diff options
| author | Hemant Jadhav <hemant.jadhav@emerson.com> | 2025-11-28 21:51:49 +0200 |
|---|---|---|
| committer | Scott Murray <scott.murray@konsulko.com> | 2025-12-22 06:34:11 +0200 |
| commit | dd147f679226f0dee17562eaa545063df5edac2b (patch) | |
| tree | a7a9c0cce5805a3c5da256e958a727f0a32f174b /recipes-core | |
| parent | 1a0643fa366f31d439b4300bea5e3a87088e59a2 (diff) | |
| download | meta-security-dd147f679226f0dee17562eaa545063df5edac2b.tar.gz | |
clamav: Add recipe for version 1.4.3
Add modern ClamAV 1.4.3 recipe with comprehensive improvements over
the legacy 0.104.4 version. Remove the end-of-life 0.104.4 recipe and
associated patches as they are superseded by this version.
Major changes in 1.4.3:
- Upgraded core engine with improved threat detection capabilities
- Added Rust components requiring cross-compilation support
- Updated CMake build system replacing legacy autotools
- Modernized library dependencies (LLVM, JSON-C, PCre2)
- Added comprehensive license compliance for multi-component package
- Enhanced cross-compilation support for all target architectures
The recipe includes dynamic Cargo configuration using Yocto variables
to support cross-compilation to any target architecture supported by
the build system.
Runtime configuration improvements:
- Set APP_CONFIG_DIRECTORY to ${sysconfdir}/clamav for proper config paths
- Added volatiles/tmpfiles support for /var/lib/clamav and /var/log/clamav
- Added pkg_postinst scripts to ensure correct directory ownership
- Implemented CMake cache variables for cross-compilation
- Updated all license checksums for compliance
- Added Rust toolchain integration with automatic environment setup
- Use Cargo vendoring with cargo + cargo-update-recipe-crates classes
Security rationale:
- ClamAV 0.104.4 reached end-of-life and is no longer maintained
- Upstream strongly recommends migration to 1.4.x for security updates
Signed-off-by: Hemant Jadhav <hemant.jadhav@emerson.com>
(regenerated diff, fixed building with systemd,
fixed target Rust configuration, disabled for 32-bit targets)
Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Diffstat (limited to 'recipes-core')
| -rw-r--r-- | recipes-core/packagegroup/packagegroup-core-security.bb | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/recipes-core/packagegroup/packagegroup-core-security.bb b/recipes-core/packagegroup/packagegroup-core-security.bb index 9c14240..d3d3d7e 100644 --- a/recipes-core/packagegroup/packagegroup-core-security.bb +++ b/recipes-core/packagegroup/packagegroup-core-security.bb | |||
| @@ -57,11 +57,13 @@ RDEPENDS:packagegroup-security-utils:remove:libc-musl = "krill firejail" | |||
| 57 | ARPWATCH = "arpwatch" | 57 | ARPWATCH = "arpwatch" |
| 58 | ARPWATCH:riscv32 = "" | 58 | ARPWATCH:riscv32 = "" |
| 59 | ARPWATCH:riscv64 = "" | 59 | ARPWATCH:riscv64 = "" |
| 60 | ARPWATCH:qemuriscv64 = "" | ||
| 61 | CLAMAV = "clamav clamav-daemon clamav-freshclam" | 60 | CLAMAV = "clamav clamav-daemon clamav-freshclam" |
| 61 | CLAMAV:arm = "" | ||
| 62 | CLAMAV:mips = "" | ||
| 63 | CLAMAV:powerpc = "" | ||
| 62 | CLAMAV:riscv32 = "" | 64 | CLAMAV:riscv32 = "" |
| 63 | CLAMAV:riscv64 = "" | 65 | CLAMAV:riscv64 = "" |
| 64 | CLAMAV:qemuriscv64 = "" | 66 | CLAMAV:x86 = "" |
| 65 | 67 | ||
| 66 | SUMMARY:packagegroup-security-scanners = "Security scanners" | 68 | SUMMARY:packagegroup-security-scanners = "Security scanners" |
| 67 | RDEPENDS:packagegroup-security-scanners = "\ | 69 | RDEPENDS:packagegroup-security-scanners = "\ |
