linux/meta-security.git/meta-security-compliance, branch dunfell

README: updated branch for Dunfell

2020-10-17T14:16:48+00:00

Signed-off-by: Armin Kuster

scap-security-guide: add expat-native to DEPENDS

2020-10-16T14:24:41+00:00

Add expat-native to DEPENDS to fix the below do_configure error: | CMake Error at CMakeLists.txt:165 (message): | xmlwf is required! Signed-off-by: Mingli Yu Signed-off-by: Armin Kuster (cherry picked from commit 4c2f7ffd492c7083273aca7cc718802279f05ce2)

layer.conf: update LAYERSERIES_COMPAT for dunfell

2020-03-27T23:53:25+00:00

Signed-off-by: Martin Jansa Signed-off-by: Armin Kuster

lynis: add missing rdepends

2020-03-27T23:53:25+00:00

add findutils Signed-off-by: Armin Kuster

openscap-daemon: add missing runtime dependencies

2020-03-27T23:53:25+00:00

Add missing runtime dependencies otherwise /usr/bin/oscapd can not startup. Signed-off-by: Yi Zhao Signed-off-by: Armin Kuster

scap-security-guide: pass the correct schema file path to openscap-native

2020-03-05T15:20:07+00:00

There is a build error when using openscap-native sstate cache. Steps to reproduce: Create a new build project in build-1 directory. $ bitbake openscap-native Then remove the whole build directory only keep the sstate-cache directory as a sstate mirror. Create another new build project in build-2 directory. Set SSTATE_MIRRORS $ bitbake scap-security-guide Error message: OpenSCAP Error: Schema file 'xccdf/1.1/xccdf-schema.xsd' not found in path '/buildarea/build-1/tmp/work-shared/openscap/oscap-build-artifacts/usr/share/openscap/schemas' when trying to validate '/buildarea/build-2/tmp/work/core2-64-poky-linux/scap-security-guide/0.1.44+gitAUTOINC+5fdfdcb2e9-r0/git/build/jre/xccdf-unlinked-resolved.xml' [/buildarea/build-1/tmp/work/x86_64-linux/openscap-native/1.3.1+gitAUTOINC+4bbdb46ff6-r0/git/src/source/validate.c:104] The oscap command from openscap-native tries to find the schema files in build-1 directory since these paths are hardcoded when building openscap-native. We need to pass the correct schema/xslt/cpe paths to oscap to make sure it can find the files in right location. Signed-off-by: Yi Zhao Signed-off-by: Armin Kuster

scap-security-guide: fix xml parsing error when build remediation files

2020-02-09T17:33:22+00:00

Backport 2 patches to fix the build error: Processing fix.text for: java_jre_configure_crypto_policy rule Unable to extract part of the fix.text after inclusion of remediation functions. Aborting.. jre/CMakeFiles/generate-internal-jre-bash-fixes.xml.dir/build.make:60: recipe for target 'jre/bash-fixes.xml' failed make[2]: *** [jre/bash-fixes.xml] Error 1 make[2]: *** Deleting file 'jre/bash-fixes.xml' Signed-off-by: Yi Zhao Signed-off-by: Armin Kuster

meta-security-compliance/conf/layer.conf: fix typo

2019-12-15T16:45:49+00:00

Signed-off-by: Armin Kuster

meta-security: add layer index callouts

2019-12-07T23:31:34+00:00

Signed-off-by: Armin Kuster

layer.conf: Update for zeus series

2019-10-11T14:41:01+00:00

Signed-off-by: Armin Kuster Acked-by: Martin Jansa Signed-off-by: Armin Kuster