aboutsummaryrefslogtreecommitdiffstats
path: root/meta-oe/recipes-security
AgeCommit message (Collapse)Author
2022-05-03tomoyo-tools: Drop md5sumKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 984bc7eaca68923299797fae0fc6f89e2c6749e2) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-05-03tomoyo-tools: Define SBINDIRKhem Raj
default SBINDIR is hardcoded to /sbin which does not work when using usrmerge Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 8c7ffffa07d3c5bb8156a90f4f37dc0cc3166153) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-04-18audit: Upgrade 3.0.6 -> 3.0.7Alex Kiernan
Dependency on bash has been removed upstream. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Alex Kiernan <alexk@zuma.ai> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-03-29usbguard: package simplificationAnu Deepthika, Nandipati
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-03-24usbguard: Add inital recipeAnu Deepthika, Nandipati
Set one crypto-backend library at a time OpenSSL is the crypto-backend library set for device hashing Override PACKAGECONFIG to replace it with libsodium or libgcrypt Signed-off-by: Anu Deepthika, Nandipati <Nandipati.AnuDeepthika@philips.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-03-04recipes: Update LICENSE variable to use SPDX license identifiersKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-11-03recipes: Update SRC_URI branch and protocolsRichard Purdie
This patch updates SRC_URIs using git to include branch=master if no branch is set and also to use protocol=https for github urls as generated by the conversion script in OE-Core. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-10-19audit: upgrade 3.0.5 -> 3.0.6Yi Zhao
Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-10-14keyutils: fix install pathAlexander Thoma
Signed-off-by: Alexander Thoma a.thoma@rational-online.com Signed-off-by: Florian Wühr f.wuehr@rational-online.com Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-19audit: upgrade 3.0.4 -> 3.0.5Yi Zhao
Drop backported patch. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-11audit: upgrade 3.0.3 -> 3.0.4Yi Zhao
Backport a patch to fix the wrong account associations issue. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-06audit: fix compile error for 2.8.5Yi Zhao
* Backport a patch to fix the compile error * Refresh the patches to fix the patch-fuzz warning. * Minor tweaks to the recipe with reference to the 3.0 bb file. Fixes: tmp/work/core2-64-poky-linux/audit/2.8.5-r0/recipe-sysroot-native/usr/bin/x86_64-poky-linux/../../libexec/x86_64-poky-linux/gcc/x86_64-poky-linux/11.1.1/ld: ausearch-checkpt.o:/usr/src/debug/audit/2.8.5-r0/build/src/../../git/src/ausearch-common.h:53: multiple definition of `event_node_list'; ausearch.o:/usr/src/debug/audit/2.8.5-r0/build/src/../../git/src/ausearch-common.h:53: first defined here Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-03Convert to new override syntaxMartin Jansa
This is the result of automated script (0.9.1) conversion: oe-core/scripts/contrib/convert-overrides.py . converting the metadata to use ":" as the override character instead of "_". Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2021-08-03audit: upgrade 3.0.2 -> 3.0.3Yi Zhao
Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-08audit: upgrade 3.0.1 -> 3.0.2Yi Zhao
Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-12audit: migrate from meta-selinuxArmin Kuster
Move audit to a more common layer to simplify integration. Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-11nmap: change shebang to python3Changqing Li
upstream nmap is python2 compatiable now, but this recipe supports python3. Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-17softhsm: update to 2.6.1 and alignakuster
meta-security has this pkg to but newer. Move from meta-sec to meta-oe minor cleanups. Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-05-31passwdqc: remove double modify operationKonrad Weihmann
It is either += or append but not both - picking append to be the safe bet Signed-off-by: Konrad Weihmann <kweihmann@outlook.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-15nmap: make ndiff support python3Mingli Yu
The ndiff is python2 compatible now, backport a patch from debian to make ndiff port to python3. Refer to https://sources.debian.org/data/main/n/nmap/7.80+dfsg1-2/debian/patches/0004-Python3-port-of-ndiff.patch Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-24nmap: Use py3 in depends/rdependsKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-22meta-oe: Remove using python2Khem Raj
This change makes the parsing go though, we still might have build issues, which will be reported in world builds seprately Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-15keyutils: upgrade 1.6 -> 1.6.1Mingde (Matthew) Zeng
Signed-off-by: Matthew Zeng <Matthew.Zeng@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-22softhsm: add recipeJan Luebbe
This is useful for consolidation of code-signing interfaces when building an image with verified boot mechanisms or signed update artifacts. It can also be used on the target as a backend for software which uses the PKCS#11 API to access private key material. Signed-off-by: Jan Luebbe <jlu@pengutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-21recipes: rename distro_features_check to features_checkDenys Dmytriyenko
Avoid warning due to the class rename in OE-Core. Signed-off-by: Denys Dmytriyenko <denys@ti.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-25passwdqc: Clarify BSD license variantChristophe PRIOUZEAU
The License of passwdqc is BSD-1-Clause. Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-25keyutils: Fix installed-vs-shipped for nativesdkRobert Yang
Fixed: $ bitbake nativesdk-keyutils ERROR: nativesdk-keyutils-1.6-r0 do_package: QA Issue: nativesdk-keyutils: Files/directories were installed but not shipped in any package: /usr /etc /usr/share /usr/share/man /usr/share/keyutils [snip] /etc/request-key.conf /etc/request-key.d Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-23nmap: Update to 7.80Peiran Hong
Updates nmap to v7.80, this solves the following CVEs: - CVE-2017-18594 - CVE-2018-15173 and addressed numerous bugs as well. The patch '0001-include-time.h-for-time-structure-definition.patch' is modified to be applicable to the new version while serving for the same purpose. The license changed in the commit https://github.com/nmap/nmap/commit/d639a53 and is only a date bump without modification of any content in the license. Signed-off-by: Peiran Hong <peiran.hong@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-29Adapt to the lsb -> lsb-release change in OE-coreAdrian Bunk
Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-10keyutils: move recipe and patches from meta-security to meta-oeYongxin Liu
keyutils is originally in https://git.yoctoproject.org/git/meta-security. Move it to meta-oe since other recipes in OE depend on it. Signed-off-by: Yongxin Liu <yongxin.liu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-03-07nmap: Fix build on RISC-VKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-02-03nmap: Include additional FILES path for certsScott Ellis
If both ncat and ssl are in PACKAGECONFIG then the installer adds a cert bundle to /usr/share/ncat/ca-bundle.crt Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-02-03nmap: Fix typo in pcre PACKAGECONFIGScott Ellis
Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-28nmap: Fix build with clang8/musl/libc++Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-22nmap: install ndiffMingli Yu
Currently, the ndiff isn't built and installed as ndiff is python2 compatible script and it checks PYTHON_VERSION to determine whether build and install ndiff in configure phase. Update to inherit pythonnative to let the PYTHON_VERSION to be 2 to let ndiff be built and installed. Apart from ndiff python script, there is another script named ndiff.py used by ndiff, export PYTHON_SITEPACKAGES_DIR to make ndiff.py installed in the correct place. Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-12nmap: update to 7.70Armin Kuster
Update LIC_FILES_CHKSUM for yr change Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-06-01nmap: move recipe from meta-security to meta-oeArmin Kuster
[V2] Remove obsolete sed operations Remove zenmap as python-pygtk was obsoleted in core Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-03-29leveldb: move to recipes-dbsArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-05samba, openwsman, pam-ssh-agent-auth, sblim-sfcb, passwdqc, python-pam, ↵Martin Jansa
smbnetfs: require pam in DISTRO_FEATURES * there is explicit dependency on libpam without respecting pam in DISTRO_FEATURES so add the check to prevent people building it against broken libpam Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-03-01passwdqc: move to recipes-securityArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-01leveldb: move to recipes-securityArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-03-01tomoyo-tools: move to recipes-secuityArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-17 19:17:43 +0000