linux/meta-security.git, branch sumoMirror of git.yoctoproject.org/meta-security.githttps://git.enea.com/cgit/linux/meta-security.git/atom?h=sumo2018-11-27T16:59:16+00:00Use git fetcher for lynis to fetch older versions2018-11-27T16:59:16+00:00Stefan Lendlste.lendl@gmail.com2018-11-15T15:02:18+00:00urn:sha1:2160c5de874234045ba4e201a0703185b65dbae4
Signed-off-by: Stefan Lendl <ste.lendl@gmail.com>
[Minor tweek to add SRCREV]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
CVE-2018-11652 nikto: arbitray OS command injection via http server field.2018-07-03T22:32:38+00:00Nagalakshmi Veeramallunveeramallu@mvista.com2018-06-29T10:08:25+00:00urn:sha1:1e4b45ca888188b4eb838cb29b501ee004237552
CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers
to inject arbitrary OS commands via the Server field in an HTTP response header,
which is directly injected into a CSV report.
Signed-off-by: Nagalakshmi Veeramallu <nveeramallu@mvista.com>
Reviewed-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
samhain: correct service status2018-07-03T22:32:38+00:00Changqing Lichangqing.li@windriver.com2018-06-27T05:10:29+00:00urn:sha1:646b36e36de042080f6d30f2c5d230c8ed0351e6
status get by "systemctl status samhain" is not correct.
It is active(exited) now. but actually, there is a dameon
running, it should be active(running). so change Type of
servive.
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Fix build issue for apparmor when systemd is used2018-07-03T22:32:38+00:00Jinliang Lijinliang.li@linux.alibaba.com2018-06-06T14:06:53+00:00urn:sha1:7d05867aa10fd48a4679416d207897c2f9c57fc6
When systemd is used as system init manager, there is a build issue complains
"can't found apparmor.service". This patch fix it.
Signed-off-by: Jinliang Li <jinliang.li@linux.alibaba.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Fix build issue for apparmor kernel configuration2018-07-03T22:32:29+00:00Jinliang Lijinliang.li@linux.alibaba.com2018-06-06T14:06:52+00:00urn:sha1:7e262526e66f1acae364d3dbcb324cc73698a208
Set the correct path of kernel configuration file in linux-yocto_4.%.bbappend
to fix the build issue, which is "Fetcher failure for URL: 'file://apparmor.cfg'.
Unable to fetch URL from any source."
Signed-off-by: Jinliang Li <jinliang.li@linux.alibaba.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
xmlsec1: remove host paths from target files2018-05-07T22:19:06+00:00Wenzong Fanwenzong.fan@windriver.com2018-04-18T07:44:57+00:00urn:sha1:7a503cbfa2b64d60e547114b860a5320aeb721a2
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
qemu: remove bb as this option is in core2018-05-07T22:18:58+00:00Armin Kusterakuster808@gmail.com2018-04-20T02:15:35+00:00urn:sha1:d01d18ad95cce293be44bb791fb1c29315293149
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta-security: remove depened on other security layers2018-04-13T15:18:36+00:00Armin Kusterakuster808@gmail.com2018-04-12T03:02:00+00:00urn:sha1:16ff910cca7932525cd42d1b86ac4ba0e3b5777c
Signed-off-by: Armin Kuster <akuster808@gmail.com>
clamav: update LLVM version to match core2018-04-13T15:18:36+00:00Armin Kusterakuster808@gmail.com2018-04-12T01:49:19+00:00urn:sha1:d2a71316f273a272a3ae97ed6015e1a8ed3006a8
Signed-off-by: Armin Kuster <akuster808@gmail.com>
sssd: only include when pam in DISTRO_FEATURES2018-04-13T15:18:36+00:00Armin Kusterakuster808@gmail.com2018-04-12T00:27:02+00:00urn:sha1:295d3f2bc9cdc3001539e94352025eb1cd20fe24
Signed-off-by: Armin Kuster <akuster808@gmail.com>