linux/meta-security.git/recipes-mac, branch walnascar

apparmor: update from 3.1.3 to 4.0.3

2024-12-27T16:28:23+00:00

Fixes python 3.13 support though needed one more patch which is also submitted upstream. oeqa runtime test passes on qemuarm and qemuarm64. Did not fix ptest compilation. Changes: https://apparmor.net/news/release-4.0.2/ https://gitlab.com/apparmor/apparmor/-/releases/v4.0.3 Signed-off-by: Mikko Rapeli Signed-off-by: Armin Kuster

apparmor: fix QA Warnings

2024-07-30T00:07:01+00:00

RROR: apparmor-3.1.3-r0 do_package_qa: QA Issue: File /usr/src/debug/apparmor/3.1.3/libraries/libapparmor/swig/perl/libapparmor_wrap.c in package apparmor-src contains reference to TMPDIR [buildpaths] ERROR: apparmor-3.1.3-r0 do_package_qa: QA Issue: File /usr/lib/python3.12/site-packages/LibAppArmor/.debug/_LibAppArmor.cpython-312-aarch64-linux-gnu.so in package apparmor-dbg contains reference to TMPDIR [buildpaths] ERROR: apparmor-3.1.3-r0 do_package_qa: QA Issue: File /usr/lib/perl5/vendor_perl/5.38.2/aarch64-linux/auto/LibAppArmor/.packlist in package apparmor contains reference to TMPDIR [buildpaths] ERROR: apparmor-3.1.3-r0 do_package_qa: Fatal QA errors were found, failing task. Signed-off-by: Armin Kuster

recipes-*: convert WORKDIR->UNPACKDIR

2024-07-30T00:07:01+00:00

Signed-off-by: Armin Kuster

{tcp,udp}-smack-test: fix few more implicit-function-declaration issues fatal with gcc-14

2024-07-01T11:07:49+00:00

tcp-smack-test: tcp_server.c: In function 'main': tcp_server.c:50:16: error: implicit declaration of function 'atoi' [-Wimplicit-function-declaration] 50 | port = atoi(argv[1]); | ^~~~ tcp_server.c:62:12: error: implicit declaration of function 'fsetxattr' [-Wimplicit-function-declaration] 62 | if(fsetxattr(sock, attr_in, label_in, strlen(label_in),0) < 0) | ^~~~~~~~~ udp-smack-test: udp_client.c: In function 'main': udp_client.c:52:12: error: implicit declaration of function 'fsetxattr' [-Wimplicit-function-declaration] 52 | if(fsetxattr(sock, attr, label, strlen(label),0) < 0) | ^~~~~~~~~ udp_client.c:67:9: error: implicit declaration of function 'close'; did you mean 'pclose'? [-Wimplicit-function-declaration] 67 | close(sock); | ^~~~~ | pclose udp_server.c: In function 'main': udp_server.c:42:16: error: implicit declaration of function 'atoi' [-Wimplicit-function-declaration] 42 | port = atoi(argv[1]); | ^~~~ udp_server.c:57:12: error: implicit declaration of function 'fsetxattr' [-Wimplicit-function-declaration] 57 | if(fsetxattr(sock, attr, label, strlen(label), 0) < 0) | ^~~~~~~~~ udp_server.c:84:9: error: implicit declaration of function 'close'; did you mean 'pclose'? [-Wimplicit-function-declaration] 84 | close(sock); | ^~~~~ | pclose Signed-off-by: Martin Jansa Signed-off-by: Armin Kuster

mmap-smack-test, smack-test, tcp-smack-test, udp-smack-test: don't use S = ${WORKDIR}

2024-06-17T12:25:25+00:00

* fixes: Parsing recipes... ERROR: meta-security/recipes-mac/smack/mmap-smack-test_1.0.bb: Using S = ${WORKDIR} is no longer supported ERROR: meta-security/recipes-mac/smack/tcp-smack-test_1.0.bb: Using S = ${WORKDIR} is no longer supported ERROR: meta-security/recipes-mac/smack/udp-smack-test_1.0.bb: Using S = ${WORKDIR} is no longer supported ERROR: meta-security/recipes-mac/smack/smack-test_1.0.bb: Using S = ${WORKDIR} is no longer supported ERROR: Parsing halted due to errors, see error messages above * see: https://lists.openembedded.org/g/openembedded-architecture/message/2007 * it's fatal error since: https://git.openembedded.org/openembedded-core/commit/?h=master&id=32cba1cc916ad530c5e6630a927e74ca6f06289b Signed-off-by: Martin Jansa Signed-off-by: Armin Kuster

{tcp,udp}-smack-test: fix implicit-function-declaration issues fatal with gcc-14

2024-06-17T12:25:25+00:00

tcp-smack-test: http://errors.yoctoproject.org/Errors/Details/766925/ tcp_client.c:55:16: error: implicit declaration of function 'atoi' [-Wimplicit-function-declaration] udp-client-tests: http://errors.yoctoproject.org/Errors/Details/766927/ udp_client.c:41:16: error: implicit declaration of function 'atoi' [-Wimplicit-function-declaration] udp_client.c:51:12: error: implicit declaration of function 'fsetxattr' [-Wimplicit-function-declaration] udp_client.c:66:9: error: implicit declaration of function 'close'; did you mean 'pclose'? [-Wimplicit-function-declaration] Signed-off-by: Martin Jansa Signed-off-by: Armin Kuster

ccs-tools: Fix do_package QA Issue.

2023-09-11T11:17:25+00:00

After usrmerge had been enabled, paxctl has the fowllowing error: ERROR: ccs-tools-1.8.9-r0 do_package: QA Issue: ccs-tools: Files/directories were installed but not shipped in any package: /sbin/ccs-init Signed-off-by: Lei Maohui Signed-off-by: Armin Kuster

.patch: remove probably unused patches

2023-06-25T19:05:28+00:00

There could be some false possitives (the script is far from perfect), so please test it on your QA, I've only double checked with "git grep" (the script looks only in parent directory). @ ~/layers/meta-security $ /OE/extra-layers/meta-ros/scripts/check-patch-files.sh . ./recipes-ids/tripwire/files/add_armeb_arch.patch: not used in any recipe ./dynamic-layers/meta-python/recipes-security/fail2ban/files/0001-To-fix-build-error-of-xrang.patch: not used in any recipe ./recipes-scanners/clamav/files/fix2_libcurl_check.patch: not used in any recipe ./recipes-scanners/arpwatch/files/postfix_workaround.patch: not used in any recipe ./meta-tpm/recipes-tpm/libtpm/files/Use-format-s-for-call-to-dprintf.patch: not used in any recipe ./meta-tpm/recipes-tpm/libtpm/files/fix_signed_issue.patch: not used in any recipe ./meta-tpm/recipes-tpm/libtpm/files/Convert-another-vdprintf-to-dprintf.patch: not used in any recipe ./meta-tpm/recipes-tpm/swtpm/files/fix_lib_search_path.patch: not used in any recipe ./meta-tpm/recipes-tpm/swtpm/files/fix_fcntl_h.patch: not used in any recipe ./recipes-mac/AppArmor/files/disable_perl_h_check.patch: not used in any recipe @ ~/layers/meta-security $ git grep add_armeb_arch.patch @ ~/layers/meta-security $ git grep 0001-To-fix-build-error-of-xrang.patch @ ~/layers/meta-security $ git grep fix2_libcurl_check.patch @ ~/layers/meta-security $ git grep postfix_workaround.patch @ ~/layers/meta-security $ git grep Use-format-s-for-call-to-dprintf.patch @ ~/layers/meta-security $ git grep fix_signed_issue.patch @ ~/layers/meta-security $ git grep Convert-another-vdprintf-to-dprintf.patch @ ~/layers/meta-security $ git grep fix_lib_search_path.patch @ ~/layers/meta-security $ git grep fix_fcntl_h.patch @ ~/layers/meta-security $ git grep disable_perl_h_check.patch Signed-off-by: Martin Jansa Signed-off-by: Armin Kuster

*.patch: fix malformed Upstream-Status and SOB lines

2023-06-25T19:05:28+00:00

* as reported by openembedded-core/scripts/contrib/patchreview.py -v . Malformed Signed-off-by 'Signed-Off-By:' (./recipes-mac/AppArmor/files/crosscompile_perl_bindings.patch) Malformed Signed-off-by 'Signed-Off-By:' (./recipes-mac/AppArmor/files/disable_perl_h_check.patch) Missing Upstream-Status tag (./recipes-compliance/scap-security-guide/files/0001-standard.profile-expand-checks.patch) Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-ids/samhain/files/samhain-not-run-ptest-on-host.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-ids/samhain/files/samhain-pid-path.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-ids/suricata/files/fixup.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-scanners/clamav/files/fix2_libcurl_check.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/ecryptfs-utils/files/ecryptfs-utils-CVE-2016-6224.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/isic/files/configure_fix.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/krill/files/panic_workaround.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/opendnssec/files/libdns_conf_fix.patch Malformed Upstream-Status 'Malformed Upstream-Status in patch ./recipes-security/opendnssec/files/libxml2_conf.patch Signed-off-by: Martin Jansa Signed-off-by: Armin Kuster

apparmor: update to 3.1.3

2023-03-20T20:30:29+00:00

drop debian patch as the file was dropped upstream. Signed-off-by: Armin Kuster