summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* samhain: fix aarch64 build issuesArmin Kuster2015-02-012-0/+39
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* checksec: fix rdepend issueArmin Kuster2015-02-011-0/+2
| | | | | | WARNING: QA Issue: checksec requires /bin/bash, but no providers in its RDEPENDS [file-rdeps] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libseccomp: fix rdependsArmin Kuster2015-02-011-0/+2
| | | | | | WARNING: QA Issue: libseccomp requires /bin/bash, but no providers in its RDEPENDS [file-rdeps] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ccs-tools: remove unused variable.Armin Kuster2015-02-011-1/+0
| | | | | | There was a ref to DEPEND with is meaningless so remove it. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* samhain: client fix rdependsArmin Kuster2015-02-011-1/+1
| | | | | | WARNING: QA Issue: samhain-client requires /bin/bash, but no providers in its RDEPENDS [file-rdeps] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nikto: fix SRC_URI for multilibPaul Eggleton2015-01-131-1/+1
| | | | | | | | ${BPN} should be used instead of ${PN} where you want the name without any prefix (and ${BP} is short for ${BPN}-${PV}). Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libseccomp: fix SRC_URI for multilibPaul Eggleton2015-01-131-1/+1
| | | | | | | | ${BPN} should be used instead of ${PN} where you want the name without any prefix (and ${BP} is short for ${BPN}-${PV}). Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libcap-ng: fix checksumsArmin Kuster2015-01-131-2/+2
| | | | | | the checksums did not get updated when upgrading package. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nikto: fix launching errorsArmin Kuster2015-01-031-1/+7
| | | | | | add several missing perl package depends so app can launch Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libwhisker2-perl: fix build issueArmin Kuster2015-01-031-6/+9
| | | | | | | | | | | minor formating clean ups. add "ssl" depend packageconf option Change inherit perlnative to BBCLASSEXTEND = "native" to fix build issue error: Can't install libwhisker2-perl-2.5-r0@i586: no package provides /home/akuster/oss/maint/security/poky/build/tmp/sysroots/x86_64-linux/usr/bin/perl-native/perl.real Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nikto: fix dependsArmin Kuster2015-01-031-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* perl: reorg recipes to match meta-perl.Armin Kuster2015-01-034-0/+0
| | | | | | | move security perl recipes to a more standardized recipes-perl layout. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* remove: libcurses-perl, libhtml-parser-perl, libnet-dns-perlArmin Kuster2015-01-033-77/+0
| | | | | | those packages are being moved to meta-perl. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libcap-ng: update to 7.4 plus security fixArmin Kuster2015-01-031-0/+0
| | | | | | | | | | | | | 0.7.4 - In pscap, remove unused code - Add CAPNG_INIT_SUPP_GRP to capng_change_id - Drop CAP_COMPROMISE_KERNEL - Update the autotools components - Dynamically detect last capability (#895105) - Add PR_SET_NO_NEW_PRIVS to capng_lock if kernel supports it (CVE-2014-3215) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* samhain: update to 3.1.3Armin Kuster2014-11-283-2/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroups [v2]: add a few more catagoriesArmin Kuster2014-11-281-0/+15
| | | | | | | | | | Add tripwire, samhain and checksec packages fix ccs-tools to exclude if no kernel support v2: fixed missing "}" Signed-off-by: Armin Kuster <akuster808@gmail.com>
* pinentry: remove from layerArmin Kuster2014-11-281-20/+0
| | | | | | pinentry is now in oe-core so remove it from this layer. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libseccomp: add package for tests.Armin Kuster2014-11-281-0/+9
| | | | | | | | | | | I wanted to run the tests manually on a target. Tests are now built and packaged. to run: /usr/lib/libseccomp/tests/regression -a will add ptest later. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* checksecurity: update to version 2.0.15Armin Kuster2014-10-261-2/+2
| | | | | | | | | update fixed: * Fix bug in the CS_NFSAFS definition in etc/check-setuid.conf that prevents the script from matching any filesystem. This bug was, actually, making the script not do anything in the default configuration. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* isic: Add new packageArmin Kuster2014-10-264-0/+291
| | | | | | | | This adds the ISIC is a suite of utilities to exercise the stability of an IP and its component stacks (TCP/UDP/ICMP etc.) It generates piles of pseudo random packets with configurable tendancies, then sent to the target to penetrate its firewall rules or find bug backported two patches from Redhat. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* samhain: update to 3.1.2Armin Kuster2014-10-263-2/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* README: update layers referencesArmin Kuster2014-09-131-0/+12
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* layer.conf: add layer depends.Armin Kuster2014-09-131-0/+2
| | | | | | added layerdepends check for perl-layer and opemembedded-layer Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libnet-ssleay-perl: remove from layerArmin Kuster2014-09-131-24/+0
| | | | | | libnet-ssleay-perl is now in meta-perl Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tripwire: ppc64 build failure.Armin Kuster2014-09-132-0/+36
| | | | | | | | | | configure: error: /bin/sh ./config.sub powerpc64-poky-linux failed config.sub did not understand the powerpc64 par. this patch adds that understanding. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nmap: New QA issue via ppcArmin Kuster2014-09-131-3/+3
| | | | | | | | | | | | Fixes: WARNING: QA Issue: nmap rdepends on libpcap, but it isn't a build dependency? [build-deps] nmap internal lua library does not compile with PPC so use OE version instead. Changed PACKAGECONFIG assignment from "??=" to "=". It was empty when using PPC. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nmap: Add gui supportArmin Kuster2014-09-131-8/+10
| | | | | | Add zenmap to work with gtk+/x11 Signed-off-by: Armin Kuster <akuster808@gmail.com>
* v2] nmap: use pkgconfig and reorgArmin Kuster2014-09-131-10/+24
| | | | | | | | | | | Added pkgconfig support Since most binaries provided by nmap can be excluded via configure manage via pkgconfig Aligned python packages with binaries so nmap-python is no longer needed V2: Missed some options in EXTRA_OECONF changes Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nmap: build QA WarningsArmin Kuster2014-09-131-1/+1
| | | | | | | | | WARNING: QA Issue: nmap rdepends on libcrypto, but it isn't a build dependency? [build-deps] WARNING: QA Issue: nmap rdepends on libssl, but it isn't a build dependency? [build-deps] This fixes the above QA warnings. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* samhain: arm build failureArmin Kuster2014-08-271-0/+4
| | | | | | | | | | | | | | | x_sh_error.c: In function 'sh_error_string': | x_sh_error.c:1580:31: error: incompatible type for argument 1 of 'memmove' | #define VA_COPY(ap1, ap2) memmove ((ap1), (ap2), sizeof (va_list)) | ^ | x_sh_error.c:1720:14: note: in expansion of macro 'VA_COPY' | /*@i@*/VA_COPY(vl2, vl); | ^ this patch fixes the arm build failure. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* pinentry: Fix QA errorArmin Kuster2014-08-271-4/+9
| | | | | | | | This fixes: WARNING: QA Issue: pinentry rdepends on libcap, but it isn't a build dependency? [build-deps] Also add pkgconfig support. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* samhain: server packageArmin Kuster2014-08-271-0/+50
| | | | | | This is the server portion. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* samhain: client packageArmin Kuster2014-08-271-0/+21
| | | | | | This is the client portion. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* samhain: New ISD packageArmin Kuster2014-08-276-0/+327
| | | | | | | These are the base files needed by both client and server recipes. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tripwire: Add files for package supportArmin Kuster2014-08-276-0/+1528
| | | | Signed-off-by: Armin Kuster <akuster@mvista.com>
* tripwire: Add new package to layerArmin Kuster2014-08-271-0/+78
| | | | Signed-off-by: Armin Kuster <akuster@mvista.com>
* tomoyo: Add kconfigArmin Kuster2014-08-203-0/+15
| | | | | | | | | | V2: Fixed path to init program Fix typo in name Add kernel config to enable tomoyo Signed-off-by: Armin Kuster <akuster@mvista.com>
* tomoyo: ccs-toolsArmin Kuster2014-08-202-0/+62
| | | | | | | | | | | | | Add userland support program ccs-tools V2: Added RDEPEND on systemd Fixed Description Moved man page to doc packaged Added Requiered distro feature on kernel component. Fixed typo in path for init program Signed-off-by: Armin Kuster <akuster@mvista.com>
* libnetaddr-ip-perl: Blacklist recipeArmin Kuster2014-08-101-0/+2
| | | | | | | | As far as I can tell, this is not used by any reciped in meta-security. It does not build so I am Black listing it. Signed-off-by: Armin Kuster <akuster@mvista.com>
* libcurses-perl: Fix build issueArmin Kuster2014-08-102-26/+27
| | | | | | Update to later vesrion to fix build issue. Signed-off-by: Armin Kuster <akuster@mvista.com>
* V2 packagegroup: Add initial set of package groupsArmin Kuster2014-08-061-0/+43
| | | | Signed-off-by: Armin Kuster <akuster@mvista.com>
* checksec: Add new alsr pic pie test scriptArmin Kuster2014-08-062-0/+898
| | | | Signed-off-by: Armin Kuster <akuster@mvista.com>
* pinentry: Fix do_package_qa issueArmin Kuster2014-08-061-1/+2
| | | | | | | This fixes; ERROR: QA Issue: pinentry: The compile log indicates that host include and/or library paths were used. Signed-off-by: Armin Kuster <akuster@mvista.com>
* nmap: update to 6.46Armin Kuster2014-08-063-103/+36
| | | | | | | | | Updated to later version on nmap. remove patch which is included in update Added ndiff package Include zenmap build changes but commented out for now and untested Signed-off-by: Armin Kuster <akuster@mvista.com>
* libcap-ng: resolved issue related with LONG_BIT definitionAlexandru.Vaduva2014-07-022-6/+71
| | | | | | | | The problem is well known for 64 bits architectures and the solution is offered in the same recibe but in the meta-selinux layer. Signed-off-by: Alexandru.Vaduva <Alexandru.Vaduva at enea.com> Signed-off-by: Armin Kuster <akuster@mvista.com>
* meta-security: Add MaintainersArmin Kuster2014-07-021-0/+12
| | | | | | | Add Maintainers statement to README and add self to list. Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* nmap: inherit autotools-brokensep to allow B=S build.Nick D'Ademo2014-05-071-1/+1
| | | | | Signed-off-by: Nick D'Ademo <nickdademo@gmail.com> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* lib-perl: Fix quoting in DESCRIPTIONSaul Wold2013-11-051-1/+1
| | | | | | My mistake for taking the older version, I thought I had the latest Signed-off-by: Saul Wold <sgw@linux.intel.com>
* libseccomp: add latest stable version, add ptestJoe MacDonald2013-11-044-3/+395
| | | | | | | | | A new stable version of libseccomp is available, so update the recipe. At the same time, integrate the ptest support that's currently being discussed on the libseccomp list. Signed-off-by: Joe MacDonald <joe@deserted.net> Signed-off-by: Saul Wold <sgw@linux.intel.com>
* meta-security: Bump buck-security to new version and remove patch file.mulhern2013-10-233-1765/+3
| | | | | | | | Since I am maintaining buck-security it has accepted the patch take_root_dir.patch and the new version (0.7) contains the result of applying the patch. Signed-off-by: mulhern <mulhern@yoctoproject.org>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-06-10 07:15:05 +0000