linux/meta-security.git, branch master-wipMirror of git.yoctoproject.org/meta-security.githttps://git.enea.com/cgit/linux/meta-security.git/atom?h=master-wip2020-08-23T21:48:56+00:00layer.con: add DISTROOVERIDE for hardening2020-08-23T21:48:56+00:00Armin Kusterakuster808@gmail.com2020-07-28T05:05:34+00:00urn:sha1:d51c632edc3667b4ef29f3c040abb218f3cfe1c6
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta-harden: Add a layer to demo harding OE/YP2020-08-23T21:48:56+00:00Armin Kusterakuster808@gmail.com2020-07-26T20:10:31+00:00urn:sha1:94e8e61988848e92b20c4337e99cee6b03971c5c
Signed-off-by: Armin Kuster <akuster808@gmail.com>
trousers: Several Security fixes2020-08-17T22:08:14+00:00Armin Kusterakuster@mvista.com2020-08-17T21:50:28+00:00urn:sha1:787ba6faeaa8823a4d87e5edd15581cb4e12fa70
Fixes:
CVE-2020-24332
CVE-2020-24330
CVE-2020-24331
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
libseccomp: fix cross compile error for mips2020-08-04T17:41:00+00:00Kai Kangkai.kang@windriver.com2020-08-03T06:21:02+00:00urn:sha1:98e0a3ecf8161b678a224bc7b06abae9dc9d9039
Backport patch to fix cross compile error for mips:
| syscalls.h:44:6: error: expected identifier or '(' before numeric constant
| 44 | int mips;
| | ^~~~
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
clamav: add INSTALL_CLAMAV_CVD flag to do_install2020-08-04T17:41:00+00:00Charlie Daviescharles.davies@whitetree.xyz2020-08-02T19:18:06+00:00urn:sha1:3becd114a2888c87d8a9de4332fdb929e37fd1dc
Recipe provides INSTALL_CLAMAV_CVD flag to bypass clamav
cvd db creation. During do_install this flag should be
used to conditionally skip install of cvd db if needed.
Signed-off-by: Charlie Davies <charles.davies@whitetree.xyz>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
packagegroup-core-security: restore riscv64 for libssecomp2020-07-28T05:22:17+00:00Armin Kusterakuster808@gmail.com2020-07-25T18:39:21+00:00urn:sha1:fcceba2208fa7cf63d5841a6a1a3ff743b4cb35d
Signed-off-by: Armin Kuster <akuster808@gmail.com>
libseccomp: update to 2.5.02020-07-28T05:22:17+00:00Armin Kusterakuster808@gmail.com2020-07-25T18:39:20+00:00urn:sha1:04de3591c14f975f39bff13f3a4462d59f886b23
Notable changes:
Add support for the 64-bit RISC-V architecture
Update the syscall tables to Linux v5.8.0-rc5
Python bindings and build now default to Python 3.x
for more info see: https://github.com/seccomp/libseccomp/blob/master/CHANGELOG
Signed-off-by: Armin Kuster <akuster808@gmail.com>
packagegroup-core-security: remove libseccomp for riscv*2020-07-28T05:22:17+00:00Armin Kusterakuster808@gmail.com2020-07-25T14:41:18+00:00urn:sha1:29f47b44852122c5618e30037710dde009146eb5
Signed-off-by: Armin Kuster <akuster808@gmail.com>
libsecomp: rv32/rv64 target builds are not supported yet2020-07-28T05:22:01+00:00Armin Kusterakuster808@gmail.com2020-07-25T14:41:17+00:00urn:sha1:b5a5cbe1f511468af0b0673f88c83c3dd1c77da3
Signed-off-by: Armin Kuster <akuster808@gmail.com>
packagegroup-core-security: remove clamav for riscv*2020-07-25T16:00:39+00:00Armin Kusterakuster808@gmail.com2020-07-24T18:16:50+00:00urn:sha1:98ff502d4096331e2b8a8e4044860b23bf6f8ea5
Signed-off-by: Armin Kuster <akuster808@gmail.com>