summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* tpm2-openssl: Add UPSTREAM_CHECK_URIArmin Kuster2022-07-301-0/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tools: Add UPSTREAM_CHECK_URIArmin Kuster2022-07-301-0/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss: add UPSTREAM_CHECK_URIArmin Kuster2022-07-301-0/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tpm2-tss-engine: add UPSTREAM_CHECK_URIArmin Kuster2022-07-301-0/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ibmtpm2tss: fix SRC_URIArmin Kuster2022-07-301-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* fail2ban: add UPSTREAM_CHECK varsArmin Kuster2022-07-301-0/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* sssd: upgrade 2.7.1 -> 2.7.3Upgrade Helper2022-07-301-1/+3
| | | | add UPSTREAM_CHECK_URI
* chipsec: update to 1.8.7Armin Kuster2022-07-301-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* suricata: update to 6.0.5Armin Kuster2022-07-301-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* python3-privacyidea: update to 3.7.2Armin Kuster2022-07-301-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-security-tpm: add libhoth to pkg grpArmin Kuster2022-07-301-0/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-security: Add recipe for libhothJohn Edward Broadbent2022-07-301-0/+17
| | | | | | | | Libhoth is usb protocol implementation which is required for hoth class devices Signed-off-by: John Edward Broadbent <jebr@google.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-core-security.bb: add bubblewrap to pkg grpArmin Kuster2022-07-301-0/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* bubblewrap: Add recipeAlex Kiernan2022-07-301-0/+23
| | | | Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
* python3-privacyidea: add correct path to lib/privacyideaJeremy A. Puhlman2022-07-051-1/+1
| | | | | | | | | | | | | Nothing in getting installed in ${datadir}/lib, it is all going to ${prefix}/lib. setuptools pulls in ${libdir}/* so for the base lib case of ${prefix}/lib the build works. If libdir is something else lib64 for example, its still ending up in ${prefix}/lib and it fails to build. Set value to correct path as it is being installed. Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* clamav: make install owner match the added user nameJeremy A. Puhlman2022-07-051-1/+1
| | | | | | | | | | | | USERADD_PARAM:${PN}-freshclam = "--system -g ${CLAMAV_GID} --home-dir \ ${localstatedir}/lib/${BPN} \ --no-create-home --shell /sbin/nologin ${PN}" The username added to the passwd file is ${PN}. When ${PN} is multilibized, it no longer matches CLAMAV_UID. Make the two match. Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-integrity: kernel-modsign: prevents splitting out debug symbolsJose Quaresma2022-07-051-0/+2
| | | | | | | | | | Starting with [1] kernel modules symbols is being slipped in OE-core and this breaks the kernel modules sign, so disable it. [1] https://git.openembedded.org/openembedded-core/commit/?id=e09a8fa931fe617afc05bd5e00dca5dd3fe386e8 Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lkrg: update to 0.9.3Armin Kuster2022-07-052-49/+30
| | | | | | refresh patch Signed-off-by: Armin Kuster <akuster808@gmail.com>
* security-build-image: add lkrg-module to build imageArmin Kuster2022-06-231-0/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* chipsec: update to 1.8.5Armin Kuster2022-06-231-11/+10
| | | | | | minor recipe cleanup Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-core-security: skip mips firejailArmin Kuster2022-06-232-0/+4
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* README: update email addressArmin Kuster2022-06-231-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* lynis: update to 3.0.8Armin Kuster2022-06-231-1/+1
| | | | | | See changelog for details: https://cisofy.com/changelog/lynis/#308 Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ccs-tools: update to 1.8.9Armin Kuster2022-06-231-3/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* oeqa: shut done swtpm before and after testingArmin Kuster2022-06-231-0/+5
| | | | | | | fixes: swtpm: Could not open TCP socket: Address already in use Signed-off-by: Armin Kuster <akuster808@gmail.com>
* oeqa: meta-tpm shut swtpm down before and after testingArmin Kuster2022-06-232-0/+4
| | | | | | | fixes: swtpm: Could not open TCP socket: Address already in use Signed-off-by: Armin Kuster <akuster808@gmail.com>
* oeqa/clamav drop depricated --list-mirror testArmin Kuster2022-06-231-17/+4
| | | | | | Fix download test Signed-off-by: Armin Kuster <akuster808@gmail.com>
* security-test-image: add firejail and aide test suitesArmin Kuster2022-06-231-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-core-security: add firejailArmin Kuster2022-06-231-0/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* oeqa: Add a very basic firejail testArmin Kuster2022-06-231-0/+18
| | | | | | | | | | | Currently check if --help works. RESULTS: RESULTS - ping.PingTest.test_ping: PASSED (0.07s) RESULTS - ssh.SSHTest.test_ssh: PASSED (2.41s) RESULTS - firejail.FirejailTest.test_firejail_basic: PASSED (1.30s) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* firejail: Add new packageArmin Kuster2022-06-232-0/+106
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* aide.conf: adjust to allow for build time db creationArmin Kuster2022-06-231-7/+4
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* aide: add native support for build time db creationArmin Kuster2022-06-231-2/+30
| | | | | | | | | | | This will help create a aide db during build that is then installed on the rootfs for verification at boot time. This work was inspired by: Marco Cavallini Yocto Project Ambassador Signed-off-by: Armin Kuster <akuster808@gmail.com>
* classes: add aide routinesArmin Kuster2022-06-232-0/+63
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libmhash: add native pkg supportArmin Kuster2022-06-231-0/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* oeqa: add aide testArmin Kuster2022-06-231-0/+26
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* aide: add a few more config optionsArmin Kuster2022-06-231-1/+3
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* oeqa: update smack runtime testArmin Kuster2022-06-231-88/+15
| | | | | | drop test_smack_mmap_enforced as is was skipped do to possible licensing issues Signed-off-by: Armin Kuster <akuster808@gmail.com>
* smack-test: more py3 covertionArmin Kuster2022-06-232-11/+11
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* security-test-image: auto include layers if present.Armin Kuster2022-06-181-1/+10
| | | | | | | This is to simplify tesing to build one image and include pkgs depending on the layers included in the BBLAYERS. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* sssd: update to 2.7.1Armin Kuster2022-06-184-307/+24
| | | | | | | | | | | | | | drop CVE-2021-3621.patch refresh a few patches fixup configure-unsafe globally via sed in build.m4 === test RESULTS - sssd.SSSDTest.test_sssd_help: PASSED (1.70s) RESULTS - sssd.SSSDTest.test_sssd_sssctl_conf_perms_chk: PASSED (2.71s) RESULTS - sssd.SSSDTest.test_sssd_sssctl_deamon: PASSED (2.07s) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* oeqa: sssd.py fix testsArmin Kuster2022-06-181-2/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* sssd: use example conf fileArmin Kuster2022-06-181-1/+8
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* oeqa: fix checksec runtime testArmin Kuster2022-06-181-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-core-security.bbappend: add sssdArmin Kuster2022-06-181-0/+4
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* packagegroup-core-security: drop sssdArmin Kuster2022-06-181-1/+1
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* layer.conf:add meta-netorking to BBFILES_DYNAMICArmin Kuster2022-06-181-0/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* sssd:move to dynamic networking-layerArmin Kuster2022-06-189-0/+0
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* apparmor: fix ownership issuesArmin Kuster2022-06-181-0/+2
| | | | Signed-off-by: Armin Kuster <akuster808@gmail.com>
* aide: fix typoYi Zhao2022-06-181-1/+2
| | | | | | | | Fix typo: RDPENDS_${PN} -> RDEPENDS:${PN} Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-07-06 05:03:39 +0000