Mirror of git.yoctoproject.org/meta-security.git https://git.enea.com/cgit/linux/meta-security.git/atom?h=styhead 2024-08-10T16:42:05+00:00 2024-08-10T16:42:05+00:00 Armin Kuster akuster808@gmail.com 2024-08-10T16:42:05+00:00 urn:sha1:783c08cb223ff9706d4307933fd86ca2765522d6 Signed-off-by: Armin Kuster <akuster808@gmail.com> 2024-08-10T16:25:35+00:00 Armin Kuster akuster808@gmail.com 2024-08-10T16:25:35+00:00 urn:sha1:97789e4fad70f8073d8a5602180f8db40baf516d Signed-off-by: Armin Kuster <akuster808@gmail.com> 2024-08-01T01:10:05+00:00 Rasmus Villemoes rasmus.villemoes@prevas.dk 2024-07-08T13:11:38+00:00 urn:sha1:a2ec4fc27530c3401d4c2ebeb9395e9830c1655c Current 1.0.2 version does not work with scarthgap or later releases, as the asynchat module has been removed (as scheduled) from python's stdlib as of v3.12. fail2ban 1.1.0 also does not work out-of-the-box, as the distutils module which the pyinotify and systemd backends depend has also been removed. So update the recipe to point at commit ac62658c10f4, which fixes those two backends to no longer depend on distutils. Upstream's out-of-the-box ban action now uses the 'nft' command. People can still override and customize that in jail.conf/jail.local, but to make the recipe useful without customizing things back to use iptables, change the dependency iptables->nftables. Since 1.1.0, fail2ban has been python3-only, so the recipe becomes somewhat simpler since the whole do_compile preparation step can be removed. Signed-off-by: Rasmus Villemoes <rasmus.villemoes@prevas.dk> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2024-07-30T00:07:01+00:00 Armin Kuster akuster808@gmail.com 2024-07-28T21:02:40+00:00 urn:sha1:fce3cf312d3344777986147e624a9f40bdaabb0d Signed-off-by: Armin Kuster <akuster808@gmail.com> 2024-03-27T16:36:58+00:00 Armin Kuster akuster808@gmail.com 2024-02-20T16:44:41+00:00 urn:sha1:4eab875b339a128049061fa34b60f0f2167bd0ca Signed-off-by: Armin Kuster <akuster808@gmail.com> --- V2] Fix typo in python3-pyinotify changes 2024-01-28T17:13:54+00:00 Armin Kuster akuster808@gmail.com 2024-01-25T14:18:29+00:00 urn:sha1:d25b3483947731e1e71a9c18fc33aba327c33c9c Signed-off-by: Armin Kuster <akuster808@gmail.com> 2023-12-29T14:09:30+00:00 Armin Kuster akuster808@gmail.com 2023-12-14T01:50:39+00:00 urn:sha1:699ffcbdaf173cd26c5eab3927a3f13b44d61780 Signed-off-by: Armin Kuster <akuster808@gmail.com> 2023-10-08T19:24:38+00:00 Rasmus Villemoes rasmus.villemoes@prevas.dk 2023-10-04T20:51:11+00:00 urn:sha1:3f7d40b0fc92e4de3c008c8a0e1d26960d3f4085 On a systemd-based system, one is likely to make use of 'backend=systemd', which requires the systemd module. Both the pyinotify and systemd backends require the distutils module. Signed-off-by: Rasmus Villemoes <rasmus.villemoes@prevas.dk> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2023-10-08T19:24:38+00:00 Rasmus Villemoes rasmus.villemoes@prevas.dk 2023-10-04T20:51:10+00:00 urn:sha1:e63009af1934a4c455758e33ca0ea06a5fd25631 Currently, one gets Unable to import fail2ban database module as sqlite is not available So we need to ensure the sqlite3 python module is available. That will automatically pull in libsqlite3. Since fail2ban does not actually depend on the the CLI which the sqlite3 package provides, drop that dependency. Signed-off-by: Rasmus Villemoes <rasmus.villemoes@prevas.dk> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2023-10-08T19:24:27+00:00 Rasmus Villemoes rasmus.villemoes@prevas.dk 2023-10-04T20:51:09+00:00 urn:sha1:31b70d93fcfac878caa2903c99b5b7f610befa35 fail2ban ships with a suitable .service file, so install that if systemd is in DISTRO_FEATURES. The logic in rm_sysvinit_initddir in systemd.bbclass will then take care of removing the sysvinit script if sysvinit is not in DISTRO_FEATURES. Signed-off-by: Rasmus Villemoes <rasmus.villemoes@prevas.dk> Signed-off-by: Armin Kuster <akuster808@gmail.com>