|
[meta-security][PATCH] ccs-tools: update to 1.8.9
Signed-off-by: Armin Kuster <akuster808@...> --- .../ccs-tools/{ccs-tools_1.8.4.bb => ccs-tools_1.8.9.bb} | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) rename recipes-mac/ccs-tools/{
Signed-off-by: Armin Kuster <akuster808@...> --- .../ccs-tools/{ccs-tools_1.8.4.bb => ccs-tools_1.8.9.bb} | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) rename recipes-mac/ccs-tools/{
|
By
Armin Kuster
· #57359
·
|
|
[meta-security][PATCH 3/3] oeqa: shut done swtpm before and after testing
fixes: swtpm: Could not open TCP socket: Address already in use Signed-off-by: Armin Kuster <akuster808@...> --- meta-parsec/lib/oeqa/runtime/cases/parsec.py | 5 +++++ 1 file changed, 5 insertio
fixes: swtpm: Could not open TCP socket: Address already in use Signed-off-by: Armin Kuster <akuster808@...> --- meta-parsec/lib/oeqa/runtime/cases/parsec.py | 5 +++++ 1 file changed, 5 insertio
|
By
Armin Kuster
· #57358
·
|
|
[meta-security][PATCH 2/3] oeqa: meta-tpm shut swtpm down before and after testing
fixes: swtpm: Could not open TCP socket: Address already in use Signed-off-by: Armin Kuster <akuster808@...> --- meta-tpm/lib/oeqa/runtime/cases/swtpm.py | 2 ++ meta-tpm/lib/oeqa/runtime/cases/t
fixes: swtpm: Could not open TCP socket: Address already in use Signed-off-by: Armin Kuster <akuster808@...> --- meta-tpm/lib/oeqa/runtime/cases/swtpm.py | 2 ++ meta-tpm/lib/oeqa/runtime/cases/t
|
By
Armin Kuster
· #57357
·
|
|
[meta-security][PATCH 1/3] oeqa/clamav drop depricated --list-mirror test
Fix download test Signed-off-by: Armin Kuster <akuster808@...> --- lib/oeqa/runtime/cases/clamav.py | 21 ++++----------------- 1 file changed, 4 insertions(+), 17 deletions(-) diff --git a/lib/o
Fix download test Signed-off-by: Armin Kuster <akuster808@...> --- lib/oeqa/runtime/cases/clamav.py | 21 ++++----------------- 1 file changed, 4 insertions(+), 17 deletions(-) diff --git a/lib/o
|
By
Armin Kuster
· #57356
·
|
|
[meta-security][PATCH] security-test-image: add firejail and aide test suites
Signed-off-by: Armin Kuster <akuster808@...> --- recipes-core/images/security-test-image.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-core/images/security-test-im
Signed-off-by: Armin Kuster <akuster808@...> --- recipes-core/images/security-test-image.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-core/images/security-test-im
|
By
Armin Kuster
· #57354
·
|
|
[meta-security][PATCH 2/2] oeqa: Add a very basic firejail test
Currently check if --help works. RESULTS: RESULTS - ping.PingTest.test_ping: PASSED (0.07s) RESULTS - ssh.SSHTest.test_ssh: PASSED (2.41s) RESULTS - firejail.FirejailTest.test_firejail_basic: PASSED (
Currently check if --help works. RESULTS: RESULTS - ping.PingTest.test_ping: PASSED (0.07s) RESULTS - ssh.SSHTest.test_ssh: PASSED (2.41s) RESULTS - firejail.FirejailTest.test_firejail_basic: PASSED (
|
By
Armin Kuster
· #57353
·
|
|
[meta-security][PATCH 1/2] firejail: Add new package
Signed-off-by: Armin Kuster <akuster808@...> --- .../exclude_seccomp_util_compiles.patch | 45 ++++++++++++++ recipes-security/Firejail/firejail_0.9.70.bb | 61 +++++++++++++++++++ 2 files changed
Signed-off-by: Armin Kuster <akuster808@...> --- .../exclude_seccomp_util_compiles.patch | 45 ++++++++++++++ recipes-security/Firejail/firejail_0.9.70.bb | 61 +++++++++++++++++++ 2 files changed
|
By
Armin Kuster
· #57352
·
|
|
[meta-security][PATCH 9/9] aide.conf: adjust to allow for build time db creation
Signed-off-by: Armin Kuster <akuster808@...> --- recipes-ids/aide/aide/aide.conf | 11 ++++------- 1 file changed, 4 insertions(+), 7 deletions(-) diff --git a/recipes-ids/aide/aide/aide.conf b/r
Signed-off-by: Armin Kuster <akuster808@...> --- recipes-ids/aide/aide/aide.conf | 11 ++++------- 1 file changed, 4 insertions(+), 7 deletions(-) diff --git a/recipes-ids/aide/aide/aide.conf b/r
|
By
Armin Kuster
· #57351
·
|
|
[meta-security][PATCH 8/9] aide: add native support for build time db creation
This will help create a aide db during build that is then installed on the rootfs for verification at boot time. This work was inspired by: Marco Cavallini Yocto Project Ambassador Signed-off-by: Armi
This will help create a aide db during build that is then installed on the rootfs for verification at boot time. This work was inspired by: Marco Cavallini Yocto Project Ambassador Signed-off-by: Armi
|
By
Armin Kuster
· #57350
·
|
|
[meta-security][PATCH 7/9] classes: add aide routines
Signed-off-by: Armin Kuster <akuster808@...> --- classes/aide-base.bbclass | 11 ++++++++ classes/aide-db-init.bbclass | 52 ++++++++++++++++++++++++++++++++++++ 2 files changed, 63 insertions(+)
Signed-off-by: Armin Kuster <akuster808@...> --- classes/aide-base.bbclass | 11 ++++++++ classes/aide-db-init.bbclass | 52 ++++++++++++++++++++++++++++++++++++ 2 files changed, 63 insertions(+)
|
By
Armin Kuster
· #57349
·
|
|
[meta-security][PATCH 6/9] libmhash: add native pkg support
Signed-off-by: Armin Kuster <akuster808@...> --- recipes-security/libmhash/libmhash_0.9.9.9.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/recipes-security/libmhash/libmhash_0.9.9.9.bb b
Signed-off-by: Armin Kuster <akuster808@...> --- recipes-security/libmhash/libmhash_0.9.9.9.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/recipes-security/libmhash/libmhash_0.9.9.9.bb b
|
By
Armin Kuster
· #57348
·
|
|
[meta-security][PATCH 5/9] oeqa: add aide test
Signed-off-by: Armin Kuster <akuster808@...> --- lib/oeqa/runtime/cases/aide.py | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 lib/oeqa/runtime/cases/aide.py
Signed-off-by: Armin Kuster <akuster808@...> --- lib/oeqa/runtime/cases/aide.py | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 lib/oeqa/runtime/cases/aide.py
|
By
Armin Kuster
· #57347
·
|
|
[meta-security][PATCH 4/9] aide: add a few more config options
Signed-off-by: Armin Kuster <akuster808@...> --- recipes-ids/aide/aide_0.17.4.bb | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/recipes-ids/aide/aide_0.17.4.bb b/recipes-id
Signed-off-by: Armin Kuster <akuster808@...> --- recipes-ids/aide/aide_0.17.4.bb | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/recipes-ids/aide/aide_0.17.4.bb b/recipes-id
|
By
Armin Kuster
· #57346
·
|
|
[meta-security][PATCH 3/9] oeqa: update smack runtime test
drop test_smack_mmap_enforced as is was skipped do to possible licensing issues Signed-off-by: Armin Kuster <akuster808@...> --- lib/oeqa/runtime/cases/smack.py | 103 +++++----------------------
drop test_smack_mmap_enforced as is was skipped do to possible licensing issues Signed-off-by: Armin Kuster <akuster808@...> --- lib/oeqa/runtime/cases/smack.py | 103 +++++----------------------
|
By
Armin Kuster
· #57345
·
|
|
[meta-security][PATCH 2/9] smack-test: more py3 covertion
Signed-off-by: Armin Kuster <akuster808@...> --- recipes-mac/smack/smack-test/notroot.py | 12 ++++++------ .../smack/smack-test/smack_test_file_access.sh | 10 +++++----- 2 files changed, 11 inse
Signed-off-by: Armin Kuster <akuster808@...> --- recipes-mac/smack/smack-test/notroot.py | 12 ++++++------ .../smack/smack-test/smack_test_file_access.sh | 10 +++++----- 2 files changed, 11 inse
|
By
Armin Kuster
· #57344
·
|
|
[meta-security][PATCH 1/9] security-test-image: auto include layers if present.
This is to simplify tesing to build one image and include pkgs depending on the layers included in the BBLAYERS. Signed-off-by: Armin Kuster <akuster808@...> --- recipes-core/images/security-tes
This is to simplify tesing to build one image and include pkgs depending on the layers included in the BBLAYERS. Signed-off-by: Armin Kuster <akuster808@...> --- recipes-core/images/security-tes
|
By
Armin Kuster
· #57343
·
|
|
[meta-security][PATCH] security-test-image: auto include layers if present.
This is to simplify tesing to build one image and include pkgs depending on the layers included in the BBLAYERS. Signed-off-by: Armin Kuster <akuster808@...> --- recipes-core/images/security-tes
This is to simplify tesing to build one image and include pkgs depending on the layers included in the BBLAYERS. Signed-off-by: Armin Kuster <akuster808@...> --- recipes-core/images/security-tes
|
By
Armin Kuster
· #57324
·
|
|
[meta-security][PATCH] sssd: update to 2.7.1
drop CVE-2021-3621.patch refresh a few patches fixup configure-unsafe globally via sed in build.m4 === test RESULTS - sssd.SSSDTest.test_sssd_help: PASSED (1.70s) RESULTS - sssd.SSSDTest.test_sssd_sss
drop CVE-2021-3621.patch refresh a few patches fixup configure-unsafe globally via sed in build.m4 === test RESULTS - sssd.SSSDTest.test_sssd_help: PASSED (1.70s) RESULTS - sssd.SSSDTest.test_sssd_sss
|
By
Armin Kuster
· #57323
·
|
|
[meta-security][PATCH 2/2] oeqa: sssd.py fix tests
Signed-off-by: Armin Kuster <akuster808@...> --- lib/oeqa/runtime/cases/sssd.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/oeqa/runtime/cases/sssd.py b/lib/oeqa/ru
Signed-off-by: Armin Kuster <akuster808@...> --- lib/oeqa/runtime/cases/sssd.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/oeqa/runtime/cases/sssd.py b/lib/oeqa/ru
|
By
Armin Kuster
· #57322
·
|
|
[meta-security][PATCH 1/2] sssd: use example conf file
Signed-off-by: Armin Kuster <akuster808@...> --- .../recipes-security/sssd/files/sssd.conf | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/dynamic-layers/networking-lay
Signed-off-by: Armin Kuster <akuster808@...> --- .../recipes-security/sssd/files/sssd.conf | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/dynamic-layers/networking-lay
|
By
Armin Kuster
· #57321
·
|