[yocto] [meta-security][PATCH 10/17] tpm-tools: Fix gcc6 compile issue

2016-10-17 Thread Armin Kuster
ellKnown) | ^~ | ../../../tpm-tools-1.3.8/src/tpm_mgmt/tpm_present.c:360:2: note: ...this statement, but the latter is misleadingly indented as if it is guarded by the 'if' | return iRc; | ^~ Signed-off-by: Armin Kuster <akuster...@gmail.com> --- .../gcc6_missleading_indent_fix.patch

[yocto] [meta-security][PATCH 11/17] linux-yocto-4.8: add tpm fragments

2016-10-17 Thread Armin Kuster
Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-kernel/linux/linux-yocto-4.8/tpm.cfg | 9 + recipes-kernel/linux/linux-yocto-4.8/tpm.scc | 4 recipes-kernel/linux/linux-yocto_4.8.bbappend | 7 +++ 3 files changed, 20 insertions(+) create mode 100644 r

[yocto] [meta-security][PATCH 07/17] image: at image to help test builds

2016-10-17 Thread Armin Kuster
Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-security/images/security-build-image.bb | 21 + 1 file changed, 21 insertions(+) create mode 100644 recipes-security/images/security-build-image.bb diff --git a/recipes-security/images/security-build-image

[yocto] [meta-security][PATCH 08/17] layer.conf: Add filesystem depends

2016-10-17 Thread Armin Kuster
Signed-off-by: Armin Kuster <akuster...@gmail.com> --- conf/layer.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conf/layer.conf b/conf/layer.conf index 650e6ed..3502f0b 100644 --- a/conf/layer.conf +++ b/conf/layer.conf @@ -9,4 +9,4 @@ BBFILE_COLLECTIONS += &qu

[yocto] [meta-security][PATCH 06/17] qemu: Add tpm flag

2016-10-17 Thread Armin Kuster
Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-devtools/qemu/qemu_2.7.0.bbappend | 1 + 1 file changed, 1 insertion(+) create mode 100644 recipes-devtools/qemu/qemu_2.7.0.bbappend diff --git a/recipes-devtools/qemu/qemu_2.7.0.bbappend b/recipes-devtools/qemu/qemu_2.7.0.bb

[yocto] [meta-security][PATCH 04/17] swtpm: add new package

2016-10-17 Thread Armin Kuster
Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-tpm/swtpm/files/fix_lib_search_path.patch | 41 +++ recipes-tpm/swtpm/swtpm_1.0.bb| 38 + 2 files changed, 79 insertions(+) create mode 100644 recipes-tpm/swtpm

[yocto] [meta-security][PATCH 03/17] libtpm: add new package

2016-10-17 Thread Armin Kuster
Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-tpm/libtpm/libtpm_1.0.bb | 13 + 1 file changed, 13 insertions(+) create mode 100644 recipes-tpm/libtpm/libtpm_1.0.bb diff --git a/recipes-tpm/libtpm/libtpm_1.0.bb b/recipes-tpm/libtpm/libtpm_1.0.bb new file mode

[yocto] [meta-security][PATCH 05/17] tpm2simulator: add package

2016-10-17 Thread Armin Kuster
Signed-off-by: Armin Kuster <akuster...@gmail.com> --- .../tpm2simulator/tpm2simulator-native_116.bb | 25 ++ 1 file changed, 25 insertions(+) create mode 100644 recipes-tpm/tpm2simulator/tpm2simulator-native_116.bb diff --git a/recipes-tpm/tpm2simulator/tpm2sim

[yocto] [meta-security][PATCH 01/17] tpm2.0-tss: Add new package

2016-10-17 Thread Armin Kuster
Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-tpm/tpm2.0-tss/tpm2.0-tss/ax_pthread.m4 | 332 recipes-tpm/tpm2.0-tss/tpm2.0-tss_git.bb| 66 + 2 files changed, 398 insertions(+) create mode 100644 recipes-tpm/tpm2.0-tss/tpm2

[yocto] [meta-security][PATCH 02/17] tpm-tools: add native support

2016-10-17 Thread Armin Kuster
Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-tpm/tpm-tools/tpm-tools_1.3.8.bb | 3 +++ recipes-tpm/tpm2.0-tools/tpm2.0-tools_git.bb | 23 +++ 2 files changed, 26 insertions(+) create mode 100644 recipes-tpm/tpm2.0-tools/tpm2.0-tools_git.bb diff

[yocto] [meta-security][PATCH] sleuthkit: fix No GNU_HASH in the elf binary

2016-10-07 Thread Armin Kuster
From: Armin Kuster <akus...@mvista.com> Signed-off-by: Armin Kuster <akus...@mvista.com> --- recipes-forensic/sleuth/sleuthkit_4.1.3.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/recipes-forensic/sleuth/sleuthkit_4.1.3.bb b/recipes-forensic/sleuth/sleuthkit_4.1.3.bb i

[yocto] [meta-security][PATCH] paxctl: Fix QA warning

2016-09-25 Thread Armin Kuster
WARNING: paxctl-0.9-r0 do_package_qa: QA Issue: No GNU_HASH in the elf binary: './build/tmp-glibc/work/core2-64-oe-linux/paxctl/0.9-r0/packages-split/paxctl/sbin/paxctl' [ldflags] Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-security/paxctl/paxctl_0.9.bb | 3 +++

[yocto] [meta-security][PATCH] clamav: fix gcc 6.x build failure.

2016-08-20 Thread Armin Kuster
-linking=dynamic. Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-security/clamav/clamav_0.99.2.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/recipes-security/clamav/clamav_0.99.2.bb b/recipes-security/clamav/clamav_0.99.2.bb index 184d605..73905a7 100644 --- a/r

[yocto] [meta-security][PATCH] python-pycrypto: fix build error

2016-07-10 Thread Armin Kuster
| DEBUG: Executing shell function do_compile | make: *** No targets specified and no makefile found. Stop. add null do_compile Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-devtools/python/python-pycrypto_2.6.1.bb | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

[yocto] [meta-security][PATCH] suricata: package update to 3.1.0

2016-06-26 Thread Armin Kuster
Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-security/suricata/suricata.inc | 6 +-- recipes-security/suricata/suricata_3.0.2.bb | 58 - recipes-security/suricata/suricata_3.1.bb | 58 + 3 files chang

[yocto] [meta-security][PATCH] suricata: update to 3.0.2

2016-06-26 Thread Armin Kuster
Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-security/suricata/libhtp_0.5.19.bb | 15 recipes-security/suricata/libhtp_0.5.20.bb | 15 recipes-security/suricata/suricata.inc | 6 +-- recipes-security/suricata/suricata_3.0.1.b

[yocto] [meta-security][PATCH] tripwire: update to 2.4.3.1

2016-06-05 Thread Armin Kuster
this also fixes clang and gcc 5.3 build issues remove merged patches Signed-off-by: Armin Kuster <akuster...@gmail.com> --- .../files/tripwire_add_aarch64_to_configure.patch | 29 - .../tripwire/files/tripwire_add_ppc64.patch

[yocto] [meta-security][PATCH 2/2] samhain: update to 4.1.4

2016-06-04 Thread Armin Kuster
/Windows, the default for the 'AvoidBlock' option is now 'off' because of problems reported for this platform. Signed-off-by: Armin Kuster <akuster...@gmail.com> --- .../samhain/{samhain-client_4.1.2.bb => samhain-client_4.1.4.bb} | 0 .../samhain/{samhain-server_4.1.2.bb =

[yocto] [meta-security][PATCH 1/2] nmap: fix several new QA warnings.

2016-06-04 Thread Armin Kuster
remove ndiff.py* as the compiled version is installed in /usr/bin and remove the leftover python site-package cruft. Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-security/nmap/nmap_7.12.bb | 23 +-- 1 file changed, 9 insertions(+), 14 deletions(-) diff

[yocto] [meta-cgl][PATCH 2/2] ocfs2-tools: Fix QA WARNINIG

2016-06-01 Thread Armin Kuster
NOTE: /home/akuster/oss/clean/meta-cgl/meta-cgl-common/recipes-cgl/ocfs2-tools/ocfs2-tools_1.8.4.bb: base_contains is deprecated, please use bb.utils.contains instead. Signed-off-by: Armin Kuster <akus...@mvista.com> --- meta-cgl-common/recipes-cgl/ocfs2-tools/ocfs2-tools_1.8.4.bb | 2

[yocto] [meta-cgl][PATCH 1/2] heartbeat: Fix new qa WARNINGS

2016-06-01 Thread Armin Kuster
NOTE: /home/akuster/oss/clean/meta-cgl/meta-cgl-common/recipes-cgl/heartbeat/heartbeat_3.0.6.bb: base_contains is deprecated, please use bb.utils.contains instead Signed-off-by: Armin Kuster <akus...@mvista.com> --- meta-cgl-common/recipes-cgl/heartbeat/heartbeat_3.0.6.bb | 2 +-

[yocto] [meta-security][PATCH 3/3] clamav: Fix new QA warning

2016-05-07 Thread Armin Kuster
NOTE:meta-security/recipes-security/clamav/clamav_0.99.1.bb: base_contains is deprecated, please use bb.utils.contains instead. Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-security/clamav/clamav_0.99.1.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff

[yocto] [meta-security][PATCH 1/3] sssd: Fix new QA warning

2016-05-07 Thread Armin Kuster
NOTE:meta-security/recipes-security/sssd/sssd_1.13.3.bb: base_contains is deprecated, please use bb.utils.contains instead. Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-security/sssd/sssd_1.13.3.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/r

[yocto] [meta-security][PATCH 2/3] trousers: Fix new QA warning

2016-05-07 Thread Armin Kuster
NOTE: meta-security/recipes-tpm/trousers/trousers_0.3.13.bb: base_contains is deprecated, please use bb.utils.contains instead. Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-tpm/trousers/trousers_0.3.13.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff

[yocto] [meta-security][PATCH 2/2] tpm-tools: add package

2016-04-15 Thread Armin Kuster
Signed-off-by: Armin Kuster <akuster...@gmail.com> --- .../03-fix-bool-error-parseStringWithValues.patch | 30 +++ .../tpm-tools-1.3.8/tpm-tools-extendpcr.patch | 244 + recipes-tpm/tpm-tools/tpm-tools_1.3.8.bb | 22 ++ 3 files changed, 296 inse

[yocto] [meta-security][PATCH 1/2] trousers: add package

2016-04-15 Thread Armin Kuster
Signed-off-by: Armin Kuster <akuster...@gmail.com> --- .../trousers/files/07-read_data-not-inline.patch | 65 recipes-tpm/trousers/files/tcsd.service| 10 ++ recipes-tpm/trousers/files/trousers-udev.rules | 2 + recipes-tpm/trousers/files/trousers.i

[yocto] [meta-security][PATCH 2/2] sssd: add new package

2016-04-14 Thread Armin Kuster
Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-security/sssd/files/sssd.conf | 8 recipes-security/sssd/sssd_1.13.3.bb | 72 +++ 2 files changed, 80 insertions(+) create mode 100644 recipes-security/sssd/files/sssd.conf create mode

[yocto] [meta-security][PATCH 1/2] libdhash: add package

2016-04-14 Thread Armin Kuster
required by sssd Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-security/libdhash/ding-libs_0.5.0.bb | 13 + 1 file changed, 13 insertions(+) create mode 100644 recipes-security/libdhash/ding-libs_0.5.0.bb diff --git a/recipes-security/libdhash/ding-libs_0.5.0

[yocto] [meta-security][PATCH] clamav: fix lib version mismatch

2016-04-11 Thread Armin Kuster
drop lib version in package name drop insane and remove broken symlink Use LEAD_SONAME Don't hard code lib version in tasks Use native chrpath not the host provided version Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-security/clamav/clamav_0.99.1.b

[yocto] [meta-security][PATCH] nmap: update to 7.12

2016-04-11 Thread Armin Kuster
Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-security/nmap/{nmap_7.11.bb => nmap_7.12.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename recipes-security/nmap/{nmap_7.11.bb => nmap_7.12.bb} (94%) diff --git a/recipes-security/nmap/nmap_7.11.b

[yocto] [meta-security][V3][PATCH] paxctl: fix compile issue.

2016-03-30 Thread Armin Kuster
Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-security/paxctl/paxctl_0.9.bb | 10 +- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/recipes-security/paxctl/paxctl_0.9.bb b/recipes-security/paxctl/paxctl_0.9.bb index 8eadad1..d69219f 100644 --- a/r

[yocto] [meta-security][V2]PATCH] paxctl: fix compile issue.

2016-03-27 Thread Armin Kuster
use CC from build not host. thanks khem this fixes the below error. WARNING: paxctl-0.9-r0 do_package_qa: QA Issue: /sbin/paxctl contained in package paxctl requires libc.so.6(GLIBC_2.3.4)(64bit), but no providers found in RDEPENDS_paxctl? [file-rdeps] Signed-off-by: Armin Kuster <akus

[yocto] [meta-security][PATCH] paxctl: fix compile issue.

2016-03-27 Thread Armin Kuster
use CC from build not host. this fixes the below error. WARNING: paxctl-0.9-r0 do_package_qa: QA Issue: /sbin/paxctl contained in package paxctl requires libc.so.6(GLIBC_2.3.4)(64bit), but no providers found in RDEPENDS_paxctl? [file-rdeps] Signed-off-by: Armin Kuster <akuster...@gmail.

[yocto] [meta-security][PATCH] nmap: update to 7.11

2016-03-23 Thread Armin Kuster
https://nmap.org/changelog.html Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-security/nmap/nmap_7.01.bb | 56 -- recipes-security/nmap/nmap_7.11.bb | 56 ++ 2 files changed, 56 insertions(+), 56 del

[yocto] [meta-security][PATCH] libsecomp: update to 2.3.0

2016-03-07 Thread Armin Kuster
Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-security/libseccomp/libseccomp.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/recipes-security/libseccomp/libseccomp.bb b/recipes-security/libseccomp/libseccomp.bb index b197fca..20dfc79

[yocto] [meta-security][PATCH] tripwire: Fix build issue for armeb

2016-02-20 Thread Armin Kuster
add config parama for armeb Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-security/tripwire/files/add_armeb_arch.patch | 18 ++ recipes-security/tripwire/tripwire_2.4.2.2.bb| 1 + 2 files changed, 19 insertions(+) create mode 100644 recipes-se

[yocto] [meta-security][PATCH] nmap: update to version 7.0.1

2016-02-16 Thread Armin Kuster
fixed WARNING: QA Issue: /usr/bin/ndiff_nmap contained in package nmap requires /usr/bin/python2.7, but no providers found in its RDEPENDS [file-rdeps] Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-security/nmap/{nmap_7.00.bb => nmap_7.01.bb} | 8 ++-- 1 file c

[yocto] [meta-security][PATCH 1/2] suricata: update to 3.0

2016-02-16 Thread Armin Kuster
removed patch no longer needded. LIC_FILES_CHKSUM changed do to copyright date updates. Signed-off-by: Armin Kuster <akuster...@gmail.com> --- .../suricata/files/no_pcap_pkgconf_check.patch | 26 -- recipes-security/suricata/libhtp_0.5.18.bb | 2 +- r

[yocto] [meta-security][PATCH 1/3] Samhain: package update to 4.1.2

2015-12-22 Thread Armin Kuster
. - New configure options --enable-posix-acl and --enable-selinux to turn the soft failure (no support for checking compiled in) into a hard failure if required headers/libraries are missing for this feature. Signed-off-by: Armin Kuster <akuster...@gmail.com> --- .../samhain/{s

[yocto] [meta-security][PATCH 3/3] suricata: package update to 2.0.11

2015-12-22 Thread Armin Kuster
Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-security/suricata/suricata.inc | 7 +++ .../suricata/{suricata_2.0.9.bb => suricata_2.0.11.bb} | 0 2 files changed, 3 insertions(+), 4 deletions(-) rename recipes-security

[yocto] [meta-security][PATCH 2/3] samhain-client: update to 4.1.2

2015-12-22 Thread Armin Kuster
Signed-off-by: Armin Kuster <akuster...@gmail.com> --- .../samhain/{samhain-client_4.1.0.bb => samhain-client_4.1.2.bb} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename recipes-security/samhain/{samhain-client_4.1.0.bb => samhain-client_4.1.2.bb} (100%) diff --g

[yocto] [meta-security][PATCH] nmap: package update to 7.0

2015-11-27 Thread Armin Kuster
removed integrated patch Changed LIC_FILES_CHKSUM from generic OE to a file within the package sources. Signed-off-by: Armin Kuster <akuster...@gmail.com> --- .../nmap/files/add_aarch64_to_configure.patch | 28 -- .../nmap/{nmap_6.47.bb => nmap_7.00.bb}

[yocto] [meta-security][PATCH 2/2] ccs-tools: update to 1.8.4

2015-10-25 Thread Armin Kuster
change LIC_CHKSUM to COPYING.css where the license statement resides. Signed-off-by: Armin Kuster <akuster...@gmail.com> --- .../ccs-tools/{ccs-tools_1.8.3.bb => ccs-tools_1.8.4.bb} | 9 + 1 file changed, 5 insertions(+), 4 deletions(-) rename recipes-security/ccs-t

[yocto] [meta-security][PATCH 1/3] samhain: update to 4.1.0

2015-10-03 Thread Armin Kuster
Signed-off-by: Armin Kuster <akuster...@gmail.com> --- .../samhain/{samhain-client_4.0.0.bb => samhain-client_4.1.0.bb} | 0 .../samhain/{samhain-server_4.0.0.bb => samhain-server_4.1.0.bb} | 0 recipes-security/samhain/samhain.inc | 4 +

[yocto] [meta-security][PATCH 3/3] suricata: update to version 2.0.9

2015-10-03 Thread Armin Kuster
t functional) (2.0.x) Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-security/suricata/{suricata_2.0.8.bb => suricata_2.0.9.bb} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename recipes-security/suricata/{suricata_2.0.8.bb => suricata_2.0.9.bb} (100%) diff

[yocto] [meta-security][PATCH 2/3] libhtp: update to version 0.5.18

2015-10-03 Thread Armin Kuster
header safer [Brian Rectanus] Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-security/suricata/{libhtp_0.5.17.bb => libhtp_0.5.18.bb} | 2 +- recipes-security/suricata/suricata.inc | 9 + 2 files changed, 6 insertions(+), 5 deletions(-

[yocto] [meta-security][PATCH 1/2] libseccomp: update to latest

2015-09-20 Thread Armin Kuster
Signed-off-by: Armin Kuster <akuster...@gmail.com> --- .../libseccomp/{libseccomp_2.2.0.bb => libseccomp.bb}| 16 ++-- 1 file changed, 2 insertions(+), 14 deletions(-) rename recipes-security/libseccomp/{libseccomp_2.2.0.bb => libseccomp.bb} (61%) diff --git a/reci

[yocto] [meta-security][PATCH 2/2] nmap: fix build issue.

2015-09-20 Thread Armin Kuster
ncat/ncat_lua.c:174: undefined reference to `lua_remove' ncat/ncat_lua.c:167: undefined reference to `lua_insert' use internal lua support Signed-off-by: Armin Kuster <akuster...@gmail.com> --- recipes-security/nmap/nmap_6.47.bb | 6 ++ 1 file changed, 2 insertions(+), 4 deletions(-)

[yocto] [meta-security][PATCH] samhain-client: update to 4.0.0

2015-07-20 Thread Armin Kuster
Signed-off-by: Armin Kuster akuster...@gmail.com --- .../samhain/files/add_aarch64_to_configure.patch | 34 -- ...ain-client_3.1.5.bb = samhain-client_4.0.0.bb} | 0 ...ain-server_3.1.5.bb = samhain-server_4.0.0.bb} | 2 +- recipes-security/samhain/samhain.inc

[yocto] [meta-security][PATCH 2/3] python-pycrypto: add new package

2015-06-07 Thread Armin Kuster
adding crypto package for use by scampy. I will remove once it is moved to meta-python Signed-off-by: Armin Kuster akuster...@gmail.com --- .../python/python-pycrypto/cross-compiling.patch | 23 +++ recipes-devtools/python/python-pycrypto_2.6.1.bb | 33 ++ 2

[yocto] [meta-security][PATCH 3/3] scapy: add new package

2015-06-07 Thread Armin Kuster
Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-security/scapy/scapy_2.3.1.bb | 17 + 1 file changed, 17 insertions(+) create mode 100644 recipes-security/scapy/scapy_2.3.1.bb diff --git a/recipes-security/scapy/scapy_2.3.1.bb b/recipes-security/scapy/scapy_2.3.1

[yocto] [meta-security][PATCH 1/3] aircrack-ng: add new package

2015-06-07 Thread Armin Kuster
Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-security/aircrack-ng/aircrack-ng_1.2.bb| 37 ++ .../aircrack-ng/files/fixup_cflags.patch | 28 2 files changed, 65 insertions(+) create mode 100644 recipes-security/aircrack-ng

[yocto] [meta-security][PATCH 3/3] libewf: update to version 20140608

2015-05-23 Thread Armin Kuster
drop ubuntu patches, never used them. Fix GCC 5.0 build. Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-forensic/libewf/files/gcc5_fix.patch | 22 ++ .../{libewf_20130416.bb = libewf_20140608.bb} | 4 +--- 2 files changed, 23 insertions(+), 3

[yocto] [meta-security][PATCH 2/3] suricata: package update to 2.0.8

2015-05-23 Thread Armin Kuster
includes security fix CVE-2015-0971 include nss and nspr to build Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-security/suricata/{suricata_2.0.7.bb = suricata_2.0.8.bb} | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) rename recipes-security/suricata/{suricata_2.0.7

[yocto] [meta-security][PATCH 1/3] libhtp: update to use suricata 2.0.8

2015-05-23 Thread Armin Kuster
Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-security/suricata/libhtp_0.5.17.bb | 2 +- recipes-security/suricata/suricata.inc | 7 --- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/recipes-security/suricata/libhtp_0.5.17.bb b/recipes-security/suricata

[linux-yocto] [PATCH] arm64: psci: move psci firmware calls out of line

2015-05-16 Thread Armin Kuster
From: Will Deacon will.dea...@arm.com An arm64 allmodconfig fails to build with GCC 5 due to __asmeq assertions in the PSCI firmware calling code firing due to mcount preambles breaking our assumptions about register allocation of function arguments: /tmp/ccDqJsJ6.s: Assembler messages:

[yocto] [meta-security][PATCH] libewf: GCC5.x build fix

2015-05-06 Thread Armin Kuster
Fix the following errors. | ../libsmraw/.libs/libsmraw.a(libuna_utf8_string.o): In function `libuna_utf8_string_compare_with_utf32_stream': Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-forensic/libewf/libewf_20130416.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git

[yocto] [meta-security][PATCH] suricata: Fix QA warnings

2015-05-05 Thread Armin Kuster
WARNING: QA Issue: suricata rdepends on nspr, but it isn't a build dependency? [build-deps] WARNING: QA Issue: suricata rdepends on nss, but it isn't a build dependency? [build-deps] Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-security/suricata/suricata_2.0.7.bb | 2 +- 1 file

[yocto] [meta-security][PATCH v2] suricata: Fix QA warnings

2015-05-05 Thread Armin Kuster
WARNING: QA Issue: suricata rdepends on nspr, but it isn't a build dependency? [build-deps] WARNING: QA Issue: suricata rdepends on nss, but it isn't a build dependency? [build-deps] v2: redo depends fix per JaMa input Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-security

[yocto] [meta-security][PATCH 2/2] libseccomp: add tests

2015-04-10 Thread Armin Kuster
update busybox for extend head option for test suite remove seq -f option as it is not supported buy busybox Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-core/busybox/busybox/head.cfg | 1 + recipes-core/busybox/busybox_%.bbappend| 3 +++ .../files

[yocto] [meta-security][PATCH 1/2] libseccomp: add ppc support

2015-04-10 Thread Armin Kuster
backport ppc patches Signed-off-by: Armin Kuster akuster...@gmail.com --- .../0001-arch-add-a-ppc64-syscall-table.patch | 1253 ...e-basic-initial-support-for-ppc64-to-the-.patch | 128 ++ .../files/0003-tools-add-ppc64-support.patch | 80 ++ ...add-ppc64

[yocto] [meta-security][PATCH] samhain: update client and server to 3.1.5

2015-03-28 Thread Armin Kuster
Signed-off-by: Armin Kuster akuster...@gmail.com fix missing bash depends in server recipe --- .../samhain/{samhain-client_3.1.3.bb = samhain-client_3.1.5.bb} | 0 .../samhain/{samhain-server_3.1.3.bb = samhain-server_3.1.5.bb} | 2 +- recipes-security/samhain/samhain.inc

[yocto] [meta-security][PATCH] suricata: update to 2.0.7

2015-03-13 Thread Armin Kuster
this includes CVE-2015-0928 moved patches and files to more generic dir name Signed-off-by: Armin Kuster akuster...@gmail.com --- .../suricata/{suricata-2.0.6 = files}/no_libhtp_build.patch| 0 .../suricata/{suricata-2.0.6 = files}/no_pcap_pkgconf_check.patch | 0 recipes-security

[yocto] [meta-security][PATCH] libseccomp update

2015-03-13 Thread Armin Kuster
/CHANGELOG Armin Kuster (1): libseccomp: update to version 2.2.0 recipes-security/libseccomp/libseccomp_2.1.1.bb | 37 - recipes-security/libseccomp/libseccomp_2.2.0.bb | 23 +++ 2 files changed, 23 insertions(+), 37 deletions(-) delete mode 100644 recipes

[yocto] [meta-security][PATCH] tomoyo: fix typos in scc file

2015-02-25 Thread Armin Kuster
thanks to rday for pointing it out. Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-kernel/linux/linux-yocto/tomoyo.scc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/recipes-kernel/linux/linux-yocto/tomoyo.scc b/recipes-kernel/linux/linux-yocto/tomoyo.scc

[yocto] [meta-cgl][PATCH] heartbeat: Fix incorrect licence logic

2015-02-16 Thread Armin Kuster
From: Armin Kuster akus...@mvista.com It should be and (and) not | (or). thanks Chris. Signed-off-by: Armin Kuster akus...@mvista.com --- meta-cgl-common/recipes-cgl/heartbeat/heartbeat_3.0.5.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-cgl-common/recipes-cgl

[yocto] [meta-cgl][PATCH] README: update BBMASK and add send-email example

2015-02-16 Thread Armin Kuster
From: Armin Kuster akus...@mvista.com libcap-ng is now in meta-oe and removed from meta-security. mask no longer required. Signed-off-by: Armin Kuster akus...@mvista.com --- README | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/README b/README index ba311b7..a488cd7

[yocto] [meta-security][PATCH] libcap-ng: remove from layer

2015-02-13 Thread Armin Kuster
this package is not in meta-oe Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-security/libcap-ng/libcap-ng/python.patch | 39 --- recipes-security/libcap-ng/libcap-ng_0.7.4.bb | 37 - 2 files changed, 76 deletions(-) delete mode 100644

[yocto] [meta-security][PATCH] tripwire: Add aarch64 support to config.sub

2015-02-13 Thread Armin Kuster
this fixes a build issue on arm64. Signed-off-by: Armin Kuster akuster...@gmail.com --- .../files/tripwire_add_aarch64_to_configure.patch | 29 ++ recipes-security/tripwire/tripwire_2.4.2.2.bb | 1 + 2 files changed, 30 insertions(+) create mode 100644 recipes

[yocto] [meta-security][PATCH] nmap: add aarch64 config support

2015-02-13 Thread Armin Kuster
allow nmap to build for arm64 qemu machine. Signed-off-by: Armin Kuster akuster...@gmail.com --- .../nmap/files/add_aarch64_to_configure.patch | 28 ++ recipes-security/nmap/nmap_6.47.bb | 3 ++- 2 files changed, 30 insertions(+), 1 deletion(-) create

[yocto] [PATCH][meta-cgl] cluster-glue: fix build issues

2015-02-13 Thread Armin Kuster
From: Armin Kuster akus...@mvista.com WARNING: QA Issue: cluster-glue requires /usr/bin/perl, but no providers in its RDEPENDS [file-rdeps] WARNING: QA Issue: cluster-glue-plugin-stonith2 requires /bin/bash, but no providers in its RDEPENDS [file-rdeps] WARNING: QA Issue: cluster-glue-plugin

[yocto] [meta-cgl][PATCH] heartbeat: fix license issue

2015-02-13 Thread Armin Kuster
From: Armin Kuster akus...@mvista.com WARNING: heartbeat: LICENSE value GPLv2 LGPLv2+ has an invalid format - license names must be separated by the following characters to indicate the license selection: |() Signed-off-by: Armin Kuster akus...@mvista.com --- meta-cgl-common/recipes-cgl

[yocto] [meta-security][PATCH 0/3] initial Forensic packages

2015-02-09 Thread Armin Kuster
Add three forensic applications to layer under there own recipe catagory. Armin Kuster (3): afflib: new package libewf: add package sleuth: add sleuthkit recipes-forensic/afflib/afflib_3.6.6.bb| 30 ++ .../afflib/files/configure_rm_ms_flags.patch | 18

[yocto] [meta-security][PATCH 2/3] libewf: add package

2015-02-09 Thread Armin Kuster
Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-forensic/libewf/libewf_20130416.bb | 26 ++ 1 file changed, 26 insertions(+) create mode 100644 recipes-forensic/libewf/libewf_20130416.bb diff --git a/recipes-forensic/libewf/libewf_20130416.bb b/recipes

[yocto] [meta-security][PATCH 1/3] afflib: new package

2015-02-09 Thread Armin Kuster
Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-forensic/afflib/afflib_3.6.6.bb| 30 ++ .../afflib/files/configure_rm_ms_flags.patch | 18 + 2 files changed, 48 insertions(+) create mode 100644 recipes-forensic/afflib/afflib_3.6.6.bb

[yocto] [meta-security][PATCH 3/3] sleuth: add sleuthkit

2015-02-09 Thread Armin Kuster
Signed-off-by: Armin Kuster akuster...@gmail.com --- .../sleuth/files/fix_host_poison.patch | 23 ++ recipes-forensic/sleuth/sleuthkit_4.1.3.bb | 28 ++ 2 files changed, 51 insertions(+) create mode 100644 recipes-forensic/sleuth/files

[yocto] [meta-security][PATCH] suricata: update to 2.0.6

2015-02-07 Thread Armin Kuster
fix new build issues with pcap-config cleanup configure selection Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-security/suricata/libhtp_0.5.16.bb | 2 +- .../no_libhtp_build.patch | 0 .../suricata-2.0.6/no_pcap_pkgconf_check.patch | 26

[yocto] [meta-security][PATCH] README: update layer information

2015-02-02 Thread Armin Kuster
Signed-off-by: Armin Kuster akuster...@gmail.com --- README | 7 +++ 1 file changed, 7 insertions(+) diff --git a/README b/README index 71378d9..ef80f2b 100644 --- a/README +++ b/README @@ -24,6 +24,11 @@ This layer depends on: revision: HEAD prio: default + URI: git

[yocto] [meta-security][PATCH] layer conf: update to include meta-networking

2015-02-02 Thread Armin Kuster
suricata needs a package in meta-networking Signed-off-by: Armin Kuster akuster...@gmail.com --- conf/layer.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conf/layer.conf b/conf/layer.conf index c5a717b..650e6ed 100644 --- a/conf/layer.conf +++ b/conf/layer.conf @@ -9,4

[yocto] [meta-security][PATCH 1/2] libseccomp: add COMPATIBLE_HOST

2015-02-01 Thread Armin Kuster
don't build for ppc, ppc64, mips or aarch64 Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-security/libseccomp/libseccomp_2.1.1.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/recipes-security/libseccomp/libseccomp_2.1.1.bb b/recipes-security/libseccomp/libseccomp_2.1.1

[yocto] [meta-security][PATCH 2/2] packagegroup: remove libseccomp

2015-02-01 Thread Armin Kuster
libseccomp now includes COMPATIBLE_HOST so it will also negate the packagegroup Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-security/packagegroup/packagegroup-core-security.bb | 1 - 1 file changed, 1 deletion(-) diff --git a/recipes-security/packagegroup/packagegroup-core

[yocto] [meta-security][PATCH 2/2] clamav: remove interal libmspack

2015-01-31 Thread Armin Kuster
Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-security/clamav/clamav_0.98.5.bb | 19 --- 1 file changed, 8 insertions(+), 11 deletions(-) diff --git a/recipes-security/clamav/clamav_0.98.5.bb b/recipes-security/clamav/clamav_0.98.5.bb index 73c9ab2..8f71654 100644

[yocto] [meta-security][PATCH 1/2] libmspack: add new package

2015-01-31 Thread Armin Kuster
Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-security/libmspack/libmspack_0.4.bb | 16 1 file changed, 16 insertions(+) create mode 100644 recipes-security/libmspack/libmspack_0.4.bb diff --git a/recipes-security/libmspack/libmspack_0.4.bb b/recipes-security

[yocto] [meta-selinux][PATCH] ustr: fix typo in SRC_URI

2015-01-30 Thread Armin Kuster
From: Armin Kuster akus...@mvista.com This fixes ERROR: Fetcher failure: Fetch command failed with exit code 8, output: http://www.and.org/ustr/$%7BBPV%7D/ustr-1.0.4.tar.bz2: 2015-01-30 18:26:38 ERROR 404: Not Found. Changed BPV to PV Signed-off-by: Armin Kuster akus...@mvista.com --- recipes

[yocto] [meta-security][PATCH] samhain: fix aarch64 build issues

2015-01-30 Thread Armin Kuster
Signed-off-by: Armin Kuster akuster...@gmail.com --- .../samhain/files/add_aarch64_to_configure.patch | 34 ++ recipes-security/samhain/samhain.inc | 5 2 files changed, 39 insertions(+) create mode 100644 recipes-security/samhain/files

[yocto] [meta-security][PATCH 1/5] samhain: client fix rdepends

2015-01-14 Thread Armin Kuster
WARNING: QA Issue: samhain-client requires /bin/bash, but no providers in its RDEPENDS [file-rdeps] Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-security/samhain/samhain-client_3.1.3.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-security/samhain

[yocto] [meta-security][PATCH 3/5] libseccomp: fix rdepends

2015-01-14 Thread Armin Kuster
WARNING: QA Issue: libseccomp requires /bin/bash, but no providers in its RDEPENDS [file-rdeps] Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-security/libseccomp/libseccomp_2.1.1.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/recipes-security/libseccomp/libseccomp_2.1.1

[yocto] [meta-security][PATCH v2] libcap-ng: fix checksums

2015-01-12 Thread Armin Kuster
the checksums did not get updated when upgrading package. Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-security/libcap-ng/libcap-ng_0.7.4.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/recipes-security/libcap-ng/libcap-ng_0.7.4.bb b/recipes-security

[yocto] [meta-security][PATCH] libcap-ng: fix checksums

2015-01-11 Thread Armin Kuster
Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-security/libcap-ng/libcap-ng_0.7.4.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/recipes-security/libcap-ng/libcap-ng_0.7.4.bb b/recipes-security/libcap-ng/libcap-ng_0.7.4.bb index 3f225ba..8823dad 100644

[yocto] [meta-security][PATCH 2/2] suricata: add new ids and pds engine for meta-security

2015-01-01 Thread Armin Kuster
Signed-off-by: Armin Kuster akuster...@gmail.com --- .../suricata/suricata-2.0.5/no_libhtp_build.patch | 38 + .../suricata/suricata-2.0.5/suricata.yaml | 1326 .../suricata/suricata-2.0.5/volatiles.03_suricata |2 + recipes-security/suricata/suricata_2.0.5

[yocto] [meta-security][PATCH 1/2] libwhisker2-perl: fix build issue

2015-01-01 Thread Armin Kuster
/perl.real Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-perl/perl/libwhisker2-perl_2.5.bb | 15 +-- 1 file changed, 9 insertions(+), 6 deletions(-) diff --git a/recipes-perl/perl/libwhisker2-perl_2.5.bb b/recipes-perl/perl/libwhisker2-perl_2.5.bb index a98bde0..d9af430

[yocto] [meta-security][PATCH 2/2] nikto: fix launching errors

2015-01-01 Thread Armin Kuster
add several missing perl package depends so app can launch Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-security/nikto/nikto_2.1.5.bb | 8 +++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/recipes-security/nikto/nikto_2.1.5.bb b/recipes-security/nikto

[yocto] [meta-security][PATCH 1/2] libhtp: add support lib for suricata

2015-01-01 Thread Armin Kuster
include common inc file Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-security/suricata/libhtp_0.5.16.bb | 13 + recipes-security/suricata/suricata.inc | 7 +++ 2 files changed, 20 insertions(+) create mode 100644 recipes-security/suricata/libhtp_0.5.16.bb

[yocto] [meta-security][PATCH 2/3] perl: reorg recipes to match meta-perl.

2014-12-26 Thread Armin Kuster
move security perl recipes to a more standardized recipes-perl layout. Signed-off-by: Armin Kuster akuster...@gmail.com --- {recipes-security = recipes-perl}/perl/files/libwhisker2.patch | 0 {recipes-security = recipes-perl}/perl/lib-perl_0.63.bb| 0 {recipes-security = recipes

[yocto] [meta-security][PATCH 3/3] nikto: fix depends

2014-12-26 Thread Armin Kuster
Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-security/nikto/nikto_2.1.5.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-security/nikto/nikto_2.1.5.bb b/recipes-security/nikto/nikto_2.1.5.bb index 4609717..4708191 100644 --- a/recipes-security/nikto

[yocto] [meta-security][PATCH 1/3] remove: libcurses-perl, libhtml-parser-perl, libnet-dns-perl

2014-12-26 Thread Armin Kuster
those packages are being moved to meta-perl. Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-security/perl/libcurses-perl_1.31.bb | 27 --- recipes-security/perl/libhtml-parser-perl_3.71.bb | 25 - recipes-security/perl/libnet-dns

[yocto] [meta-security][PATCH] libcap-ng: update to 7.4 plus security fix

2014-11-29 Thread Armin Kuster
0.7.4 - In pscap, remove unused code - Add CAPNG_INIT_SUPP_GRP to capng_change_id - Drop CAP_COMPROMISE_KERNEL - Update the autotools components - Dynamically detect last capability (#895105) - Add PR_SET_NO_NEW_PRIVS to capng_lock if kernel supports it (CVE-2014-3215) Signed-off-by: Armin

[yocto] [meta-security][PATCH] nmap: update to version 6.47

2014-11-29 Thread Armin Kuster
for list of changes see: http://seclists.org/nmap-dev/2014/q3/335 use nmap.inc to house most code. Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-security/nmap/{nmap_6.46.bb = nmap.inc} | 8 +--- recipes-security/nmap/nmap_6.47.bb | 10 ++ 2 files

[yocto] [meta-security][PATCH] samhain: update to 3.1.3

2014-11-01 Thread Armin Kuster
Signed-off-by: Armin Kuster akuster...@gmail.com --- .../samhain/{samhain-client_3.1.2.bb = samhain-client_3.1.3.bb} | 0 .../samhain/{samhain-server_3.1.2.bb = samhain-server_3.1.3.bb} | 0 recipes-security/samhain/samhain.inc | 4 ++-- 3 files changed

[yocto] [meta-security][PATCH][wip] libseccomp: git version recipe

2014-10-01 Thread Armin Kuster
while we wait for the official release. Signed-off-by: Armin Kuster akuster...@gmail.com --- recipes-security/libseccomp/libseccomp_git.bb | 49 +++ 1 file changed, 49 insertions(+) create mode 100644 recipes-security/libseccomp/libseccomp_git.bb diff --git a/recipes

<    1   2   3   4   5   6   >