From patchwork Fri May 6 14:32:21 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: akuster808 X-Patchwork-Id: 7695 X-Patchwork-Delegate: akuster808@gmail.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id A3082C433FE for ; Fri, 6 May 2022 14:32:38 +0000 (UTC) Received: from mail-pl1-f170.google.com (mail-pl1-f170.google.com [209.85.214.170]) by mx.groups.io with SMTP id smtpd.web11.10103.1651847552442702911 for ; Fri, 06 May 2022 07:32:32 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20210112 header.b=kGZzk+hy; spf=pass (domain: gmail.com, ip: 209.85.214.170, mailfrom: akuster808@gmail.com) Received: by mail-pl1-f170.google.com with SMTP id s14so7619780plk.8 for ; Fri, 06 May 2022 07:32:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:subject:date:message-id:mime-version :content-transfer-encoding; bh=JJ9nJ8rfFfewU+R/8iMOl2KjxFA/oqMVyuvBJ40FUPc=; b=kGZzk+hyl2C5SaIOxwH2tLhlotY/u4C5ib5rsL4+hFFleyDWi/2vv89QAXGRzWnQnk Ul2Ep1Z2Q1jhlJR/Efy0nrDP66KaoR+Xx6LaZYQUm80si0b5ojGoYUCytNZya8sMXFr4 a36uffaO/160gfKKpwIRHUe8Vqju4RWhxPBD91Yecs7c66vBhY2on2nf7Pjd26SOaDYi A5GsH17YtBk/UCwX33B7E1SibmIvi+WkX0jrQ6RGbUetCgBgqASz0Jcnhxn37dPgCrKF wiMOwJprVutjWRYD6NjAMnCX8Mz14It0c6xGuOmGsE6+5AyjakrCi/5Ej/s3Pk3sHSBk gJnw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:subject:date:message-id:mime-version :content-transfer-encoding; bh=JJ9nJ8rfFfewU+R/8iMOl2KjxFA/oqMVyuvBJ40FUPc=; b=eialJ0Mkw/4tMyK14HpRGa9c0Orlm5OaRHLZ0337y49dS7X2KfYioXEvnbYPEZpWjB iePdjIyUGyofexqTDuNKmvqnBuV4fAuhAhxwN8s8BIseMk6SxKqOz8uFU1PGdbf1TIAW W+uTW6/0+bVcvvoBxURWoG9LB/xJELD6hBdXp6cdgBFJ5u+tvffjRwF+Jqjf42IYhWHP b2tyfxvCjbm5aIXs1oNNN+G+bfUuGtOQCSemAqIel8WaUABOkYpJgCEFGhoVIsaaMKE2 qrEv9dn7uASxi3Sf9jRS1kpSiyTjmUnLGbyfU3JnZZ/HfA8obHjjcY4OYXFvmPhM0tYd Nb1g== X-Gm-Message-State: AOAM530W7G+Wvwd/l9SoION8WvTP+lbmGz7GOVAw60gTgNUkQHhMQByr HCjbEI+TENMa9Q8gOWQPZ0sHGkvLGrO9QA== X-Google-Smtp-Source: ABdhPJx1w+nkHUOL1l7LQ0aGIKEdrUyk+CRZq541+qJz+xuOMD2Pg4bk0E1/VjZKKGwozuldrCnvuQ== X-Received: by 2002:a17:902:f68d:b0:15e:bd3c:43da with SMTP id l13-20020a170902f68d00b0015ebd3c43damr3897707plg.164.1651847551465; Fri, 06 May 2022 07:32:31 -0700 (PDT) Received: from keaua.caveonetworks.com ([2601:202:4180:a5c0:c35c:fb08:9ca2:8f49]) by smtp.gmail.com with ESMTPSA id 196-20020a6300cd000000b003c14af5060dsm3385322pga.37.2022.05.06.07.32.30 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 06 May 2022 07:32:30 -0700 (PDT) From: Armin Kuster To: yocto@lists.yoctoproject.org Subject: [meta-security][PATCH 1/9] fscrypt: add distro_check on pam Date: Fri, 6 May 2022 07:32:21 -0700 Message-Id: <20220506143229.2141000-1-akuster808@gmail.com> X-Mailer: git-send-email 2.25.1 MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 06 May 2022 14:32:38 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto/message/57012 Signed-off-by: Armin Kuster --- recipes-security/fscrypt/fscrypt_1.0.0.bb | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/recipes-security/fscrypt/fscrypt_1.0.0.bb b/recipes-security/fscrypt/fscrypt_1.0.0.bb index 663d8e2..8147fe6 100644 --- a/recipes-security/fscrypt/fscrypt_1.0.0.bb +++ b/recipes-security/fscrypt/fscrypt_1.0.0.bb @@ -8,19 +8,19 @@ SECTION = "base" LICENSE = "Apache-2.0" LIC_FILES_CHKSUM = "file://src/${GO_IMPORT}/LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57" -BBCLASSEXTEND = "native nativesdk" - # fscrypt depends on go and libpam DEPENDS += "go-native libpam" SRCREV = "92b1e9a8670ccd3916a7d24a06cab1e4c9815bc4" SRC_URI = "git://github.com/google/fscrypt.git;branch=master;protocol=https" + GO_IMPORT = "import" -S = "${WORKDIR}/git" +inherit go goarch features_check -inherit go -inherit goarch +REQUIRED_DISTRO_FEATURES = "pam" + +S = "${WORKDIR}/git" do_compile() { export GOARCH=${TARGET_GOARCH} @@ -47,3 +47,5 @@ do_install() { install -d ${D}/${bindir} install ${S}/src/${GO_IMPORT}/bin/fscrypt ${D}/${bindir}/fscrypt } + +BBCLASSEXTEND = "native nativesdk" From patchwork Fri May 6 14:32:22 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: akuster808 X-Patchwork-Id: 7696 X-Patchwork-Delegate: akuster808@gmail.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id A170AC433F5 for ; Fri, 6 May 2022 14:32:38 +0000 (UTC) Received: from mail-pl1-f181.google.com (mail-pl1-f181.google.com [209.85.214.181]) by mx.groups.io with SMTP id smtpd.web11.10104.1651847553852749671 for ; Fri, 06 May 2022 07:32:34 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20210112 header.b=BlsXCusi; spf=pass (domain: gmail.com, ip: 209.85.214.181, mailfrom: akuster808@gmail.com) Received: by mail-pl1-f181.google.com with SMTP id i17so7602326pla.10 for ; Fri, 06 May 2022 07:32:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:subject:date:message-id:in-reply-to:references:mime-version :content-transfer-encoding; bh=dP4AwLMlRL0OhrsmTf8tXwj1LX+9eqyD1YggTHk9jw0=; b=BlsXCusihv00n/IeYPSBTRCzwQLX8TCbBCt5U1IK/vtaltgtilnGhth+uR+/Q4+9MS 4pv9yPllVUeHy1Tvtgrn6r1cAp3iC4lxGw0Zd9O9wVTdK8MDGiHG0BK0pfOItFZDkKYZ nmbFkJ0jHHv8P9l02rruCPyVTSL8M22Iv03KtHDA6P8v/f2+0+I8EheInXtoQaMH0DNF KaxCO6q/7lPX8HFvnvBIuLvfqcKd6sI0DocVlKY/BCJ7zUYOHD0rZEOf32UCnzgIwic/ VImJLWX+FJC2owoyyAvenkaNL+oaBeZyJMY+ENPy0DSLxYuYD1Tk4UI/D2HYYEKES60V plRw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:subject:date:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=dP4AwLMlRL0OhrsmTf8tXwj1LX+9eqyD1YggTHk9jw0=; b=YMvGaJw2L3wgsm8D80ZsAnlTRXxk2Bs1Y9tq/CPGLJSMpXcWTwWU3jMFSc08iNZc8o 2Qw76Z4mrcUHMlCHlSYCjqyt/K9P6LgCQpYW9zwsHG8DpJvWyHoyj2M8Wlbs00R/CXGy sGqyxZTgi7aLJr4syz6BYBf08JKJEdfNV3DaPNBXv5HVNGtOFsvxGEdNtrBE7FwY65Si JvGOVnyIDS1bYXqbtYX35EEXzQKmqZ0h4KYxFb7rfeM5L4SULRW3dKuLhSdR0BiCbqlo JkjyTf4g3bPMKZ8l+/46Kfs9w2L3VtLB2K3uhB7mBlEcfMiEMMX2IP0rTkXm5riCZtbE j2fw== X-Gm-Message-State: AOAM533g4DQS1xaW+fSYnq2aSkZGFjr3peGF5Kpt5ZC+4AxJHzH8o6fG 8FSV+F7BnlMricfIFBFGU4Yu8u8pyZyoBw== X-Google-Smtp-Source: ABdhPJwEG4D18aSW3YR2ZbYRUP5qZSFLhVLGJ8Tvsq1rB6JXJKsKSuoYff8Yr8DXNqPLvRi06YXDzA== X-Received: by 2002:a17:903:32d0:b0:15e:8cbc:fd39 with SMTP id i16-20020a17090332d000b0015e8cbcfd39mr4063810plr.95.1651847552790; Fri, 06 May 2022 07:32:32 -0700 (PDT) Received: from keaua.caveonetworks.com ([2601:202:4180:a5c0:c35c:fb08:9ca2:8f49]) by smtp.gmail.com with ESMTPSA id 196-20020a6300cd000000b003c14af5060dsm3385322pga.37.2022.05.06.07.32.31 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 06 May 2022 07:32:32 -0700 (PDT) From: Armin Kuster To: yocto@lists.yoctoproject.org Subject: [meta-security][PATCH 2/9] meta-security: move perl and python recipes to dynamic layers structure Date: Fri, 6 May 2022 07:32:22 -0700 Message-Id: <20220506143229.2141000-2-akuster808@gmail.com> X-Mailer: git-send-email 2.25.1 In-Reply-To: <20220506143229.2141000-1-akuster808@gmail.com> References: <20220506143229.2141000-1-akuster808@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 06 May 2022 14:32:38 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto/message/57013 Signed-off-by: Armin Kuster --- .../recipes-scanners}/checksecurity/checksecurity_2.0.15.bb | 0 .../files/check-setuid-use-more-portable-find-args.patch | 0 .../recipes-scanners}/checksecurity/files/setuid-log-folder.patch | 0 .../meta-perl/recipes-security}/bastille/bastille_3.2.1.bb | 0 .../meta-perl/recipes-security}/bastille/files/API.pm | 0 .../recipes-security}/bastille/files/AccountPermission.pm | 0 .../meta-perl/recipes-security}/bastille/files/FileContent.pm | 0 .../meta-perl/recipes-security}/bastille/files/HPSpecific.pm | 0 .../meta-perl/recipes-security}/bastille/files/Miscellaneous.pm | 0 .../meta-perl/recipes-security}/bastille/files/ServiceAdmin.pm | 0 .../bastille/files/accept_os_flag_in_backend.patch | 0 .../recipes-security}/bastille/files/allow_os_with_assess.patch | 0 .../recipes-security}/bastille/files/call_output_config.patch | 0 .../meta-perl/recipes-security}/bastille/files/config | 0 .../recipes-security}/bastille/files/do_not_apply_config.patch | 0 .../recipes-security}/bastille/files/edit_usage_message.patch | 0 .../recipes-security}/bastille/files/find_existing_config.patch | 0 .../bastille/files/fix_missing_use_directives.patch | 0 .../recipes-security}/bastille/files/fix_number_of_modules.patch | 0 .../recipes-security}/bastille/files/fix_version_parse.patch | 0 .../recipes-security}/bastille/files/fixed_defined_warnings.patch | 0 .../bastille/files/organize_distro_discovery.patch | 0 .../bastille/files/remove_questions_text_file_references.patch | 0 .../recipes-security}/bastille/files/set_required_questions.py | 0 .../recipes-security}/bastille/files/simplify_B_place.patch | 0 .../bastille/files/upgrade_options_processing.patch | 0 .../meta-perl/recipes-security}/nikto/files/location.patch | 0 .../meta-perl/recipes-security}/nikto/nikto_2.1.6.bb | 0 .../fail2ban/files/0001-To-fix-build-error-of-xrang.patch | 0 .../meta-python/recipes-security}/fail2ban/files/initd | 0 .../meta-python/recipes-security}/fail2ban/files/run-ptest | 0 .../recipes-security}/fail2ban/python3-fail2ban_0.11.2.bb | 0 .../recipes-security}/mfa/python3-privacyidea_3.6.2.bb | 0 .../recipes-security}/python/python3-oauth2client_4.1.3.bb | 0 34 files changed, 0 insertions(+), 0 deletions(-) rename {recipes-scanners => dynamic-layers/meta-perl/recipes-scanners}/checksecurity/checksecurity_2.0.15.bb (100%) rename {recipes-scanners => dynamic-layers/meta-perl/recipes-scanners}/checksecurity/files/check-setuid-use-more-portable-find-args.patch (100%) rename {recipes-scanners => dynamic-layers/meta-perl/recipes-scanners}/checksecurity/files/setuid-log-folder.patch (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/bastille/bastille_3.2.1.bb (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/bastille/files/API.pm (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/bastille/files/AccountPermission.pm (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/bastille/files/FileContent.pm (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/bastille/files/HPSpecific.pm (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/bastille/files/Miscellaneous.pm (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/bastille/files/ServiceAdmin.pm (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/bastille/files/accept_os_flag_in_backend.patch (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/bastille/files/allow_os_with_assess.patch (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/bastille/files/call_output_config.patch (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/bastille/files/config (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/bastille/files/do_not_apply_config.patch (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/bastille/files/edit_usage_message.patch (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/bastille/files/find_existing_config.patch (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/bastille/files/fix_missing_use_directives.patch (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/bastille/files/fix_number_of_modules.patch (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/bastille/files/fix_version_parse.patch (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/bastille/files/fixed_defined_warnings.patch (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/bastille/files/organize_distro_discovery.patch (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/bastille/files/remove_questions_text_file_references.patch (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/bastille/files/set_required_questions.py (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/bastille/files/simplify_B_place.patch (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/bastille/files/upgrade_options_processing.patch (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/nikto/files/location.patch (100%) rename {recipes-security => dynamic-layers/meta-perl/recipes-security}/nikto/nikto_2.1.6.bb (100%) rename {recipes-security => dynamic-layers/meta-python/recipes-security}/fail2ban/files/0001-To-fix-build-error-of-xrang.patch (100%) rename {recipes-security => dynamic-layers/meta-python/recipes-security}/fail2ban/files/initd (100%) rename {recipes-security => dynamic-layers/meta-python/recipes-security}/fail2ban/files/run-ptest (100%) rename {recipes-security => dynamic-layers/meta-python/recipes-security}/fail2ban/python3-fail2ban_0.11.2.bb (100%) rename {recipes-security => dynamic-layers/meta-python/recipes-security}/mfa/python3-privacyidea_3.6.2.bb (100%) rename {recipes-python => dynamic-layers/meta-python/recipes-security}/python/python3-oauth2client_4.1.3.bb (100%) diff --git a/recipes-scanners/checksecurity/checksecurity_2.0.15.bb b/dynamic-layers/meta-perl/recipes-scanners/checksecurity/checksecurity_2.0.15.bb similarity index 100% rename from recipes-scanners/checksecurity/checksecurity_2.0.15.bb rename to dynamic-layers/meta-perl/recipes-scanners/checksecurity/checksecurity_2.0.15.bb diff --git a/recipes-scanners/checksecurity/files/check-setuid-use-more-portable-find-args.patch b/dynamic-layers/meta-perl/recipes-scanners/checksecurity/files/check-setuid-use-more-portable-find-args.patch similarity index 100% rename from recipes-scanners/checksecurity/files/check-setuid-use-more-portable-find-args.patch rename to dynamic-layers/meta-perl/recipes-scanners/checksecurity/files/check-setuid-use-more-portable-find-args.patch diff --git a/recipes-scanners/checksecurity/files/setuid-log-folder.patch b/dynamic-layers/meta-perl/recipes-scanners/checksecurity/files/setuid-log-folder.patch similarity index 100% rename from recipes-scanners/checksecurity/files/setuid-log-folder.patch rename to dynamic-layers/meta-perl/recipes-scanners/checksecurity/files/setuid-log-folder.patch diff --git a/recipes-security/bastille/bastille_3.2.1.bb b/dynamic-layers/meta-perl/recipes-security/bastille/bastille_3.2.1.bb similarity index 100% rename from recipes-security/bastille/bastille_3.2.1.bb rename to dynamic-layers/meta-perl/recipes-security/bastille/bastille_3.2.1.bb diff --git a/recipes-security/bastille/files/API.pm b/dynamic-layers/meta-perl/recipes-security/bastille/files/API.pm similarity index 100% rename from recipes-security/bastille/files/API.pm rename to dynamic-layers/meta-perl/recipes-security/bastille/files/API.pm diff --git a/recipes-security/bastille/files/AccountPermission.pm b/dynamic-layers/meta-perl/recipes-security/bastille/files/AccountPermission.pm similarity index 100% rename from recipes-security/bastille/files/AccountPermission.pm rename to dynamic-layers/meta-perl/recipes-security/bastille/files/AccountPermission.pm diff --git a/recipes-security/bastille/files/FileContent.pm b/dynamic-layers/meta-perl/recipes-security/bastille/files/FileContent.pm similarity index 100% rename from recipes-security/bastille/files/FileContent.pm rename to dynamic-layers/meta-perl/recipes-security/bastille/files/FileContent.pm diff --git a/recipes-security/bastille/files/HPSpecific.pm b/dynamic-layers/meta-perl/recipes-security/bastille/files/HPSpecific.pm similarity index 100% rename from recipes-security/bastille/files/HPSpecific.pm rename to dynamic-layers/meta-perl/recipes-security/bastille/files/HPSpecific.pm diff --git a/recipes-security/bastille/files/Miscellaneous.pm b/dynamic-layers/meta-perl/recipes-security/bastille/files/Miscellaneous.pm similarity index 100% rename from recipes-security/bastille/files/Miscellaneous.pm rename to dynamic-layers/meta-perl/recipes-security/bastille/files/Miscellaneous.pm diff --git a/recipes-security/bastille/files/ServiceAdmin.pm b/dynamic-layers/meta-perl/recipes-security/bastille/files/ServiceAdmin.pm similarity index 100% rename from recipes-security/bastille/files/ServiceAdmin.pm rename to dynamic-layers/meta-perl/recipes-security/bastille/files/ServiceAdmin.pm diff --git a/recipes-security/bastille/files/accept_os_flag_in_backend.patch b/dynamic-layers/meta-perl/recipes-security/bastille/files/accept_os_flag_in_backend.patch similarity index 100% rename from recipes-security/bastille/files/accept_os_flag_in_backend.patch rename to dynamic-layers/meta-perl/recipes-security/bastille/files/accept_os_flag_in_backend.patch diff --git a/recipes-security/bastille/files/allow_os_with_assess.patch b/dynamic-layers/meta-perl/recipes-security/bastille/files/allow_os_with_assess.patch similarity index 100% rename from recipes-security/bastille/files/allow_os_with_assess.patch rename to dynamic-layers/meta-perl/recipes-security/bastille/files/allow_os_with_assess.patch diff --git a/recipes-security/bastille/files/call_output_config.patch b/dynamic-layers/meta-perl/recipes-security/bastille/files/call_output_config.patch similarity index 100% rename from recipes-security/bastille/files/call_output_config.patch rename to dynamic-layers/meta-perl/recipes-security/bastille/files/call_output_config.patch diff --git a/recipes-security/bastille/files/config b/dynamic-layers/meta-perl/recipes-security/bastille/files/config similarity index 100% rename from recipes-security/bastille/files/config rename to dynamic-layers/meta-perl/recipes-security/bastille/files/config diff --git a/recipes-security/bastille/files/do_not_apply_config.patch b/dynamic-layers/meta-perl/recipes-security/bastille/files/do_not_apply_config.patch similarity index 100% rename from recipes-security/bastille/files/do_not_apply_config.patch rename to dynamic-layers/meta-perl/recipes-security/bastille/files/do_not_apply_config.patch diff --git a/recipes-security/bastille/files/edit_usage_message.patch b/dynamic-layers/meta-perl/recipes-security/bastille/files/edit_usage_message.patch similarity index 100% rename from recipes-security/bastille/files/edit_usage_message.patch rename to dynamic-layers/meta-perl/recipes-security/bastille/files/edit_usage_message.patch diff --git a/recipes-security/bastille/files/find_existing_config.patch b/dynamic-layers/meta-perl/recipes-security/bastille/files/find_existing_config.patch similarity index 100% rename from recipes-security/bastille/files/find_existing_config.patch rename to dynamic-layers/meta-perl/recipes-security/bastille/files/find_existing_config.patch diff --git a/recipes-security/bastille/files/fix_missing_use_directives.patch b/dynamic-layers/meta-perl/recipes-security/bastille/files/fix_missing_use_directives.patch similarity index 100% rename from recipes-security/bastille/files/fix_missing_use_directives.patch rename to dynamic-layers/meta-perl/recipes-security/bastille/files/fix_missing_use_directives.patch diff --git a/recipes-security/bastille/files/fix_number_of_modules.patch b/dynamic-layers/meta-perl/recipes-security/bastille/files/fix_number_of_modules.patch similarity index 100% rename from recipes-security/bastille/files/fix_number_of_modules.patch rename to dynamic-layers/meta-perl/recipes-security/bastille/files/fix_number_of_modules.patch diff --git a/recipes-security/bastille/files/fix_version_parse.patch b/dynamic-layers/meta-perl/recipes-security/bastille/files/fix_version_parse.patch similarity index 100% rename from recipes-security/bastille/files/fix_version_parse.patch rename to dynamic-layers/meta-perl/recipes-security/bastille/files/fix_version_parse.patch diff --git a/recipes-security/bastille/files/fixed_defined_warnings.patch b/dynamic-layers/meta-perl/recipes-security/bastille/files/fixed_defined_warnings.patch similarity index 100% rename from recipes-security/bastille/files/fixed_defined_warnings.patch rename to dynamic-layers/meta-perl/recipes-security/bastille/files/fixed_defined_warnings.patch diff --git a/recipes-security/bastille/files/organize_distro_discovery.patch b/dynamic-layers/meta-perl/recipes-security/bastille/files/organize_distro_discovery.patch similarity index 100% rename from recipes-security/bastille/files/organize_distro_discovery.patch rename to dynamic-layers/meta-perl/recipes-security/bastille/files/organize_distro_discovery.patch diff --git a/recipes-security/bastille/files/remove_questions_text_file_references.patch b/dynamic-layers/meta-perl/recipes-security/bastille/files/remove_questions_text_file_references.patch similarity index 100% rename from recipes-security/bastille/files/remove_questions_text_file_references.patch rename to dynamic-layers/meta-perl/recipes-security/bastille/files/remove_questions_text_file_references.patch diff --git a/recipes-security/bastille/files/set_required_questions.py b/dynamic-layers/meta-perl/recipes-security/bastille/files/set_required_questions.py similarity index 100% rename from recipes-security/bastille/files/set_required_questions.py rename to dynamic-layers/meta-perl/recipes-security/bastille/files/set_required_questions.py diff --git a/recipes-security/bastille/files/simplify_B_place.patch b/dynamic-layers/meta-perl/recipes-security/bastille/files/simplify_B_place.patch similarity index 100% rename from recipes-security/bastille/files/simplify_B_place.patch rename to dynamic-layers/meta-perl/recipes-security/bastille/files/simplify_B_place.patch diff --git a/recipes-security/bastille/files/upgrade_options_processing.patch b/dynamic-layers/meta-perl/recipes-security/bastille/files/upgrade_options_processing.patch similarity index 100% rename from recipes-security/bastille/files/upgrade_options_processing.patch rename to dynamic-layers/meta-perl/recipes-security/bastille/files/upgrade_options_processing.patch diff --git a/recipes-security/nikto/files/location.patch b/dynamic-layers/meta-perl/recipes-security/nikto/files/location.patch similarity index 100% rename from recipes-security/nikto/files/location.patch rename to dynamic-layers/meta-perl/recipes-security/nikto/files/location.patch diff --git a/recipes-security/nikto/nikto_2.1.6.bb b/dynamic-layers/meta-perl/recipes-security/nikto/nikto_2.1.6.bb similarity index 100% rename from recipes-security/nikto/nikto_2.1.6.bb rename to dynamic-layers/meta-perl/recipes-security/nikto/nikto_2.1.6.bb diff --git a/recipes-security/fail2ban/files/0001-To-fix-build-error-of-xrang.patch b/dynamic-layers/meta-python/recipes-security/fail2ban/files/0001-To-fix-build-error-of-xrang.patch similarity index 100% rename from recipes-security/fail2ban/files/0001-To-fix-build-error-of-xrang.patch rename to dynamic-layers/meta-python/recipes-security/fail2ban/files/0001-To-fix-build-error-of-xrang.patch diff --git a/recipes-security/fail2ban/files/initd b/dynamic-layers/meta-python/recipes-security/fail2ban/files/initd similarity index 100% rename from recipes-security/fail2ban/files/initd rename to dynamic-layers/meta-python/recipes-security/fail2ban/files/initd diff --git a/recipes-security/fail2ban/files/run-ptest b/dynamic-layers/meta-python/recipes-security/fail2ban/files/run-ptest similarity index 100% rename from recipes-security/fail2ban/files/run-ptest rename to dynamic-layers/meta-python/recipes-security/fail2ban/files/run-ptest diff --git a/recipes-security/fail2ban/python3-fail2ban_0.11.2.bb b/dynamic-layers/meta-python/recipes-security/fail2ban/python3-fail2ban_0.11.2.bb similarity index 100% rename from recipes-security/fail2ban/python3-fail2ban_0.11.2.bb rename to dynamic-layers/meta-python/recipes-security/fail2ban/python3-fail2ban_0.11.2.bb diff --git a/recipes-security/mfa/python3-privacyidea_3.6.2.bb b/dynamic-layers/meta-python/recipes-security/mfa/python3-privacyidea_3.6.2.bb similarity index 100% rename from recipes-security/mfa/python3-privacyidea_3.6.2.bb rename to dynamic-layers/meta-python/recipes-security/mfa/python3-privacyidea_3.6.2.bb diff --git a/recipes-python/python/python3-oauth2client_4.1.3.bb b/dynamic-layers/meta-python/recipes-security/python/python3-oauth2client_4.1.3.bb similarity index 100% rename from recipes-python/python/python3-oauth2client_4.1.3.bb rename to dynamic-layers/meta-python/recipes-security/python/python3-oauth2client_4.1.3.bb From patchwork Fri May 6 14:32:23 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: akuster808 X-Patchwork-Id: 7699 X-Patchwork-Delegate: akuster808@gmail.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id A44CFC433EF for ; Fri, 6 May 2022 14:32:38 +0000 (UTC) Received: from mail-pj1-f49.google.com (mail-pj1-f49.google.com [209.85.216.49]) by mx.groups.io with SMTP id smtpd.web08.10343.1651847555215264663 for ; Fri, 06 May 2022 07:32:35 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20210112 header.b=Ty0BCghZ; spf=pass (domain: gmail.com, ip: 209.85.216.49, mailfrom: akuster808@gmail.com) Received: by mail-pj1-f49.google.com with SMTP id o69so7175285pjo.3 for ; Fri, 06 May 2022 07:32:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:subject:date:message-id:in-reply-to:references:mime-version :content-transfer-encoding; bh=XL4Y3pMAvwZFGKqhPgxYOiacsm98Hdd7XMEVb4fWBm4=; b=Ty0BCghZRJM0pdc/v19aGmg9Rs1Fpm8CuXzPgJiOoidmsg5BNH0zEkKK19wgR7YU9+ bnWdtX60vHRmEthPNo31GHk0hqRIxpBj1sclhU5l/oj5mRs3qE/mSLV3BeLWDxUZ/8n+ CAlZJMcBZLLHEqPoIQBHYvQhh2KarDcHEV1I2hXLGzJrNWrx7a/AxtXqNpq9xNCvYv2r vPe4mNZu+xEu3habffCa0AOIVW8XIgfpCrwIpblLJQgtC5fM8CAPOFG9x5Iv9oisLywo dbtltCnOLKNUoSbwLP49CoUAYQmhkA6N6jXHLZEVA3azaMTRBqs2ocNbcamuZZAQBPS6 C1Gg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:subject:date:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=XL4Y3pMAvwZFGKqhPgxYOiacsm98Hdd7XMEVb4fWBm4=; b=0GvzV3sL6J3cS02Amx3Dhov2QygB8xVqnynESoPJjiEfCXsot7uqD3FoMvM7qI0P0L C9hDHNUJauT6USIu2NkX8mWn/qAokvb8lmttoW/iOovzDYOyLiSwbGU3CEXIXCWzYBJh 1qnU9zja+5ytTbNozRm2N+ueKoGj9OrwSE7ZWhyMy5KSe3hBAQkkj5HvdvYkKzM3RkAo bQJHU1dMbKWbToFLnAROrRdQmlpGSfkfVPpjL0BSTbN1EVfcPuhDcniM3T4SRrh8B5p1 jfn2HLhJklfRZxpKyPz3ligxFhv6ZHWbELVhwTeBPbeHMbQXlH+si07Moqig8wZ4ZbbV aaMA== X-Gm-Message-State: AOAM532aToWZCIoqNBfg7R4nYxREbDwdRsnnI0PaexJKUrLR6e4zsQBS UIOVAd8+vzbMJcZvqm4mCcdazJfxu2VZZg== X-Google-Smtp-Source: ABdhPJyDX3PCDodbpU/DRQgxe1CUMzAKTNZfpbkosQp4az85BLE6OU8S4x3tiBD1vS2mC1BaJPVfiw== X-Received: by 2002:a17:902:f649:b0:156:1609:79e9 with SMTP id m9-20020a170902f64900b00156160979e9mr4020094plg.69.1651847554332; Fri, 06 May 2022 07:32:34 -0700 (PDT) Received: from keaua.caveonetworks.com ([2601:202:4180:a5c0:c35c:fb08:9ca2:8f49]) by smtp.gmail.com with ESMTPSA id 196-20020a6300cd000000b003c14af5060dsm3385322pga.37.2022.05.06.07.32.32 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 06 May 2022 07:32:33 -0700 (PDT) From: Armin Kuster To: yocto@lists.yoctoproject.org Subject: [meta-security][PATCH 3/9] packagegroup-core-security: remove pkgs Date: Fri, 6 May 2022 07:32:23 -0700 Message-Id: <20220506143229.2141000-3-akuster808@gmail.com> X-Mailer: git-send-email 2.25.1 In-Reply-To: <20220506143229.2141000-1-akuster808@gmail.com> References: <20220506143229.2141000-1-akuster808@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 06 May 2022 14:32:38 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto/message/57014 Signed-off-by: Armin Kuster --- .../packagegroup/packagegroup-core-security.bb | 12 ------------ 1 file changed, 12 deletions(-) diff --git a/recipes-core/packagegroup/packagegroup-core-security.bb b/recipes-core/packagegroup/packagegroup-core-security.bb index fefc66d..87c5b7a 100644 --- a/recipes-core/packagegroup/packagegroup-core-security.bb +++ b/recipes-core/packagegroup/packagegroup-core-security.bb @@ -10,7 +10,6 @@ PACKAGES = "\ packagegroup-security-utils \ packagegroup-security-scanners \ packagegroup-security-audit \ - packagegroup-security-hardening \ packagegroup-security-ids \ packagegroup-security-mac \ ${@bb.utils.contains("DISTRO_FEATURES", "ptest", "packagegroup-meta-security-ptest-packages", "", d)} \ @@ -20,7 +19,6 @@ RDEPENDS:packagegroup-core-security = "\ packagegroup-security-utils \ packagegroup-security-scanners \ packagegroup-security-audit \ - packagegroup-security-hardening \ packagegroup-security-ids \ packagegroup-security-mac \ ${@bb.utils.contains("DISTRO_FEATURES", "ptest", "packagegroup-meta-security-ptest-packages", "", d)} \ @@ -35,8 +33,6 @@ RDEPENDS:packagegroup-security-utils = "\ keyutils \ nmap \ pinentry \ - python3-privacyidea \ - python3-fail2ban \ softhsm \ sshguard \ ${@bb.utils.contains_any("TUNE_FEATURES", "riscv32 ", "", " libseccomp",d)} \ @@ -47,8 +43,6 @@ RDEPENDS:packagegroup-security-utils = "\ SUMMARY:packagegroup-security-scanners = "Security scanners" RDEPENDS:packagegroup-security-scanners = "\ isic \ - nikto \ - checksecurity \ ${@bb.utils.contains_any("TUNE_FEATURES", "riscv32 riscv64", "", " clamav clamav-daemon clamav-freshclam",d)} \ " RDEPENDS:packagegroup-security-scanners:remove:libc-musl = "clamav clamav-daemon clamav-freshclam" @@ -59,11 +53,6 @@ RDEPENDS:packagegroup-security-audit = " \ redhat-security \ " -SUMMARY:packagegroup-security-hardening = "Security Hardening tools" -RDEPENDS:packagegroup-security-hardening = " \ - bastille \ - " - SUMMARY:packagegroup-security-ids = "Security Intrusion Detection systems" RDEPENDS:packagegroup-security-ids = " \ samhain-standalone \ @@ -92,7 +81,6 @@ RDEPENDS:packagegroup-meta-security-ptest-packages = "\ ptest-runner \ samhain-standalone-ptest \ ${@bb.utils.contains("BBLAYERS", "meta-rust", "suricata-ptest","", d)} \ - python3-fail2ban-ptest \ ${@bb.utils.contains("DISTRO_FEATURES", "smack", "smack-ptest", "",d)} \ " From patchwork Fri May 6 14:32:24 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: akuster808 X-Patchwork-Id: 7697 X-Patchwork-Delegate: akuster808@gmail.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id AF75EC43219 for ; Fri, 6 May 2022 14:32:38 +0000 (UTC) Received: from mail-pj1-f44.google.com (mail-pj1-f44.google.com [209.85.216.44]) by mx.groups.io with SMTP id smtpd.web12.10266.1651847556801584854 for ; Fri, 06 May 2022 07:32:36 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20210112 header.b=C3vLPsbg; spf=pass (domain: gmail.com, ip: 209.85.216.44, mailfrom: akuster808@gmail.com) Received: by mail-pj1-f44.google.com with SMTP id z5-20020a17090a468500b001d2bc2743c4so7063288pjf.0 for ; Fri, 06 May 2022 07:32:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:subject:date:message-id:in-reply-to:references:mime-version :content-transfer-encoding; bh=UXS20a/bAXW3fHxCwPK86Trr1HDUiomhXH0ib8+KVfg=; b=C3vLPsbgIFfw+qFBrDTI0b9adseTmRnMZlkanAIpNB/4nfd9kFp/oeqBayfQp5Prxk 0U7xMxkDkBpGjzMYG+eijZeR5PQOGCUwtGch3EtfCh0ksGUQ/pKlLxSco8cfpD1NXrdC xqOBlckStLa+O+VwvkEA/ayFaZHZyQKIqPxiLhfkyg/Y/m3AIg+IsudHUg3FwNYn5xrK UbB5wfIF6D32ZLRab4cADIK64FUlFQ57hw7UDzmasbgIjmbX1qQfyRurj/ceShnpMazS Fa/g5pSBfHcsSBXduW8bEwMyhT07Y6X8LnGPtsU9jRb5ZrS37r5VIvX9sTYqmhypcoKm NZ9w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:subject:date:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=UXS20a/bAXW3fHxCwPK86Trr1HDUiomhXH0ib8+KVfg=; b=zAchfCXLQ6ii2Lgmcfen+m6TfFnPUoO78vmmmcMrX48TlVLRyDSCsjX+Xx74FCDZOX dxNzAQHpKpCDeNAagPIys/lbZk30GHl9w64LTic/uXQAKDYA7/1TCwpyrRQUpQmHH4fQ lfmt+IBdEj7kDi4AoHLEIIqL0/EiQ4FdMZZ1iHtGYwYr4TBjsv+5+GN43klMDVzyAIsU Ofo5xVX02sce26dDycP+pYuWgCjf9ic/1okJT+18pFiUx+Qil/De2dHT9I2GjHGC7KJG ocAJH39uF7sJ7DrWfGCmPcvifmzAi2aIJ8XzaNOOpaoGTtL5q+vjwHdTzhOFFORgTyg9 faUA== X-Gm-Message-State: AOAM530ySxbddrxYV76ZSbEpZfjiktm29nPSaP8irJnJDpBYGmlB4uo3 0iQa7PwwSjzo/ecxf53L2h0QRvKnzYav1w== X-Google-Smtp-Source: ABdhPJxy7udo7s46qKUSXRV4Y0KZG45BUBkUrRA6rCxphNBolkoVDg692KxRRpxbi4HIjAPFYSkwOA== X-Received: by 2002:a17:902:e54f:b0:15e:b40a:66f1 with SMTP id n15-20020a170902e54f00b0015eb40a66f1mr4067000plf.34.1651847556017; Fri, 06 May 2022 07:32:36 -0700 (PDT) Received: from keaua.caveonetworks.com ([2601:202:4180:a5c0:c35c:fb08:9ca2:8f49]) by smtp.gmail.com with ESMTPSA id 196-20020a6300cd000000b003c14af5060dsm3385322pga.37.2022.05.06.07.32.34 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 06 May 2022 07:32:35 -0700 (PDT) From: Armin Kuster To: yocto@lists.yoctoproject.org Subject: [meta-security][PATCH 4/9] packagegroup-core-security: add perl pkgs grps Date: Fri, 6 May 2022 07:32:24 -0700 Message-Id: <20220506143229.2141000-4-akuster808@gmail.com> X-Mailer: git-send-email 2.25.1 In-Reply-To: <20220506143229.2141000-1-akuster808@gmail.com> References: <20220506143229.2141000-1-akuster808@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 06 May 2022 14:32:38 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto/message/57015 Signed-off-by: Armin Kuster --- .../packagegroup-core-security.bbappend | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 dynamic-layers/meta-perl/recipes-core/packagegroup/packagegroup-core-security.bbappend diff --git a/dynamic-layers/meta-perl/recipes-core/packagegroup/packagegroup-core-security.bbappend b/dynamic-layers/meta-perl/recipes-core/packagegroup/packagegroup-core-security.bbappend new file mode 100644 index 0000000..475a24d --- /dev/null +++ b/dynamic-layers/meta-perl/recipes-core/packagegroup/packagegroup-core-security.bbappend @@ -0,0 +1,18 @@ + + +PACKAGES += "\ + packagegroup-security-hardening \ + " +RDEPENDS:packagegroup-core-security += "\ + packagegroup-security-hardening \ + " + +SUMMARY:packagegroup-security-hardening = "Security Hardening tools" +RDEPENDS:packagegroup-security-hardening = " \ + bastille \ + " + +RDEPENDS:packagegroup-security-scanners += "\ + nikto \ + checksecurity \ + " From patchwork Fri May 6 14:32:25 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: akuster808 X-Patchwork-Id: 7698 X-Patchwork-Delegate: akuster808@gmail.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id AEC9EC4332F for ; Fri, 6 May 2022 14:32:38 +0000 (UTC) Received: from mail-pj1-f41.google.com (mail-pj1-f41.google.com [209.85.216.41]) by mx.groups.io with SMTP id smtpd.web08.10344.1651847558231483661 for ; Fri, 06 May 2022 07:32:38 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20210112 header.b=FqtL1VhX; spf=pass (domain: gmail.com, ip: 209.85.216.41, mailfrom: akuster808@gmail.com) Received: by mail-pj1-f41.google.com with SMTP id w5-20020a17090aaf8500b001d74c754128so11008088pjq.0 for ; Fri, 06 May 2022 07:32:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:subject:date:message-id:in-reply-to:references:mime-version :content-transfer-encoding; bh=JESunbpbulckUI2fLSzm50ZIMOjOL6BJ57tehsuLh0w=; b=FqtL1VhXSUAIruyoznsF7xnBMUmsFuoQeYH9mu1uhg6dDdgRCrwdsQz2nE6QSK6Pf1 6KL0laR+wsMdY5Zy4/EnCrfCCboFNxIpgcPWRrgVEEBMPxI25dYYg5nigKGUxqGqXmWU nnDL3TWWqiW15bgSwOrnwZBCfNCGKwi4hS+TkVCRcXppMr8mP+Iow5/LjLAPWxPysGFC vcuznNwOCggGUfPfEQKw3+O5UYlQAefyORIVQ9oVC5LXI7WT++RABODKA8PqWb2k0grE fjye+a03LZmgBMTox8I/TEeqat2Bv6RlekHD0r5hytX8gLblFDHz2rT2CWHRqgEVVhJg y71Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:subject:date:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=JESunbpbulckUI2fLSzm50ZIMOjOL6BJ57tehsuLh0w=; b=zf+z93kpWL14xpnFdJxKPQcaUGLnZU5G458wefv6Hngtb8kD2kJ1CdPu/lvCZ9E7wR 08spM5HPSaU3nZAIUX0njgYPdJRJLTWKo6bY12wHFrG31XBqzhE52/OQSxokeo17v4Uv SG7FR+MqE6PJUOCrB6q+b7cOLKpIIYhV4O7IMl5llZcWT1ds2fPpFTWoR5T+DPpU+zjV eOgJYWY7QUDZMntWcOL2/BSKIpY0yZyEpm3NCmO73ivUlvKpsG6OuLw13EkuKolcOFsO UmVQOYrKiYQzg/Pkas4XztVgmPwgqdYG78Ym20Igx0GaYTSVjWkjMd7H50SZ0Je2gOdY gMoA== X-Gm-Message-State: AOAM533vGRi2iD5wemhREmTMIcTU1c7zXnPBl5811DhrQJQMwm1CpKf1 Fn75QDggXnN3OMcTCbI74JbyU6jXYRgoEQ== X-Google-Smtp-Source: ABdhPJyEbOh/B0j8/OE2bIYysp0isMFzakpPcMsUJYyiufxzgScTVtxJDAQ71RrktHuOdeJIyphd9Q== X-Received: by 2002:a17:902:a501:b0:153:f956:29f0 with SMTP id s1-20020a170902a50100b00153f95629f0mr3963320plq.120.1651847557422; Fri, 06 May 2022 07:32:37 -0700 (PDT) Received: from keaua.caveonetworks.com ([2601:202:4180:a5c0:c35c:fb08:9ca2:8f49]) by smtp.gmail.com with ESMTPSA id 196-20020a6300cd000000b003c14af5060dsm3385322pga.37.2022.05.06.07.32.36 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 06 May 2022 07:32:36 -0700 (PDT) From: Armin Kuster To: yocto@lists.yoctoproject.org Subject: [meta-security][PATCH 5/9] packagegroup-core-security: add dynamic python pkgs Date: Fri, 6 May 2022 07:32:25 -0700 Message-Id: <20220506143229.2141000-5-akuster808@gmail.com> X-Mailer: git-send-email 2.25.1 In-Reply-To: <20220506143229.2141000-1-akuster808@gmail.com> References: <20220506143229.2141000-1-akuster808@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 06 May 2022 14:32:38 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto/message/57016 Signed-off-by: Armin Kuster --- .../packagegroup/packagegroup-core-security.bbappend | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 dynamic-layers/meta-python/recipes-core/packagegroup/packagegroup-core-security.bbappend diff --git a/dynamic-layers/meta-python/recipes-core/packagegroup/packagegroup-core-security.bbappend b/dynamic-layers/meta-python/recipes-core/packagegroup/packagegroup-core-security.bbappend new file mode 100644 index 0000000..828931d --- /dev/null +++ b/dynamic-layers/meta-python/recipes-core/packagegroup/packagegroup-core-security.bbappend @@ -0,0 +1,10 @@ + + +RDEPENDS:packagegroup-security-utils += "\ + python3-privacyidea \ + python3-fail2ban \ + " + +RDEPENDS:packagegroup-meta-security-ptest-packages += "\ + python3-fail2ban-ptest \ + " From patchwork Fri May 6 14:32:26 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: akuster808 X-Patchwork-Id: 7702 X-Patchwork-Delegate: akuster808@gmail.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id B7809C433EF for ; Fri, 6 May 2022 14:32:48 +0000 (UTC) Received: from mail-pj1-f49.google.com (mail-pj1-f49.google.com [209.85.216.49]) by mx.groups.io with SMTP id smtpd.web09.10231.1651847559510214500 for ; Fri, 06 May 2022 07:32:39 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20210112 header.b=jfMm3fdJ; spf=pass (domain: gmail.com, ip: 209.85.216.49, mailfrom: akuster808@gmail.com) Received: by mail-pj1-f49.google.com with SMTP id j8-20020a17090a060800b001cd4fb60dccso7034941pjj.2 for ; Fri, 06 May 2022 07:32:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:subject:date:message-id:in-reply-to:references:mime-version :content-transfer-encoding; bh=856etXSCf/sps7SS4yj3OGX2UitH+rA3Ov1LuPzGEEg=; b=jfMm3fdJbAz9kwa7mtZr9YDZ+lUchAx8ZJWR0XZu7k2Bco6YayZr5ghqzbobZTqi0t UtsgYDCKtsRnUAUWhDym7YCAKBAvJvr+9Fs/fcvDPZrmMuEFOyKZRAxitIxSeYATdrij 84g0yQ8Nvju+GBXrwhmAUegWCitdWEf5kdp0XZoNYwvxmFL0eVWR5uHVI8N4AqWpDNJt 7UKoM6SrS+54ELzklX7YrjbxRefdPxxRLQ1vfw2yKxPnfFmkL9zuNMUOujIP/GymGI92 honHnasGi2HyhwJ3jisy2QPp969p+6LzZDGxbNfZOTzdA2RE4YII5XMdacims0BiUCf4 7YuA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:subject:date:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=856etXSCf/sps7SS4yj3OGX2UitH+rA3Ov1LuPzGEEg=; b=l3igERieIiydkvyjIWuHXonS3Iji5FDcpGGMfjxuJcUtD1mbUn3hi6QYzYFda7XifN wCdYqPsb8DYS8s3E5fqMv0Z+d2HtyqC71EJ7KovbfWt7LF4FwpksDFbHmBCmx76kSP21 jA8DvfuOs1M8GHBYS9h8v9EcpBJ2OaC3jfDKL8oQRcj/RZzTPzUUhXl4PRvi67toF3zA JN8cAFmENmJC7meDX3wjPctdi2BcH2Gqh5lYKCryKww+/AeHDOo80PdqOl6RbEfYzJ0I Q962tjjVwFeyM7xgZnvZFkpbP4DNhGNNOIBltgBYIfeFgVNSty7kax7yZ73AbM0nTpLU kzAg== X-Gm-Message-State: AOAM530C2V5PB3ydpmVzKid7z7RjX11zVsK76+m2ago80iSsrdp83Mar tP1d4XgxTNGmoQrEoeBhUsqpE+ooy6qXAA== X-Google-Smtp-Source: ABdhPJxXkiawXeY1iOo9wKNyYdeOVtofb3yzZ7Csj06et5AW4mNyYDawXWI7biNGDjHjr+4DcHQuhQ== X-Received: by 2002:a17:902:8501:b0:15c:ea4b:1398 with SMTP id bj1-20020a170902850100b0015cea4b1398mr3987553plb.109.1651847558704; Fri, 06 May 2022 07:32:38 -0700 (PDT) Received: from keaua.caveonetworks.com ([2601:202:4180:a5c0:c35c:fb08:9ca2:8f49]) by smtp.gmail.com with ESMTPSA id 196-20020a6300cd000000b003c14af5060dsm3385322pga.37.2022.05.06.07.32.37 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 06 May 2022 07:32:38 -0700 (PDT) From: Armin Kuster To: yocto@lists.yoctoproject.org Subject: [meta-security][PATCH 6/9] arpwatch: add postfix to pkg config Date: Fri, 6 May 2022 07:32:26 -0700 Message-Id: <20220506143229.2141000-6-akuster808@gmail.com> X-Mailer: git-send-email 2.25.1 In-Reply-To: <20220506143229.2141000-1-akuster808@gmail.com> References: <20220506143229.2141000-1-akuster808@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 06 May 2022 14:32:48 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto/message/57017 Signed-off-by: Armin Kuster --- recipes-scanners/arpwatch/arpwatch_3.1.bb | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/recipes-scanners/arpwatch/arpwatch_3.1.bb b/recipes-scanners/arpwatch/arpwatch_3.1.bb index c152b8c..c8d31cf 100644 --- a/recipes-scanners/arpwatch/arpwatch_3.1.bb +++ b/recipes-scanners/arpwatch/arpwatch_3.1.bb @@ -3,7 +3,7 @@ LICENSE = "BSD-4-Clause" HOME_PAGE = "http://ee.lbl.gov/" LIC_FILES_CHKSUM = "file://configure;md5=74ca964ed34fda7b46c6fe3e50bded9d" -DEPENDS += "libpcap postfix" +DEPENDS += "libpcap" SRC_URI = "https://ee.lbl.gov/downloads/arpwatch/${BP}.tar.gz \ file://arpwatch.conf \ @@ -21,7 +21,11 @@ ARPWATCH_GID ?= "arpwatch" APRWATCH_FROM ?= "root " ARPWATH_REPLY ?= "${ARPWATCH_UID}" -EXTRA_OECONF = " --srcdir=${S} --with-watcher=email=${APRWATCH_FROM} --with-watchee=email=${ARPWATH_REPLY}" +PACKAGECONFIG ??= "" + +PACKACONFIG[email] = "-with-watcher=email=${APRWATCH_FROM} --with-watchee=email=${ARPWATH_REPLY}, , postfix, postfix postfix-cfg" + +EXTRA_OECONF:append = " --srcdir=${S}" CONFIGUREOPTS = " --build=${BUILD_SYS} \ --host=${HOST_SYS} \ @@ -76,4 +80,4 @@ CONFFILE_FILES = "${sysconfdir}/${PN}.conf" FILES:${PN} = "${bindir} ${sbindir} ${prefix}/etc/rc.d \ ${sysconfdir} /var/lib/arpwatch" -RDEPENDS:${PN} = "libpcap postfix postfix-cfg" +RDEPENDS:${PN} = "libpcap" From patchwork Fri May 6 14:32:27 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: akuster808 X-Patchwork-Id: 7703 X-Patchwork-Delegate: akuster808@gmail.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id B5622C433F5 for ; Fri, 6 May 2022 14:32:48 +0000 (UTC) Received: from mail-pl1-f171.google.com (mail-pl1-f171.google.com [209.85.214.171]) by mx.groups.io with SMTP id smtpd.web11.10105.1651847560739085648 for ; Fri, 06 May 2022 07:32:40 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20210112 header.b=qwha6ZUE; spf=pass (domain: gmail.com, ip: 209.85.214.171, mailfrom: akuster808@gmail.com) Received: by mail-pl1-f171.google.com with SMTP id n8so7628629plh.1 for ; Fri, 06 May 2022 07:32:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:subject:date:message-id:in-reply-to:references:mime-version :content-transfer-encoding; bh=dhEy3WubqihVCKfGfhVHFNY323tmoUbv9r1+UE6m348=; b=qwha6ZUEGcvrTSjyvmk/moiNiVaz5omemK/ySE2QjaiuGK1CQa81gFt05teneQEygn dn+xEUKVd2mJ+IsOLqa5O/BpROrQCeJWWhYHx+jKOp0CEBcthJHHJvMihAxLVcq7TKS8 pwesnRONocK8+/gohTEz3/We7TKdNADBZY0fL1NOyJbPNSs//XxlnpasNo5OLCV8NAMw LhV9ucwVtW5CxWi5LAt+OPPVf/LN7teaKWlHxvdBvUsWtxmWTwx1OI0sqlIQEVcWrnM4 i6OT+6AzDejLZajfn8YxB9vX7W9TLYJ4DDWaRNn7ayfGgIUtE0mtsOdkE/SghMYpprWI /fQw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:subject:date:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=dhEy3WubqihVCKfGfhVHFNY323tmoUbv9r1+UE6m348=; b=E0bFrNUtMXNIKiHhw/L/sPlU8odvWwkI9mhDtDPR7e7s5dRmx1Ok6b805afbrKt0jg d4Abjicwj9JODY/8ZowiOJlyyQSSX64+AYuTdk3NDdwOCCQeMQ3PXwB9Jufjntq9ARFw vaUGbCfxjrXWY+aIUzeyXbAqt7AeL6+mDg5GMeI25TsTqLDjIvoG42wyuXjDkfK84jN/ RjRZC2ZVHwh+uOceubCX1l/1wUjKAV2i0LcGnyc7MqSW4C/8A99R+6PgF8D9kvXHDGRs V886qEbAelstUM1eB4xEMjcRxBV4zAp3RNCVpuyDSUvD6NWda8mfLhk1oxdn67DG71PH JvNA== X-Gm-Message-State: AOAM530gwQJTaBI1DfHgifmmES4jsHCDALYI+yPGvjd3J4ad8p29Omzo Y5x0s8bihGlBnh2sxVqIt/V8HnhLMbDxlA== X-Google-Smtp-Source: ABdhPJxgcGxfh7Ps6JgbrawgpZUrtVRYNpyYdmLZyYt43EPug2emL7BPUeAqi4E3pMGp8s9C+rZZWw== X-Received: by 2002:a17:902:ccc9:b0:15b:c265:b7a0 with SMTP id z9-20020a170902ccc900b0015bc265b7a0mr3972431ple.107.1651847559884; Fri, 06 May 2022 07:32:39 -0700 (PDT) Received: from keaua.caveonetworks.com ([2601:202:4180:a5c0:c35c:fb08:9ca2:8f49]) by smtp.gmail.com with ESMTPSA id 196-20020a6300cd000000b003c14af5060dsm3385322pga.37.2022.05.06.07.32.38 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 06 May 2022 07:32:39 -0700 (PDT) From: Armin Kuster To: yocto@lists.yoctoproject.org Subject: [meta-security][PATCH 7/9] suricata: drop nfnetlink from pkg config Date: Fri, 6 May 2022 07:32:27 -0700 Message-Id: <20220506143229.2141000-7-akuster808@gmail.com> X-Mailer: git-send-email 2.25.1 In-Reply-To: <20220506143229.2141000-1-akuster808@gmail.com> References: <20220506143229.2141000-1-akuster808@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 06 May 2022 14:32:48 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto/message/57018 nfnetlink has a layer dependancy to meta-networking. Signed-off-by: Armin Kuster --- recipes-ids/suricata/suricata_6.0.4.bb | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/recipes-ids/suricata/suricata_6.0.4.bb b/recipes-ids/suricata/suricata_6.0.4.bb index 31244f3..968da21 100644 --- a/recipes-ids/suricata/suricata_6.0.4.bb +++ b/recipes-ids/suricata/suricata_6.0.4.bb @@ -121,7 +121,8 @@ CARGO_SRC_DIR = "rust" B = "${S}" -PACKAGECONFIG ??= "jansson file pcre yaml python pcap cap-ng net nfnetlink nss nspr " +# nfnetlink has a dependancy to meta-networking +PACKAGECONFIG ??= "jansson file pcre yaml python pcap cap-ng net nss nspr " PACKAGECONFIG:append = " ${@bb.utils.contains('DISTRO_FEATURES', 'ptest', 'unittests', '', d)}" PACKAGECONFIG[pcre] = "--with-libpcre-includes=${STAGING_INCDIR} --with-libpcre-libraries=${STAGING_LIBDIR}, ,libpcre ," From patchwork Fri May 6 14:32:28 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: akuster808 X-Patchwork-Id: 7701 X-Patchwork-Delegate: akuster808@gmail.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id B577BC433FE for ; Fri, 6 May 2022 14:32:48 +0000 (UTC) Received: from mail-pl1-f172.google.com (mail-pl1-f172.google.com [209.85.214.172]) by mx.groups.io with SMTP id smtpd.web11.10107.1651847561937203016 for ; Fri, 06 May 2022 07:32:42 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20210112 header.b=I5mAN3lJ; spf=pass (domain: gmail.com, ip: 209.85.214.172, mailfrom: akuster808@gmail.com) Received: by mail-pl1-f172.google.com with SMTP id x18so7614736plg.6 for ; Fri, 06 May 2022 07:32:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:subject:date:message-id:in-reply-to:references:mime-version :content-transfer-encoding; bh=nkakjLGb1YUtn0g7O5XI4xP2XMC4jaBF24fO2OXll6A=; b=I5mAN3lJJwfRMNPg9dKvJUmfzv/kf405CSVe7k5A0X50ywO0t1IO4Zl6njIGevYgUF /aw7LAiMZbvOSGCgx1h5cUu82WGPF+CFL94wjm1ognVgKjeXy34cr2VscxmFc76EvncB n/VUBfrUnp+UMhJV838NdkxDHs2p/8phwXBvnuKUNvSRKtNs+ni7ZoKAIKUGxpa/Vy/Z eG8+M6t1nxJhMm5soxZT47XYx2I1KIvLkOBJxEdp7WFdy3EdgPcdZeHjdIq6yGAtYR4r laZ0/75wvQv28qGP3TIh0azC0TKDl890mzu1U1JZwuWSzhcjvAahIpEivL5FjxOEmVpk +J7w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:subject:date:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=nkakjLGb1YUtn0g7O5XI4xP2XMC4jaBF24fO2OXll6A=; b=NlOI7LtKYVVZW6D4rDBIbmAqSYA2tK2xHYwBBpa43oCoXEJwKE283eAziEWBa2KM+E Ox69qPcH/o3mrZNmpbcj2gsOG3uSHCuWEi1kspHoTHoh65CfJbbzu6tQywIms4GnmNNb 9r7vd9ippocvTkmsGE+PwSSFUNudQNHazFeUPxXmEfPO/+Io6IIkzzZn6ZNcCvk+SE4p IHBU6DS3/3tvGEhLQ8YvlBhcdmOycVSbQ1Bi5el/rvMP/X8cns4YPfMJg34J2Xim7k9y HDiPIMF5kqWW2LDIng/QwV+APWzA50TtKBjRBvZRyATMFNCNfeylKT9sY2WOsJ5uskDX D5yA== X-Gm-Message-State: AOAM530f1va8yM2sGsMyKqijdN5h62vBXq8l87acKf+BTUxVNVIB02Ls i03TvIqbdc/TVrYNb2nciElpQbYrSoO9Xw== X-Google-Smtp-Source: ABdhPJyQ4Q7uKmpC2kCzJgq/tC+mUOoE74QlOhyqoqVYtuqfNUnVpoTe0T/lUWJNDF2Rpm4IT6PXdw== X-Received: by 2002:a17:902:ce8d:b0:15e:a95d:b4b0 with SMTP id f13-20020a170902ce8d00b0015ea95db4b0mr4098338plg.153.1651847561179; Fri, 06 May 2022 07:32:41 -0700 (PDT) Received: from keaua.caveonetworks.com ([2601:202:4180:a5c0:c35c:fb08:9ca2:8f49]) by smtp.gmail.com with ESMTPSA id 196-20020a6300cd000000b003c14af5060dsm3385322pga.37.2022.05.06.07.32.40 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 06 May 2022 07:32:40 -0700 (PDT) From: Armin Kuster To: yocto@lists.yoctoproject.org Subject: [meta-security][PATCH 8/9] packagegroup-core-security.bb: fix suricata inclusion Date: Fri, 6 May 2022 07:32:28 -0700 Message-Id: <20220506143229.2141000-8-akuster808@gmail.com> X-Mailer: git-send-email 2.25.1 In-Reply-To: <20220506143229.2141000-1-akuster808@gmail.com> References: <20220506143229.2141000-1-akuster808@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 06 May 2022 14:32:48 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto/message/57019 Signed-off-by: Armin Kuster --- recipes-core/packagegroup/packagegroup-core-security.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-core/packagegroup/packagegroup-core-security.bb b/recipes-core/packagegroup/packagegroup-core-security.bb index 87c5b7a..9010054 100644 --- a/recipes-core/packagegroup/packagegroup-core-security.bb +++ b/recipes-core/packagegroup/packagegroup-core-security.bb @@ -56,7 +56,7 @@ RDEPENDS:packagegroup-security-audit = " \ SUMMARY:packagegroup-security-ids = "Security Intrusion Detection systems" RDEPENDS:packagegroup-security-ids = " \ samhain-standalone \ - ${@bb.utils.contains("BBLAYERS", "meta-rust", "suricata","", d)} \ + suricata \ ossec-hids \ aide \ " From patchwork Fri May 6 14:32:29 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: akuster808 X-Patchwork-Id: 7700 X-Patchwork-Delegate: akuster808@gmail.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id C1805C4332F for ; Fri, 6 May 2022 14:32:48 +0000 (UTC) Received: from mail-pj1-f44.google.com (mail-pj1-f44.google.com [209.85.216.44]) by mx.groups.io with SMTP id smtpd.web11.10109.1651847564087291027 for ; Fri, 06 May 2022 07:32:44 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20210112 header.b=jcWGlNun; spf=pass (domain: gmail.com, ip: 209.85.216.44, mailfrom: akuster808@gmail.com) Received: by mail-pj1-f44.google.com with SMTP id iq10so7205044pjb.0 for ; Fri, 06 May 2022 07:32:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:subject:date:message-id:in-reply-to:references:mime-version :content-transfer-encoding; bh=JPxH44vYSGEQUi4JLqA7YSS7nLo4vTmUP8LjqvyUaVE=; b=jcWGlNunWA3MVczt/hW2tmasR4Yzyc9qchX6s+RAaX8lb0uLfjc9t4fBEGzlk8jydA F8gbvgITNljfNsIwx8TsQs4yIYgLU8D9VtuktgYt8M4bEcRRqbhmIwwNbxSkwbSPMfYM KG/PZ76MvPqRz5Zzyns6jsNJDIwfxD2dNFyshTQRSynp7dRST+3kTmgXVlLoa8h79HSx yWM/G6Y9eUkNdgh/6tdvro5eDmkAhodNCIDM/ETB4tnRpC5g1ec7FFHYNpy8Z4lwNxIu HuLsWRlySTVuojrh1Atq8YdAznQ6n87vXllJeSmqx7HFBJ566P63Ycj2gG4bHvSFRw5r jtfA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:subject:date:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=JPxH44vYSGEQUi4JLqA7YSS7nLo4vTmUP8LjqvyUaVE=; b=cqN9lxVCKkgS4GLunOtHDUdNuWkPhBnNoDVm0OOkIAJzZB1nPGYBEgw3CMP9e80fpQ IZSxZ3GGBBEbYZoPCsD6T1D43BJMNwhLh7ZchiHERxhmyO24KqpIrOIo4MwGDqJ8uuzM 1qLXbFtMf1dAsCwoPArwFm3yLKDCNwdbLleM8t+2Ce2DGK8dcXPvP5WFDdLlgXmb7+PC ZbrznUyggdtLFs/pM3dJdKs9zkqgzeKMa/ZeQwR/17A8O8LjCym9gWiWTzyRMr59Ym3F DIcjToXrMugL5JFOeVlcisAZFEDZfzL/6Lhb6F+hnL43hj+iL9IHRlQQGaWvOkgGnvJ4 1Tng== X-Gm-Message-State: AOAM531F7XDVGdpiGyCAuHEjHkv7nX2VDNjpZHL0K/Fc3NORx3yUcui2 82E2W/Ivph0+UyJkiFE19sO3PGzYDeh7mA== X-Google-Smtp-Source: ABdhPJxj66PfRfLoXniMpzo88GcCbKjb0MVrGGLLm8YjlFl1weDjV9C60+rsUT++TPC98OYedWGGow== X-Received: by 2002:a17:903:1252:b0:154:ca85:59a0 with SMTP id u18-20020a170903125200b00154ca8559a0mr3957048plh.169.1651847563130; Fri, 06 May 2022 07:32:43 -0700 (PDT) Received: from keaua.caveonetworks.com ([2601:202:4180:a5c0:c35c:fb08:9ca2:8f49]) by smtp.gmail.com with ESMTPSA id 196-20020a6300cd000000b003c14af5060dsm3385322pga.37.2022.05.06.07.32.41 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 06 May 2022 07:32:41 -0700 (PDT) From: Armin Kuster To: yocto@lists.yoctoproject.org Subject: [meta-security][PATCH 9/9] layer.conf: fix up layer dependancies. Date: Fri, 6 May 2022 07:32:29 -0700 Message-Id: <20220506143229.2141000-9-akuster808@gmail.com> X-Mailer: git-send-email 2.25.1 In-Reply-To: <20220506143229.2141000-1-akuster808@gmail.com> References: <20220506143229.2141000-1-akuster808@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 06 May 2022 14:32:48 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/yocto/message/57020 reorg pkgs so the we only need meta-oe Signed-off-by: Armin Kuster --- conf/layer.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conf/layer.conf b/conf/layer.conf index 21f03d1..210609a 100644 --- a/conf/layer.conf +++ b/conf/layer.conf @@ -11,7 +11,7 @@ BBFILE_PRIORITY_security = "8" LAYERSERIES_COMPAT_security = "kirkstone" -LAYERDEPENDS_security = "core openembedded-layer perl-layer networking-layer meta-python" +LAYERDEPENDS_security = "core openembedded-layer" # Sanity check for meta-security layer. # Setting SKIP_META_SECURITY_SANITY_CHECK to "1" would skip the bbappend files check.