linux/meta-security.git/dynamic-layers, branch styhead

switch to PEP-517 build backend

2024-08-10T16:42:05+00:00

Signed-off-by: Armin Kuster

python3-privacyidea: switch to PEP-517 build backend

2024-08-10T16:25:35+00:00

Signed-off-by: Armin Kuster

fail2ban: update to 1.1.0+

2024-08-01T01:10:05+00:00

Current 1.0.2 version does not work with scarthgap or later releases, as the asynchat module has been removed (as scheduled) from python's stdlib as of v3.12. fail2ban 1.1.0 also does not work out-of-the-box, as the distutils module which the pyinotify and systemd backends depend has also been removed. So update the recipe to point at commit ac62658c10f4, which fixes those two backends to no longer depend on distutils. Upstream's out-of-the-box ban action now uses the 'nft' command. People can still override and customize that in jail.conf/jail.local, but to make the recipe useful without customizing things back to use iptables, change the dependency iptables->nftables. Since 1.1.0, fail2ban has been python3-only, so the recipe becomes somewhat simpler since the whole do_compile preparation step can be removed. Signed-off-by: Rasmus Villemoes Signed-off-by: Armin Kuster

bastille: UNPACKDIR fixes

2024-07-30T00:07:01+00:00

New poky version uses UNPACKDIR instead of WORKDIR Signed-off-by: Mikko Rapeli Signed-off-by: Armin Kuster

python3-fail2ban: convert WORKDIR->UNPACKDIR

2024-07-30T00:07:01+00:00

Signed-off-by: Armin Kuster

sssd: Fix CVE-2023-3758

2024-07-30T00:07:01+00:00

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately. References: https://nvd.nist.gov/vuln/detail/CVE-2023-3758 Upstream-patch: https://github.com/SSSD/sssd/commit/f4ebe1408e0bc67abfbfb5f0ca2ea13803b36726 Signed-off-by: Hitendra Prajapati Signed-off-by: Armin Kuster

recipes: WORKDIR -> UNPACKDIR transition

2024-06-17T12:25:25+00:00

* WORKDIR -> UNPACKDIR transition * Switch away from S = WORKDIR Signed-off-by: Changqing Li [Fixed up the smack changes due to prior patch] Signed-off-by: Armin Kuster

sssd: remove duplicate option --without-python2-bindings

2024-06-17T12:25:25+00:00

The option --without-python2-bindings was added twice, by the commit 4375507f39ed4bc62e1304838870be65f3a81460, and then after python2 was deprecated with the commit 96737082ad20eabcbbaa82b0cacee0d05d50eaab. This removes the latter. Signed-off-by: Gaël PORTAY Signed-off-by: Armin Kuster

python3-pyinotify: Make asyncore support optional for Python 3

2024-03-27T16:36:58+00:00

Simple fix for Python 3.12 since it dropped asyncore. Catches the import error instead of using a version check so that the user can install the compatibility package for any uses that can't be upgraded to asyncio or similar immediately. Fixes: # python3 Python 3.12.1 (main, Dec 7 2023, 20:45:44) [GCC 13.2.0] on linux Type "help", "copyright", "credits" or "license" for more information. >>> import pyinotify Traceback (most recent call last): File "", line 1, in File "/usr/lib64/python3.12/site-packages/pyinotify.py", line 71, in import asyncore ModuleNotFoundError: No module named 'asyncore' >>> Signed-off-by: Mingli Yu Signed-off-by: Armin Kuster

meta-security: Drop ${PYTHON_PN}

2024-03-27T16:36:58+00:00

Signed-off-by: Armin Kuster --- V2] Fix typo in python3-pyinotify changes