summaryrefslogtreecommitdiffstats
path: root/recipes-security
Commit message (Collapse)AuthorAgeFilesLines
* keyutils: fix library install pathwarriorArmin Kuster2019-06-162-6/+36
| | | | | | | | [v2] fix multilib support Als add native support Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-fail2ban: Fix build error of xrange.leimaohui2019-06-162-0/+32
| | | | | | | NameError: name 'xrange' is not defined Signed-off-by: Lei Maohui <leimaohui@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-scapy: solved the conflict with python-scapyZang Ruochen2019-06-101-0/+4
| | | | | | | | | -Rename the following file to resolve the conflict with python-scapy: Rename /usr/bin/UTscapy to /usr/bin/UTscapy3 Rename /usr/bin/scapy to /usr/bin/scapy3 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python-scapy: solved the conflict with python3-scapyZang Ruochen2019-06-101-0/+5
| | | | | | | | | -Rename the following file to resolve the conflict with python3-scapy: Rename /usr/bin/UTscapy to /usr/bin/UTscapy2 Rename /usr/bin/scapy to /usr/bin/scapy2 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python-scapy: Remove redundant sed operationsZang Ruochen2019-06-101-7/+0
| | | | | | | -Remove redundant sed operations. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* bastille: solved the conflict with perl-module-text-wrap and base-filesZang Ruochen2019-06-101-3/+1
| | | | | | | | | -Remove the link to perl5 to resolve the conflict with perl-module-text-wrap. -Remove the operation on /var/lock to resolve the conflict with base-files. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* clamav-native: fix new build issueArmin Kuster2019-04-141-22/+19
| | | | | | | | re-arch the reciped to build properly. Fixed /var/lib/clamav dir issue Signed-off-by: Armin Kuster <akuster808@gmail.com>
* clamav: add clamav-cvd package for cvd dbArmin Kuster2019-04-142-6/+259
| | | | | | | | | Add native package to support creating a mirror of the clamav cvd and supply it in a new package. Provide a INSTALL_CLAMAV_CVD flag to bypass this creation Signed-off-by: Armin Kuster <akuster808@gmail.com>
* clamav: fix llvm reference versionArmin Kuster2019-04-131-1/+1
| | | | | | llvm8.0 does not exist. dropped the version part. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libmspack: update to 0.10.1Armin Kuster2019-04-071-3/+3
| | | | | | | | For details see: https://github.com/kyz/libmspack/blob/master/libmspack/ChangeLog change compression to match that now being used from source Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ccs-tools: move to reciped-macArmin Kuster2019-04-072-62/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* reorg ids: move ids recipes to recipes-idsArmin Kuster2019-03-3141-4401/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* reorg: move mac recipes to recipes-macArmin Kuster2019-03-3113-965/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* clamav: drop llvm version settingArmin Kuster2019-03-311-7/+3
| | | | | | | | There is only one llvm and its in core so drop allowing it to be overwritten. We can hardcode it now. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* samhain: fix runtime errorArmin Kuster2019-03-311-0/+1
| | | | | | | | | | fix: samhain[1652]: FATAL: x_dnmalloc.c: 2790: hashval < AMOUNTHASH Killed disable dnmalloc Signed-off-by: Armin Kuster <akuster808@gmail.com>
* sssd: update to 1.16.4Armin Kuster2019-03-311-2/+2
| | | | | | | | | | | | | Add systemd pkgconf via DISTRO_FEATURE Fix uid/gid of sssd.conf [v2] drop non update related changes also, this includes CVE-2019-3811 Signed-off-by: Armin Kuster <akuster808@gmail.com>
* sssd: fix a few runtime issuesArmin Kuster2019-03-311-2/+17
| | | | | | | | | | include a few more RDEPEND packages. remove init script as there really isn't one yet. [v2] Squish build tweeking done in pkg update into this changeset Signed-off-by: Armin Kuster <akuster808@gmail.com>
* Revert "sssd: fix libcrypto version used"Armin Kuster2019-03-291-1/+1
| | | | | | This reverts commit 2488c965d6b1b440734f43326fb33ac642ac7b82. This corrects an incorrect fix as pointed out by Adrian Bunk.
* sssd: fix libcrypto version usedArmin Kuster2019-03-251-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* keyutils: fix pulling in glibc when musl enabledArmin Kuster2019-03-251-1/+3
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* keyutils: fix QA WARNINGArmin Kuster2019-03-161-0/+3
| | | | | | | | WARNING: keyutils-1.6-r0 do_package: QA Issue: keyutils: Files/directories were installed but not shipped in any package: /lib/pkgconfig /lib/pkgconfig/libkeyutils.pc Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libseccomp: update to 2.4.0Armin Kuster2019-03-161-2/+2
| | | | | | | | Update the syscall table for Linux v5.0-rc5. also a security releated issue; https://github.com/seccomp/libseccomp/issues/139 Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: update to 4.1.3Armin Kuster2019-03-123-5/+6
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-core-security: change fail2ban ptest to reg python pkgArmin Kuster2019-03-121-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tripwire: fix ptest so more tests passArmin Kuster2019-03-081-1/+2
| | | | | | replace relative path with abs path for binaries. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* keyutils: improve ptestsArmin Kuster2019-03-081-1/+1
| | | | | | Tests need lsb Signed-off-by: Armin Kuster <akuster808@gmail.com>
* keyutils: update to 1.6Armin Kuster2019-03-062-31/+2
| | | | | | | remove patch now included in update: keyutils-use-relative-path-for-link.patch Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: update to 4.0.6Armin Kuster2019-03-063-3/+3
| | | | | | includes: SMTP crash issue was fixed: CVE-2018-18956 Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python-fail2ban: update 0.10.4.0Armin Kuster2019-03-063-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libmspack: update to 0.9.1Armin Kuster2019-03-061-4/+4
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tripwire: update to 2.4.3.7Armin Kuster2019-03-061-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* samhain: update to 4.3.2Armin Kuster2019-03-064-2/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* xmlsec1: add PACKAGECONFIG disable-desChangqing Li2019-03-061-1/+2
| | | | | | Signed-off-by: Changqing Li <changqing.li@windriver.com> Reviewed-by: Tom Rini <trini@konsulko.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* clamav: update llvm to 8.0Armin Kuster2019-02-111-1/+1
| | | | | | ERROR: Nothing PROVIDES 'llvm6.0' Signed-off-by: Armin Kuster <akuster808@gmail.com>
* scapy: restore ptest by going to github directlyArmin Kuster2019-02-114-3/+19
| | | | | | | The pypi package removed the tests so go to the git repo directly. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* scapy: Fix shebang for python3Scott Ellis2019-02-111-0/+7
| | | | | | | | | Both scapy and UTscapy have python in the shebang line regardless of whether python3-scapy or python-scapy was built. Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* scapy: Add python-cryptography to RDEPENDSScott Ellis2019-02-111-1/+1
| | | | | Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* Upgrade scapy to 2.4.2Scott Ellis2019-02-114-16/+3
| | | | | | | | Upstream MANIFEST.in removed doc and test directories so remove ptest. Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* xmlsec1: upgrade 1.2.26 -> 1.2.27Adrian Bunk2019-02-111-2/+2
| | | | | Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* xmlsec1: Make the crypto libraries a PACKAGECONFIGAdrian Bunk2019-02-111-4/+6
| | | | | | | | | | | Usually one doesn't need variants for all 4 different crypto libraries installed at the same time. Also remove a libgpg-error DEPENDS that is not used directly by xmlsec1. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* xmlsec1: Include libxmlsec1-*.so in the main packageAdrian Bunk2019-02-111-0/+5
| | | | | | | They can be dynamically loaded with xmlSecCryptoDLLoadLibrary(). Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* checksec: Remove old scriptScott Ellis2019-02-111-882/+0
| | | | | | | Should have been removed in previous patch. Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apparmor: backport a patch to fix tool paths instead of seddingRoss Burton2019-01-172-2/+38
| | | | | | | | Sedding is ugly, and as upstream have already fixed this cherry-pick the patch instead. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apparmor: if Perl is disabled remove perl-using scriptsRoss Burton2019-01-171-0/+5
| | | | | | | aa-notify uses the Perl bindings, so isn't usable when perl is disabled. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apparmor: systemd.bbclas is useful even when disabledRoss Burton2019-01-171-7/+3
| | | | | | | | The systemd bbclass will remove any systemd files that have been installed if systemd is disabled, so always install the files and always inherit. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apparmor: remove pointless ALLOW_EMPTYRoss Burton2019-01-171-2/+0
| | | | | | | ${PN} has content, so there's no need to set ALLOW_EMPTY_${PN}. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apparmor: no need to conditionalise PACKAGESRoss Burton2019-01-171-1/+1
| | | | | | | | A package with no content is not generated, so there's no need to conditionalise assignments to PACKAGES. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apparmor: use manpages classRoss Burton2019-01-171-3/+3
| | | | | | | | The manpages class handles enabling/disabling the man pages based on the api-documentation DISTRO_FEATURE, and ensures that mandb is called. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apparmor: remove redundant SRoss Burton2019-01-171-2/+0
| | | | | | | This is the default value, so remove it. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apparmor: enable static libraries neatlyRoss Burton2019-01-171-2/+1
| | | | | | | | No need to fiddle with the configure arguments as we can just neuter disable-static.inc. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-07-23 05:49:52 +0000