ERROR: apparmor-2.13.4-r0 do_package: QA Issue: apparmor: Files/directories were installed but not shipped in any package: /usr/lib/systemd /usr/lib/systemd/system

Signed-off-by: Armin Kuster <akuster808@...> --- recipes-mac/AppArmor/apparmor_2.13.4.bb | 1 + ...-fix-failure-on-older-versions-of-Ma.patch | 40 +++++++++++++++++++ 2 files changed,

Signed-off-by: Armin Kuster <akuster808@...> --- README | 12 ++++++------ meta-integrity/README.md | 8 ++------ meta-security-compliance/README | 8 ++++----

ibmswtpm2 doesn't have GNU_HASH (didn't pass LDFLAGS?) [ldflags Signed-off-by: Armin Kuster <akuster808@...> --- meta-tpm/recipes-tpm2/ibmswtpm2/ibmswtpm2_1563.bb | 3 ++- 1 file changed, 2

From: Sajjad Ahmed <sajjad_ahmed@...> Updating BBFILES with := isn't the standard way and can break parsing under certain conditions, instead use += which is widely used. Signed-off-by:

From: Mingli Yu <mingli.yu@...> Add expat-native to DEPENDS to fix the below do_configure error: | CMake Error at CMakeLists.txt:165 (message): | xmlwf is required! Signed-off-by: Mingli

Signed-off-by: Armin Kuster <akuster808@...> (cherry picked from commit 496a734c14fc72250979a4e7eb69c5d541ffd870) --- recipes-security/packagegroup/packagegroup-core-security.bb | 1 + 1 file

minor spacing cleanup Signed-off-by: Armin Kuster <akuster808@...> (cherry picked from commit 2a7963df18e7f43c6209387b6e1a1e75ff74b6ca) --- recipes-mac/AppArmor/apparmor_2.13.4.bb | 181

From: Naveen Saini <naveen.kumar.saini@...> Add checks that include dm-verity specific kernel config fragment when dm-verity-img.bbclass is used. Signed-off-by: Naveen Saini

From: Naveen Saini <naveen.kumar.saini@...> Based on systemd-bootdisk-microcode.wks.in, this adds the dm-verity image similar to the beaglebone wks already in meta-security. Signed-off-by:

From: Naveen Saini <naveen.kumar.saini@...> Detection of USB devices by the kernel is slow enough. We need to keep trying for a while (default: 5s seconds, controlled by

Signed-off-by: Armin Kuster <akuster808@...> (cherry picked from commit f176756890766bc9a6a00fe83bfe8e3c9bc13d07) --- recipes-mac/AppArmor/apparmor_2.13.4.bb | 2 ++ 1 file changed, 2

Signed-off-by: Armin Kuster <akuster808@...> (cherry picked from commit caf76696e8669ee48339c13f01042da9e52515ae) --- recipes-security/packagegroup/packagegroup-core-security.bb | 2 +- 1 file

From: "niko.mauno@..." <niko.mauno@...> Since dm-verity-image.bbclass effectively injects <DM_VERITY_IMAGE>:do_image_<DM_VERITY_IMAGE_TYPE> dependency for do_image_wic task, we

From: "niko.mauno@..." <niko.mauno@...> Since IMAGE_LINGUAS defaults to 'en-us en-gb' and since localization is not needed on this type of purpose-specific initramfs image, reset

From: "niko.mauno@..." <niko.mauno@...> This removes following boot-time complaints from udevd regarding missing group declarations: [ 6.624454] udevd[163]: specified group

From: "niko.mauno@..." <niko.mauno@...> - revise declaration ordering as suggested by oe-stylize.py - sort PACKAGE_INSTALL entries in alphabetic order - split long command line in

From: "niko.mauno@..." <niko.mauno@...> Switch from this layer's initramfs-dm-verity recipe to poky-provided initramfs-framework suite to manage veritysetup et al. This commit also

From: "niko.mauno@..." <niko.mauno@...> Add 'initramfs-module-dmverity' as an extension to poky upstream provided initramfs-framework suite via matchingly named bbappend

From: "niko.mauno@..." <niko.mauno@...> Introduce new STAGING_VERITY_DIR variable specific to this bbclass which defines the directory where the verity.env file is stored