linux/meta-openembedded.git/meta-oe/recipes-security/audit, branch styhead

audit: fix build when systemd is enabled.

2024-11-19T21:13:24+00:00

Signed-off-by: Armin Kuster Signed-off-by: Khem Raj (cherry picked from commit e68145b00260fc380242cd67579068427e501c10) Signed-off-by: Armin Kuster

audit: Fix CVE_PRODUCT

2024-11-19T21:13:21+00:00

Fix "audit" set in CVE_PRODUCT to "linux:audit" to detect only vulnerabilities where the vendor is "linux". Currently, CVE_PRODUCT also detects vulnerabilities where the vendor is "visionsoft", which are unrelated to the "audit" in this recipe. https://www.opencve.io/cve?vendor=visionsoft&product=audit In addition, all the vulnerabilities currently detected in "audit" have the vendor of "visionsoft" or "linux". Therefore, fix "audit" set in CVE_PRODUCT to "linux:audit". Signed-off-by: Shinji Matsunaga Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

audit: upgrade 4.0.1 -> 4.0.2

2024-08-14T15:15:18+00:00

ChangeLog: - Fix musl C builds - Many code cleanups - Use atomic variables if available for signal related flags - Dont rotate audit logs when auditd is in debug mode - Fix a couple memory leaks on error paths - Correct output when displaying rules with exe/path/dir - Fix auparse lookup test to not use the system libaupaurse - Improve auparse metrics - Update auparse normalizer for recent syscalls - Make status report uniform Drop 0001-Replace-__attribute_malloc__-with-__attribute__-__ma.patch as the issue has been fixed upstream. Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

recipes: Start WORKDIR -> UNPACKDIR transition

2024-05-23T15:44:44+00:00

Replace references of WORKDIR with UNPACKDIR where it makes sense to do so in preparation for changing the default value of UNPACKDIR. Signed-off-by: Khem Raj

Use PYTHON_SITEPACKAGES_DIR instead of hard-coded site-packages directory path

2024-04-16T04:01:20+00:00

The following paths have been replaced with PYTHON_SITEPACKAGES_DIR: - "${libdir}/${PYTHON_DIR}/site-packages" - "${libdir}/python${PYTHON_BASEVERSION}/site-packages" - "${libdir}/python*/site-packages" - "${libdir}/python3.*/site-packages" Signed-off-by: alperak Signed-off-by: Khem Raj

audit: upgrade 4.0 -> 4.0.1

2024-03-22T16:05:47+00:00

ChangeLog: https://github.com/linux-audit/audit-userspace/releases/tag/v4.0.1 Update TRUSTED_APP interpretation to look for known fields; In auditd plugins, allow variable amount of arguments; Fix augenrules to work correctly when kernel is in immutable mode; Add audisp-filter plugin; Improve sorting speed of aureport --summary reports; Auditd & audit-rules.service pick up paths automatically. * Drop backport patch. * Specify runstatedir. Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

audit: upgrade 3.1.2 -> 4.0

2024-02-26T16:13:20+00:00

ChangeLog: https://github.com/linux-audit/audit-userspace/releases/tag/v4.0 Major changes: Separate loading rules and logging events into separate services, audit-rules.service and auditd.service. Drop support for python2 and SysVinit. The auvirt and autrace programs have been dropped. The syscall and interpretation tables have been updated for the 6.8 kernel. * Backport patch to fix build error with musl * Clean up configure options * Use its own systemd service files * Refresh patches * Fix indentation Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

audit: reenable python bindings and bring in distutils via setuptools (needed with python 3.12)

2024-01-02T01:09:56+00:00

Signed-off-by: Alexander Kanavin Signed-off-by: Khem Raj

audit: disable python bindings as incompatible with python 3.12

2023-12-31T16:27:47+00:00

Signed-off-by: Alexander Kanavin Signed-off-by: Khem Raj

audit: upgrade 3.1.1 -> 3.1.2

2023-09-10T13:49:11+00:00

Changelog: https://github.com/linux-audit/audit-userspace/releases/tag/v3.1.2 Refresh local patches. Signed-off-by: Yi Zhao Signed-off-by: Khem Raj