From 5ae3536204ba3764b03647ab75169ee65ca43531 Mon Sep 17 00:00:00 2001 From: Michael Opdenacker Date: Sun, 17 Aug 2025 19:33:22 +0000 Subject: kernel-hardening-checker: upgrade to 0.6.10.2 Major upstream changes (not a minor release update in terms of features): - RISCV support - New "-a" option: autodetect and check the security hardening options of the running kernel You can now just run "kernel-hardening-checker -a" - Require Python 3.9 - Replace setup.py by pyproject.toml - Many fixes and new features Signed-off-by: Michael Opdenacker Signed-off-by: Khem Raj --- .../kernel-hardening-checker_0.6.10.2.bb | 35 ++++++++++++++++++++++ .../kernel-hardening-checker_0.6.10.bb | 34 --------------------- 2 files changed, 35 insertions(+), 34 deletions(-) create mode 100644 meta-oe/recipes-security/kernel-hardening-checker/kernel-hardening-checker_0.6.10.2.bb delete mode 100644 meta-oe/recipes-security/kernel-hardening-checker/kernel-hardening-checker_0.6.10.bb diff --git a/meta-oe/recipes-security/kernel-hardening-checker/kernel-hardening-checker_0.6.10.2.bb b/meta-oe/recipes-security/kernel-hardening-checker/kernel-hardening-checker_0.6.10.2.bb new file mode 100644 index 0000000000..559a15a009 --- /dev/null +++ b/meta-oe/recipes-security/kernel-hardening-checker/kernel-hardening-checker_0.6.10.2.bb @@ -0,0 +1,35 @@ +SUMMARY = "A tool for checking the security hardening options of the Linux kernel" +DESCRIPTION = "\ + There are plenty of security hardening options for the Linux kernel; Kconfig \ + options (compile-time); Kernel cmdline arguments (boot-time); Sysctl \ + parameters (runtime). A lot of them have to be enabled manually to make the \ + system more secure which is difficult to track. This tool helps with this \ + task by checking and reporting about the settings compared to a list of \ + recommendation. \ +" +HOMEPAGE = "https://github.com/a13xp0p0v/kernel-hardening-checker" +BUGTRACKER = "https://github.com/a13xp0p0v/kernel-hardening-checker/issues" +LICENSE = "GPL-3.0-only" +LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=d32239bcb673463ab874e80d47fae504" + +SRC_URI = "git://github.com/a13xp0p0v/kernel-hardening-checker;protocol=https;branch=master" +SRCREV = "0ebece346f187e7d3589883cc1d194fcd1c3cda8" + +PACKAGE_ARCH = "${MACHINE_ARCH}" + +RDEPENDS:${PN} = "\ + python3-json \ + python3-misc \ + bash \ +" + +# /boot/config is required for the analysis +RRECOMMENDS:${PN}:class-target = "\ + kernel-dev \ +" + +inherit python_setuptools_build_meta + +# allow to run on build host, if you don't want it in the image +# oe-run-native kernel-hardening-checker-native kernel-hardening-checker ... +BBCLASSEXTEND = "native" diff --git a/meta-oe/recipes-security/kernel-hardening-checker/kernel-hardening-checker_0.6.10.bb b/meta-oe/recipes-security/kernel-hardening-checker/kernel-hardening-checker_0.6.10.bb deleted file mode 100644 index e7610ac785..0000000000 --- a/meta-oe/recipes-security/kernel-hardening-checker/kernel-hardening-checker_0.6.10.bb +++ /dev/null @@ -1,34 +0,0 @@ -SUMMARY = "A tool for checking the security hardening options of the Linux kernel" -DESCRIPTION = "\ - There are plenty of security hardening options for the Linux kernel; Kconfig \ - options (compile-time); Kernel cmdline arguments (boot-time); Sysctl \ - parameters (runtime). A lot of them have to be enabled manually to make the \ - system more secure which is difficult to track. This tool helps with this \ - task by checking and reporting about the settings compared to a list of \ - recommendation. \ -" -HOMEPAGE = "https://github.com/a13xp0p0v/kernel-hardening-checker" -BUGTRACKER = "https://github.com/a13xp0p0v/kernel-hardening-checker/issues" -LICENSE = "GPL-3.0-only" -LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=d32239bcb673463ab874e80d47fae504" - -SRC_URI = "git://github.com/a13xp0p0v/kernel-hardening-checker;protocol=https;branch=master" -SRCREV = "f4dbe258ff3d37489962ea9cf210192ae7ff9280" - - -PACKAGE_ARCH = "${MACHINE_ARCH}" - -RDEPENDS:${PN} = "\ - python3-json \ -" - -# /boot/config is required for the analysis -RRECOMMENDS:${PN}:class-target = "\ - kernel-dev \ -" - -inherit setuptools3 - -# allow to run on build host, if you don't want it in the image -# oe-run-native kernel-hardening-checker-native kernel-hardening-checker ... -BBCLASSEXTEND = "native" -- cgit v1.2.3-54-g00ecf