linux/meta-security.git/meta-security-compliance/recipes-openscap, branch test

scap-security-guide: Inherit python3targetconfig

2021-02-24T04:34:51+00:00

Signed-off-by: Armin Kuster

openscap: Inherit python3targetconfig

2021-02-24T04:34:51+00:00

Signed-off-by: Armin Kuster

scap-security-guide: Fix openembedded platform tests and build

2021-02-15T00:31:00+00:00

Add patches to fix openembedded nodistro tests and openembedded build within ssg metadata. Signed-Off-By: Jate Sujjavanich Signed-off-by: Armin Kuster

scap-security-guide: fix build with Python 3.9

2020-11-15T19:03:39+00:00

The getchildren and getiterator functions are deprecated in Python 3.9. Backport 3 patches to fix the build issue. Fixes: File "/build/tmp/work/cortexa8hf-neon-poky-linux-gnueabi/scap-security-guide/0.1.44+gitAUTOINC+5fdfdcb2e9-r0/git/ssg/build_stig.py", line 41, in add_references index = rule.getchildren().index(ref) AttributeError: 'xml.etree.ElementTree.Element' object has no attribute 'getchildren' Signed-off-by: Yi Zhao Signed-off-by: Armin Kuster

scap-security-guide: add expat-native to DEPENDS

2020-10-16T04:15:03+00:00

Add expat-native to DEPENDS to fix the below do_configure error: | CMake Error at CMakeLists.txt:165 (message): | xmlwf is required! Signed-off-by: Mingli Yu Signed-off-by: Armin Kuster

openscap: update to 1.3.3

2020-06-19T23:03:23+00:00

Signed-off-by: Armin Kuster

openscap-daemon: add missing runtime dependencies

2020-03-27T23:53:25+00:00

Add missing runtime dependencies otherwise /usr/bin/oscapd can not startup. Signed-off-by: Yi Zhao Signed-off-by: Armin Kuster

scap-security-guide: pass the correct schema file path to openscap-native

2020-03-05T15:20:07+00:00

There is a build error when using openscap-native sstate cache. Steps to reproduce: Create a new build project in build-1 directory. $ bitbake openscap-native Then remove the whole build directory only keep the sstate-cache directory as a sstate mirror. Create another new build project in build-2 directory. Set SSTATE_MIRRORS $ bitbake scap-security-guide Error message: OpenSCAP Error: Schema file 'xccdf/1.1/xccdf-schema.xsd' not found in path '/buildarea/build-1/tmp/work-shared/openscap/oscap-build-artifacts/usr/share/openscap/schemas' when trying to validate '/buildarea/build-2/tmp/work/core2-64-poky-linux/scap-security-guide/0.1.44+gitAUTOINC+5fdfdcb2e9-r0/git/build/jre/xccdf-unlinked-resolved.xml' [/buildarea/build-1/tmp/work/x86_64-linux/openscap-native/1.3.1+gitAUTOINC+4bbdb46ff6-r0/git/src/source/validate.c:104] The oscap command from openscap-native tries to find the schema files in build-1 directory since these paths are hardcoded when building openscap-native. We need to pass the correct schema/xslt/cpe paths to oscap to make sure it can find the files in right location. Signed-off-by: Yi Zhao Signed-off-by: Armin Kuster

scap-security-guide: fix xml parsing error when build remediation files

2020-02-09T17:33:22+00:00

Backport 2 patches to fix the build error: Processing fix.text for: java_jre_configure_crypto_policy rule Unable to extract part of the fix.text after inclusion of remediation functions. Aborting.. jre/CMakeFiles/generate-internal-jre-bash-fixes.xml.dir/build.make:60: recipe for target 'jre/bash-fixes.xml' failed make[2]: *** [jre/bash-fixes.xml] Error 1 make[2]: *** Deleting file 'jre/bash-fixes.xml' Signed-off-by: Yi Zhao Signed-off-by: Armin Kuster

oe-scap: Fix QA RDEPENDS error

2019-09-07T15:34:22+00:00

ERROR: oe-scap-1.0-r0 do_package_qa: QA Issue: /usr/share/oe-scap/run_tests.sh contained in package oe-scap requires /bin/bash, but no providers found in RDEPENDS_oe-scap? [file-rdeps] Signed-off-by: Armin Kuster