linux/meta-security.git/recipes-security, branch master-wip2

samhain: update to 4.2.2

2017-08-23T01:04:38+00:00

* update to version 4.2.2 * Add new recipe for standalone mode * Add systemd support * Add patches to fix several issues * samhain-standalone: add ptest support * samhain-server: no need to depend on samhain-server-native * Move common things from the bb to the inc file Signed-off-by: Jackie Huang Signed-off-by: Armin Kuster

apparmor: Additional runtime fixes

2017-07-29T17:28:28+00:00

- We need various python3 modules and we can only really solve this problem by including all python3-modules. - aa-easyprof needs to have its shebang corrected, do so. - The apparmor initscript depends on functions that LSB does not require so we must provide them. In some cases it's using non-standard function, so we just use more appropriate names. - The apparmor sysvinit-style initscript assumes that systemd-detect-virt will exist on the filesystem. Change this to check that it does before trying to execute it. [for aa-easyprof:] Reported-by: Anders Montonen Signed-off-by: Tom Rini Signed-off-by: Armin Kuster

libmhash: add new recipe

2017-07-29T15:56:10+00:00

Mhash is a free (under GNU Lesser GPL) library which provides a uniform interface to a large number of hash algorithms. These algorithms can be used to compute checksums, message digests, and other signatures. Signed-off-by: Jackie Huang Signed-off-by: Armin Kuster

libgssglue: add new recipe

2017-07-29T15:56:05+00:00

libgssglue exports a gssapi interface which calls other gssapi libraries. Signed-off-by: Jackie Huang Signed-off-by: Armin Kuster

nmap: upgrade to 7.50

2017-07-29T15:56:01+00:00

- Add a patch to fix python library install dir for multilib. - Add a patch to fix race condition with mkdir command. - Inherit pythonnative instead of python-dir and install python modules for ndiff to fix the following errors: """ root@qemux86-64:~# ndiff --help -sh: /usr/bin/ndiff: /path_to_build/tmp/hosttools/python: bad interpreter: No such file or directory root@qemux86-64:~# python /usr/bin/ndiff Could not import the ndiff module: 'No module named ndiff'. """ Signed-off-by: Jackie Huang Signed-off-by: Armin Kuster

keynote: add new recipe

2017-07-29T15:55:57+00:00

KeyNote is a simple and flexible trust-management system designed to work well for a variety of large- and small- scale Internet-based applications Signed-off-by: Jackie Huang Signed-off-by: Armin Kuster

xmlsec1: add new recipe

2017-06-21T04:44:23+00:00

XML Security Library is a C library based on LibXML2 and OpenSSL. Signed-off-by: Jackie Huang Signed-off-by: Armin Kuster

apparmor: Rework such that the utilities are functional by default

2017-06-21T04:44:13+00:00

This introduces a number of changes: - Fix the python PACKAGECONFIG knob - The included python support is python3-based, so use those classes. - When set, make sure to RDEPEND on the python modules the tools use. - Fix the perl PACKAGECONFIG knob - Add two patches so that configure will find perl and then compile will cross-compile the library correctly. - So that we place perl modules in the correct location we need cpan to be inherited. - When disabled, remove the RDEPENDS on perl as the RDEPENDS comes in via inherit. - Default to enabling the python and perl PACKAGECONFIG knobs as the majority of the userspace tools are python3 based, and the few that aren't that nor C based are perl based. - Because of the above we must drop the -python package because it's required for the utilities in the main package. Signed-off-by: Tom Rini Signed-off-by: Armin Kuster

apparmor: fix python packaging issue

2017-05-30T15:01:41+00:00

WARNING: apparmor-2.11.0-r0 do_package: QA Issue: apparmor: Files/directories were installed but not shipped in any package: /usr/lib/python2.7 /usr/lib/python2.7/site-packages /usr/lib/python2.7/site-packages/apparmor-2.11.0-py2.7.egg-info /usr/lib/python2.7/site-packages/apparmor /usr/lib/python2.7/site-packages/apparmor/regex.py use python2 instead of python3 Signed-off-by: Armin Kuster

ecryptfs-utils: add new recipe

2017-05-30T15:01:15+00:00

eCryptfs is a stacked cryptographic filesystem that ships in Linux kernel versions 2.6.19 and above. This package provides the mount helper and supporting libraries to perform key management and mount functions. Signed-off-by: Jackie Huang Signed-off-by: Armin Kuster