linux/meta-openembedded.git/meta-oe/recipes-security, branch langdale

audit: Inherit python3targetconfig

2022-12-20T15:36:28+00:00

It uses python3-config during build to grok the python specific includedirs, therefore its important to ensure that target specific python3-config is used, otherwise currently it defaults to native python3-config which ends up adding native python3 include paths which might work out ok but is exposed when target is 32bit + lfs enabled, the headers don't match between native and target python Signed-off-by: Khem Raj (cherry picked from commit c7fcebd05d18c118eccbf6bc6c75ea91d0b89063) Signed-off-by: Armin Kuster

audit: upgrade 3.0.8 -> 3.0.9

2022-12-20T15:30:46+00:00

Changelog: =========== In auditd, release the async flush lock on stop Don't allow auditd to log directly into /var/log when log_group is non-zero Cleanup krb5 memory leaks on error paths Update auditd.cron to use auditctl --signal In auparse, if too many fields, realloc array bigger (Paul Wolneykien) In auparse, special case kernel module name interpretation If overflow_action is ignore, don't treat as an error Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj (cherry picked from commit 01eb5561da2823a8bb80e790bfbb6cdf320ce09e) Signed-off-by: Armin Kuster

audit: Fix compile error for audit_2.8.5

2022-10-21T16:57:59+00:00

Fix below compile errors 1. Fix build with linux 5.17+ audit errors out due to swig munging it does with kernel headers | audit_wrap.c: In function '_wrap_audit_rule_data_buf_set': | audit_wrap.c:4701:17: error: cast specifies array type | 4701 | arg1->buf = (char [])(char *)memcpy(malloc((size)*sizeof(char)), (const char *)(arg2), sizeof(char)*(size)); | | ^ | audit_wrap.c:4701:15: error: invalid use of flexible array member | 4701 | arg1->buf = (char [])(char *)memcpy(malloc((size)*sizeof(char)), (const char *)(arg2), sizeof(char)*(size)); | | ^ | audit_wrap.c:4703:15: error: invalid use of flexible array member | 4703 | arg1->buf = 0; | | ^ These errors are due to VLAIS from kernel headers, so we copy linux/audit.h and make the needed change in local audit.h and make needed arrangements in build to use it when building audit package Take reference of upstream commit ee3c680c3 audit: Upgrade to 3.0.8 and fix build with linux 5.17+ Update 0002-Fixed-swig-host-contamination-issue.patch 2. Fix ipx.h missing file bug for kernel 5.15 ipx.h header file is removed in kernel 5.15 Link: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/include/net?id=6c9b40844751ea30c72f7a2f92f4d704bc6b2927 which is causing below error for system with kernel equal and higher than 5.15 | ../../git/auparse/interpret.c:48:10: fatal error: linux/ipx.h: No such file or directory | 48 | #include | | ^~~~~~~~~~~~~ Add below patch to fix this issue. 0001-Make-IPX-packet-interpretation-dependent-on-the-ipx-header.patch Link: https://github.com/linux-audit/audit-userspace/commit/6b09724c69d91668418ddb3af00da6db6755208c Signed-off-by: Akash Hadke Signed-off-by: Akash Hadke Signed-off-by: Khem Raj

passwdqc: fix the libpasswdqc FILES setting

2022-09-21T01:55:26+00:00

The actual file name is now libpasswdqc.so.1 instead of libpasswdqc.so.0. This fixes the following error when installing passwdqc: nothing provides libpasswdqc needed by passwdqc-2.0.2-r0 Signed-off-by: Chen Qi Signed-off-by: Khem Raj

passwdqc: Upgrade to 2.0.2

2022-09-07T23:44:54+00:00

License-Update: install-dependencies.sh and run-build-and-tests.sh are mentioned under GPL-2.0 but they are not included in release tarball Signed-off-by: Khem Raj

audit: Revert the tweak done in configure step in do_install

2022-08-17T18:05:56+00:00

This tweak is needed for building audit but not the interfaces it may expose via the headers, therefore undo the tweak before packaging things up Reported-By: Scott Murray Signed-off-by: Khem Raj

audit: Fix build with musl

2022-08-10T15:48:30+00:00

Signed-off-by: Khem Raj

audit: Upgrade to 3.0.8 and fix build with linux 5.17+

2022-08-08T18:38:15+00:00

audit errors out due to swig munging it does with kernel headers | audit_wrap.c: In function '_wrap_audit_rule_data_buf_set': | audit_wrap.c:4701:17: error: cast specifies array type | 4701 | arg1->buf = (char [])(char *)memcpy(malloc((size)*sizeof(char)), (const char *)(arg2), sizeof(char)*(size)); | | ^ | audit_wrap.c:4701:15: error: invalid use of flexible array member | 4701 | arg1->buf = (char [])(char *)memcpy(malloc((size)*sizeof(char)), (const char *)(arg2), sizeof(char)*(size)); | | ^ | audit_wrap.c:4703:15: error: invalid use of flexible array member | 4703 | arg1->buf = 0; | | ^ These errors are due to VLAIS from kernel headers, so we copy linux/audit.h and make the needed change in local audit.h and make needed arrangements in build to use it when building audit package Signed-off-by: Khem Raj Cc: Bruce Ashfield

tomoyo-tools: Drop md5sum

2022-04-25T17:44:13+00:00

Signed-off-by: Khem Raj

tomoyo-tools: Define SBINDIR

2022-04-25T17:44:13+00:00

default SBINDIR is hardcoded to /sbin which does not work when using usrmerge Signed-off-by: Khem Raj