All, The triage team is starting to try and collect up and classify bugs which a newcomer to the project would be able to work on in a way which means people can find them. They're being listed on

Hi , I have been trying to enable Secureboot to my board having Intel-x86 architecture and I am following the steps given in this link https://github.com/jiazhang0/meta-secure-core for Yocto Dunfell

fyi: I started to archive some of the test runs at: https://github.com/akuster/meta-security-testresults Not sure if I am doing this correctly but is at least a snapshot. -armin

Signed-off-by: Armin Kuster <akuster808@...> --- meta-security-compliance/README | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-security-compliance/README

See changelog for details: https://cisofy.com/changelog/lynis/#308 Signed-off-by: Armin Kuster <akuster808@...> --- .../recipes-auditors/lynis/{lynis_3.0.0.bb => lynis_3.0.8.bb} | 2 +- 1

Signed-off-by: Armin Kuster <akuster808@...> --- .../ccs-tools/{ccs-tools_1.8.4.bb => ccs-tools_1.8.9.bb} | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) rename

fixes: swtpm: Could not open TCP socket: Address already in use Signed-off-by: Armin Kuster <akuster808@...> --- meta-parsec/lib/oeqa/runtime/cases/parsec.py | 5 +++++ 1 file changed, 5

fixes: swtpm: Could not open TCP socket: Address already in use Signed-off-by: Armin Kuster <akuster808@...> --- meta-tpm/lib/oeqa/runtime/cases/swtpm.py | 2 ++

Fix download test Signed-off-by: Armin Kuster <akuster808@...> --- lib/oeqa/runtime/cases/clamav.py | 21 ++++----------------- 1 file changed, 4 insertions(+), 17 deletions(-) diff --git

Hi, I experience build failure in the compilation step of the recipe rust-cross-canadian-aarch64. I've used latest master from poky and just changed the MACHINE to qemuarm64. When I execute 'bitbake

Signed-off-by: Armin Kuster <akuster808@...> --- recipes-core/images/security-test-image.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git

Currently check if --help works. RESULTS: RESULTS - ping.PingTest.test_ping: PASSED (0.07s) RESULTS - ssh.SSHTest.test_ssh: PASSED (2.41s) RESULTS - firejail.FirejailTest.test_firejail_basic: PASSED

Signed-off-by: Armin Kuster <akuster808@...> --- .../exclude_seccomp_util_compiles.patch | 45 ++++++++++++++ recipes-security/Firejail/firejail_0.9.70.bb | 61 +++++++++++++++++++ 2

Signed-off-by: Armin Kuster <akuster808@...> --- recipes-ids/aide/aide/aide.conf | 11 ++++------- 1 file changed, 4 insertions(+), 7 deletions(-) diff --git a/recipes-ids/aide/aide/aide.conf

This will help create a aide db during build that is then installed on the rootfs for verification at boot time. This work was inspired by: Marco Cavallini Yocto Project Ambassador Signed-off-by:

Signed-off-by: Armin Kuster <akuster808@...> --- classes/aide-base.bbclass | 11 ++++++++ classes/aide-db-init.bbclass | 52 ++++++++++++++++++++++++++++++++++++ 2 files changed, 63

Signed-off-by: Armin Kuster <akuster808@...> --- recipes-security/libmhash/libmhash_0.9.9.9.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git

Signed-off-by: Armin Kuster <akuster808@...> --- lib/oeqa/runtime/cases/aide.py | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644

Signed-off-by: Armin Kuster <akuster808@...> --- recipes-ids/aide/aide_0.17.4.bb | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/recipes-ids/aide/aide_0.17.4.bb

drop test_smack_mmap_enforced as is was skipped do to possible licensing issues Signed-off-by: Armin Kuster <akuster808@...> --- lib/oeqa/runtime/cases/smack.py | 103