are changes I did so apply the appropriate label. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* *.patch: add Upstream-Status to all patchesMartin Jansa2023-06-254-0/+8
| | | | | | | | | | | | | | | | | | | | | | | | There is new patch-status QA check in oe-core: https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a This is temporary work around just to hide _many_ warnings from optional patch-status (if you add it to WARN_QA). This just added Upstream-Status: Pending everywhere without actually investigating what's the proper status. This is just to hide current QA warnings and to catch new .patch files being added without Upstream-Status, but the number of Pending patches is now terrible: 0 (0%) meta-parsec N/A (0%) meta-hardening 1 (100%) meta-integrity 15 (68%) meta-tpm 27 (61%) meta-security Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libmhash: fix multilib header conflict - mutils/mhash_config.hAdrian Zaharia2023-05-061-1/+5
| | | | | | | Header file conflict between 32-bit and 64-bit versions Signed-off-by: Adrian Zaharia <Adrian.Zaharia@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* fscryptctl: update to 1.0.1Armin Kuster2023-05-061-1/+6
| | | | | | Don't build man as it needs pandoc Signed-off-by: Armin Kuster <akuster808@gmail.com>
* krill: forced to inclued fetch hashes.Armin Kuster2023-04-083-281/+552
| | | | | | | | | | Now manditory via Poky commit: https://git.yoctoproject.org/poky/commit/bitbake/lib/bb/fetch2?id=4d9886e1435dba3785973cc920865f8ab67e644d used cargo-update-recipe-crates to fixup Drop krill.inc in favor of new crate file name Signed-off-by: Armin Kuster <akuster808@gmail.com>
* cryptmout: update to 6.2.0Armin Kuster2023-03-201-5/+3
| | | | | | Change LIC_FILES_CHKSUM to use COPYING Signed-off-by: Armin Kuster <akuster808@gmail.com>
* krill: update 0.12.3Armin Kuster2023-03-203-107/+146
| | | | | | refresh patch Signed-off-by: Armin Kuster <akuster808@gmail.com>
* firejail: update 0.9.72Armin Kuster2023-03-202-11/+12
| | | | | | refresh patch Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libmspack: update to 1.11Armin Kuster2023-03-201-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* fscrypt: update to 1.1.0Armin Kuster2023-03-201-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* bubblewrap: remove recipeMarkus Volk2023-01-041-22/+0
| | | | | | | It was moved to meta-oe. Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* bubblewrap: Update 0.6.2 -> 0.7.0Alex Kiernan2022-11-191-4/+3
| | | | | | | | Inherit github-releases so that `devtool upgrade` can identify new versions correctly. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* chipsec: update to 1.9.1Armin Kuster2022-11-191-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* cryptmount: update to 6.0Armin Kuster2022-09-252-23/+3
| | | | | | | LIC_FILES_CHKSUM changed do to yr change Drop patch remove_linux_fs.patch Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libgssglue: update to 0.7Armin Kuster2022-09-255-125/+13
| | | | | | | | | | | | LIC_FILE_CHKSUM changes to to indentations changes. use bootstrap to setup config properly. Drop libgssglue-fix-CVE-2011-2709.patch, libgssglue-g-initialize.patch now included in update. and ibgssglue-mglueP.patch now included in update. Drop libgssglue-gss-inq-cred.patch still pending after 5 yrs. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* update chipsec to 1.8.8Armin Kuster2022-09-121-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* cryptmount: fix systemd service installArmin Kuster2022-09-121-0/+10
| | | | | | | | | | Default is to install the service in /usr/lib Signed-off-by: Armin Kuster <akuster808@gmail.com> -- [V2] Fix typo in subject
* cyptmount: Fix mount.h conflicts seen with glibc 2.36+Armin Kuster2022-08-252-1/+22
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-security: Add recipe for GlomeJohn Edward Broadbent2022-08-121-0/+24
| | | | | | | | Generic Low Overhead Message Exchange (GLOME) is a protocol providing secure authentication and authorization for low dependency environments. Signed-off-by: John Edward Broadbent <jebr@google.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* cryptmount: Add new pkgArmin Kuster2022-08-121-0/+25
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* krill: only builds on x86/x86-64 and arm64Armin Kuster2022-08-021-1/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* krill: update to 0.9.6Armin Kuster2022-08-022-246/+163
| | | | | | add UPGRADE_CHECK vars Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ecryptfs-utils: add UPSTREAM_CHECK_URIArmin Kuster2022-08-021-0/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* chipsec: update to 1.8.7Armin Kuster2022-07-301-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* bubblewrap: Add recipeAlex Kiernan2022-07-301-0/+23
| | | | Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
* chipsec: update to 1.8.5Armin Kuster2022-06-231-11/+10
| | | | | | minor recipe cleanup Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-core-security: skip mips firejailArmin Kuster2022-06-231-0/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* firejail: Add new packageArmin Kuster2022-06-232-0/+106
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libmhash: add native pkg supportArmin Kuster2022-06-231-0/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* sssd:move to dynamic networking-layerArmin Kuster2022-06-189-599/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-security: move perl and python recipes to dynamic layers structureArmin Kuster2022-05-1430-9443/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* fscrypt: add distro_check on pamArmin Kuster2022-05-141-5/+7
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* LICENSE: update to SPDX standard namesJoe Slater2022-04-136-6/+6
| | | | | | | Use convert-spdx-licenses.py to update LICENSE in recipes. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* fscrypt: update dependecy from go-dep-native to go-nativeDavide Gardenal2022-04-071-1/+1
| | | | | Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-fail2ban: fix compile issue on some hostsArmin Kuster2022-04-021-0/+7
| | | | | | | | | | Use python3-native to use 2to3 Fix build issue on some hosts with this error: (result, consumed) = self._buffer_decode(data, self.errors, final) | UnicodeDecodeError: 'utf-8' codec can't decode byte 0xd8 in position 152: invalid continuation byte Signed-off-by: Armin Kuster <akuster808@gmail.com>
* LICENSE: adopt SPDX standard namesRobert Yang2022-04-022-2/+2
| | | | | | | Modify LICENSE for ding-libs and libmhash. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-security : Use SPDX style licensing formatAshish Sharma2022-04-024-4/+4
| | | | | | | | | | | | | | WARNING: selinux-sandbox-3.3-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2+ [obsolete-license] \ WARNING: selinux-gui-3.3-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2+ [obsolete-license] \ WARNING: semodule-utils-3.3-r0.1 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2+ [obsolete-license] \ WARNING: selinux-dbus-3.3-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2+ [obsolete-license] \ WARNING: libwhisker2-perl-2.5-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPL-1.0+ [obsolete-license] \ WARNING: lib-perl-0.63-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPL-1.0+ [obsolete-license] \ WARNING: libhtp-0.5.39-r0 do_package_qa: QA Issue: Recipe LICENSE includes obsolete licenses GPLv2 [obsolete-license] \ ... Signed-off-by: Ashish Sharma <asharma@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-privacyidea: drop old package ref.Armin Kuster2022-03-131-1/+1
| | | | | | | | | meta-python dropped package via commit: 620689d4efba28bc8dd60e2d82908bfb3531fbd0 python3-backports-functional-lru-cache: remove, not needed for Python 3 Signed-off-by: Armin Kuster <akuster808@gmail.com>
* Subject: [PATCH] Subject: python3-fail2ban: switch to legacy setuptools3Ashish Sharma2022-03-111-1/+1
| | | | | | | | | | | raise InvalidWheelFilename(f"{filename} is not a valid wheel filename.") pip._internal.exceptions.InvalidWheelFilename: fail2ban-*-*.whl is not a valid wheel filename. Removed build tracker: '/tmp/pip-req-tracker-qnepnk46' ERROR: Failed to pip install wheel. Check the logs. Signed-off-by: Ashish Sharma <asharma@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-fail2ban: fix SPDX license.Armin Kuster2022-03-111-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-privacyidea: update to 3.6.2Armin Kuster2022-03-111-2/+2
| | | | | | Fix license. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-privacyidea: fix QA ERRORArmin Kuster2022-03-111-3/+1
| | | | | | | | | | ERROR: python3-privacyidea-3.5.2-r0 do_package: QA Issue: python3-privacyidea: Files/directories were installed but not shipped in any package: /usr/etc /usr/etc/privacyidea /usr/etc/privacyidea/dictionary /usr/etc/privacyidea/privacyideaapp.wsgi Signed-off-by: Armin Kuster <akuster808@gmail.com>
* chipsec: fix WARNINGArmin Kuster2022-02-221-1/+1
| | | | | | distutils3.bbclass is deprecated, please use setuptools3.bbclass instead Signed-off-by: Armin Kuster <akuster808@gmail.com>
* recipes: Use renamed SKIP_RECIPE varFlagArmin Kuster2022-02-222-2/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* google-authenticator-libpam: update to 1.09Armin Kuster2022-01-301-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-fail2ban: update to tipArmin Kuster2021-12-251-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libest: does not build with openssl 3.xArmin Kuster2021-12-251-0/+3
| | | | | | blacklist for now. Remove from pkg grp Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-fail2ban: remove /runArmin Kuster2021-11-071-1/+1
| | | | | | | | Fixes: ERROR: python3-fail2ban-0.11.2-r0 do_package_qa: QA Issue: python3-fail2ban installs files in /run, but it is expected to be empty [empty-dirs] Signed-off-by: Armin Kuster <akuster808@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-06 07:17:49 +0000