yocto@lists.yoctoproject.org

Re: [meta-security][PATCH 3/3] oeqa: shut done swtpm before and after testing

fyi: I started to archive some of the test runs at: https://github.com/akuster/meta-security-testresults Not sure if I am doing this correctly but is at least a snapshot. -armin

By Armin Kuster · #57362 ·

[meta-security-compliance][PATCH 2/2] README: update email address

Signed-off-by: Armin Kuster <akuster808@...> --- meta-security-compliance/README | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-security-compliance/README

By Armin Kuster · #57361 ·

[meta-security-compliance][PATCH 1/2] lynis: update to 3.0.8

See changelog for details: https://cisofy.com/changelog/lynis/#308 Signed-off-by: Armin Kuster <akuster808@...> --- .../recipes-auditors/lynis/{lynis_3.0.0.bb => lynis_3.0.8.bb} | 2 +- 1

By Armin Kuster · #57360 ·

[meta-security][PATCH] ccs-tools: update to 1.8.9

Signed-off-by: Armin Kuster <akuster808@...> --- .../ccs-tools/{ccs-tools_1.8.4.bb => ccs-tools_1.8.9.bb} | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) rename

By Armin Kuster · #57359 ·

[meta-security][PATCH 3/3] oeqa: shut done swtpm before and after testing

fixes: swtpm: Could not open TCP socket: Address already in use Signed-off-by: Armin Kuster <akuster808@...> --- meta-parsec/lib/oeqa/runtime/cases/parsec.py | 5 +++++ 1 file changed, 5

By Armin Kuster · #57358 ·

[meta-security][PATCH 2/3] oeqa: meta-tpm shut swtpm down before and after testing

fixes: swtpm: Could not open TCP socket: Address already in use Signed-off-by: Armin Kuster <akuster808@...> --- meta-tpm/lib/oeqa/runtime/cases/swtpm.py | 2 ++

By Armin Kuster · #57357 ·

[meta-security][PATCH 1/3] oeqa/clamav drop depricated --list-mirror test

Fix download test Signed-off-by: Armin Kuster <akuster808@...> --- lib/oeqa/runtime/cases/clamav.py | 21 ++++----------------- 1 file changed, 4 insertions(+), 17 deletions(-) diff --git

By Armin Kuster · #57356 ·

Regression in rust-cross-canadian-aarch64

Hi, I experience build failure in the compilation step of the recipe rust-cross-canadian-aarch64. I've used latest master from poky and just changed the MACHINE to qemuarm64. When I execute 'bitbake

By Peter Bergin · #57355 ·

[meta-security][PATCH] security-test-image: add firejail and aide test suites

Signed-off-by: Armin Kuster <akuster808@...> --- recipes-core/images/security-test-image.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git

By Armin Kuster · #57354 ·

[meta-security][PATCH 2/2] oeqa: Add a very basic firejail test

Currently check if --help works. RESULTS: RESULTS - ping.PingTest.test_ping: PASSED (0.07s) RESULTS - ssh.SSHTest.test_ssh: PASSED (2.41s) RESULTS - firejail.FirejailTest.test_firejail_basic: PASSED

By Armin Kuster · #57353 ·

[meta-security][PATCH 1/2] firejail: Add new package

Signed-off-by: Armin Kuster <akuster808@...> --- .../exclude_seccomp_util_compiles.patch | 45 ++++++++++++++ recipes-security/Firejail/firejail_0.9.70.bb | 61 +++++++++++++++++++ 2

By Armin Kuster · #57352 ·

[meta-security][PATCH 9/9] aide.conf: adjust to allow for build time db creation

Signed-off-by: Armin Kuster <akuster808@...> --- recipes-ids/aide/aide/aide.conf | 11 ++++------- 1 file changed, 4 insertions(+), 7 deletions(-) diff --git a/recipes-ids/aide/aide/aide.conf

By Armin Kuster · #57351 ·

[meta-security][PATCH 8/9] aide: add native support for build time db creation

This will help create a aide db during build that is then installed on the rootfs for verification at boot time. This work was inspired by: Marco Cavallini Yocto Project Ambassador Signed-off-by:

By Armin Kuster · #57350 ·

[meta-security][PATCH 7/9] classes: add aide routines

Signed-off-by: Armin Kuster <akuster808@...> --- classes/aide-base.bbclass | 11 ++++++++ classes/aide-db-init.bbclass | 52 ++++++++++++++++++++++++++++++++++++ 2 files changed, 63

By Armin Kuster · #57349 ·

[meta-security][PATCH 6/9] libmhash: add native pkg support

Signed-off-by: Armin Kuster <akuster808@...> --- recipes-security/libmhash/libmhash_0.9.9.9.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git

By Armin Kuster · #57348 ·

[meta-security][PATCH 5/9] oeqa: add aide test

Signed-off-by: Armin Kuster <akuster808@...> --- lib/oeqa/runtime/cases/aide.py | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644

By Armin Kuster · #57347 ·

[meta-security][PATCH 4/9] aide: add a few more config options

Signed-off-by: Armin Kuster <akuster808@...> --- recipes-ids/aide/aide_0.17.4.bb | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/recipes-ids/aide/aide_0.17.4.bb

By Armin Kuster · #57346 ·

[meta-security][PATCH 3/9] oeqa: update smack runtime test

drop test_smack_mmap_enforced as is was skipped do to possible licensing issues Signed-off-by: Armin Kuster <akuster808@...> --- lib/oeqa/runtime/cases/smack.py | 103

By Armin Kuster · #57345 ·

[meta-security][PATCH 2/9] smack-test: more py3 covertion

Signed-off-by: Armin Kuster <akuster808@...> --- recipes-mac/smack/smack-test/notroot.py | 12 ++++++------ .../smack/smack-test/smack_test_file_access.sh | 10 +++++----- 2

By Armin Kuster · #57344 ·

[meta-security][PATCH 1/9] security-test-image: auto include layers if present.

This is to simplify tesing to build one image and include pkgs depending on the layers included in the BBLAYERS. Signed-off-by: Armin Kuster <akuster808@...> ---

By Armin Kuster · #57343 ·

Messages