As far as I can tell, this is not used by any reciped in meta-security. It does not build so I am Black listing it. Signed-off-by: Armin Kuster <akuster@...> --- recipes-security/perl/libnetadd

I think core libcap-ng recipe belongs in a common layer and not maintained in two places. Well when a security package like 'snort' and maybe others are in other locations, I can see why meta-security

Update to later vesrion to fix build issue. Signed-off-by: Armin Kuster <akuster@...> --- recipes-security/perl/libcurses-perl_1.28.bb | 26 -------------------------- recipes-security/perl/libc

Hello all, Meta-security and Meta-selinux both have libcap-ng. Instead of maintaining the same package in both places, can we get it into OE where libcap resides? regards, Armin

yep. Agreed. thanks, Armin

Alexandru, Regarding a few packages in category C&D. I have latest samhain building as well as grsecurity (pax patches applied against 3.14.12) in a branch in my meta-security tree. I have a bit more

Hello all, I have the latest wireshark 1.12.0-rc2 building and working with gtk2. Is anyone else working on this? if not I can submit patches. I am not sure which layer wireshark should swim in, meta-

Chris, Yeah, That is what I was thinking of. Thanks for the pointer. - Armin

Hello all, I noticed some reference to /etc/os-release in some recipes. Where can I find the initial creation of /etc/os-release? If one is not created, would there desire to have one? regards, Armin

Paul, Sure the distro config patch can be dropped. Thanks for the feedback. regards, Armin

Signed-off-by: Armin Kuster <akuster@...> --- .../packagegroup/packagegroup-core-security.bb | 43 ++++++++++++++++++++++ 1 file changed, 43 insertions(+) create mode 100644 recipes-security/pac

oops. ignore this. - Armin

Signed-off-by: Armin Kuster <akuster@...> --- recipes-security/packagegroup/packagegroup-core-security.bb | 2 -- 1 file changed, 2 deletions(-) diff --git a/recipes-security/packagegroup/packag

will fix in V2 . thanks, Armin

This allows us to include security_flags.inc Signed-off-by: Armin Kuster <akuster@...> --- conf/distro/poky-security.conf | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 conf/distro

this will aid in testing Signed-off-by: Armin Kuster <akuster@...> --- recipes-security/images/core-image-security.bb | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 10064

Signed-off-by: Armin Kuster <akuster@...> --- .../packagegroup/packagegroup-core-security.bb | 45 ++++++++++++++++++++++ 1 file changed, 45 insertions(+) create mode 100644 recipes-security/pac

To aid in testing I have create an image and packagegroups. By setting "DISTRO=poky-security" in the local.conf, the security_flag.inc will be included. This was varified by checksec utility. Armin Ku

Signed-off-by: Armin Kuster <akuster@...> --- recipes-security/checksec/checksec_1.5.bb | 16 + recipes-security/checksec/files/checksec.sh | 882 ++++++++++++++++++++++++++++ 2 files changed, 89

This fixes; ERROR: QA Issue: pinentry: The compile log indicates that host include and/or library paths were used. Signed-off-by: Armin Kuster <akuster@...> --- recipes-security/pinentry/pinent