Signed-off-by: Armin Kuster <akuster808@...> --- classes/aide-base.bbclass | 11 ++++++++ classes/aide-db-init.bbclass | 52 ++++++++++++++++++++++++++++++++++++ 2 files changed, 63 insertions(+)

Signed-off-by: Armin Kuster <akuster808@...> --- recipes-security/libmhash/libmhash_0.9.9.9.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/recipes-security/libmhash/libmhash_0.9.9.9.bb b

Signed-off-by: Armin Kuster <akuster808@...> --- lib/oeqa/runtime/cases/aide.py | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 lib/oeqa/runtime/cases/aide.py

Signed-off-by: Armin Kuster <akuster808@...> --- recipes-ids/aide/aide_0.17.4.bb | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/recipes-ids/aide/aide_0.17.4.bb b/recipes-id

drop test_smack_mmap_enforced as is was skipped do to possible licensing issues Signed-off-by: Armin Kuster <akuster808@...> --- lib/oeqa/runtime/cases/smack.py | 103 +++++----------------------

Signed-off-by: Armin Kuster <akuster808@...> --- recipes-mac/smack/smack-test/notroot.py | 12 ++++++------ .../smack/smack-test/smack_test_file_access.sh | 10 +++++----- 2 files changed, 11 inse

This is to simplify tesing to build one image and include pkgs depending on the layers included in the BBLAYERS. Signed-off-by: Armin Kuster <akuster808@...> --- recipes-core/images/security-tes

This is to simplify tesing to build one image and include pkgs depending on the layers included in the BBLAYERS. Signed-off-by: Armin Kuster <akuster808@...> --- recipes-core/images/security-tes

drop CVE-2021-3621.patch refresh a few patches fixup configure-unsafe globally via sed in build.m4 === test RESULTS - sssd.SSSDTest.test_sssd_help: PASSED (1.70s) RESULTS - sssd.SSSDTest.test_sssd_sss

Signed-off-by: Armin Kuster <akuster808@...> --- lib/oeqa/runtime/cases/sssd.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/oeqa/runtime/cases/sssd.py b/lib/oeqa/ru

Signed-off-by: Armin Kuster <akuster808@...> --- .../recipes-security/sssd/files/sssd.conf | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/dynamic-layers/networking-lay

Signed-off-by: Armin Kuster <akuster808@...> --- lib/oeqa/runtime/cases/checksec.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/oeqa/runtime/cases/checksec.py b/lib/oeq

Signed-off-by: Armin Kuster <akuster808@...> --- .../packagegroup/packagegroup-core-security.bbappend | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 dynamic-layers/networking-layer/

Signed-off-by: Armin Kuster <akuster808@...> --- recipes-core/packagegroup/packagegroup-core-security.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-core/packagegro

Signed-off-by: Armin Kuster <akuster808@...> --- conf/layer.conf | 2 ++ 1 file changed, 2 insertions(+) diff --git a/conf/layer.conf b/conf/layer.conf index fa7d79e..470c7f6 100644 --- a/conf/la

Signed-off-by: Armin Kuster <akuster808@...> --- .../recipes-security}/sssd/files/CVE-2021-3621.patch | 0 .../recipes-security}/sssd/files/drop_ntpdate_chk.patch | 0 .../recipes-security}/sssd/f

Signed-off-by: Armin Kuster <akuster808@...> --- recipes-mac/AppArmor/apparmor_3.0.4.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/recipes-mac/AppArmor/apparmor_3.0.4.bb b/recipes-mac/A

not compatible with musl Signed-off-by: Armin Kuster <akuster808@...> --- [v2] Fix type --- .../arpwatch/{arpwatch_3.1.bb => arpwatch_3.3.bb} | 9 +++++---- recipes-scanners/arpwatch/files/host_c

thanks for the patch. did I miss some rust changes in https://git.yoctoproject.org/meta-security/commit/?h=master-next&id=edf8b109e77f6d3f2740e09bdc89f0aaf2885dc4 ? - armin

most likely. thanks for reviewing. -armin